This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json) Hash identifier: HH6ZOVE3v/xlR1tiY2rbbemyWNXYBwu4gGxVXI3WC3I= Subject key identifier: 99:A8:B2:B5:2E:90:29:F4:14:15:E0:22:FA:A5:0B:5C:0A:B0:8E:32 Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c Certificate serial: 019BF91B6ED2760C89C2AAC3B198A51C4C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 07:01:23 +0000 Manifest this update: Mon 26 Jan 2026 07:01:23 +0000 Manifest next update: Tue 27 Jan 2026 07:01:23 +0000 Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: A0Q4vmSOb8XSpKXT0VqQq00dMdayqNw+sr8rAkzN4/4=) 2: 61-4acpKq_PC7ATdZVCHWRg8JKs.roa (hash: XfLv38L+k8qNjwRe1RGjTzVU0A2ck+gkD6atchEx+8g=) 3: snhbQ-MBqaP4OUTW8WJ3Hr1dnUc.roa (hash: 9I5SXUe0pT58xK312SvCJFKTSES2daM8oG5AXaPkWQM=) 4: y0v5hqRnK3oXSef_pYXkfz4Oyzw.roa (hash: 0FZ3W5rrSzMRERGSvGaSIJBxiMzf+ECnXIculdCdNkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:6e:d2:76:0c:89:c2:aa:c3:b1:98:a5:1c:4c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c Validity Not Before: Jan 26 07:01:23 2026 GMT Not After : Jan 27 07:01:23 2026 GMT Subject: CN=99a8b2b52e9029f41415e022faa50b5c0ab08e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:c4:3c:0b:fe:ba:10:cf:85:16:97:de:fa: 4e:a1:91:c4:bd:33:ca:61:56:08:d5:2e:28:e4:72: 07:f3:58:11:33:44:b5:0d:cc:ff:7b:02:bf:a7:dc: 7f:9f:2c:90:72:2f:72:9d:40:d8:68:fd:4c:48:c2: 87:fd:aa:2a:06:ab:58:8d:27:29:e0:7e:46:a3:0d: 12:79:8f:43:d3:6e:2f:a4:8a:21:41:19:07:df:09: bf:eb:ef:e5:ff:6b:66:5a:47:16:0f:74:58:f4:14: 1c:95:41:5d:b3:8a:44:a8:80:f9:8f:a3:d2:af:60: c3:7b:3b:64:be:58:cb:a9:0f:06:53:31:a0:39:58: 9e:6e:f8:28:03:de:9b:e6:6f:3f:98:13:9f:03:d2: 26:d2:2b:1d:cf:0f:92:9a:b2:34:93:0e:20:34:53: c5:eb:d9:8b:b9:2f:e3:4d:8b:28:fe:2e:88:c3:eb: 4b:cd:c7:1d:b0:e5:eb:72:1e:6c:8e:25:7c:1b:f1: 62:78:dd:67:ef:59:f8:ec:24:9b:7f:dd:8f:19:01: 53:fa:64:a7:d9:98:38:15:0d:23:12:e2:38:3d:98: 06:90:45:47:7f:32:26:94:5f:1d:c2:f8:44:b3:a4: d2:73:23:c6:b5:89:e5:e9:fd:c3:1f:5e:06:b0:52: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A8:B2:B5:2E:90:29:F4:14:15:E0:22:FA:A5:0B:5C:0A:B0:8E:32 X509v3 Authority Key Identifier: keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9b:08:e4:94:7b:dc:41:64:b0:b8:5b:6b:28:d7:c4:b6:2c: 5d:b0:12:0d:19:76:c9:df:5e:44:53:29:88:a7:ed:1f:fd:a0: ca:6e:8e:b2:20:74:4c:d8:c6:c5:b2:b9:18:06:e1:ad:01:f7: b2:39:34:fd:c2:e9:36:fa:cd:f0:8d:f7:d4:b5:42:e9:b7:9d: 0b:ad:22:bb:6d:2d:05:09:92:bd:80:8b:02:05:24:20:a6:05: 50:c3:67:7b:1d:9e:38:b2:72:b1:2a:61:98:32:79:b7:7b:df: 37:df:bc:f5:b7:9a:57:44:d9:34:cc:5d:1d:e0:b3:a2:bf:b6: c6:12:5a:99:fe:ee:04:fe:b9:57:92:e1:e5:70:40:07:6a:4a: de:dc:d3:c0:11:85:e0:bc:5f:91:28:ec:22:5d:31:ca:93:ea: e7:21:ea:d7:26:96:e8:a3:0a:39:7d:00:e0:76:a5:a0:38:d5: 66:87:f6:fd:93:6d:fe:ff:62:86:20:06:af:25:5e:23:8d:61: 8c:09:40:d4:26:d2:aa:64:d7:1d:40:b0:ca:df:83:1c:62:d3: 52:4b:b6:b3:d6:db:c5:53:e3:6c:ae:1e:54:0c:83:94:0c:71: b6:60:90:3a:87:22:88:e0:10:19:2a:1f:17:81:1c:bf:93:b3: 83:d4:95:02 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv5G27SdgyJwqrDsZilHEwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYzA4OWE5Y2Q2YTAzNzViYWU0OTljYzA2YTRjYWEzMDcx YjVkNGMwHhcNMjYwMTI2MDcwMTIzWhcNMjYwMTI3MDcwMTIzWjAzMTEwLwYDVQQD Eyg5OWE4YjJiNTJlOTAyOWY0MTQxNWUwMjJmYWE1MGI1YzBhYjA4ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+DEPAv+uhDPhRaX3vpOoZHEvTPK YVYI1S4o5HIH81gRM0S1Dcz/ewK/p9x/nyyQci9ynUDYaP1MSMKH/aoqBqtYjScp 4H5Gow0SeY9D024vpIohQRkH3wm/6+/l/2tmWkcWD3RY9BQclUFds4pEqID5j6PS r2DDeztkvljLqQ8GUzGgOViebvgoA96b5m8/mBOfA9Im0isdzw+SmrI0kw4gNFPF 69mLuS/jTYso/i6Iw+tLzccdsOXrch5sjiV8G/FieN1n71n47CSbf92PGQFT+mSn 2Zg4FQ0jEuI4PZgGkEVHfzImlF8dwvhEs6TScyPGtYnl6f3DH14GsFLOYQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJmosrUukCn0FBXgIvqlC1wKsI4yMB8GA1UdIwQY MBaAFPrAianNagN1uuSZzAakyqMHG11MMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zQ0pxYzFxQTNXNjVKbk1CcVRLb3djYlhVdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMmZhYzlmLTYxOGMtNDJmNi05NDgz LTc3N2Y4NjE2NjIyMS8xLzEtc0NKcWMxcUEzVzY1Sm5NQnFUS293Y2JYVXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzhiLzJmYWM5Zi02MThjLTQyZjYtOTQ4My03NzdmODYxNjYy MjEvMS8xLXNDSnFjMXFBM1c2NUpuTUJxVEtvd2NiWFV3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZsI 5JR73EFksLhbayjXxLYsXbASDRl2yd9eRFMpiKftH/2gym6OsiB0TNjGxbK5GAbh rQH3sjk0/cLpNvrN8I331LVC6bedC60iu20tBQmSvYCLAgUkIKYFUMNnex2eOLJy sSphmDJ5t3vfN9+89beaV0TZNMxdHeCzor+2xhJamf7uBP65V5Lh5XBAB2pK3tzT wBGF4LxfkSjsIl0xypPq5yHq1yaW6KMKOX0A4HaloDjVZof2/ZNt/v9ihiAGryVe I41hjAlA1CbSqmTXHUCwyt+DHGLTUku2s9bbxVPjbK4eVAyDlAxxtmCQOociiOAQ GSofF4Ecv5Ozg9SVAg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:26 2026 by rpki-client