This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: GgOdTTDxSaB1qBd/j8e+vJw2LgSjg0N3dqIAE6BhZoo= Subject key identifier: 04:B8:1B:89:8B:1C:78:75:29:15:59:D5:5E:65:89:9F:EC:78:5E:36 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019BF53E5DFB7FD5D77CDDC264B4DFA4B3A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0D49 Signing time: Sun 25 Jan 2026 13:01:03 +0000 Manifest this update: Sun 25 Jan 2026 13:01:03 +0000 Manifest next update: Mon 26 Jan 2026 13:01:03 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: U6LC/i6foJBPSO6vAMdfFvttfD6TPAdYnNpBfQ6zyOs=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 10: g3ikyABmwYnsstzPEiwf1y3JZw4.roa (hash: iV6diY2/uvF2VPragiyPeS/YOKkeG7Rg1youKOMMysY=) 11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 15: qJcccqDxWrdJegvnpo2s2Knlr7s.roa (hash: PcVnyenRgB6ckra0K+D+gtKFqypcoJpDoAUxyPbLxQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:5d:fb:7f:d5:d7:7c:dd:c2:64:b4:df:a4:b3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 25 13:01:03 2026 GMT Not After : Jan 26 13:01:03 2026 GMT Subject: CN=04b81b898b1c7875291559d55e65899fec785e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:9b:f2:4d:69:08:23:97:9c:3d:40:c2:6e: 0d:34:4f:ff:9a:ec:a5:1d:b5:6b:64:90:dd:c4:a7: 2b:38:e2:5f:ae:fd:d7:11:32:e3:9c:30:f2:cf:5b: aa:19:fa:fa:89:f9:39:66:74:ca:1c:f3:8f:6d:91: e0:ae:6b:ff:92:31:f4:27:58:8d:d1:b5:59:dc:29: 11:a3:fc:ff:f7:1f:36:19:f1:78:11:69:d6:6a:aa: a4:bf:29:9f:29:29:a0:f8:48:2f:b1:ef:ee:81:3c: f6:02:95:c9:22:de:75:d0:68:8c:08:3e:0a:8d:ad: 3b:df:66:3f:bd:6a:e9:1d:5e:92:ff:08:f2:12:37: c0:b7:ac:0d:49:41:f1:90:bf:2e:c3:e9:93:e3:3d: 3b:db:bc:ca:e8:68:81:c3:7f:d9:83:76:5b:c9:54: e1:97:a1:e1:b9:29:ac:ee:2e:a7:3f:98:94:05:1c: cb:4c:41:d5:2b:b8:f1:66:89:a5:71:a6:35:94:7a: b1:67:e3:14:0e:d1:e1:95:f2:a4:76:8b:f4:1e:35: 24:b7:da:f3:2a:f8:9a:4f:1d:9d:b7:17:94:b1:0c: f4:0c:4d:39:78:6f:7e:34:6b:47:d7:3e:86:11:f0: f0:7d:3b:a9:7d:45:e6:d4:88:c6:08:93:95:11:d2: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B8:1B:89:8B:1C:78:75:29:15:59:D5:5E:65:89:9F:EC:78:5E:36 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b2:1a:28:be:fb:92:22:9e:ce:fa:4f:e5:db:de:64:41:11: e0:84:8f:5d:e1:13:19:74:77:21:1a:06:e6:29:74:62:d1:50: 67:ea:2c:c7:63:12:b9:6b:53:b8:b6:c1:3b:4b:5f:ff:a8:2d: ce:41:8f:16:c9:95:30:7e:17:76:0e:62:0e:6e:e9:05:76:7d: 66:1f:1f:ba:37:62:2f:8d:4c:06:2b:92:f7:29:a9:e1:db:e4: 7c:88:55:b9:b1:71:88:4e:2c:a0:0a:5c:c0:03:e6:eb:11:96: d2:45:f0:31:c4:5b:fb:2e:54:d2:c3:67:42:f8:01:75:71:65: 5e:e3:32:2a:5a:97:2c:7a:87:71:8a:6a:13:90:74:5b:81:5e: 3e:0e:33:d4:12:76:f9:3b:48:5e:7b:c2:b8:ba:28:44:57:83: 97:b6:13:99:c5:8a:50:3d:96:98:c9:e7:b1:84:26:4d:be:5b: 02:48:18:82:f2:14:8e:48:46:0b:76:01:f9:fc:57:05:40:30: 93:86:d3:bf:65:ad:5c:51:69:44:30:c1:2c:4d:d1:81:2b:fe: ff:4b:9e:43:56:d6:91:f9:24:20:30:32:d5:75:b4:56:37:02: e6:6c:75:b4:b3:a6:fc:d9:2a:33:a7:45:61:c1:19:0b:63:62: fb:5c:63:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pl37f9XXfN3CZLTfpLOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTI1MTMwMTAzWhcNMjYwMTI2MTMwMTAzWjAzMTEwLwYDVQQD EygwNGI4MWI4OThiMWM3ODc1MjkxNTU5ZDU1ZTY1ODk5ZmVjNzg1ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUyb8k1pCCOXnD1Awm4NNE//muyl HbVrZJDdxKcrOOJfrv3XETLjnDDyz1uqGfr6ifk5ZnTKHPOPbZHgrmv/kjH0J1iN 0bVZ3CkRo/z/9x82GfF4EWnWaqqkvymfKSmg+Egvse/ugTz2ApXJIt510GiMCD4K ja0732Y/vWrpHV6S/wjyEjfAt6wNSUHxkL8uw+mT4z0727zK6GiBw3/Zg3ZbyVTh l6HhuSms7i6nP5iUBRzLTEHVK7jxZomlcaY1lHqxZ+MUDtHhlfKkdov0HjUkt9rz KviaTx2dtxeUsQz0DE05eG9+NGtH1z6GEfDwfTupfUXm1IjGCJOVEdL/jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAS4G4mLHHh1KRVZ1V5liZ/seF42MB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7IaKL77 kiKezvpP5dveZEER4ISPXeETGXR3IRoG5il0YtFQZ+osx2MSuWtTuLbBO0tf/6gt zkGPFsmVMH4Xdg5iDm7pBXZ9Zh8fujdiL41MBiuS9ymp4dvkfIhVubFxiE4soApc wAPm6xGW0kXwMcRb+y5U0sNnQvgBdXFlXuMyKlqXLHqHcYpqE5B0W4FePg4z1BJ2 +TtIXnvCuLooRFeDl7YTmcWKUD2WmMnnsYQmTb5bAkgYgvIUjkhGC3YB+fxXBUAw k4bTv2WtXFFpRDDBLE3RgSv+/0ueQ1bWkfkkIDAy1XW0VjcC5mx1tLOm/NkqM6dF YcEZC2Ni+1xjEw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:00 2026 by rpki-client