This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json) Hash identifier: GZKv8Zw2wlHlsdemUQDkhcmIGyMbEp1IUqg0pAbfCqA= Subject key identifier: 63:61:92:5A:A2:BA:DE:1D:1B:2C:0F:20:43:12:CF:49:EE:95:82:88 Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5 Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5 Certificate serial: 019BF72C945878DF9C67F1FFBAF54BBBDA70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft Manifest number: 1033 Signing time: Sun 25 Jan 2026 22:00:52 +0000 Manifest this update: Sun 25 Jan 2026 22:00:52 +0000 Manifest next update: Mon 26 Jan 2026 22:00:52 +0000 Files and hashes: 1: _RUk9FpS67FmhL3-cjuZddAmpdk.roa (hash: B9UAAuPL9bMWFoRGXof1Klm+Lwvuj9esb9qSVPpnlxw=) 2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: S37+LnQFLWVf6KGbCUn3OcUBGiIodxKBTh9sQiXHQSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:94:58:78:df:9c:67:f1:ff:ba:f5:4b:bb:da:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5 Validity Not Before: Jan 25 22:00:52 2026 GMT Not After : Jan 26 22:00:52 2026 GMT Subject: CN=6361925aa2bade1d1b2c0f204312cf49ee958288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:c3:3e:e0:ba:a7:73:15:f8:27:49:55:da: 67:13:5c:f6:f3:15:90:75:46:2e:f3:e6:67:84:55: 74:1f:65:cf:ba:28:94:62:13:26:70:41:05:33:96: e0:1d:70:56:36:98:f9:8a:a0:05:47:97:f5:2c:33: 06:74:f7:e0:18:76:bc:6c:ce:09:15:7e:62:92:80: 4d:4d:27:29:04:b3:63:df:27:fa:60:58:d9:7d:e5: e9:9d:70:54:43:bd:bf:68:17:34:f2:e9:14:e7:25: 2e:35:99:59:1b:e3:41:a3:c1:60:55:ab:0d:d1:19: d2:51:6c:82:13:48:e4:25:85:6f:95:02:43:63:e0: 84:ab:c9:30:09:ab:3e:56:40:ff:ae:fd:82:fd:de: db:e6:be:bb:44:8b:bc:90:d8:1b:6f:09:b5:7d:4b: 69:f8:b7:b4:ec:c8:d8:5a:d0:0e:a7:de:df:49:85: 4e:f4:bf:ef:fe:ad:c0:f1:09:6f:61:ba:4d:28:bd: 35:96:ff:e9:26:84:3a:5d:a2:86:db:23:5a:a2:4f: 36:cf:10:ab:5d:37:ec:7c:85:9a:82:2d:79:94:24: ed:04:18:d3:b7:c0:b1:8d:cc:7c:2c:b4:25:45:10: 03:ff:a1:ab:de:24:92:80:be:94:5e:87:63:af:b1: ef:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:61:92:5A:A2:BA:DE:1D:1B:2C:0F:20:43:12:CF:49:EE:95:82:88 X509v3 Authority Key Identifier: keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:25:60:c8:e4:f3:06:e3:25:a9:7f:b9:e5:1e:52:83:9c:a8: 61:aa:ca:4d:5f:47:0c:34:09:45:b7:9d:7d:fe:ae:03:e2:6c: 7a:96:99:86:7a:3d:c1:60:40:a0:03:98:ce:4d:b8:8f:66:1d: a1:e9:e4:98:9f:ad:af:45:53:06:77:b6:65:59:b2:18:96:8b: 14:35:50:09:04:c5:93:9b:ff:01:e4:ce:cb:02:c2:bd:2f:1f: 20:7a:d4:fd:41:27:56:19:17:c0:23:82:ef:9e:80:c1:45:5c: b4:3c:b5:bb:d0:04:03:bc:28:53:6f:f9:73:d5:3d:11:cd:8f: e9:13:b7:42:07:0a:0f:33:6b:9c:06:08:aa:34:a9:db:6c:b4: a6:d8:56:82:44:3f:bb:0c:50:f1:3b:08:8b:33:e0:23:06:ec: 86:59:5c:c3:0d:1c:a7:9b:ff:d2:94:d5:74:2b:8b:92:16:42: 62:9c:5a:e8:84:2d:4e:45:2f:6b:c7:17:80:55:63:6b:7d:ef: c2:68:0c:78:08:41:98:50:5d:90:c1:95:81:2a:fa:66:d9:46: 14:5b:8d:2e:8b:da:df:a9:92:82:a1:26:c9:b5:e7:a6:33:9b: e6:b7:af:09:d7:57:87:f3:07:f5:02:06:0e:49:18:a5:a4:8a: 1e:14:4a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LJRYeN+cZ/H/uvVLu9pwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxN2I0NDkwNGM3Njk0YTU0MDhhMGQyOTcyYzM5ZmYwYjFi MDNlYTUwHhcNMjYwMTI1MjIwMDUyWhcNMjYwMTI2MjIwMDUyWjAzMTEwLwYDVQQD Eyg2MzYxOTI1YWEyYmFkZTFkMWIyYzBmMjA0MzEyY2Y0OWVlOTU4Mjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7HDPuC6p3MV+CdJVdpnE1z28xWQ dUYu8+ZnhFV0H2XPuiiUYhMmcEEFM5bgHXBWNpj5iqAFR5f1LDMGdPfgGHa8bM4J FX5ikoBNTScpBLNj3yf6YFjZfeXpnXBUQ72/aBc08ukU5yUuNZlZG+NBo8FgVasN 0RnSUWyCE0jkJYVvlQJDY+CEq8kwCas+VkD/rv2C/d7b5r67RIu8kNgbbwm1fUtp +Le07MjYWtAOp97fSYVO9L/v/q3A8QlvYbpNKL01lv/pJoQ6XaKG2yNaok82zxCr XTfsfIWagi15lCTtBBjTt8Cxjcx8LLQlRRAD/6Gr3iSSgL6UXodjr7HvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNhklqiut4dGywPIEMSz0nulYKIMB8GA1UdIwQY MBaAFLF7RJBMdpSlQIoNKXLDn/CxsD6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTct YTQ1OTE2OTU1ZTZmLzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTctYTQ1OTE2OTU1ZTZm LzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSVgyOTz BuMlqX+55R5Sg5yoYarKTV9HDDQJRbedff6uA+JsepaZhno9wWBAoAOYzk24j2Yd oenkmJ+tr0VTBne2ZVmyGJaLFDVQCQTFk5v/AeTOywLCvS8fIHrU/UEnVhkXwCOC 756AwUVctDy1u9AEA7woU2/5c9U9Ec2P6RO3QgcKDzNrnAYIqjSp22y0pthWgkQ/ uwxQ8TsIizPgIwbshllcww0cp5v/0pTVdCuLkhZCYpxa6IQtTkUva8cXgFVja33v wmgMeAhBmFBdkMGVgSr6ZtlGFFuNLova36mSgqEmybXnpjOb5revCddXh/MH9QIG DkkYpaSKHhRKAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:55 2026 by rpki-client