This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json) Hash identifier: 4coqVZ3gmLh2tx9rMdjzwHfADtmx4PGXnWsOjpQ36jM= Subject key identifier: 22:FD:94:88:85:6E:12:80:AA:4F:38:88:73:89:BB:5D:0B:A3:23:61 Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Certificate serial: 019BF5ABC05775B8BBE5B187236054B0ADF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 15:00:32 +0000 Manifest this update: Sun 25 Jan 2026 15:00:32 +0000 Manifest next update: Mon 26 Jan 2026 15:00:32 +0000 Files and hashes: 1: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: ROn6/Cn/S4WjaolxtbkysrzN6EQfed5tEp/etnFKyEE=) 2: rd59wLEfvKNOBwKpms9JkojXq3k.roa (hash: mBuGXrrAweGoBjDpEtI+r5ofDk/b87Lh559SU3SJ+WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c0:57:75:b8:bb:e5:b1:87:23:60:54:b0:ad:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Validity Not Before: Jan 25 15:00:32 2026 GMT Not After : Jan 26 15:00:32 2026 GMT Subject: CN=22fd9488856e1280aa4f38887389bb5d0ba32361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:48:58:90:41:8d:df:ea:99:db:7e:6e:e5: d1:23:0e:68:ff:b7:f3:6d:6a:a3:5c:6d:cf:ad:e8: ad:82:7f:0c:ac:28:9d:75:8d:27:f0:a2:90:e0:e2: 61:70:e2:81:df:a5:ad:e3:2c:8f:d3:f7:f9:9d:b6: 1b:28:c1:eb:eb:80:b7:e5:47:7d:02:75:ff:08:8a: 38:45:bb:2e:ab:8b:6c:8f:d8:60:d3:70:08:ba:f2: b7:e6:c4:5f:70:08:86:99:d8:16:e8:10:89:b9:a9: 35:7c:3a:b1:64:99:33:fd:6d:03:1d:f8:1a:cd:ef: a4:b5:9d:ba:4d:13:ec:22:49:96:57:e7:6c:7f:2d: 59:cd:bb:32:18:ed:4b:93:68:e2:21:20:49:8a:b3: 40:e2:d3:12:3c:85:b6:7a:fb:4b:94:85:b5:ce:86: 12:9e:40:0a:bf:86:85:cc:fa:9a:2c:3a:44:8b:c5: 01:a4:96:7f:ad:94:ae:f5:63:a1:60:ce:cc:a9:f9: ad:c8:30:a9:5d:56:a5:cf:f0:91:82:e2:fe:76:93: 2e:6d:43:f1:f9:38:1d:87:24:b4:48:cd:3b:7b:2c: ad:e7:20:96:7f:e6:c1:94:39:03:7b:72:2f:5a:65: bf:d4:53:4e:c7:1c:a8:3b:db:63:f8:fc:f1:30:cc: 3f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:94:88:85:6E:12:80:AA:4F:38:88:73:89:BB:5D:0B:A3:23:61 X509v3 Authority Key Identifier: keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:aa:b5:de:d9:87:ff:02:1f:58:36:b8:39:56:26:83:32:1f: b2:25:2d:01:47:4a:f8:6b:92:7f:2d:43:75:0a:6b:30:08:51: 5e:d6:f0:be:b5:d5:ab:8b:c9:ed:a7:05:d7:0e:9f:57:57:5e: f8:5c:c7:8d:b6:dd:5f:5d:7f:6f:99:3c:74:c9:89:59:fd:90: 26:d8:5b:eb:aa:13:a4:88:4c:57:93:fe:a4:a8:87:7c:7b:a8: 5f:c0:a4:bb:79:8f:54:c6:e2:fc:d0:39:66:05:33:a3:8b:13: 97:a9:64:17:7a:3f:97:77:d1:20:e3:40:fb:40:ec:2e:54:87: c4:cd:2c:fd:01:4e:85:97:d0:0e:ae:63:ab:92:00:97:3e:ae: b1:e0:1a:53:19:2b:a1:b6:ff:31:94:fd:1c:4f:55:47:ac:86: af:e1:79:6e:82:a5:52:20:6e:6d:ce:d7:31:33:8d:23:58:d3: cc:b8:c3:03:6d:31:ac:21:b5:3a:2f:b9:6d:b1:00:bf:20:b2: 50:d3:03:7e:5e:2b:45:55:f9:2f:7a:47:8c:6d:43:ab:15:be: 8e:da:09:e3:a6:27:0b:cc:b3:54:e1:0a:6b:c7:2d:a1:8e:27: cd:84:a5:b5:84:50:92:49:a5:86:ab:ea:b5:be:53:54:38:f3: ef:e0:16:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8BXdbi75bGHI2BUsK32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMDk3M2MxZjQ0M2VjNGE4Mzg3YWFkN2FjYTc1ZDA3YjZm YWE5ZGEwHhcNMjYwMTI1MTUwMDMyWhcNMjYwMTI2MTUwMDMyWjAzMTEwLwYDVQQD EygyMmZkOTQ4ODg1NmUxMjgwYWE0ZjM4ODg3Mzg5YmI1ZDBiYTMyMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2BIWJBBjd/qmdt+buXRIw5o/7fz bWqjXG3Preitgn8MrCiddY0n8KKQ4OJhcOKB36Wt4yyP0/f5nbYbKMHr64C35Ud9 AnX/CIo4Rbsuq4tsj9hg03AIuvK35sRfcAiGmdgW6BCJuak1fDqxZJkz/W0DHfga ze+ktZ26TRPsIkmWV+dsfy1ZzbsyGO1Lk2jiISBJirNA4tMSPIW2evtLlIW1zoYS nkAKv4aFzPqaLDpEi8UBpJZ/rZSu9WOhYM7MqfmtyDCpXValz/CRguL+dpMubUPx +TgdhyS0SM07eyyt5yCWf+bBlDkDe3IvWmW/1FNOxxyoO9tj+PzxMMw/MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCL9lIiFbhKAqk84iHOJu10LoyNhMB8GA1UdIwQY MBaAFEoJc8H0Q+xKg4eq16ynXQe2+qnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMt MTIxNzcyOWFmMWM4LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMtMTIxNzcyOWFmMWM4 LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaq13tmH /wIfWDa4OVYmgzIfsiUtAUdK+GuSfy1DdQprMAhRXtbwvrXVq4vJ7acF1w6fV1de +FzHjbbdX11/b5k8dMmJWf2QJthb66oTpIhMV5P+pKiHfHuoX8Cku3mPVMbi/NA5 ZgUzo4sTl6lkF3o/l3fRIONA+0DsLlSHxM0s/QFOhZfQDq5jq5IAlz6useAaUxkr obb/MZT9HE9VR6yGr+F5boKlUiBubc7XMTONI1jTzLjDA20xrCG1Oi+5bbEAvyCy UNMDfl4rRVX5L3pHjG1DqxW+jtoJ46YnC8yzVOEKa8ctoY4nzYSltYRQkkmlhqvq tb5TVDjz7+AW6Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:38 2026 by rpki-client