This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json) Hash identifier: uGIhWrJdoBOpbeMvQuXBBhdI8VIDxGkslNlylNrPfL4= Subject key identifier: 23:1A:B1:D7:D1:A8:99:FD:31:52:63:3E:AD:84:B8:1E:7E:A8:D3:2E Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df Certificate serial: 019BF4995F2A6A53D775EB6318A52A6258CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft Manifest number: 1418 Signing time: Sun 25 Jan 2026 10:00:50 +0000 Manifest this update: Sun 25 Jan 2026 10:00:50 +0000 Manifest next update: Mon 26 Jan 2026 10:00:50 +0000 Files and hashes: 1: 4y1EBk6dbLscu7TuubVQpj3p-s8.roa (hash: TBvo1eP+imsTzppJhBpYDx8zDpINfxOs1/vehmwqpe0=) 2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: DfnCLl3cJ8mi1T2ETs/iU2EdpYWQwyKYisXcDMFgdvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:5f:2a:6a:53:d7:75:eb:63:18:a5:2a:62:58:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df Validity Not Before: Jan 25 10:00:50 2026 GMT Not After : Jan 26 10:00:50 2026 GMT Subject: CN=231ab1d7d1a899fd3152633ead84b81e7ea8d32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:e8:6d:8e:d7:f3:17:03:ea:8a:95:5e:94: d8:aa:47:b5:c6:85:40:58:5c:fc:cf:b8:38:d2:b6: 6c:7f:fb:22:83:7a:21:b5:5e:3d:96:36:f8:ad:5f: 70:d3:0d:4f:b3:b3:56:57:89:1e:ef:ef:6f:80:f6: f6:96:24:14:98:ec:46:31:77:b7:d8:f3:a2:d6:3d: 27:60:bb:99:ff:cf:fa:47:c8:2c:5d:f3:2f:3c:19: b6:a2:2d:a8:5b:27:da:7a:51:cc:cf:ff:d1:15:7e: d1:07:ba:df:48:f3:e9:ce:ae:11:9b:d2:b7:27:94: 72:31:7d:c9:9a:a5:bb:b1:73:9a:0c:1b:2d:a1:ab: 21:06:80:eb:2c:33:a4:71:03:20:28:84:b0:df:90: ce:52:c1:95:12:a2:05:4f:9f:5f:3a:21:05:6f:fe: 80:25:94:59:b8:b5:97:2f:62:f5:a9:62:7a:c1:be: 5c:b6:90:30:ff:13:a5:cd:25:b0:65:a7:dd:09:54: cc:25:d1:7f:78:91:31:56:0a:57:04:c1:5f:7e:7d: d7:6f:98:6f:f5:bf:ca:45:b5:2c:d8:65:39:f8:2f: 57:d4:87:19:30:8b:4c:5c:3c:30:8b:70:ba:64:d5: bc:99:e9:03:74:1e:45:ac:5f:50:c5:1e:c3:67:e5: a1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1A:B1:D7:D1:A8:99:FD:31:52:63:3E:AD:84:B8:1E:7E:A8:D3:2E X509v3 Authority Key Identifier: keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:01:ab:2c:b6:15:ee:c7:1d:e5:e4:d9:bf:44:c7:45:90:73: 83:af:7e:37:0a:ff:ce:cd:e8:d7:4c:0a:7f:ef:15:99:15:f6: 66:74:d7:88:cf:3a:f8:2f:f1:13:dc:5e:96:49:bf:95:fb:64: 6c:6a:ba:82:4d:0c:a2:57:86:7c:28:43:cf:5c:10:0e:d9:cc: 9a:54:b3:57:5d:2c:1a:67:0e:85:9c:96:96:0e:15:7d:88:bb: 4a:fa:2b:14:d6:51:25:a5:a1:a5:49:da:bb:c2:4a:0c:19:2b: 9d:1f:f7:b4:05:17:8d:c1:8a:de:09:fd:8a:e4:c6:f1:92:1b: 14:bb:4d:60:5b:15:d3:d4:14:c2:7d:a2:80:2f:97:ad:de:ea: ce:b5:28:ae:09:6e:27:a3:e6:2a:56:c5:a9:f9:ab:b6:0f:09: a8:a4:57:7c:57:5d:f5:f1:4d:bc:ea:6c:61:45:69:9e:40:bf: 7b:ee:d8:ef:40:9c:5d:7b:53:ce:97:2b:4b:8c:f6:09:7b:18: 21:3d:6f:55:ed:15:6e:7b:bd:95:59:12:23:63:b2:b3:e1:d1: 7a:8a:32:46:25:47:f5:f2:96:fb:9e:38:53:1c:0e:11:bc:40: 2b:07:27:02:35:8a:fd:6f:9c:6e:15:d3:aa:5b:7f:f6:d8:0e: 49:a9:e1:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mV8qalPXdetjGKUqYljKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNmQ3ZWE0MTAzMzgzN2YwOGMyOGM0NzQyOTg0YjgyYjhm NDQzZGYwHhcNMjYwMTI1MTAwMDUwWhcNMjYwMTI2MTAwMDUwWjAzMTEwLwYDVQQD EygyMzFhYjFkN2QxYTg5OWZkMzE1MjYzM2VhZDg0YjgxZTdlYThkMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJnobY7X8xcD6oqVXpTYqke1xoVA WFz8z7g40rZsf/sig3ohtV49ljb4rV9w0w1Ps7NWV4ke7+9vgPb2liQUmOxGMXe3 2POi1j0nYLuZ/8/6R8gsXfMvPBm2oi2oWyfaelHMz//RFX7RB7rfSPPpzq4Rm9K3 J5RyMX3JmqW7sXOaDBstoashBoDrLDOkcQMgKISw35DOUsGVEqIFT59fOiEFb/6A JZRZuLWXL2L1qWJ6wb5ctpAw/xOlzSWwZafdCVTMJdF/eJExVgpXBMFffn3Xb5hv 9b/KRbUs2GU5+C9X1IcZMItMXDwwi3C6ZNW8mekDdB5FrF9QxR7DZ+WhRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMasdfRqJn9MVJjPq2EuB5+qNMuMB8GA1UdIwQY MBaAFEttfqQQM4N/CMKMR0KYS4K49EPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xZDA2ODEtZmUyMC00N2EzLTk0ZGYt NWVlODcyMWMxY2ZjLzEvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xZDA2ODEtZmUyMC00N2EzLTk0ZGYtNWVlODcyMWMxY2Zj LzEvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAGrLLYV 7scd5eTZv0THRZBzg69+Nwr/zs3o10wKf+8VmRX2ZnTXiM86+C/xE9xelkm/lftk bGq6gk0MoleGfChDz1wQDtnMmlSzV10sGmcOhZyWlg4VfYi7SvorFNZRJaWhpUna u8JKDBkrnR/3tAUXjcGK3gn9iuTG8ZIbFLtNYFsV09QUwn2igC+Xrd7qzrUorglu J6PmKlbFqfmrtg8JqKRXfFdd9fFNvOpsYUVpnkC/e+7Y70CcXXtTzpcrS4z2CXsY IT1vVe0Vbnu9lVkSI2Oys+HReooyRiVH9fKW+544UxwOEbxAKwcnAjWK/W+cbhXT qlt/9tgOSanhtw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:03 2026 by rpki-client