This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json) Hash identifier: QRUrl7/6mGfyfi/h2Wnhk26AnvAsyAGAtf5rQfAR18E= Subject key identifier: C4:3D:67:23:AA:EC:81:B8:68:66:5F:06:D3:F5:65:D2:9F:C1:D8:E5 Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c Certificate serial: 019BF808AA3AC758DA2963F5198DB2946C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft Manifest number: 0B60 Signing time: Mon 26 Jan 2026 02:01:15 +0000 Manifest this update: Mon 26 Jan 2026 02:01:15 +0000 Manifest next update: Tue 27 Jan 2026 02:01:15 +0000 Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: j13rn1FePN7dqo3LjaXzZTv7uU3Qf4mLXfpjewYERx8=) 2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:aa:3a:c7:58:da:29:63:f5:19:8d:b2:94:6c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c Validity Not Before: Jan 26 02:01:15 2026 GMT Not After : Jan 27 02:01:15 2026 GMT Subject: CN=c43d6723aaec81b868665f06d3f565d29fc1d8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:8d:c5:df:23:f5:69:bb:38:98:e3:7b:dc: 62:a7:d3:1d:ef:5e:ff:11:51:73:28:71:1e:6b:30: 4d:6f:c4:30:54:1c:b9:fb:5e:4d:06:fe:88:b8:d1: e6:ad:fa:83:9f:1e:61:10:60:a3:4b:cb:82:61:fa: 22:c1:d2:72:72:e1:b4:7b:ca:7a:8c:b1:97:cd:f6: 03:4b:47:42:4e:b8:06:ca:07:40:60:ab:e8:75:d4: 2d:e0:fc:57:43:fa:5f:dd:8a:ad:5e:99:40:83:e0: ce:8c:c2:88:ea:25:f0:05:90:f4:5b:ae:bf:35:de: 4a:16:c5:38:c0:4b:3e:25:8e:63:ba:e4:d9:05:59: 1e:7e:df:fc:e1:49:be:7e:1a:14:89:17:7e:a0:d2: 68:e7:8a:97:dd:9c:ed:58:31:9d:e1:54:e1:24:78: 82:65:a5:94:84:05:71:36:1a:ce:1b:60:b1:1e:28: 98:23:ba:9d:23:61:80:7a:ca:02:22:4f:29:5f:29: de:47:b1:76:4e:9a:20:93:e0:cb:a4:ad:3f:65:5c: 30:36:d7:23:b2:21:f5:d7:da:87:37:e8:56:ba:22: 3c:db:e6:78:a8:8f:53:71:10:8b:91:e9:a8:74:1c: 11:d2:a1:dd:be:57:5f:74:60:ea:32:15:59:4a:a0: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3D:67:23:AA:EC:81:B8:68:66:5F:06:D3:F5:65:D2:9F:C1:D8:E5 X509v3 Authority Key Identifier: keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b5:7f:6a:a3:27:02:41:42:71:73:a9:51:97:17:61:bb:c6: d9:f1:31:36:b3:e8:a9:94:d0:6b:6e:2e:cb:61:f2:5a:1c:52: bd:77:6f:46:1d:af:52:aa:be:3d:4c:fe:fe:48:99:75:62:e2: 3f:1a:2b:e1:0c:96:a9:0e:b7:89:88:2b:8e:42:7c:f0:54:ae: 9c:ff:9a:5d:6a:33:85:de:cd:e8:b9:56:ef:38:aa:9e:07:93: 05:f6:ff:4c:b5:32:f4:53:df:0f:7d:cb:3f:4f:6d:f5:42:b5: 03:5e:37:0c:8f:09:41:54:9f:27:87:b1:fc:14:9c:9b:59:66: 40:b8:4e:b0:a6:bc:81:40:b5:87:28:19:a1:18:d9:54:a4:44: 28:e8:d7:07:4c:ed:1b:43:80:e4:4d:95:8f:42:1f:fa:0e:5f: 2c:6f:fd:d7:0f:c9:e1:cc:a3:88:67:27:b1:71:49:17:06:25: 8e:61:d7:bf:e4:cc:8d:fe:57:96:08:90:62:24:89:d4:ca:98: 78:57:5c:ca:97:45:7a:73:e3:58:54:ba:ff:e3:90:58:15:f5: af:24:3d:ea:3d:18:d6:92:a4:41:ae:b1:f5:b3:ff:5c:20:d9: 1d:ec:2c:ba:a8:5e:4b:39:be:a7:da:05:bc:69:dc:0d:77:e5: f4:aa:6f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CKo6x1jaKWP1GY2ylGyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWQxNjZjNjQ4NDczODk3MmU5YjMzOTM4MTY1ZjQ0ODlh NTE2OGMwHhcNMjYwMTI2MDIwMTE1WhcNMjYwMTI3MDIwMTE1WjAzMTEwLwYDVQQD EyhjNDNkNjcyM2FhZWM4MWI4Njg2NjVmMDZkM2Y1NjVkMjlmYzFkOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2uNxd8j9Wm7OJjje9xip9Md717/ EVFzKHEeazBNb8QwVBy5+15NBv6IuNHmrfqDnx5hEGCjS8uCYfoiwdJycuG0e8p6 jLGXzfYDS0dCTrgGygdAYKvoddQt4PxXQ/pf3YqtXplAg+DOjMKI6iXwBZD0W66/ Nd5KFsU4wEs+JY5juuTZBVkeft/84Um+fhoUiRd+oNJo54qX3ZztWDGd4VThJHiC ZaWUhAVxNhrOG2CxHiiYI7qdI2GAesoCIk8pXyneR7F2Tpogk+DLpK0/ZVwwNtcj siH119qHN+hWuiI82+Z4qI9TcRCLkemodBwR0qHdvldfdGDqMhVZSqANSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQ9ZyOq7IG4aGZfBtP1ZdKfwdjlMB8GA1UdIwQY MBaAFEqdFmxkhHOJcumzOTgWX0SJpRaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMt YmZhOTYzOTJhYzVkLzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMtYmZhOTYzOTJhYzVk LzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7V/aqMn AkFCcXOpUZcXYbvG2fExNrPoqZTQa24uy2HyWhxSvXdvRh2vUqq+PUz+/kiZdWLi Pxor4QyWqQ63iYgrjkJ88FSunP+aXWozhd7N6LlW7ziqngeTBfb/TLUy9FPfD33L P09t9UK1A143DI8JQVSfJ4ex/BScm1lmQLhOsKa8gUC1hygZoRjZVKREKOjXB0zt G0OA5E2Vj0If+g5fLG/91w/J4cyjiGcnsXFJFwYljmHXv+TMjf5XlgiQYiSJ1MqY eFdcypdFenPjWFS6/+OQWBX1ryQ96j0Y1pKkQa6x9bP/XCDZHewsuqheSzm+p9oF vGncDXfl9Kpv3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:48 2026 by rpki-client