This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json) Hash identifier: jCHVO9NRwrZ+H1vHv60/qs8xpOKq36NMUH+X3bg+AI8= Subject key identifier: DC:41:26:3F:33:A3:92:CC:70:72:73:C9:C5:04:A9:DB:C8:F7:A7:44 Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Certificate serial: 019BF619D5D6C4093383AFFF35AF1816E24A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft Manifest number: 050F Signing time: Sun 25 Jan 2026 17:00:46 +0000 Manifest this update: Sun 25 Jan 2026 17:00:46 +0000 Manifest next update: Mon 26 Jan 2026 17:00:46 +0000 Files and hashes: 1: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=) 2: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=) 3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: W4COzu8wDZDq0RLUc5NDQFP+qyT72UHbNHP1Su+m6is=) 4: w3bUx21EelQe6cP2sWw-f16bOSc.roa (hash: hXS9wDSgqG6sE79J34bqDzQpJHEpUBu8b6eirVvBO14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:d5:d6:c4:09:33:83:af:ff:35:af:18:16:e2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Validity Not Before: Jan 25 17:00:46 2026 GMT Not After : Jan 26 17:00:46 2026 GMT Subject: CN=dc41263f33a392cc707273c9c504a9dbc8f7a744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:f6:d6:3f:2f:de:07:5a:fb:a1:39:ed:30: b6:84:30:f6:d3:1f:3f:1e:0e:c2:5e:f7:b1:72:ca: 8d:58:ec:19:34:0e:83:58:33:f4:11:7d:c2:f5:04: 3e:40:ba:f9:4e:77:fb:37:2a:fa:20:e7:ba:9c:88: 6c:47:24:ec:e0:58:20:9a:c2:6a:99:1d:79:e1:1a: cb:d7:93:40:ca:83:22:4c:0d:90:90:19:f4:6f:14: b8:47:e1:db:27:a1:2e:e8:fd:87:12:67:f9:38:1c: 9f:1d:44:3b:73:e6:3d:8f:81:60:e3:35:18:cf:c2: bc:d8:ff:e9:ad:a7:8b:ad:82:96:b9:06:75:de:7a: 83:4b:23:2d:1d:e0:0c:22:e6:67:70:73:df:a2:d7: d8:59:bd:13:2f:e4:ff:15:7c:31:f9:ec:9d:dc:ab: 3c:2b:9a:b7:8a:43:61:37:03:c7:71:ac:01:79:51: e9:34:13:45:e9:6d:22:56:ab:65:38:e4:ac:0c:60: a8:d4:90:6a:37:80:26:7a:07:e7:60:4a:f3:bf:cc: 92:b0:2b:2e:3c:fc:48:05:33:d1:ef:1f:a6:1d:50: c8:eb:de:20:03:42:7d:5b:51:1c:71:50:ae:20:5f: 94:48:54:9a:7b:42:cb:ff:4c:24:ee:a3:8e:a4:4a: f0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:41:26:3F:33:A3:92:CC:70:72:73:C9:C5:04:A9:DB:C8:F7:A7:44 X509v3 Authority Key Identifier: keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:53:ca:5e:f0:23:a6:0b:45:42:8e:fd:47:dc:fa:9e:d0:73: 18:03:7a:54:e7:7c:95:da:dc:1e:1f:5d:a3:21:ce:e8:a8:b1: be:75:d9:7f:17:b7:51:a7:d2:78:ad:0c:72:da:9f:07:44:b3: a9:2e:08:b8:d1:0b:ab:27:29:d0:eb:3a:0b:fd:9c:26:9d:b6: c8:c8:9c:65:a1:f0:5d:c6:c5:5a:bd:5b:1f:75:2f:9c:0b:c7: 3b:be:3a:6e:9b:bc:7b:0b:93:ba:d6:dc:b0:e2:57:f6:d1:aa: 06:9a:c2:39:de:1e:69:90:88:9b:72:45:45:19:0d:12:d6:54: de:83:09:20:bf:b9:c6:b1:bd:91:0e:bf:de:a7:1f:4c:68:ad: e2:0d:9f:34:23:42:87:8e:bc:86:9a:97:19:58:8e:c3:b2:1e: 22:12:26:11:57:4e:42:c1:d7:14:71:2e:07:d0:07:98:ef:2b: e3:6d:64:c0:45:f9:11:f2:0e:1c:af:e9:4b:a6:de:fc:db:12: 6f:5b:0b:d4:6d:f6:40:fc:cb:0d:0e:d4:68:55:2c:d0:0f:c8: c6:58:e1:1b:b0:0c:9a:49:bf:5a:44:01:34:1f:9b:92:f1:e9: 07:0a:48:27:99:ee:22:4d:4c:eb:79:70:2f:38:93:80:ec:ac: 05:f2:ef:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GdXWxAkzg6//Na8YFuJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw ODA2OGMwHhcNMjYwMTI1MTcwMDQ2WhcNMjYwMTI2MTcwMDQ2WjAzMTEwLwYDVQQD EyhkYzQxMjYzZjMzYTM5MmNjNzA3MjczYzljNTA0YTlkYmM4ZjdhNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUf21j8v3gda+6E57TC2hDD20x8/ Hg7CXvexcsqNWOwZNA6DWDP0EX3C9QQ+QLr5Tnf7Nyr6IOe6nIhsRyTs4FggmsJq mR154RrL15NAyoMiTA2QkBn0bxS4R+HbJ6Eu6P2HEmf5OByfHUQ7c+Y9j4Fg4zUY z8K82P/praeLrYKWuQZ13nqDSyMtHeAMIuZncHPfotfYWb0TL+T/FXwx+eyd3Ks8 K5q3ikNhNwPHcawBeVHpNBNF6W0iVqtlOOSsDGCo1JBqN4AmegfnYErzv8ySsCsu PPxIBTPR7x+mHVDI694gA0J9W1EccVCuIF+USFSae0LL/0wk7qOOpErwUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxBJj8zo5LMcHJzycUEqdvI96dEMB8GA1UdIwQY MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt NjQ4MGMzZDFmNGU0LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0 LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFPKXvAj pgtFQo79R9z6ntBzGAN6VOd8ldrcHh9doyHO6KixvnXZfxe3UafSeK0MctqfB0Sz qS4IuNELqycp0Os6C/2cJp22yMicZaHwXcbFWr1bH3UvnAvHO746bpu8ewuTutbc sOJX9tGqBprCOd4eaZCIm3JFRRkNEtZU3oMJIL+5xrG9kQ6/3qcfTGit4g2fNCNC h468hpqXGViOw7IeIhImEVdOQsHXFHEuB9AHmO8r421kwEX5EfIOHK/pS6be/NsS b1sL1G32QPzLDQ7UaFUs0A/IxljhG7AMmkm/WkQBNB+bkvHpBwpIJ5nuIk1M63lw LziTgOysBfLvlg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:19 2026 by rpki-client