This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json) Hash identifier: nK5uZAcZGp4OO76NI/uO0sVmvHU0CYzscfV3UIG8c6o= Subject key identifier: AE:8B:B2:AF:50:34:16:D5:FB:66:D6:69:7B:1E:50:4D:E9:93:F4:F8 Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Certificate serial: 019BF5755842DA0A2B84F20C42FBC1F6F016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 14:01:06 +0000 Manifest this update: Sun 25 Jan 2026 14:01:06 +0000 Manifest next update: Mon 26 Jan 2026 14:01:06 +0000 Files and hashes: 1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=) 2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=) 3: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (hash: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=) 4: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=) 5: l8uxf4gsRPeplSdss-OEMb-A0xg.roa (hash: tdIVzUM2MKwiHz/KJ6t3ZqxB8ibUNsqITNrh2azbkDk=) 6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: hVJuzCUhYzi3GWgusxMAwt1z9vjptPcNcZ+vha/Q1Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:58:42:da:0a:2b:84:f2:0c:42:fb:c1:f6:f0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Validity Not Before: Jan 25 14:01:06 2026 GMT Not After : Jan 26 14:01:06 2026 GMT Subject: CN=ae8bb2af503416d5fb66d6697b1e504de993f4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:41:74:7d:d4:63:02:b5:db:ef:5c:9b:0d: b9:da:32:49:7c:21:cb:f5:36:ae:eb:e1:7b:2a:92: 01:b5:c5:6f:00:e8:20:b5:18:02:18:2a:65:06:96: 13:c7:54:98:1f:36:c7:ff:42:8f:2b:c3:2f:59:c5: 83:3c:7c:b2:90:40:2f:93:78:d1:74:c9:58:d1:df: b0:e9:e6:09:d6:a7:cb:08:16:0c:77:14:ac:70:a8: ae:b7:7d:85:b3:d6:30:b2:93:e6:86:84:71:6a:7e: c3:ea:fc:70:4f:2b:6f:05:ba:96:6d:29:b9:14:8c: 73:3a:ab:7e:b3:7f:ca:7d:c0:0a:78:e2:2c:aa:cd: ed:03:53:82:85:b6:46:56:c7:cf:5a:13:af:25:6f: d7:07:19:48:c0:6d:66:50:d3:c1:08:d4:d4:e9:f7: d6:72:d5:54:5c:04:4e:ab:11:c5:ab:52:c8:bf:81: dd:4b:83:51:96:e1:7d:26:65:e5:e7:c7:b2:cb:2b: d5:d3:18:60:60:00:fe:59:35:b6:c3:5e:e7:ef:ab: 89:fb:13:2a:ca:70:22:02:d5:25:cb:80:35:0d:91: e1:ca:e3:de:c8:91:bd:eb:a4:82:ad:fb:4a:4d:f2: 3d:7d:72:ea:83:2c:11:b0:ed:a0:41:c8:e7:3d:13: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:B2:AF:50:34:16:D5:FB:66:D6:69:7B:1E:50:4D:E9:93:F4:F8 X509v3 Authority Key Identifier: keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7c:c5:62:1f:96:23:36:1e:30:e7:46:ad:1e:5f:ed:05:03: d1:bd:38:04:43:2a:b0:41:c8:55:28:e9:b3:d0:f5:c9:4d:48: 74:9e:2e:b9:7b:b7:f1:0e:e9:81:cf:6d:1d:db:8a:af:8f:7d: 2d:13:a4:31:bb:b7:a2:3d:e5:92:36:5a:e2:66:89:70:3f:40: 34:39:0f:71:64:c8:44:fc:09:3b:c0:38:2f:b1:5c:dc:18:83: 8f:1b:5f:55:dd:80:10:e0:2f:e0:86:6b:40:82:bf:ed:b8:e2: 31:30:e5:04:c0:51:09:24:ec:55:da:c2:43:cd:27:c9:11:f8: 30:8e:48:96:b5:99:8a:66:0c:c8:1d:b5:a3:fd:cb:1d:d3:cb: 2c:e4:03:49:65:a1:b2:24:de:5e:70:f0:8b:1e:d7:04:06:26: ff:7c:bc:fe:e9:db:f3:68:c2:f4:58:0c:14:a3:37:10:2e:3b: ed:13:0f:f6:0b:a7:ad:51:55:09:cf:cf:c5:02:e7:72:b2:5a: 56:eb:33:af:66:c9:b7:f0:c7:e9:ef:ab:62:c8:b6:d8:52:11: ae:9e:5f:8f:4c:42:77:13:d7:e3:a9:74:62:02:fb:98:70:a6: 92:6d:d0:f7:fc:ee:5a:4e:15:55:57:80:06:62:7c:5d:fb:69: 37:a4:39:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dVhC2gorhPIMQvvB9vAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3 NzdmMDYwHhcNMjYwMTI1MTQwMTA2WhcNMjYwMTI2MTQwMTA2WjAzMTEwLwYDVQQD EyhhZThiYjJhZjUwMzQxNmQ1ZmI2NmQ2Njk3YjFlNTA0ZGU5OTNmNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/pBdH3UYwK12+9cmw252jJJfCHL 9Tau6+F7KpIBtcVvAOggtRgCGCplBpYTx1SYHzbH/0KPK8MvWcWDPHyykEAvk3jR dMlY0d+w6eYJ1qfLCBYMdxSscKiut32Fs9YwspPmhoRxan7D6vxwTytvBbqWbSm5 FIxzOqt+s3/KfcAKeOIsqs3tA1OChbZGVsfPWhOvJW/XBxlIwG1mUNPBCNTU6ffW ctVUXAROqxHFq1LIv4HdS4NRluF9JmXl58eyyyvV0xhgYAD+WTW2w17n76uJ+xMq ynAiAtUly4A1DZHhyuPeyJG966SCrftKTfI9fXLqgywRsO2gQcjnPROYHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6Lsq9QNBbV+2bWaXseUE3pk/T4MB8GA1UdIwQY MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4 LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXzFYh+W IzYeMOdGrR5f7QUD0b04BEMqsEHIVSjps9D1yU1IdJ4uuXu38Q7pgc9tHduKr499 LROkMbu3oj3lkjZa4maJcD9ANDkPcWTIRPwJO8A4L7Fc3BiDjxtfVd2AEOAv4IZr QIK/7bjiMTDlBMBRCSTsVdrCQ80nyRH4MI5IlrWZimYMyB21o/3LHdPLLOQDSWWh siTeXnDwix7XBAYm/3y8/unb82jC9FgMFKM3EC477RMP9gunrVFVCc/PxQLncrJa Vuszr2bJt/DH6e+rYsi22FIRrp5fj0xCdxPX46l0YgL7mHCmkm3Q9/zuWk4VVVeA BmJ8XftpN6Q5SQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:45 2026 by rpki-client