This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json) Hash identifier: VCVurypGu+ja0cfb9u0wt0GIcGXEToK+30ECElK6xEU= Subject key identifier: 50:B9:D6:E3:9D:61:33:C9:EE:30:FE:96:F4:C1:26:D6:28:0C:F7:58 Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Certificate serial: 019BF8AD5DF98A620BA056210D10974657AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft Manifest number: 90 Signing time: Mon 26 Jan 2026 05:01:09 +0000 Manifest this update: Mon 26 Jan 2026 05:01:09 +0000 Manifest next update: Tue 27 Jan 2026 05:01:09 +0000 Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=) 2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: QL1uvdR0Ezs9iBXix1tDfq1y2EntthtolUEWBLf9+ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:5d:f9:8a:62:0b:a0:56:21:0d:10:97:46:57:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Validity Not Before: Jan 26 05:01:09 2026 GMT Not After : Jan 27 05:01:09 2026 GMT Subject: CN=50b9d6e39d6133c9ee30fe96f4c126d6280cf758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:8f:8a:12:d2:84:71:bc:43:4e:58:ce:c3: 39:20:18:0e:cb:31:c2:70:72:f3:db:14:ca:08:17: cf:2d:9a:bd:08:48:7c:99:44:91:de:14:14:20:56: 6f:87:0d:a9:31:18:b2:2e:64:2d:43:25:88:e0:0b: 1c:6d:b1:7e:e5:50:51:d9:16:97:26:f1:85:01:ad: 95:5e:18:ac:ac:3c:30:00:ae:de:1c:cf:0b:70:af: e4:d4:34:0e:c3:78:43:1b:54:a6:0e:bf:e6:b5:c2: 76:0f:46:2f:79:40:83:b9:17:d8:5d:63:0f:f6:ae: 3b:93:9e:f6:1e:36:6e:70:89:8f:9a:a5:1f:56:81: 0a:51:ed:5e:b0:33:2f:e7:59:40:26:32:8b:12:8a: 0e:0f:b2:f3:f1:df:9d:c4:2f:e8:b4:47:97:fc:a2: 09:a4:b5:2e:37:71:8f:b3:57:a3:65:a6:b4:4d:5d: 1f:1b:ce:1e:ae:70:d1:d6:64:06:94:2b:04:32:29: 71:20:ee:f9:da:d5:15:99:69:35:c3:7b:fd:78:00: be:8d:3a:93:f1:97:9c:3a:98:11:03:d5:e4:f7:5a: e3:d3:5d:90:2e:d7:71:29:d1:dc:5f:c9:fc:e6:3b: 2b:10:a6:c8:cc:9c:e7:df:96:21:44:09:22:4b:57: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B9:D6:E3:9D:61:33:C9:EE:30:FE:96:F4:C1:26:D6:28:0C:F7:58 X509v3 Authority Key Identifier: keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:80:ab:df:a4:98:d7:8b:82:c7:bd:a3:be:7a:17:fc:1e:c4: fa:0b:5f:e2:72:1b:03:e2:8a:00:49:c3:c5:cf:ce:74:56:b3: b5:26:33:ff:a1:3c:e0:88:54:d2:15:0a:f2:8e:c8:95:3a:a5: bc:92:1d:c5:03:47:61:62:d7:c1:54:df:ed:fb:28:bf:41:ab: c5:cb:0c:9d:c4:8e:fb:ba:8d:04:ae:62:a3:25:1b:40:2a:dc: f7:25:b2:66:df:50:be:59:15:f2:a9:e6:77:f8:ac:2c:c6:79: 89:75:bf:0e:6f:f5:7c:de:44:17:d2:c3:17:f0:58:96:1a:25: 48:a0:cc:44:94:7c:48:8c:4c:8d:91:e0:66:10:a6:db:0f:c7: de:ab:65:3f:91:60:63:c1:8f:83:ad:b4:06:95:07:25:06:6f: e2:15:23:b5:1b:13:76:35:f7:c4:04:a0:0a:06:c9:55:05:f4: 84:fd:e1:24:dc:c3:45:58:da:18:c6:84:64:2e:09:99:f4:e6: e5:5b:9b:62:7b:8f:78:c7:8a:a7:92:05:35:ab:9e:0b:fb:a3: 3c:d4:06:47:a2:6b:eb:a5:69:5f:9c:61:63:da:85:1e:48:8d: 99:0a:7f:42:d3:96:31:1c:be:55:ba:09:75:e3:46:1f:38:88: f1:de:52:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rV35imILoFYhDRCXRleqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjUzMmUyOWYyMmZhMjMxZGM2ZmM4ZTUzMGVmYjFjNzYx MTllMGEwHhcNMjYwMTI2MDUwMTA5WhcNMjYwMTI3MDUwMTA5WjAzMTEwLwYDVQQD Eyg1MGI5ZDZlMzlkNjEzM2M5ZWUzMGZlOTZmNGMxMjZkNjI4MGNmNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o2PihLShHG8Q05YzsM5IBgOyzHC cHLz2xTKCBfPLZq9CEh8mUSR3hQUIFZvhw2pMRiyLmQtQyWI4AscbbF+5VBR2RaX JvGFAa2VXhisrDwwAK7eHM8LcK/k1DQOw3hDG1SmDr/mtcJ2D0YveUCDuRfYXWMP 9q47k572HjZucImPmqUfVoEKUe1esDMv51lAJjKLEooOD7Lz8d+dxC/otEeX/KIJ pLUuN3GPs1ejZaa0TV0fG84ernDR1mQGlCsEMilxIO752tUVmWk1w3v9eAC+jTqT 8ZecOpgRA9Xk91rj012QLtdxKdHcX8n85jsrEKbIzJzn35YhRAkiS1dkCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC51uOdYTPJ7jD+lvTBJtYoDPdYMB8GA1UdIwQY MBaAFLElMuKfIvojHcb8jlMO+xx2EZ4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2Qt OTMzZWZiZDc3ZjViLzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2QtOTMzZWZiZDc3ZjVi LzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADICr36SY 14uCx72jvnoX/B7E+gtf4nIbA+KKAEnDxc/OdFaztSYz/6E84IhU0hUK8o7IlTql vJIdxQNHYWLXwVTf7fsov0GrxcsMncSO+7qNBK5ioyUbQCrc9yWyZt9QvlkV8qnm d/isLMZ5iXW/Dm/1fN5EF9LDF/BYlholSKDMRJR8SIxMjZHgZhCm2w/H3qtlP5Fg Y8GPg620BpUHJQZv4hUjtRsTdjX3xASgCgbJVQX0hP3hJNzDRVjaGMaEZC4JmfTm 5VubYnuPeMeKp5IFNaueC/ujPNQGR6Jr66VpX5xhY9qFHkiNmQp/QtOWMRy+VboJ deNGHziI8d5SIw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:17 2026 by rpki-client