This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json) Hash identifier: 4CZAPP2mxeNlyIFcJD5ObHzJzLMqc9JR70KanBs8iDM= Subject key identifier: 8E:BA:A1:57:7A:10:94:EF:B7:25:66:42:B6:0A:83:CF:7A:0D:85:3B Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Certificate serial: 019BF6BF026FC091314668A8158E5E236711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft Manifest number: 10E2 Signing time: Sun 25 Jan 2026 20:01:11 +0000 Manifest this update: Sun 25 Jan 2026 20:01:11 +0000 Manifest next update: Mon 26 Jan 2026 20:01:11 +0000 Files and hashes: 1: NIVw741XEPPSN6oP0Msosmkxzog.roa (hash: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI=) 2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: WAn9aRUuDA7AExhteiQ3+x2mv9Mpbb8dUBiXES6SnU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:02:6f:c0:91:31:46:68:a8:15:8e:5e:23:67:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Validity Not Before: Jan 25 20:01:11 2026 GMT Not After : Jan 26 20:01:11 2026 GMT Subject: CN=8ebaa1577a1094efb7256642b60a83cf7a0d853b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:bf:98:47:6b:4e:7b:9d:0b:37:1a:4f:1d: a5:8b:5e:9e:5b:7c:d0:9c:af:fa:9d:ae:e6:6e:61: 32:74:db:4b:36:85:25:7f:3d:61:65:55:13:91:ef: fe:00:8e:4d:61:0d:a5:c3:3d:bb:9d:13:cb:d6:e7: d0:85:dc:c1:94:6c:46:5d:d3:73:9c:7d:4b:2f:91: 2e:a6:c7:ca:e7:ce:bf:d6:31:e8:19:59:99:28:fb: 86:64:a0:3a:67:9e:bb:45:f8:68:66:b8:b9:94:67: 9e:6d:54:f9:b4:f9:20:7b:9d:e1:87:f7:0b:b4:6c: 69:13:76:b8:cd:e7:80:5e:4c:2c:01:e8:c7:f4:f2: 6e:60:f0:8d:f8:43:48:5a:52:a8:d4:bc:9b:fd:85: 68:ef:f3:3b:3f:2d:8d:57:ff:e1:28:c8:e3:d6:0e: f0:13:9b:1c:c7:e4:5d:c1:17:d9:7b:16:15:19:d8: 48:38:03:c1:00:63:54:9f:90:dd:9b:f7:17:4a:3e: 76:16:49:ee:76:88:69:05:d8:ce:de:94:42:60:42: 02:5a:47:fc:57:e1:ad:de:92:6f:89:1b:c7:d8:e6: d6:21:67:11:e3:e0:b1:e9:49:79:e5:4a:45:85:32: 17:48:fe:2c:dd:89:28:62:d5:4b:3e:22:a2:d7:df: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BA:A1:57:7A:10:94:EF:B7:25:66:42:B6:0A:83:CF:7A:0D:85:3B X509v3 Authority Key Identifier: keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d3:ec:f8:c6:1b:1b:ea:eb:60:6f:b8:67:af:ce:79:4a:c1: a5:40:6c:23:72:de:98:d0:ba:39:a3:b2:bd:a7:cc:77:4c:c5: 3e:1f:fd:f0:e4:c5:90:18:ce:f9:c1:ab:51:49:f4:5d:46:b2: a2:35:b9:92:c2:ff:89:20:79:c9:df:66:a3:2a:b3:99:6b:59: 00:ca:dd:11:e3:f5:f2:0a:34:55:3a:bb:16:df:dc:90:e9:a3: 64:cd:f9:3b:ea:d5:01:d8:15:d7:0e:31:ad:aa:a0:65:42:99: 49:4d:16:74:0b:82:60:d0:9d:40:f0:f5:21:9f:f1:83:51:9b: 44:f9:51:05:f3:a7:98:ed:4c:a9:6d:c6:e4:d7:66:6e:c6:05: f8:51:c9:ee:a5:43:47:02:47:25:45:42:35:7e:37:f2:13:0d: f5:18:5b:9c:45:d4:ef:20:af:ff:7e:2a:67:1b:1f:31:a3:73: 0e:8a:bf:fa:f0:91:98:eb:9b:c2:80:99:72:a6:46:d8:b4:1d: af:79:33:1e:5e:6a:a1:c7:a5:53:39:88:88:18:6a:21:ca:35: f5:7a:61:8d:7f:9d:e9:50:a2:ba:49:f7:c7:16:3e:b2:44:22: 45:1b:3b:e4:cf:02:bc:eb:ec:8c:7e:bb:c2:1c:37:f5:2e:89: 03:09:e7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vwJvwJExRmioFY5eI2cRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTQ2OTNiMWRjY2M0OWVlNjYwNWE3ZDMzOWUxZDg0N2Vm MGFkOGIwHhcNMjYwMTI1MjAwMTExWhcNMjYwMTI2MjAwMTExWjAzMTEwLwYDVQQD Eyg4ZWJhYTE1NzdhMTA5NGVmYjcyNTY2NDJiNjBhODNjZjdhMGQ4NTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn6/mEdrTnudCzcaTx2li16eW3zQ nK/6na7mbmEydNtLNoUlfz1hZVUTke/+AI5NYQ2lwz27nRPL1ufQhdzBlGxGXdNz nH1LL5EupsfK586/1jHoGVmZKPuGZKA6Z567RfhoZri5lGeebVT5tPkge53hh/cL tGxpE3a4zeeAXkwsAejH9PJuYPCN+ENIWlKo1Lyb/YVo7/M7Py2NV//hKMjj1g7w E5scx+RdwRfZexYVGdhIOAPBAGNUn5Ddm/cXSj52FknudohpBdjO3pRCYEICWkf8 V+Gt3pJviRvH2ObWIWcR4+Cx6Ul55UpFhTIXSP4s3YkoYtVLPiKi198AZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI66oVd6EJTvtyVmQrYKg896DYU7MB8GA1UdIwQY MBaAFEikaTsdzMSe5mBafTOeHYR+8K2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4Yjct YmUzYmI2Y2QyZDUxLzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4YjctYmUzYmI2Y2QyZDUx LzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9Ps+MYb G+rrYG+4Z6/OeUrBpUBsI3LemNC6OaOyvafMd0zFPh/98OTFkBjO+cGrUUn0XUay ojW5ksL/iSB5yd9moyqzmWtZAMrdEeP18go0VTq7Ft/ckOmjZM35O+rVAdgV1w4x raqgZUKZSU0WdAuCYNCdQPD1IZ/xg1GbRPlRBfOnmO1MqW3G5NdmbsYF+FHJ7qVD RwJHJUVCNX438hMN9RhbnEXU7yCv/34qZxsfMaNzDoq/+vCRmOubwoCZcqZG2LQd r3kzHl5qocelUzmIiBhqIco19XphjX+d6VCiukn3xxY+skQiRRs75M8CvOvsjH67 whw39S6JAwnnmA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:17 2026 by rpki-client