This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json) Hash identifier: uR+yQvmIjnmh3PN+M939oK9l8lAYTZg2Pvy2/u6kVlo= Subject key identifier: 58:B5:50:1A:DF:65:FF:35:B5:00:43:3F:F4:65:21:B4:16:34:1A:6C Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Certificate serial: 019BF72D6E3058CA550212247CB996038F36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft Manifest number: 074F Signing time: Sun 25 Jan 2026 22:01:48 +0000 Manifest this update: Sun 25 Jan 2026 22:01:48 +0000 Manifest next update: Mon 26 Jan 2026 22:01:48 +0000 Files and hashes: 1: Bwb-B2AczMd4mj6tvI6rlUDbU5E.roa (hash: JFs8H2Nbvm4sp7IfR/fuT3fkxxYTMFvFgH7jK8vIQfA=) 2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: LUMm/aWJcpJjRbgYhr5hm1xpKbCQ7Bb9VB2WB3xFQkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:6e:30:58:ca:55:02:12:24:7c:b9:96:03:8f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Validity Not Before: Jan 25 22:01:48 2026 GMT Not After : Jan 26 22:01:48 2026 GMT Subject: CN=58b5501adf65ff35b500433ff46521b416341a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:a9:9d:94:d4:bc:b9:2d:f6:97:c7:a4:97: 01:0c:2f:75:11:cb:dc:0c:b1:bd:67:7a:f7:90:78: 8b:67:e4:89:38:3f:b3:1d:03:f7:ef:c1:02:36:a4: 6e:8a:59:f1:05:08:f3:d8:c3:b2:8e:89:1b:dc:fa: b9:42:35:8f:80:f9:53:7d:67:ea:c6:96:14:08:f0: 82:3f:89:5b:35:0c:2d:5d:75:a8:96:fe:b2:c5:79: 51:e8:c2:7f:51:cd:e1:e1:b1:e8:b1:ec:ef:67:a5: 0d:f1:60:f2:1c:27:e3:24:b4:28:0e:f5:65:2c:9b: 18:13:3b:7b:5d:af:b5:1e:c0:bc:b7:c5:5d:a6:03: 53:a7:fc:57:1d:a1:2c:80:c5:5c:73:8f:52:66:06: bf:0c:4a:5a:46:e9:75:1d:2d:fd:ba:09:20:cf:a8: 7f:44:d8:f4:ed:71:d6:56:d8:b7:c4:19:82:21:91: 13:83:5c:82:a7:0f:0d:91:6c:09:dd:cf:eb:93:b2: bb:45:ec:58:dc:15:04:65:62:af:ab:25:87:b0:56: ea:c2:77:5c:d3:66:e0:5c:1d:ce:57:72:13:e0:55: a1:ec:56:d1:51:a0:da:5d:e3:48:ac:0e:30:de:b1: c1:07:16:36:3f:55:5d:96:5b:c6:38:b7:87:77:b4: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B5:50:1A:DF:65:FF:35:B5:00:43:3F:F4:65:21:B4:16:34:1A:6C X509v3 Authority Key Identifier: keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ee:f1:4c:08:8e:a7:15:2f:6e:90:40:3d:c6:da:10:b7:29: e3:74:59:bc:9b:17:fb:03:7d:1e:43:a4:45:3c:75:20:ef:74: d0:00:5f:6d:b9:a5:cb:27:86:5e:7d:31:bf:ab:9d:cc:f5:51: 77:ea:e5:51:53:7b:41:f8:98:b3:05:02:e1:a7:69:30:b9:ec: 0b:6f:6d:a8:ec:5b:ba:aa:4e:5b:9d:7d:3c:c0:99:b7:ae:d4: 75:41:91:0f:e8:05:d7:6e:9e:80:ab:34:a6:9f:45:8e:87:b0: 3d:f9:a5:84:67:e8:d6:0a:e9:bf:01:93:3a:8b:1d:42:87:71: 3e:f9:dd:2d:20:84:63:88:bd:3f:ab:66:bd:6d:22:25:53:5e: ce:b0:5d:53:8f:0a:ab:9a:59:61:e3:1e:5a:08:71:1e:ee:ba: d6:50:6e:5d:87:4f:c7:9a:7f:1b:c5:7e:48:09:e3:d2:e5:b9: 45:20:cb:ea:8c:93:fd:92:5b:ec:da:ba:e3:bf:a3:8a:f7:86: de:cd:36:96:68:bb:f0:4c:b2:51:b1:42:64:1f:fb:43:54:68: ad:a9:5f:de:ba:d5:02:b3:ec:c4:7b:e0:01:90:78:56:75:66: 9d:5f:c8:6e:27:1e:70:da:bd:91:14:09:8f:68:7e:47:8a:26: 6c:08:3a:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LW4wWMpVAhIkfLmWA482MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj OGM3NmYwHhcNMjYwMTI1MjIwMTQ4WhcNMjYwMTI2MjIwMTQ4WjAzMTEwLwYDVQQD Eyg1OGI1NTAxYWRmNjVmZjM1YjUwMDQzM2ZmNDY1MjFiNDE2MzQxYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nmpnZTUvLkt9pfHpJcBDC91Ecvc DLG9Z3r3kHiLZ+SJOD+zHQP378ECNqRuilnxBQjz2MOyjokb3Pq5QjWPgPlTfWfq xpYUCPCCP4lbNQwtXXWolv6yxXlR6MJ/Uc3h4bHosezvZ6UN8WDyHCfjJLQoDvVl LJsYEzt7Xa+1HsC8t8VdpgNTp/xXHaEsgMVcc49SZga/DEpaRul1HS39ugkgz6h/ RNj07XHWVti3xBmCIZETg1yCpw8NkWwJ3c/rk7K7RexY3BUEZWKvqyWHsFbqwndc 02bgXB3OV3IT4FWh7FbRUaDaXeNIrA4w3rHBBxY2P1VdllvGOLeHd7TppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFi1UBrfZf81tQBDP/RlIbQWNBpsMB8GA1UdIwQY MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2 LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQO7xTAiO pxUvbpBAPcbaELcp43RZvJsX+wN9HkOkRTx1IO900ABfbbmlyyeGXn0xv6udzPVR d+rlUVN7QfiYswUC4adpMLnsC29tqOxbuqpOW519PMCZt67UdUGRD+gF126egKs0 pp9FjoewPfmlhGfo1grpvwGTOosdQodxPvndLSCEY4i9P6tmvW0iJVNezrBdU48K q5pZYeMeWghxHu661lBuXYdPx5p/G8V+SAnj0uW5RSDL6oyT/ZJb7Nq647+jiveG 3s02lmi78EyyUbFCZB/7Q1Roralf3rrVArPsxHvgAZB4VnVmnV/IbicecNq9kRQJ j2h+R4ombAg6Fg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:07:24 2026 by rpki-client