This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json) Hash identifier: mnC2KMJmwFPhBjAhO0OMlqgfr3msy9/G1vhtPRMPxek= Subject key identifier: 56:B5:28:73:A8:D5:F4:1D:2D:D0:B4:95:D8:24:70:5B:75:80:19:96 Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f Certificate serial: 019BF5ABD75B1046629C39C1F66266343E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft Manifest number: 0B95 Signing time: Sun 25 Jan 2026 15:00:38 +0000 Manifest this update: Sun 25 Jan 2026 15:00:38 +0000 Manifest next update: Mon 26 Jan 2026 15:00:38 +0000 Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=) 2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=) 3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=) 4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=) 5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: 6yj1P/ZGbdpUKazQC7v/A/5TwE48dASbe24eOAwmrwc=) 6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=) 7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=) 8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:d7:5b:10:46:62:9c:39:c1:f6:62:66:34:3e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f Validity Not Before: Jan 25 15:00:38 2026 GMT Not After : Jan 26 15:00:38 2026 GMT Subject: CN=56b52873a8d5f41d2dd0b495d824705b75801996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:72:25:80:ae:e6:d2:8a:94:d6:ac:a5:d8: b0:55:5e:a2:17:ff:98:1d:2c:dd:7e:02:71:c7:ee: 87:3a:fa:ab:62:d4:ec:ff:42:1f:67:6a:f2:cf:70: e7:82:7e:5c:e0:28:64:ab:f7:3b:00:0e:14:77:d1: 49:54:0a:53:51:60:e1:8e:91:fa:b9:40:b7:64:d7: 6f:c2:da:10:b8:22:00:da:cb:e2:f8:bc:42:19:45: 8f:dd:ef:27:d0:09:a9:32:bd:d1:40:49:a1:ff:a4: cb:65:9d:86:d4:a1:4b:0f:22:c0:69:ca:af:44:17: cc:98:42:97:93:0f:3d:3d:74:bb:4f:e8:af:09:1a: 37:29:84:5e:ae:d4:d0:9c:fc:76:e0:58:95:c2:84: bc:5a:be:08:dd:de:e0:e3:e7:1e:23:9e:08:e7:53: db:9a:aa:f1:70:2d:d3:80:08:63:44:6d:5f:bc:34: 63:64:0e:9c:d0:be:6e:81:42:30:39:5d:7a:e3:95: 59:2f:d3:77:a3:24:ad:78:ff:a6:8b:1e:7c:7f:f7: 99:04:95:e6:79:85:d9:3b:94:dd:f5:9a:f8:ac:e2: 2c:65:b7:1f:56:6e:78:7b:f4:e5:8c:a5:b5:34:ed: 5a:f7:42:84:17:68:9d:e9:8e:0e:b3:b2:5e:a2:58: b0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:28:73:A8:D5:F4:1D:2D:D0:B4:95:D8:24:70:5B:75:80:19:96 X509v3 Authority Key Identifier: keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ec:cd:f6:0a:08:ce:e4:f4:52:c7:18:3b:34:50:45:1a:65: 2a:6b:fb:96:79:9c:7d:ee:81:a5:34:20:0c:e9:73:22:dd:f1: 70:ed:d3:42:4d:61:31:a5:bd:aa:64:b0:6e:fc:e6:49:0a:f8: 35:12:0d:a0:5a:0b:3b:13:a2:f2:1f:b0:3d:d6:db:07:db:40: cc:4a:fd:01:09:71:95:f5:92:67:44:1f:c1:d4:ea:2d:87:ea: 2f:bf:3f:c4:43:48:46:6e:97:09:db:ca:90:28:1c:49:de:0f: 12:7e:53:72:31:30:67:e8:10:01:62:e8:4f:1c:af:af:08:64: 4e:f2:71:e2:cd:dd:a6:8a:76:d0:f9:32:d4:c3:72:1a:44:8e: 5c:85:aa:15:2b:8b:b7:b6:68:99:e8:a1:cb:bb:87:d7:5c:c4: 80:b7:ca:37:64:51:06:2b:ae:2d:4a:c6:61:99:09:8b:3c:8a: 25:c9:74:9a:ba:6b:fc:f4:e9:83:50:77:8b:12:cf:d6:02:1e: cd:ff:46:ad:c7:8d:b4:93:ed:0f:79:94:9f:60:60:8a:af:d3: c6:51:87:9c:3f:9a:6f:15:0e:d7:26:2b:68:f1:1a:25:26:29: 04:40:b8:88:c6:2b:80:aa:02:37:81:2c:17:a6:f5:1c:0e:7f: 0d:e5:c1:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q9dbEEZinDnB9mJmND42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm ZTAzMWYwHhcNMjYwMTI1MTUwMDM4WhcNMjYwMTI2MTUwMDM4WjAzMTEwLwYDVQQD Eyg1NmI1Mjg3M2E4ZDVmNDFkMmRkMGI0OTVkODI0NzA1Yjc1ODAxOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxVyJYCu5tKKlNaspdiwVV6iF/+Y HSzdfgJxx+6HOvqrYtTs/0IfZ2ryz3Dngn5c4Chkq/c7AA4Ud9FJVApTUWDhjpH6 uUC3ZNdvwtoQuCIA2svi+LxCGUWP3e8n0AmpMr3RQEmh/6TLZZ2G1KFLDyLAacqv RBfMmEKXkw89PXS7T+ivCRo3KYRertTQnPx24FiVwoS8Wr4I3d7g4+ceI54I51Pb mqrxcC3TgAhjRG1fvDRjZA6c0L5ugUIwOV1645VZL9N3oySteP+mix58f/eZBJXm eYXZO5Td9Zr4rOIsZbcfVm54e/TljKW1NO1a90KEF2id6Y4Os7Jeoliw9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa1KHOo1fQdLdC0ldgkcFt1gBmWMB8GA1UdIwQY MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt ZDE4YmFiOTUxNWJmLzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+zN9goI zuT0UscYOzRQRRplKmv7lnmcfe6BpTQgDOlzIt3xcO3TQk1hMaW9qmSwbvzmSQr4 NRINoFoLOxOi8h+wPdbbB9tAzEr9AQlxlfWSZ0QfwdTqLYfqL78/xENIRm6XCdvK kCgcSd4PEn5TcjEwZ+gQAWLoTxyvrwhkTvJx4s3dpop20Pky1MNyGkSOXIWqFSuL t7Zomeihy7uH11zEgLfKN2RRBiuuLUrGYZkJizyKJcl0mrpr/PTpg1B3ixLP1gIe zf9GrceNtJPtD3mUn2Bgiq/TxlGHnD+abxUO1yYraPEaJSYpBEC4iMYrgKoCN4Es F6b1HA5/DeXBzQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:39 2026 by rpki-client