This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json) Hash identifier: j9/U03IJwmXAJ9KF5IlcRCbStVRtEw7E03zpRTUFTF0= Subject key identifier: FC:E0:6E:FA:63:13:DF:7D:79:5E:0C:79:79:95:6A:EF:90:43:23:21 Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Certificate serial: 019BF7D1C451C07851FFFED3C7F56325309A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft Manifest number: 0B28 Signing time: Mon 26 Jan 2026 01:01:18 +0000 Manifest this update: Mon 26 Jan 2026 01:01:18 +0000 Manifest next update: Tue 27 Jan 2026 01:01:18 +0000 Files and hashes: 1: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (hash: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU=) 2: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: xVbVWZOce+XLnsKtvQuWrS4c07n3ZClbuFwCfS10yuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:c4:51:c0:78:51:ff:fe:d3:c7:f5:63:25:30:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Validity Not Before: Jan 26 01:01:18 2026 GMT Not After : Jan 27 01:01:18 2026 GMT Subject: CN=fce06efa6313df7d795e0c7979956aef90432321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:a3:a1:fb:54:60:e8:ba:d6:bd:d3:8a:10: 72:15:b6:2d:32:90:52:c8:6e:c0:13:43:17:8c:ee: 97:6f:be:d5:5c:07:ab:5f:ad:8e:99:8b:b6:37:88: 98:76:a8:18:4e:99:bc:5d:14:b1:7e:31:14:86:9d: e6:90:a9:22:6d:fb:99:32:9a:01:c6:2b:e7:fd:05: 98:db:56:c9:b9:18:75:27:60:e7:26:a4:31:1c:e6: 6e:3e:7d:3e:fc:67:0c:7b:1b:c7:c8:ed:ea:2c:d2: 8c:1d:0a:ae:42:1f:90:3e:ec:b8:39:69:bc:ff:a0: 0a:6f:40:54:7d:fd:80:df:39:e6:0b:91:27:01:04: 15:62:6b:4d:d5:1a:50:03:46:0b:dd:dc:8b:d6:8f: 05:54:7a:72:35:47:f1:70:b6:ff:89:5e:cc:e2:06: be:c8:fd:c6:78:cf:58:cd:92:6a:70:5d:fb:5e:9a: f7:dd:1b:3d:47:73:38:7e:dd:2f:6b:f4:a6:60:49: ad:58:a2:fe:d5:3c:bc:b5:2d:d0:01:83:10:ae:72: 41:df:74:1c:be:c5:96:e9:65:cb:14:0a:cc:3d:20: c1:45:e6:0e:c7:b4:5b:58:89:15:6d:45:3c:8d:13: d8:17:7a:eb:e2:dc:b1:aa:c1:93:92:4b:f1:5e:6a: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E0:6E:FA:63:13:DF:7D:79:5E:0C:79:79:95:6A:EF:90:43:23:21 X509v3 Authority Key Identifier: keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2f:58:3e:d2:ec:23:3f:2b:51:b0:66:a2:32:01:03:e1:23: f0:5c:18:7c:40:38:b4:14:04:60:43:d2:80:35:d7:80:44:fd: d7:8c:f4:05:96:6a:77:23:16:a8:6c:50:29:ea:1a:51:b9:80: 8e:52:c3:08:ce:46:3a:91:db:9d:e1:a7:a2:d9:a1:67:17:1c: 13:2a:f6:78:44:45:b0:18:92:15:0d:b6:e7:71:6f:ee:73:56: 2c:28:63:86:d2:c5:f2:18:53:c9:e4:d9:3c:7a:cf:bd:84:60: 33:e9:c4:e4:63:ba:99:78:9c:51:f7:79:f1:68:1a:85:14:84: 9d:d7:2e:3a:52:72:23:ce:5b:88:3b:3c:73:fc:a8:92:e0:bd: 29:08:53:2a:ee:35:91:d7:9a:f2:62:1c:c7:6e:86:0f:a0:88: cd:92:ee:bf:d0:4d:12:29:3d:ac:63:3e:89:c0:29:7e:67:70: 7a:5f:0a:30:c8:49:ef:3a:eb:22:d1:81:dd:1b:08:82:d0:b7: 25:d9:36:9f:83:4f:65:32:4f:2d:6b:a5:1d:41:ff:d8:0d:d4: 93:2e:1d:bf:c7:b4:ed:83:21:86:c0:96:10:43:68:05:23:cf: 26:5c:8c:52:f8:ac:ff:66:91:bf:5d:8c:14:57:5f:5d:95:68: 01:03:3f:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30cRRwHhR//7Tx/VjJTCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4 YTdjODEwHhcNMjYwMTI2MDEwMTE4WhcNMjYwMTI3MDEwMTE4WjAzMTEwLwYDVQQD EyhmY2UwNmVmYTYzMTNkZjdkNzk1ZTBjNzk3OTk1NmFlZjkwNDMyMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN2joftUYOi61r3TihByFbYtMpBS yG7AE0MXjO6Xb77VXAerX62OmYu2N4iYdqgYTpm8XRSxfjEUhp3mkKkibfuZMpoB xivn/QWY21bJuRh1J2DnJqQxHOZuPn0+/GcMexvHyO3qLNKMHQquQh+QPuy4OWm8 /6AKb0BUff2A3znmC5EnAQQVYmtN1RpQA0YL3dyL1o8FVHpyNUfxcLb/iV7M4ga+ yP3GeM9YzZJqcF37Xpr33Rs9R3M4ft0va/SmYEmtWKL+1Ty8tS3QAYMQrnJB33Qc vsWW6WXLFArMPSDBReYOx7RbWIkVbUU8jRPYF3rr4tyxqsGTkkvxXmqQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzgbvpjE999eV4MeXmVau+QQyMhMB8GA1UdIwQY MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS9YPtLs Iz8rUbBmojIBA+Ej8FwYfEA4tBQEYEPSgDXXgET914z0BZZqdyMWqGxQKeoaUbmA jlLDCM5GOpHbneGnotmhZxccEyr2eERFsBiSFQ2253Fv7nNWLChjhtLF8hhTyeTZ PHrPvYRgM+nE5GO6mXicUfd58WgahRSEndcuOlJyI85biDs8c/yokuC9KQhTKu41 kdea8mIcx26GD6CIzZLuv9BNEik9rGM+icApfmdwel8KMMhJ7zrrItGB3RsIgtC3 Jdk2n4NPZTJPLWulHUH/2A3Uky4dv8e07YMhhsCWEENoBSPPJlyMUvis/2aRv12M FFdfXZVoAQM/qA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:37 2026 by rpki-client