This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json) Hash identifier: YZgqt8TjzTeuHDssvmaHfxYbE3VfWPGKFzcuFe/G/PQ= Subject key identifier: FB:60:87:7E:C5:EE:CC:2F:CB:84:93:F7:92:CD:51:F9:1A:13:3E:9F Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad Certificate serial: 019BF83F1463ED1DD7598ADD035789E627C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft Manifest number: 0795 Signing time: Mon 26 Jan 2026 03:00:42 +0000 Manifest this update: Mon 26 Jan 2026 03:00:42 +0000 Manifest next update: Tue 27 Jan 2026 03:00:42 +0000 Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=) 2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: 11FEP8oYlGj67yH4PS+QHbWepJ4JJqJl3LOeYaUluPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:14:63:ed:1d:d7:59:8a:dd:03:57:89:e6:27:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad Validity Not Before: Jan 26 03:00:42 2026 GMT Not After : Jan 27 03:00:42 2026 GMT Subject: CN=fb60877ec5eecc2fcb8493f792cd51f91a133e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:bd:59:f8:e8:6c:b2:f1:c2:e0:91:17:5d: 87:5b:2c:f0:72:89:05:9b:49:7d:4b:e8:e9:ba:ff: 2b:7e:db:81:68:38:a0:86:7e:05:94:f3:c6:7d:c0: df:ce:56:7b:fb:7a:95:35:29:2d:75:f6:a2:10:7b: c3:14:c7:a4:e8:43:9e:92:61:9f:10:53:cf:28:14: 3e:c6:0f:f6:0d:c7:9c:ba:d2:8b:41:66:b2:5d:08: 1f:cd:5b:61:4f:38:25:d6:c5:34:54:fd:78:28:9e: f7:81:7f:49:d7:a6:e4:b5:8e:e8:29:02:06:2e:f2: 5c:32:e6:89:37:9e:53:ce:62:b5:61:0f:68:3b:c0: 1b:2c:cb:87:32:6f:d5:d3:3d:6a:58:1b:df:08:72: c2:a3:6f:99:08:0e:2b:b7:30:6c:67:88:10:d8:03: d5:34:e4:b0:f5:5a:71:9c:46:c2:b2:59:74:37:7e: 5d:18:62:d0:f8:3e:a5:33:0b:98:04:7a:dd:f7:88: 3f:e0:13:46:ca:fd:98:0b:f1:87:ac:6b:99:68:ff: 7c:70:02:ac:1d:3f:d8:e8:db:60:44:de:63:1c:77: a4:f4:01:d4:e4:24:e3:31:7d:f4:06:59:12:66:54: 00:1d:df:f6:f3:ab:51:58:16:7f:f4:11:89:ee:cb: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:60:87:7E:C5:EE:CC:2F:CB:84:93:F7:92:CD:51:F9:1A:13:3E:9F X509v3 Authority Key Identifier: keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b0:b2:e9:b4:f5:de:e2:90:07:5d:a5:3d:7f:8d:eb:63:f8: 36:86:81:12:15:bf:b2:40:d0:e8:e1:3c:5d:0f:6a:da:21:33: c3:94:3c:c2:c7:a5:82:cd:07:db:60:91:e2:46:0d:6a:e7:03: d7:c4:e3:d0:c9:07:2c:d4:c8:cd:ce:06:61:31:26:0f:0c:e9: bd:33:e1:48:32:9f:43:2a:5f:dd:f8:d1:22:2c:3d:36:eb:9f: 30:ef:fb:67:7f:57:fd:08:df:86:f7:3f:e9:ad:47:28:78:aa: 08:00:dd:b9:b8:28:3d:10:f9:14:f1:2a:3e:4d:fd:bc:b6:be: 7a:4e:2c:19:b6:69:9a:77:02:fc:b2:04:e1:fd:70:3a:3e:01: dd:d2:9d:f7:e6:ec:51:74:ec:a5:58:38:53:60:56:28:d7:dc: 1f:10:78:9a:06:c9:4f:9f:67:5c:dc:40:fd:a2:6f:39:84:aa: 3b:4d:37:33:69:c2:e5:c2:6a:a6:ce:17:88:3d:54:df:01:fb: 96:d8:4d:62:b6:50:44:0f:92:88:91:1a:3f:02:15:ea:0a:dd: 0a:39:e7:c8:2c:88:df:aa:e7:83:79:10:86:08:f0:d6:d5:3a: 9d:da:7a:8b:1a:3d:f7:33:7b:b9:12:81:56:62:9f:62:2e:d5: 96:11:2f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PxRj7R3XWYrdA1eJ5ifIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2IxMjA0NWIxYWYwOWFjZjk2NjJlZTM1YmEyY2Q3ZTFj ODViYWQwHhcNMjYwMTI2MDMwMDQyWhcNMjYwMTI3MDMwMDQyWjAzMTEwLwYDVQQD EyhmYjYwODc3ZWM1ZWVjYzJmY2I4NDkzZjc5MmNkNTFmOTFhMTMzZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTW9WfjobLLxwuCRF12HWyzwcokF m0l9S+jpuv8rftuBaDighn4FlPPGfcDfzlZ7+3qVNSktdfaiEHvDFMek6EOekmGf EFPPKBQ+xg/2DcecutKLQWayXQgfzVthTzgl1sU0VP14KJ73gX9J16bktY7oKQIG LvJcMuaJN55TzmK1YQ9oO8AbLMuHMm/V0z1qWBvfCHLCo2+ZCA4rtzBsZ4gQ2APV NOSw9VpxnEbCsll0N35dGGLQ+D6lMwuYBHrd94g/4BNGyv2YC/GHrGuZaP98cAKs HT/Y6NtgRN5jHHek9AHU5CTjMX30BlkSZlQAHd/286tRWBZ/9BGJ7sthrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtgh37F7swvy4ST95LNUfkaEz6fMB8GA1UdIwQY MBaAFGt7EgRbGvCaz5Zi7jW6LNfhyFutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjkt MTg0MDFkYTQzNTYzLzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjktMTg0MDFkYTQzNTYz LzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7Cy6bT1 3uKQB12lPX+N62P4NoaBEhW/skDQ6OE8XQ9q2iEzw5Q8wselgs0H22CR4kYNaucD 18Tj0MkHLNTIzc4GYTEmDwzpvTPhSDKfQypf3fjRIiw9NuufMO/7Z39X/Qjfhvc/ 6a1HKHiqCADdubgoPRD5FPEqPk39vLa+ek4sGbZpmncC/LIE4f1wOj4B3dKd9+bs UXTspVg4U2BWKNfcHxB4mgbJT59nXNxA/aJvOYSqO003M2nC5cJqps4XiD1U3wH7 lthNYrZQRA+SiJEaPwIV6grdCjnnyCyI36rng3kQhgjw1tU6ndp6ixo99zN7uRKB VmKfYi7VlhEv1w== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:41 2026 by rpki-client