This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft File: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json) Hash identifier: 0o7xNlaLL7+ukAIo3tBYOZwBMarsUvR80OpFzthzozc= Subject key identifier: CD:9C:5C:87:57:23:C9:D3:AE:94:88:94:04:28:F4:5C:36:C3:69:AA Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Certificate serial: 019BF350429E0A7E547CA1841FE6F7AD1F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft Manifest number: 14AC Signing time: Sun 25 Jan 2026 04:01:21 +0000 Manifest this update: Sun 25 Jan 2026 04:01:21 +0000 Manifest next update: Mon 26 Jan 2026 04:01:21 +0000 Files and hashes: 1: 1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa (hash: t/bF8BVKmcIucBirQ4iHEKuh8d9LX26p0NPMDv8nEak=) 2: 6PInJ2tbRTip0fDT1jftw8w7R7I.roa (hash: JDGvPisnEK8vyfb4vuVlQuoioDUHeR2I2cF0Dy3S3VU=) 3: B3ZEk8Cap2g9KplZIsoRlruoyZE.roa (hash: g43dat6xdrbXP10ocqQ6N9VTX+6RhA4yXEtNgHAbATA=) 4: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: Tn89tiiiJootTggmD1bRgiLiLG49LQ2bTW6b+3WPoPQ=) 5: _vHBWd8UR51aS4OOpf8Vs49lK1w.roa (hash: eDkzLR7fSEK8J6Dl04uTvK6gFwxYRepxRhbDEW8FzQM=) 6: hxyFg93cyoODusD3h3L8hfc5HG0.roa (hash: BPNhbAxVULf2vc9aGDatTvAGnPVmpDD0d77IZ2F/Ui8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:42:9e:0a:7e:54:7c:a1:84:1f:e6:f7:ad:1f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Validity Not Before: Jan 25 04:01:21 2026 GMT Not After : Jan 26 04:01:21 2026 GMT Subject: CN=cd9c5c875723c9d3ae9488940428f45c36c369aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:2a:81:38:bd:50:a4:0e:b8:73:e8:8d:3c: fb:bf:62:a4:2c:5a:98:70:90:f4:d9:53:2e:fb:9d: 54:e9:59:fa:61:13:1c:10:32:7c:0d:e9:68:95:7a: 96:fd:62:54:0a:2f:e3:ed:18:e6:93:28:4b:0a:26: 43:10:47:df:d9:74:70:e5:17:34:60:39:49:48:17: 66:9a:dc:d1:8e:21:3f:49:d2:9d:7f:62:0c:ea:5e: a7:40:fa:35:42:b7:c1:74:eb:2c:28:16:45:6f:a4: 45:92:50:1c:63:6e:b5:5e:9f:86:b8:aa:dc:c5:0e: 18:dd:db:ea:a0:bf:bd:ad:8a:72:13:67:ef:e5:59: 8a:11:c2:57:46:69:b8:18:e6:37:fc:b6:2d:3b:e6: df:ba:2f:b7:d1:5e:03:6f:1a:c7:2f:e9:6d:d9:30: 5a:5b:3e:b4:d4:89:f0:fe:35:87:17:f7:c1:fc:18: 11:77:be:19:94:e5:7e:7f:fc:b4:21:49:6e:ec:10: 77:a4:d1:09:2e:5a:61:99:f6:ed:d4:c1:78:9e:37: 24:d2:d9:ea:6f:5e:76:d0:8c:ae:c4:ab:f0:3a:9a: ab:66:06:12:dc:5d:2d:76:b6:48:77:03:67:64:c2: c1:ba:fc:e7:89:1c:7f:42:a4:e8:5c:28:8f:ab:57: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:5C:87:57:23:C9:D3:AE:94:88:94:04:28:F4:5C:36:C3:69:AA X509v3 Authority Key Identifier: keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:dc:e0:67:78:0e:30:d6:41:06:d4:f8:43:b8:92:7e:1e:5c: 1d:83:c4:9e:d4:2e:9c:96:63:e1:e3:58:92:df:07:94:ff:53: 9b:52:23:52:7b:a1:66:31:3b:b6:a5:62:68:84:d4:80:0b:d4: 68:dc:33:76:66:9d:39:2a:10:0a:36:b5:79:f7:7c:d2:00:eb: 27:3d:99:a8:2d:a7:b0:79:42:32:25:48:35:a1:66:b7:a9:37: 66:31:bb:f8:e0:46:f7:9e:f1:d1:d7:42:20:ff:a2:3a:a3:f0: 4d:ae:25:f5:b4:d6:6a:45:55:a3:a2:6b:10:a3:4a:9b:87:b6: 5d:14:4c:e2:8e:ca:90:b7:97:69:e7:8d:34:6c:5f:e0:96:6c: d4:45:2a:d5:90:e7:09:e7:95:4d:ab:22:05:5c:96:18:b8:35: 48:8f:4b:43:e5:cd:c1:8a:1d:70:c1:61:f8:6e:ce:a7:7e:7e: fc:a6:44:b6:7b:23:11:f1:25:8e:b7:5d:20:4f:ef:9f:db:4e: 39:b5:5f:23:b6:cd:9d:69:79:12:94:a8:be:26:48:25:1d:65: bc:1a:13:ee:bd:96:26:0d:71:c2:03:ef:7f:41:77:5e:ec:54: 62:57:39:06:2e:42:8f:ac:a0:e3:49:9b:e5:3e:89:b0:47:10: d6:04:37:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUEKeCn5UfKGEH+b3rR+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2 YWYxN2EwHhcNMjYwMTI1MDQwMTIxWhcNMjYwMTI2MDQwMTIxWjAzMTEwLwYDVQQD EyhjZDljNWM4NzU3MjNjOWQzYWU5NDg4OTQwNDI4ZjQ1YzM2YzM2OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl8qgTi9UKQOuHPojTz7v2KkLFqY cJD02VMu+51U6Vn6YRMcEDJ8DelolXqW/WJUCi/j7RjmkyhLCiZDEEff2XRw5Rc0 YDlJSBdmmtzRjiE/SdKdf2IM6l6nQPo1QrfBdOssKBZFb6RFklAcY261Xp+GuKrc xQ4Y3dvqoL+9rYpyE2fv5VmKEcJXRmm4GOY3/LYtO+bfui+30V4DbxrHL+lt2TBa Wz601Inw/jWHF/fB/BgRd74ZlOV+f/y0IUlu7BB3pNEJLlphmfbt1MF4njck0tnq b1520IyuxKvwOpqrZgYS3F0tdrZIdwNnZMLBuvzniRx/QqToXCiPq1dSwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2cXIdXI8nTrpSIlAQo9Fw2w2mqMB8GA1UdIwQY MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt N2JmODI3N2Q4YTJmLzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYtN2JmODI3N2Q4YTJm LzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtzgZ3gO MNZBBtT4Q7iSfh5cHYPEntQunJZj4eNYkt8HlP9Tm1IjUnuhZjE7tqViaITUgAvU aNwzdmadOSoQCja1efd80gDrJz2ZqC2nsHlCMiVINaFmt6k3ZjG7+OBG957x0ddC IP+iOqPwTa4l9bTWakVVo6JrEKNKm4e2XRRM4o7KkLeXaeeNNGxf4JZs1EUq1ZDn CeeVTasiBVyWGLg1SI9LQ+XNwYodcMFh+G7Op35+/KZEtnsjEfEljrddIE/vn9tO ObVfI7bNnWl5EpSoviZIJR1lvBoT7r2WJg1xwgPvf0F3XuxUYlc5Bi5Cj6yg40mb 5T6JsEcQ1gQ3Fg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:34 2026 by rpki-client