This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json) Hash identifier: yCeIgo26WX99tPjO3u2joGli0Xe/x+d7zpo8GWLnQrc= Subject key identifier: 46:88:D0:1E:5D:D3:8A:2E:A1:82:47:0A:C2:3D:AE:DE:CB:3A:00:99 Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd Certificate serial: 019BFA2DAD7621CACEB4B6C9F9340A54A28F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft Manifest number: 13F7 Signing time: Mon 26 Jan 2026 12:00:56 +0000 Manifest this update: Mon 26 Jan 2026 12:00:56 +0000 Manifest next update: Tue 27 Jan 2026 12:00:56 +0000 Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=) 2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: b/0da5q1GVy+FznpVHQtW/52iBJsLOnHVVbNnDi0S50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:ad:76:21:ca:ce:b4:b6:c9:f9:34:0a:54:a2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd Validity Not Before: Jan 26 12:00:56 2026 GMT Not After : Jan 27 12:00:56 2026 GMT Subject: CN=4688d01e5dd38a2ea182470ac23daedecb3a0099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:1d:b1:cc:32:dc:10:16:61:c5:89:06:3f: 0e:e9:b9:76:12:97:aa:3f:74:8d:c2:0a:69:a9:74: 26:ca:04:34:d0:3a:d4:d5:a7:12:fd:cb:b1:24:2f: 6b:74:fc:db:5d:e0:42:33:6e:bb:92:72:51:80:29: 87:c4:f4:17:82:37:eb:8f:22:00:41:99:3e:74:1a: c9:9e:84:7a:77:77:39:10:c3:c9:b5:84:61:d2:14: d1:5c:08:f7:de:ca:73:1d:09:bd:ac:d8:77:84:f1: 4b:ff:56:26:b7:6d:ba:cf:33:4a:01:1b:37:8c:4d: b8:1d:a7:c9:e0:81:13:08:46:f9:97:2b:c6:50:d8: 8a:c3:fa:d2:a5:dd:93:b1:5e:27:c1:6a:84:31:ad: 57:97:71:1b:9f:7d:23:8f:aa:25:4a:59:53:dd:12: fa:1c:05:d0:27:5c:d5:09:c6:0a:06:fc:a7:f5:69: 01:9c:59:bc:03:49:27:15:fe:8f:e4:26:e8:ba:7f: b7:d3:50:fd:a3:5e:26:d6:d2:a7:67:0c:13:74:39: f9:22:d0:db:ed:81:0c:da:de:7f:a5:6e:7c:a5:7b: aa:53:3b:df:de:55:a5:86:6b:af:96:1a:7f:45:66: e5:fc:f7:2f:ef:5b:1f:0b:97:28:40:4a:72:89:33: 29:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:88:D0:1E:5D:D3:8A:2E:A1:82:47:0A:C2:3D:AE:DE:CB:3A:00:99 X509v3 Authority Key Identifier: keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ad:e5:7d:33:41:00:33:69:20:eb:f0:cc:19:68:b0:56:99: cf:67:d9:45:3e:6f:ab:7d:74:8a:e4:b8:a9:77:f8:ba:43:f7: f7:18:e8:bb:6b:f4:5d:5c:46:e2:92:0a:39:3a:fc:4b:e3:21: 69:b2:66:ac:49:b3:57:8e:30:8d:ef:a9:6d:a3:c2:62:d5:ed: 62:f6:8c:32:b9:f5:36:db:20:94:85:3f:aa:66:9f:7f:ab:be: 2a:c6:c3:20:98:2f:ed:3d:c1:f2:4d:53:4c:76:5f:7d:fb:95: 42:87:90:f6:0e:a7:a4:06:23:6d:21:9f:30:f0:34:a2:ff:f6: d3:a7:e3:ec:a1:d7:3f:1e:6e:19:1b:8c:e0:fc:b3:66:8a:c2: ab:c2:a8:f6:2b:db:7d:1f:b4:ce:99:54:d1:41:d4:15:8c:c1: ef:dd:bf:90:87:de:9c:3d:be:7c:90:37:43:4d:29:d4:06:04: 20:7b:1b:7a:65:c9:83:d0:dc:48:0d:ef:13:a1:32:9e:99:ba: 8c:38:c3:34:29:4c:00:20:48:6d:61:c5:1c:fc:bf:50:cf:4b: 91:9f:74:9e:d3:23:34:e3:59:ba:11:14:07:60:b0:fa:8b:82: 3c:81:71:47:f2:c7:cd:bd:51:61:0e:7c:7d:f5:5a:66:9a:eb: b4:8c:1b:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6La12IcrOtLbJ+TQKVKKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMGUyNWY1NWViYmFjYjA2OWYxMDNhY2IwODY2NzAzODM1 Y2ZjY2QwHhcNMjYwMTI2MTIwMDU2WhcNMjYwMTI3MTIwMDU2WjAzMTEwLwYDVQQD Eyg0Njg4ZDAxZTVkZDM4YTJlYTE4MjQ3MGFjMjNkYWVkZWNiM2EwMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jYdscwy3BAWYcWJBj8O6bl2Epeq P3SNwgppqXQmygQ00DrU1acS/cuxJC9rdPzbXeBCM267knJRgCmHxPQXgjfrjyIA QZk+dBrJnoR6d3c5EMPJtYRh0hTRXAj33spzHQm9rNh3hPFL/1Ymt226zzNKARs3 jE24HafJ4IETCEb5lyvGUNiKw/rSpd2TsV4nwWqEMa1Xl3Ebn30jj6olSllT3RL6 HAXQJ1zVCcYKBvyn9WkBnFm8A0knFf6P5Cboun+301D9o14m1tKnZwwTdDn5ItDb 7YEM2t5/pW58pXuqUzvf3lWlhmuvlhp/RWbl/Pcv71sfC5coQEpyiTMpJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaI0B5d04ouoYJHCsI9rt7LOgCZMB8GA1UdIwQY MBaAFLAOJfVeu6ywafEDrLCGZwODXPzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYt OGI0MjE1ZTU4MDI4LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYtOGI0MjE1ZTU4MDI4 LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq3lfTNB ADNpIOvwzBlosFaZz2fZRT5vq310iuS4qXf4ukP39xjou2v0XVxG4pIKOTr8S+Mh abJmrEmzV44wje+pbaPCYtXtYvaMMrn1NtsglIU/qmaff6u+KsbDIJgv7T3B8k1T THZfffuVQoeQ9g6npAYjbSGfMPA0ov/206fj7KHXPx5uGRuM4PyzZorCq8Ko9ivb fR+0zplU0UHUFYzB792/kIfenD2+fJA3Q00p1AYEIHsbemXJg9DcSA3vE6Eynpm6 jDjDNClMACBIbWHFHPy/UM9LkZ90ntMjNONZuhEUB2Cw+ouCPIFxR/LHzb1RYQ58 ffVaZprrtIwbMg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:22 2026 by rpki-client