This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json) Hash identifier: PHvaiAmdmaluSIrxc+i1obld4j/M7KZNxQd3qEJZkHA= Subject key identifier: 14:33:A5:BC:56:87:D9:9A:B9:36:63:DF:15:11:27:AC:9D:15:C0:E1 Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3 Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3 Certificate serial: 019BF46255DA2A51EC595508A8486CF26CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft Manifest number: 17A3 Signing time: Sun 25 Jan 2026 09:00:43 +0000 Manifest this update: Sun 25 Jan 2026 09:00:43 +0000 Manifest next update: Mon 26 Jan 2026 09:00:43 +0000 Files and hashes: 1: 1-usL6AhsVQgwEOwqtzcx1h6pdYk.roa (hash: m452RcDS2XKhnRlqiqlaVh44Ww74b5nqeYQy1A7OC7I=) 2: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: VTRNyzgHiBVnZKoV0Mh4rOPAczAjW44QCMZTdOZ7Udc=) 3: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=) 4: boGX-Lm30GkI9QUngxbSV2vTHmE.roa (hash: 1TGckGRRsW7vYkWReEMx8JTWtzITaj+EKpmTBDFaV7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:55:da:2a:51:ec:59:55:08:a8:48:6c:f2:6c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3 Validity Not Before: Jan 25 09:00:43 2026 GMT Not After : Jan 26 09:00:43 2026 GMT Subject: CN=1433a5bc5687d99ab93663df151127ac9d15c0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:ea:38:e2:b9:64:92:9e:82:e0:28:4b:f5: 67:fe:f9:32:5f:ef:da:31:8e:ba:1a:04:59:fa:e0: 24:66:08:93:d8:ef:0f:19:e3:e9:37:05:6b:54:43: 44:0b:00:b3:58:1d:9b:2f:b6:f0:eb:08:e1:84:13: 02:bd:e3:cd:db:da:c5:13:b9:af:a0:f2:ea:f9:52: 1a:31:05:20:f3:a2:44:68:37:d7:bb:98:74:98:49: 98:12:92:17:79:f6:64:1e:05:04:af:ea:10:d2:02: 8f:a1:59:73:aa:e6:44:ee:84:8d:a6:d0:35:37:a6: cb:eb:99:06:81:6f:8b:5b:8a:50:c7:78:c8:fa:c6: b2:5d:2e:33:b2:c0:a2:58:83:10:cb:3f:90:ff:f2: 16:41:21:d8:44:75:fb:3e:24:b9:86:3d:f2:ec:77: 0e:9d:b9:78:b9:07:81:00:25:de:34:ca:57:00:89: 89:69:6d:e9:7c:ec:b3:f7:b5:49:c1:e4:a3:43:68: 18:b5:f1:40:c3:d9:f0:1e:ba:65:0d:03:5c:78:fb: c2:4f:3f:48:f3:dd:05:bb:ef:95:fc:97:d0:4d:9d: 51:3c:35:f6:48:c8:f9:83:94:c1:f6:91:9f:24:eb: e5:da:0f:ce:c5:f6:47:2f:d4:27:be:40:ac:26:ec: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:33:A5:BC:56:87:D9:9A:B9:36:63:DF:15:11:27:AC:9D:15:C0:E1 X509v3 Authority Key Identifier: keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:d9:6b:09:04:73:d5:fc:3f:0a:cb:90:cc:e1:c1:b6:c3:85: 26:95:8a:88:37:f1:f5:ff:6a:b9:9c:8b:e4:37:ce:0b:c4:2e: 88:11:5d:98:69:7e:72:07:85:a4:b7:14:50:7a:85:a3:2e:5f: 19:17:1f:67:fd:42:49:39:30:8b:fe:18:29:80:63:36:b3:c4: 01:c5:68:77:7e:47:7e:33:ca:93:5f:1b:cc:8e:15:67:aa:08: 45:8b:05:a3:fc:fd:d0:b1:f7:b5:a1:75:40:1c:a0:df:d8:14: 9e:cc:fc:a5:ab:bd:b9:0f:11:ed:20:6c:cb:47:24:d5:a3:b3: a0:ab:1d:8a:e1:6d:28:d2:f3:96:82:cd:97:2e:a8:88:6f:8c: f1:4f:21:42:b7:8c:01:07:10:e7:b3:47:de:19:a5:73:83:ca: 1f:1c:9e:83:89:a8:82:50:bf:9c:d4:00:e7:c1:df:66:e0:21: f4:84:75:f8:f0:aa:27:c2:ff:62:2e:5d:e8:ec:88:c9:d3:45: 56:ca:62:bc:8d:35:34:6b:42:e5:fa:8b:3e:45:44:a9:62:b6: 1f:33:28:f1:10:5d:8e:39:c6:f9:05:63:02:6c:81:85:b7:4d: 76:55:e2:64:ff:c6:5d:d7:9d:6f:a5:b6:6a:71:a7:f9:a8:03: 25:91:0d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YlXaKlHsWVUIqEhs8mz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0 NWE3ZTMwHhcNMjYwMTI1MDkwMDQzWhcNMjYwMTI2MDkwMDQzWjAzMTEwLwYDVQQD EygxNDMzYTViYzU2ODdkOTlhYjkzNjYzZGYxNTExMjdhYzlkMTVjMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZTqOOK5ZJKeguAoS/Vn/vkyX+/a MY66GgRZ+uAkZgiT2O8PGePpNwVrVENECwCzWB2bL7bw6wjhhBMCvePN29rFE7mv oPLq+VIaMQUg86JEaDfXu5h0mEmYEpIXefZkHgUEr+oQ0gKPoVlzquZE7oSNptA1 N6bL65kGgW+LW4pQx3jI+sayXS4zssCiWIMQyz+Q//IWQSHYRHX7PiS5hj3y7HcO nbl4uQeBACXeNMpXAImJaW3pfOyz97VJweSjQ2gYtfFAw9nwHrplDQNcePvCTz9I 890Fu++V/JfQTZ1RPDX2SMj5g5TB9pGfJOvl2g/OxfZHL9QnvkCsJuyxpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQzpbxWh9mauTZj3xURJ6ydFcDhMB8GA1UdIwQY MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNlrCQRz 1fw/CsuQzOHBtsOFJpWKiDfx9f9quZyL5DfOC8QuiBFdmGl+cgeFpLcUUHqFoy5f GRcfZ/1CSTkwi/4YKYBjNrPEAcVod35HfjPKk18bzI4VZ6oIRYsFo/z90LH3taF1 QByg39gUnsz8pau9uQ8R7SBsy0ck1aOzoKsdiuFtKNLzloLNly6oiG+M8U8hQreM AQcQ57NH3hmlc4PKHxyeg4moglC/nNQA58HfZuAh9IR1+PCqJ8L/Yi5d6OyIydNF VspivI01NGtC5fqLPkVEqWK2HzMo8RBdjjnG+QVjAmyBhbdNdlXiZP/GXdedb6W2 anGn+agDJZENLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:30 2026 by rpki-client