This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json) Hash identifier: or1GHw97LhDpDBCgGovJ8tK5Ugq8bDv/wNOEnRVg37k= Subject key identifier: 1D:C2:A0:3C:03:A6:0A:A6:5D:C8:6A:61:85:F4:66:FC:60:41:FD:CB Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019BF386968202F743C6E9E011B107A39C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft Manifest number: 17F7 Signing time: Sun 25 Jan 2026 05:00:42 +0000 Manifest this update: Sun 25 Jan 2026 05:00:42 +0000 Manifest next update: Mon 26 Jan 2026 05:00:42 +0000 Files and hashes: 1: 0zhOlHpaJdqZGNBYjC5tXKokWw0.roa (hash: bqToAspOu7YFB5JdKf7AKuH2bS00lDEY1+9fIwnYmQY=) 2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: MLKSS1sLyz7UXvC15c/D9rZjJgu3LPgybV9cTjv8bYY=) 3: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=) 4: wy2HXJGDUzee6JPa0O6QBFi1ADg.roa (hash: OhVZTkUxfA1wnNmKE1r/sghBr5oQb4hdQCZYl5T5IDY=) 5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:96:82:02:f7:43:c6:e9:e0:11:b1:07:a3:9c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Jan 25 05:00:42 2026 GMT Not After : Jan 26 05:00:42 2026 GMT Subject: CN=1dc2a03c03a60aa65dc86a6185f466fc6041fdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:ca:68:7e:c5:58:b3:b3:6a:48:f9:9a:f8: 78:ec:58:49:be:23:b0:0b:95:ab:35:a3:35:b4:5b: a5:9b:63:ed:11:1e:6c:e3:66:9d:fe:16:36:96:64: 63:93:8a:63:b6:54:a2:f6:26:88:4a:0c:72:5f:fc: 07:75:42:20:8e:6e:1b:21:bf:7e:dc:d3:8a:9b:35: 03:a9:38:0a:a8:87:10:a2:06:24:ea:48:44:61:2c: 42:70:fb:d7:6e:bf:dd:24:c8:38:20:3c:8f:67:ef: 21:4b:93:ab:e5:75:5e:78:49:f1:0d:f7:29:35:bc: 99:45:d1:10:5d:36:97:df:a0:9a:ea:36:59:4e:55: 73:f4:73:55:d9:b2:68:5e:6b:78:b6:6a:b1:be:c2: 9d:6e:4c:59:ea:d7:47:4f:2c:2c:50:87:e6:37:49: b4:3d:ae:06:d4:9c:a1:ba:69:89:ec:75:2f:37:7c: 44:f9:6e:3e:03:a5:7a:51:4f:a6:c1:3f:d9:09:06: d5:91:f8:a7:95:e5:49:c4:ae:7c:ab:7c:5c:a2:ab: 03:2b:8f:1c:ad:d1:31:ef:55:49:06:e1:76:91:4b: 11:3c:6f:7d:94:a4:ad:2a:c1:9b:9e:24:c0:a6:ce: 7a:5b:76:94:dc:53:22:d3:42:dd:55:d2:e8:22:42: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:A0:3C:03:A6:0A:A6:5D:C8:6A:61:85:F4:66:FC:60:41:FD:CB X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:64:c7:dc:09:bb:01:24:84:f8:6e:e3:a0:d9:bc:9f:db:eb: 7c:0f:cc:fe:e4:d7:fa:b6:be:3e:52:8d:46:15:e1:70:25:12: d6:5b:8d:6a:81:78:57:2b:cd:f3:6b:09:b6:2e:0d:61:5b:f0: 2f:dc:64:92:e5:ea:d1:6c:da:16:de:86:31:44:05:97:a6:44: ab:3c:76:25:d9:71:f2:44:2a:9f:03:10:da:06:8c:dc:bc:47: 7f:92:4a:9e:09:47:40:f5:58:67:ce:43:0d:bd:4e:36:a4:45: c7:8a:c4:8e:74:2a:a9:92:5f:e3:c1:56:fa:44:f4:d5:35:16: 45:9c:30:26:a9:5d:d2:40:af:e3:c7:59:61:d0:51:a3:33:0b: ce:b7:c9:c1:7f:4c:a2:79:5b:0f:85:58:c2:bd:34:32:4f:6f: 2f:35:36:31:d6:0d:db:b5:fb:81:5c:3a:a5:29:c6:a8:06:57: b8:24:b8:91:cb:dd:d3:b9:e4:f4:de:ec:46:b3:1d:e5:e5:15: 91:1c:64:7e:13:0a:38:5a:b5:7b:dd:2f:10:8a:81:6b:77:23: a2:a4:38:f7:85:88:56:24:9d:ec:d9:c9:2c:2a:2b:f6:89:db: 5b:c8:b2:1c:a8:79:4d:d0:f4:f9:d8:ea:0f:a3:27:ae:8e:a0: ff:32:ad:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhpaCAvdDxungEbEHo5xDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjYwMTI1MDUwMDQyWhcNMjYwMTI2MDUwMDQyWjAzMTEwLwYDVQQD EygxZGMyYTAzYzAzYTYwYWE2NWRjODZhNjE4NWY0NjZmYzYwNDFmZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUXKaH7FWLOzakj5mvh47FhJviOw C5WrNaM1tFulm2PtER5s42ad/hY2lmRjk4pjtlSi9iaISgxyX/wHdUIgjm4bIb9+ 3NOKmzUDqTgKqIcQogYk6khEYSxCcPvXbr/dJMg4IDyPZ+8hS5Or5XVeeEnxDfcp NbyZRdEQXTaX36Ca6jZZTlVz9HNV2bJoXmt4tmqxvsKdbkxZ6tdHTywsUIfmN0m0 Pa4G1JyhummJ7HUvN3xE+W4+A6V6UU+mwT/ZCQbVkfinleVJxK58q3xcoqsDK48c rdEx71VJBuF2kUsRPG99lKStKsGbniTAps56W3aU3FMi00LdVdLoIkJB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3CoDwDpgqmXchqYYX0ZvxgQf3LMB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2TH3Am7 ASSE+G7joNm8n9vrfA/M/uTX+ra+PlKNRhXhcCUS1luNaoF4VyvN82sJti4NYVvw L9xkkuXq0WzaFt6GMUQFl6ZEqzx2Jdlx8kQqnwMQ2gaM3LxHf5JKnglHQPVYZ85D Db1ONqRFx4rEjnQqqZJf48FW+kT01TUWRZwwJqld0kCv48dZYdBRozMLzrfJwX9M onlbD4VYwr00Mk9vLzU2MdYN27X7gVw6pSnGqAZXuCS4kcvd07nk9N7sRrMd5eUV kRxkfhMKOFq1e90vEIqBa3cjoqQ494WIViSd7NnJLCor9onbW8iyHKh5TdD0+djq D6Mnro6g/zKtRg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:04 2026 by rpki-client