This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json) Hash identifier: 0aklbB22jnNMQfXHoKtBI7ImdkGf+zzE+ZAzRuyHdTs= Subject key identifier: D8:56:74:74:11:43:75:DD:DF:A4:D5:5C:85:5F:ED:DD:D1:7C:B9:3B Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Certificate serial: 019BF5E2DE3049D9F7419324452A05EEEEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft Manifest number: 03AE Signing time: Sun 25 Jan 2026 16:00:44 +0000 Manifest this update: Sun 25 Jan 2026 16:00:44 +0000 Manifest next update: Mon 26 Jan 2026 16:00:44 +0000 Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=) 2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: 7IeUasj3rLBigsfdNcuj0ZNqh/uoVyfl8Bu56ck5M84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:de:30:49:d9:f7:41:93:24:45:2a:05:ee:ee:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Validity Not Before: Jan 25 16:00:44 2026 GMT Not After : Jan 26 16:00:44 2026 GMT Subject: CN=d8567474114375dddfa4d55c855fedddd17cb93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:1f:24:06:5d:a6:33:9c:07:ff:ec:3e:31: eb:0c:3e:d6:2c:c7:5b:41:74:d0:df:55:bb:3d:17: 09:36:db:8f:08:97:62:06:c7:d5:bb:82:d4:cf:a6: 16:6c:d6:7c:d7:69:36:51:33:17:c1:4e:97:eb:34: 71:9d:b7:f3:b9:a5:5a:e2:89:1c:04:31:ce:78:d5: d7:b5:4d:9e:3d:0a:77:34:22:3b:27:c4:ce:97:c7: fd:8d:20:4a:8b:51:0e:ed:65:4d:26:d3:da:ea:cc: 3e:f6:62:f4:a7:b6:cc:9d:53:90:0c:61:f0:f8:75: 21:4f:6c:8f:59:80:21:41:8d:e3:b6:9a:5a:0d:16: b8:ee:89:58:a3:33:22:1b:dc:58:3d:9a:06:f5:52: cd:e5:71:87:ed:7d:78:5f:c6:f8:90:28:24:72:5a: 3d:e4:63:5c:72:67:51:de:b2:40:61:b7:40:47:7a: 4e:07:e3:d8:1f:a8:0e:eb:73:27:eb:f6:18:6a:e4: 90:2e:27:33:86:5b:54:ce:9d:24:cd:22:cd:2c:50: 7d:78:ae:6a:e7:f2:83:2a:12:55:ec:32:c9:77:ef: 69:e6:e9:58:fb:95:1b:d0:60:1c:ce:cc:04:a1:ed: f4:f4:cc:ea:f6:df:41:e0:a8:aa:41:e5:8e:16:fc: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:56:74:74:11:43:75:DD:DF:A4:D5:5C:85:5F:ED:DD:D1:7C:B9:3B X509v3 Authority Key Identifier: keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ad:04:42:4c:3f:04:7a:41:e5:50:24:c3:f3:c8:0c:e5:ce: da:12:af:5c:f8:05:47:7c:ee:5d:9d:55:fb:60:c4:5c:92:7a: 68:8f:35:9c:bb:4a:34:1e:1c:7c:c8:29:e8:31:42:4e:d2:2f: ab:1d:e3:9c:0c:d9:59:5a:61:94:3e:e9:41:a7:24:b3:df:77: 21:82:2c:78:00:af:67:fe:d4:9c:b7:ef:c7:1e:30:80:78:90: cb:94:4f:c0:a7:00:f5:4b:f7:30:37:68:4d:d5:3e:35:a9:ae: 2f:44:55:18:cb:38:26:bd:4e:14:49:7f:8b:99:de:fe:76:09: f0:b5:e4:ac:eb:95:36:f2:32:68:48:36:fc:a7:4f:06:5f:f9: 9d:11:19:ee:af:4f:08:33:b0:8c:98:10:d0:fa:f9:58:71:e2: d0:2b:56:78:e2:84:ce:a0:ad:79:f0:33:c5:22:51:4c:4f:fa: 5c:1a:90:c5:40:63:73:9b:cc:76:9b:d5:b8:34:ac:7e:71:23: ef:5e:98:50:8c:79:21:af:e2:74:2f:5d:49:c7:1a:e9:83:c0: 44:06:49:11:82:c9:b1:3b:98:55:5a:36:9e:e2:73:c6:ed:4d: bd:d3:da:fd:be:21:af:b5:17:0f:1c:e3:6c:d4:fe:c9:2c:7c: 74:65:03:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14t4wSdn3QZMkRSoF7u7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTdhMzlkYjVjN2FhMzZiZTgyY2Q3NTFlNTBjYjkwMjMw MzNkY2EwHhcNMjYwMTI1MTYwMDQ0WhcNMjYwMTI2MTYwMDQ0WjAzMTEwLwYDVQQD EyhkODU2NzQ3NDExNDM3NWRkZGZhNGQ1NWM4NTVmZWRkZGQxN2NiOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRwfJAZdpjOcB//sPjHrDD7WLMdb QXTQ31W7PRcJNtuPCJdiBsfVu4LUz6YWbNZ812k2UTMXwU6X6zRxnbfzuaVa4okc BDHOeNXXtU2ePQp3NCI7J8TOl8f9jSBKi1EO7WVNJtPa6sw+9mL0p7bMnVOQDGHw +HUhT2yPWYAhQY3jtppaDRa47olYozMiG9xYPZoG9VLN5XGH7X14X8b4kCgkclo9 5GNccmdR3rJAYbdAR3pOB+PYH6gO63Mn6/YYauSQLiczhltUzp0kzSLNLFB9eK5q 5/KDKhJV7DLJd+9p5ulY+5Ub0GAczswEoe309Mzq9t9B4KiqQeWOFvyxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhWdHQRQ3Xd36TVXIVf7d3RfLk7MB8GA1UdIwQY MBaAFEtXo521x6o2voLNdR5Qy5AjAz3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmIt YjNkMTg5NmYzNjlmLzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmItYjNkMTg5NmYzNjlm LzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq0EQkw/ BHpB5VAkw/PIDOXO2hKvXPgFR3zuXZ1V+2DEXJJ6aI81nLtKNB4cfMgp6DFCTtIv qx3jnAzZWVphlD7pQacks993IYIseACvZ/7UnLfvxx4wgHiQy5RPwKcA9Uv3MDdo TdU+NamuL0RVGMs4Jr1OFEl/i5ne/nYJ8LXkrOuVNvIyaEg2/KdPBl/5nREZ7q9P CDOwjJgQ0Pr5WHHi0CtWeOKEzqCtefAzxSJRTE/6XBqQxUBjc5vMdpvVuDSsfnEj 716YUIx5Ia/idC9dScca6YPARAZJEYLJsTuYVVo2nuJzxu1NvdPa/b4hr7UXDxzj bNT+ySx8dGUDtA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:55 2026 by rpki-client