This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json) Hash identifier: OP0Gs6O8sF7zXCGgDiZHCw4gwTeQ4J0SjfwabEht5bg= Subject key identifier: FA:BC:0D:C4:7D:85:A8:00:27:65:79:D3:C5:DB:F9:4D:07:85:9F:42 Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Certificate serial: 019BF808315265BCC3E547FA344D7C33F66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft Manifest number: 17FF Signing time: Mon 26 Jan 2026 02:00:44 +0000 Manifest this update: Mon 26 Jan 2026 02:00:44 +0000 Manifest next update: Tue 27 Jan 2026 02:00:44 +0000 Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=) 2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: HvIdKAuMFhNF6ddLAB18Bo3l/gpVW1NfR9C3UV4VZUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:31:52:65:bc:c3:e5:47:fa:34:4d:7c:33:f6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Validity Not Before: Jan 26 02:00:44 2026 GMT Not After : Jan 27 02:00:44 2026 GMT Subject: CN=fabc0dc47d85a800276579d3c5dbf94d07859f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:05:c8:59:de:0b:be:21:e6:08:31:f7:e0: 34:b5:e1:00:46:32:de:e5:d8:43:c5:ab:44:c5:52: 29:f9:19:2a:d6:f4:d1:2f:a9:5f:ef:9d:ef:ed:a9: 23:b4:c3:70:a8:43:cd:83:13:43:0a:02:99:29:89: cb:17:a6:2e:27:57:61:d0:e1:46:7c:5f:64:4e:52: 4e:7b:f1:81:18:94:6a:ec:7a:87:5d:5b:3c:63:bc: 71:0c:d7:06:c6:3f:c0:37:a8:91:da:e5:0f:4a:9c: a2:85:99:8b:d2:bc:ea:34:6a:81:15:73:a3:f9:ad: 95:0a:3d:15:64:b4:f4:4c:30:4e:cd:f7:65:8b:e4: 27:ed:86:5c:b2:c4:8d:ae:19:ee:39:80:35:00:f6: 87:b6:99:3d:36:91:73:22:5c:12:cd:53:95:b8:50: 50:b9:31:1c:99:b0:40:ab:b1:93:88:fa:b5:21:10: 21:18:0b:28:70:14:40:7e:cd:8f:a5:5a:54:f6:5d: 6d:03:2c:b0:5e:e8:3b:fa:8a:f6:5c:08:8c:85:3f: 86:d6:2d:aa:8c:94:04:1a:5c:15:40:23:b2:65:bb: 3d:d4:24:29:b5:00:f9:16:89:04:51:47:c1:74:68: 28:69:db:fb:82:e7:8b:04:dd:6d:1a:98:2e:53:41: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:0D:C4:7D:85:A8:00:27:65:79:D3:C5:DB:F9:4D:07:85:9F:42 X509v3 Authority Key Identifier: keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:08:81:45:79:bd:b6:f6:c6:e1:0d:13:0f:cb:72:e0:88:d3: 22:32:a0:6a:8f:45:9d:f1:00:53:e6:f4:03:8b:6e:4d:79:18: e1:e9:98:c1:27:67:84:0b:db:06:f6:2d:c5:8c:88:22:45:12: 21:27:7a:64:fb:e5:3c:92:c4:11:1e:30:fa:ac:d1:6c:90:08: b5:33:ac:8b:bd:36:aa:c6:f0:95:4a:fb:09:59:6d:7d:89:86: 05:ba:8a:f1:f4:c9:66:3a:44:e5:e1:17:4d:25:1c:73:6d:a5: 11:f0:e2:cc:13:07:75:c6:0b:89:20:40:4c:62:a5:41:b8:df: 04:9a:98:c0:05:2e:0d:df:47:e7:15:e1:de:e8:38:25:d6:8a: e3:7f:b7:5e:ff:54:c5:44:e0:3c:ea:8a:90:62:5f:49:60:41: 82:b0:23:e8:f0:0c:5b:28:ef:ba:36:84:1f:88:f8:f2:7e:fb: f3:20:45:69:69:6f:ba:f0:69:f2:0e:15:03:46:49:69:4f:52: b0:fd:5e:d9:ec:4d:df:9c:64:7b:63:c8:b9:a2:c3:7f:2c:13: 2d:2e:06:ea:90:05:58:a9:6d:1e:8d:dd:cb:a4:38:88:e4:71: 5a:4a:8c:2e:87:1a:56:2a:7f:53:d2:e5:36:43:2e:96:cb:4b: f2:ba:5b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDFSZbzD5Uf6NE18M/ZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi OGUwNzAwHhcNMjYwMTI2MDIwMDQ0WhcNMjYwMTI3MDIwMDQ0WjAzMTEwLwYDVQQD EyhmYWJjMGRjNDdkODVhODAwMjc2NTc5ZDNjNWRiZjk0ZDA3ODU5ZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp4FyFneC74h5ggx9+A0teEARjLe 5dhDxatExVIp+Rkq1vTRL6lf753v7akjtMNwqEPNgxNDCgKZKYnLF6YuJ1dh0OFG fF9kTlJOe/GBGJRq7HqHXVs8Y7xxDNcGxj/AN6iR2uUPSpyihZmL0rzqNGqBFXOj +a2VCj0VZLT0TDBOzfdli+Qn7YZcssSNrhnuOYA1APaHtpk9NpFzIlwSzVOVuFBQ uTEcmbBAq7GTiPq1IRAhGAsocBRAfs2PpVpU9l1tAyywXug7+or2XAiMhT+G1i2q jJQEGlwVQCOyZbs91CQptQD5FokEUUfBdGgoadv7gueLBN1tGpguU0FKRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq8DcR9hagAJ2V508Xb+U0HhZ9CMB8GA1UdIwQY MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggiBRXm9 tvbG4Q0TD8ty4IjTIjKgao9FnfEAU+b0A4tuTXkY4emYwSdnhAvbBvYtxYyIIkUS ISd6ZPvlPJLEER4w+qzRbJAItTOsi702qsbwlUr7CVltfYmGBbqK8fTJZjpE5eEX TSUcc22lEfDizBMHdcYLiSBATGKlQbjfBJqYwAUuDd9H5xXh3ug4JdaK43+3Xv9U xUTgPOqKkGJfSWBBgrAj6PAMWyjvujaEH4j48n778yBFaWlvuvBp8g4VA0ZJaU9S sP1e2exN35xke2PIuaLDfywTLS4G6pAFWKltHo3dy6Q4iORxWkqMLocaVip/U9Ll NkMulstL8rpbaQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:36 2026 by rpki-client