This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json) Hash identifier: mNfh99J5Wmb/oOIbo4DF4yo7ymXztK70QDK1ya7n/kc= Subject key identifier: 3B:C3:A1:3F:59:D1:3A:DA:4C:51:59:A3:2A:83:E7:08:1A:9F:6A:4F Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Certificate serial: 019BF35036F18CA23314BBC5F7883ED9043F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft Manifest number: 0F7C Signing time: Sun 25 Jan 2026 04:01:18 +0000 Manifest this update: Sun 25 Jan 2026 04:01:18 +0000 Manifest next update: Mon 26 Jan 2026 04:01:18 +0000 Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=) 2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: V1U4MWoBZsbbXPHQ0t+oJcjBX67ZnNKoVI3WtOAvqJw=) 3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=) 4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=) 5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:36:f1:8c:a2:33:14:bb:c5:f7:88:3e:d9:04:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Validity Not Before: Jan 25 04:01:18 2026 GMT Not After : Jan 26 04:01:18 2026 GMT Subject: CN=3bc3a13f59d13ada4c5159a32a83e7081a9f6a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:de:d8:2a:14:58:7a:94:49:07:3e:a1:d6: 6e:0d:d6:e8:0f:1f:63:25:60:6e:1b:3f:8e:d3:99: e7:92:eb:e7:84:3b:df:84:cb:ac:e8:b1:51:0a:99: 06:68:1e:a3:8c:6d:25:19:93:f7:c9:29:3b:bd:fe: ab:bf:12:06:5b:9e:6b:27:8c:a6:5b:22:86:a1:7f: 8a:66:21:e9:a6:1f:75:a1:38:66:83:f3:97:a7:37: 04:e7:19:ef:25:e6:73:d1:df:3c:57:30:3b:69:72: a5:3d:1c:72:e4:94:84:41:e0:a8:6c:6b:84:09:f6: b9:3f:70:d5:44:04:70:9c:b0:95:23:4d:f1:73:c6: d2:1f:b3:49:fc:0b:6b:aa:4b:34:b0:90:09:97:4f: 38:59:24:e9:08:12:ad:69:12:91:b9:26:89:ce:8b: c7:b3:30:f0:6b:06:aa:cf:97:43:65:7d:4d:6c:63: 50:d3:d6:00:d9:13:37:a9:8c:0e:d8:83:bd:0b:69: e2:79:6c:aa:ff:8b:10:9a:5c:be:ab:d2:df:e1:b9: 1d:9c:d8:5d:aa:77:7a:d4:52:57:1d:58:30:b6:5a: f7:8f:f7:69:f6:86:0c:f7:12:db:00:4d:01:ed:00: 15:ea:65:5b:0b:44:9f:87:86:93:ba:42:3a:ae:5d: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C3:A1:3F:59:D1:3A:DA:4C:51:59:A3:2A:83:E7:08:1A:9F:6A:4F X509v3 Authority Key Identifier: keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:05:ef:41:8f:99:4b:be:fb:dc:3c:d0:2b:39:2e:52:94:a9: 57:1b:8f:34:d3:99:1d:70:15:15:de:5e:8e:9c:8e:76:37:6e: ed:93:38:bb:59:09:47:ab:e5:b4:16:86:a7:39:a0:98:aa:68: 05:1d:27:32:3f:3e:da:3f:cc:63:de:d0:96:2c:32:a9:fc:8b: 12:25:a6:79:c7:36:94:ae:d0:e1:15:60:43:fd:8c:a5:05:81: 14:ce:13:d3:1a:bb:ef:2e:9b:92:b0:1c:2e:04:57:31:aa:e4: f2:2d:1d:25:73:31:ac:7f:fe:10:2f:38:0e:da:dd:3a:ef:07: 93:fe:c6:bc:1c:56:a3:74:2a:1e:43:ed:43:6a:5f:1b:e1:bb: 33:5b:f0:87:bb:3a:92:5b:85:a2:5d:39:b0:c9:28:9f:c0:64: 1d:df:0d:15:ab:90:97:36:b4:c0:89:c0:7f:7e:b3:2e:74:26: 5e:07:ef:3f:7c:c7:26:b9:8b:63:1e:cf:90:76:35:bf:71:c2: 32:32:ba:9e:77:32:5b:3e:dd:c6:76:86:3b:d2:d2:09:60:96: 95:f3:d4:af:44:22:d6:fd:0d:49:c7:2f:f0:51:c6:79:78:f7: b2:8a:52:e8:5e:96:3d:d4:e6:cd:81:47:00:98:31:c8:e3:f5: eb:57:b7:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUDbxjKIzFLvF94g+2QQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi NmJkY2MwHhcNMjYwMTI1MDQwMTE4WhcNMjYwMTI2MDQwMTE4WjAzMTEwLwYDVQQD EygzYmMzYTEzZjU5ZDEzYWRhNGM1MTU5YTMyYTgzZTcwODFhOWY2YTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa/e2CoUWHqUSQc+odZuDdboDx9j JWBuGz+O05nnkuvnhDvfhMus6LFRCpkGaB6jjG0lGZP3ySk7vf6rvxIGW55rJ4ym WyKGoX+KZiHpph91oThmg/OXpzcE5xnvJeZz0d88VzA7aXKlPRxy5JSEQeCobGuE Cfa5P3DVRARwnLCVI03xc8bSH7NJ/Atrqks0sJAJl084WSTpCBKtaRKRuSaJzovH szDwawaqz5dDZX1NbGNQ09YA2RM3qYwO2IO9C2nieWyq/4sQmly+q9Lf4bkdnNhd qnd61FJXHVgwtlr3j/dp9oYM9xLbAE0B7QAV6mVbC0Sfh4aTukI6rl1CTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvDoT9Z0TraTFFZoyqD5wgan2pPMB8GA1UdIwQY MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct MjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQXvQY+Z S7773DzQKzkuUpSpVxuPNNOZHXAVFd5ejpyOdjdu7ZM4u1kJR6vltBaGpzmgmKpo BR0nMj8+2j/MY97QliwyqfyLEiWmecc2lK7Q4RVgQ/2MpQWBFM4T0xq77y6bkrAc LgRXMark8i0dJXMxrH/+EC84DtrdOu8Hk/7GvBxWo3QqHkPtQ2pfG+G7M1vwh7s6 kluFol05sMkon8BkHd8NFauQlza0wInAf36zLnQmXgfvP3zHJrmLYx7PkHY1v3HC MjK6nncyWz7dxnaGO9LSCWCWlfPUr0Qi1v0NSccv8FHGeXj3sopS6F6WPdTmzYFH AJgxyOP161e3NA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:06:04 2026 by rpki-client