This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json) Hash identifier: xfFUIgPQORfQKe7dQgr4ScD3Q+/pVfRq+3ML+szMdZ8= Subject key identifier: A2:CD:CE:28:70:93:76:CB:91:F4:18:9A:65:29:5D:E7:4A:26:06:F8 Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Certificate serial: 019BFCC1091BD110F41EB47364EE2BE1731A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft Manifest number: 1152 Signing time: Tue 27 Jan 2026 00:01:07 +0000 Manifest this update: Tue 27 Jan 2026 00:01:07 +0000 Manifest next update: Wed 28 Jan 2026 00:01:07 +0000 Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=) 2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: c8DwWOWIJmVd/K93N0+7bZB8K5EQJ7eLwqCBxW5Q4Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:09:1b:d1:10:f4:1e:b4:73:64:ee:2b:e1:73:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Validity Not Before: Jan 27 00:01:07 2026 GMT Not After : Jan 28 00:01:07 2026 GMT Subject: CN=a2cdce28709376cb91f4189a65295de74a2606f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:f5:33:4c:02:58:dd:bf:52:0e:82:ee:7c: 30:76:eb:f8:05:ea:ab:51:9c:0e:e5:a1:25:8f:18: 27:68:89:21:ac:1d:d1:ad:65:7f:80:a0:ef:a6:e7: ff:9f:40:be:86:87:46:b4:89:85:16:99:e9:4b:ab: 56:79:ef:6a:db:3c:23:4c:4f:73:5f:20:d2:30:7f: ff:f9:1d:86:9c:f9:41:f4:e7:65:1e:fd:88:aa:dc: 73:d8:28:a1:60:4b:38:a8:59:04:86:3a:80:5e:25: 65:c6:82:74:b5:6d:dc:fa:99:9c:ae:cd:bc:7f:ca: 26:ec:74:8e:da:84:a4:1c:fa:de:66:85:c1:18:a0: e2:2c:2d:d8:dd:8d:8c:49:6b:57:cb:77:21:ff:90: 11:b3:45:07:55:b1:02:98:33:6b:67:26:7f:cd:2e: f3:10:21:0b:f9:dc:3c:29:29:58:af:0e:22:60:37: 1e:b3:c7:b5:33:7e:d8:83:64:bd:93:19:e8:b2:b6: 5e:0b:c5:e0:4f:c3:cf:f0:6f:6c:0a:8f:b4:16:90: dc:24:2d:6c:28:62:ba:37:f4:b3:5a:e4:31:34:e4: 70:15:d5:c4:18:c7:cb:b6:95:20:0a:73:28:55:21: 1c:e9:1d:73:9d:6b:de:6e:d6:1d:7c:6b:af:fa:31: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:CE:28:70:93:76:CB:91:F4:18:9A:65:29:5D:E7:4A:26:06:F8 X509v3 Authority Key Identifier: keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:91:e8:ae:3c:ba:61:25:d6:08:9a:3f:34:77:f2:e1:ea:9d: 0e:18:bb:b3:e7:f1:75:ea:2c:f1:51:93:4b:7b:6e:bf:b4:57: e4:81:38:58:ac:aa:2a:da:e3:08:41:d2:5c:a8:fe:33:9f:25: c3:3b:a5:4a:65:51:8a:63:35:3e:c5:41:b0:99:68:36:05:93: 11:93:49:60:a7:bc:c8:45:46:35:17:cb:65:1f:e7:4b:94:8b: 5a:8e:67:ea:b6:b0:eb:4d:e2:bc:f6:ce:72:86:db:63:4c:ef: 8c:0c:13:2f:0e:92:da:08:e2:7b:6a:5e:8d:46:0e:72:1b:99: b6:83:6c:d9:66:38:75:c8:f5:d8:90:85:b9:ba:9f:9a:fc:15: 0e:db:57:f0:f6:86:6c:2c:65:03:cd:db:02:9f:da:c9:41:c0: b0:82:0a:33:e0:df:13:82:ae:9e:40:ad:5f:2c:92:b4:00:02: 6f:95:a1:75:a4:7e:cd:97:3a:f0:10:96:8d:38:b8:44:6c:e5: 14:d4:39:72:af:7e:4a:75:d4:20:f5:1b:cd:0c:9e:50:50:86: 63:a6:c5:ae:01:97:b9:cd:14:78:08:03:b7:21:7f:b4:1a:af: 4a:ad:5a:ce:88:13:00:6b:9a:ee:f1:19:48:d0:a4:82:7a:1f: 7c:02:8b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wQkb0RD0HrRzZO4r4XMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi OGRmZTIwHhcNMjYwMTI3MDAwMTA3WhcNMjYwMTI4MDAwMTA3WjAzMTEwLwYDVQQD EyhhMmNkY2UyODcwOTM3NmNiOTFmNDE4OWE2NTI5NWRlNzRhMjYwNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXj1M0wCWN2/Ug6C7nwwduv4Beqr UZwO5aEljxgnaIkhrB3RrWV/gKDvpuf/n0C+hodGtImFFpnpS6tWee9q2zwjTE9z XyDSMH//+R2GnPlB9OdlHv2Iqtxz2CihYEs4qFkEhjqAXiVlxoJ0tW3c+pmcrs28 f8om7HSO2oSkHPreZoXBGKDiLC3Y3Y2MSWtXy3ch/5ARs0UHVbECmDNrZyZ/zS7z ECEL+dw8KSlYrw4iYDces8e1M37Yg2S9kxnosrZeC8XgT8PP8G9sCo+0FpDcJC1s KGK6N/SzWuQxNORwFdXEGMfLtpUgCnMoVSEc6R1znWvebtYdfGuv+jGcpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLNzihwk3bLkfQYmmUpXedKJgb4MB8GA1UdIwQY MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt Zjg0NWJmYzQyZjZkLzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMtZjg0NWJmYzQyZjZk LzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJHorjy6 YSXWCJo/NHfy4eqdDhi7s+fxdeos8VGTS3tuv7RX5IE4WKyqKtrjCEHSXKj+M58l wzulSmVRimM1PsVBsJloNgWTEZNJYKe8yEVGNRfLZR/nS5SLWo5n6raw603ivPbO cobbY0zvjAwTLw6S2gjie2pejUYOchuZtoNs2WY4dcj12JCFubqfmvwVDttX8PaG bCxlA83bAp/ayUHAsIIKM+DfE4KunkCtXyyStAACb5WhdaR+zZc68BCWjTi4RGzl FNQ5cq9+SnXUIPUbzQyeUFCGY6bFrgGXuc0UeAgDtyF/tBqvSq1azogTAGua7vEZ SNCkgnoffAKLjQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:58:47 2026 by rpki-client