This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json) Hash identifier: M/lZY1RM5wvkrzY2cqcjwmr02dBkBb6VBl2VVEUD1pI= Subject key identifier: AE:09:37:F3:76:0C:1B:55:B1:27:78:B3:8E:C3:08:69:A8:B6:74:F9 Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2 Certificate serial: 019BDF24D8CB8E3B3168FAA8FBDCD2BF95B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft Manifest number: 17E3 Signing time: Wed 21 Jan 2026 06:01:32 +0000 Manifest this update: Wed 21 Jan 2026 06:01:32 +0000 Manifest next update: Thu 22 Jan 2026 06:01:32 +0000 Files and hashes: 1: 0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa (hash: 7BKXAfE9w39NgXynjAiXVWbOelCBomhtnn6Jh7KJSqc=) 2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: OLTBU7jbd1g/fdVrafu2SRd9ckonqTj/6wdUHbaoRp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:24:d8:cb:8e:3b:31:68:fa:a8:fb:dc:d2:bf:95:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2 Validity Not Before: Jan 21 06:01:32 2026 GMT Not After : Jan 22 06:01:32 2026 GMT Subject: CN=ae0937f3760c1b55b12778b38ec30869a8b674f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:39:ba:50:bc:0c:ef:8c:21:92:10:c4:ab: 40:1e:4c:18:46:c5:51:5b:f2:90:25:05:88:61:e1: 80:df:7e:4e:a6:2d:38:d6:44:b1:a5:19:7c:c5:71: 75:ef:44:67:27:08:66:73:90:f8:56:21:be:dc:db: 23:7a:aa:63:7d:c0:ce:47:02:bb:24:84:a6:4f:0d: 60:86:a1:c2:28:5b:23:db:62:4f:55:56:5b:56:98: 19:99:9f:f4:56:88:5c:58:f9:22:93:4d:1e:99:e8: 43:f3:1f:be:52:5d:13:93:49:34:a9:46:d6:00:0f: ea:cf:18:57:cb:56:f3:35:e9:33:33:63:c0:38:95: 3b:3f:c5:6a:47:97:70:5c:21:0f:87:30:5a:ef:ac: 56:a8:14:14:6c:ea:15:18:d3:6b:e9:f7:f5:a7:51: 27:2c:f2:b0:c2:d8:bb:c2:a4:a5:29:11:59:cd:1c: 1c:7d:59:c7:38:d8:03:49:b0:6c:a6:c9:53:77:0f: 1c:74:b0:3f:11:3a:c9:62:0c:fa:bb:56:c1:cc:ae: 6f:0e:0e:16:fb:9b:9b:e4:93:82:ae:16:0b:8f:50: 55:15:54:c0:fe:b2:b1:7a:13:b9:2a:28:78:30:1e: 95:a5:77:1f:70:21:db:9f:ad:0e:fd:c5:ff:96:51: 1b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:09:37:F3:76:0C:1B:55:B1:27:78:B3:8E:C3:08:69:A8:B6:74:F9 X509v3 Authority Key Identifier: keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:bd:8f:23:94:9d:46:c8:25:36:31:14:10:35:d0:80:77:7f: 34:87:52:92:0a:7e:98:45:73:58:0c:e5:67:cd:19:1d:b3:d6: 41:f7:4f:1e:7d:b8:92:7f:c4:5d:95:ca:f7:a4:32:5c:67:92: e7:90:46:0e:d7:ae:d7:63:e3:63:e7:0e:47:f1:46:69:54:17: 04:15:b5:87:ea:19:38:27:71:0a:5c:82:78:1a:91:66:64:40: 6f:b2:24:36:25:1f:36:4d:c6:69:8e:c4:71:58:0e:1d:54:37: ff:89:09:56:e2:10:c6:23:fe:1f:eb:11:ab:7a:3c:f2:33:13: f6:45:86:1d:a5:03:52:1e:37:16:bf:14:18:db:ff:3e:3b:4c: bf:7a:83:1f:01:01:9c:81:2f:b3:82:dc:76:15:55:af:13:55: 05:dd:62:f8:25:ea:71:36:3c:b2:2a:98:fb:26:8c:f1:59:b8: 50:bd:8d:e5:fd:43:fe:1e:28:33:c2:d5:97:f5:fa:2c:9c:70: 2c:ce:43:cf:e1:27:f3:5f:56:69:b1:f8:4a:e1:0c:fd:3e:ef: 21:70:33:6f:df:9f:6f:1a:fa:4f:01:2a:9d:50:2c:22:b5:c2: eb:5b:79:1a:6d:1b:58:99:95:fa:d9:06:58:ef:fa:e4:06:07: 3d:43:3d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJNjLjjsxaPqo+9zSv5W4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4 NWFmYzIwHhcNMjYwMTIxMDYwMTMyWhcNMjYwMTIyMDYwMTMyWjAzMTEwLwYDVQQD EyhhZTA5MzdmMzc2MGMxYjU1YjEyNzc4YjM4ZWMzMDg2OWE4YjY3NGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuY5ulC8DO+MIZIQxKtAHkwYRsVR W/KQJQWIYeGA335Opi041kSxpRl8xXF170RnJwhmc5D4ViG+3NsjeqpjfcDORwK7 JISmTw1ghqHCKFsj22JPVVZbVpgZmZ/0VohcWPkik00emehD8x++Ul0Tk0k0qUbW AA/qzxhXy1bzNekzM2PAOJU7P8VqR5dwXCEPhzBa76xWqBQUbOoVGNNr6ff1p1En LPKwwti7wqSlKRFZzRwcfVnHONgDSbBspslTdw8cdLA/ETrJYgz6u1bBzK5vDg4W +5ub5JOCrhYLj1BVFVTA/rKxehO5Kih4MB6VpXcfcCHbn60O/cX/llEbeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4JN/N2DBtVsSd4s47DCGmotnT5MB8GA1UdIwQY MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwL2PI5Sd RsglNjEUEDXQgHd/NIdSkgp+mEVzWAzlZ80ZHbPWQfdPHn24kn/EXZXK96QyXGeS 55BGDteu12PjY+cOR/FGaVQXBBW1h+oZOCdxClyCeBqRZmRAb7IkNiUfNk3GaY7E cVgOHVQ3/4kJVuIQxiP+H+sRq3o88jMT9kWGHaUDUh43Fr8UGNv/PjtMv3qDHwEB nIEvs4LcdhVVrxNVBd1i+CXqcTY8siqY+yaM8Vm4UL2N5f1D/h4oM8LVl/X6LJxw LM5Dz+En819WabH4SuEM/T7vIXAzb9+fbxr6TwEqnVAsIrXC61t5Gm0bWJmV+tkG WO/65AYHPUM9pg== -----END CERTIFICATE-----Generated at Wed Jan 21 12:34:10 2026 by rpki-client