This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json) Hash identifier: tUkCKONMV0OlfKiYm7H2KpfXPLPU6ItCbGTPu+7J4uo= Subject key identifier: 82:E5:D8:1A:3C:C4:43:B7:F4:F2:87:41:15:21:67:D2:7B:22:A2:53 Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Certificate serial: 019C0B58B059D03B735497B600507DD2B6E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft Manifest number: 1786 Signing time: Thu 29 Jan 2026 20:01:27 +0000 Manifest this update: Thu 29 Jan 2026 20:01:27 +0000 Manifest next update: Fri 30 Jan 2026 20:01:27 +0000 Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=) 2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: 0GGkUQeXwHUeAoDdvH68alOCLY1KjmxbbptjKE2nUMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:58:b0:59:d0:3b:73:54:97:b6:00:50:7d:d2:b6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Validity Not Before: Jan 29 20:01:27 2026 GMT Not After : Jan 30 20:01:27 2026 GMT Subject: CN=82e5d81a3cc443b7f4f28741152167d27b22a253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:aa:80:60:0f:a8:b3:3e:d3:70:3a:aa:eb: 49:ad:45:24:04:7e:23:56:47:1a:12:cb:04:73:4e: c4:55:f3:b3:f6:e6:1d:1e:df:4b:53:24:cb:5b:4b: e8:72:5a:8e:b7:c1:c9:fb:f5:1d:fd:46:bb:3a:e0: 60:2a:d3:28:3b:0e:e9:65:d5:8c:2b:72:30:a5:ee: 5e:4d:6f:6d:a4:9d:06:b1:2b:90:db:20:8c:9d:58: 09:50:e5:60:95:3f:17:79:6e:27:07:d1:d2:f0:7d: f5:b6:2a:2f:14:8c:8e:e3:d7:e8:f2:d9:55:60:18: 69:61:45:05:27:5a:cf:98:8e:5d:3e:bf:a2:b6:ea: 75:a7:e2:d3:5b:29:8f:3c:98:9e:36:a3:73:3b:e8: ef:6f:12:07:ea:66:aa:5c:d3:9b:03:8b:f1:8f:0d: 8f:d1:ff:5f:f3:ba:a6:86:cf:c9:b4:ff:9d:d6:4d: 14:e5:60:6b:78:42:7a:b6:33:ba:ad:81:e7:22:80: 4b:5a:67:19:93:fe:23:86:96:c2:67:e0:d4:42:33: b2:cd:3b:e9:dd:f7:a4:0a:8d:47:1c:f6:6a:a2:71: 0f:64:26:bf:2a:92:43:9e:67:b0:74:fa:9d:db:76: ec:8b:d4:12:ab:ca:0e:eb:8a:56:1e:48:f8:cf:50: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E5:D8:1A:3C:C4:43:B7:F4:F2:87:41:15:21:67:D2:7B:22:A2:53 X509v3 Authority Key Identifier: keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9b:59:4e:b4:6a:68:a2:48:d2:a0:a4:0a:c0:39:63:37:f0: 62:9b:d2:b4:d1:00:e3:88:44:5d:61:20:6e:b1:54:39:5d:2a: c5:2e:6a:ca:78:c6:68:23:5b:71:25:e0:c1:9e:85:d0:f1:dd: 42:30:8c:33:60:c2:2a:3d:66:7e:04:63:15:4f:cd:ef:b6:de: 6d:b8:5f:db:2b:25:cf:57:e3:e0:c3:92:41:3f:45:8a:07:ef: 61:a2:47:8e:5c:6c:a6:81:24:0a:54:64:28:19:41:ab:28:16: f3:42:7b:d5:8b:c6:65:95:0a:b1:19:26:4d:c1:3e:d7:81:fe: de:f5:56:f9:f8:4f:dd:b0:e0:39:a1:56:fd:67:b1:c2:ed:11: b5:bf:67:9a:ee:92:e4:a3:0d:17:0d:53:11:ee:3d:6b:83:88: 23:64:cd:53:06:65:c4:fe:08:21:67:8f:19:11:fd:21:c6:ac: d0:db:75:00:67:c3:5d:ac:84:6c:f9:6f:a4:9b:04:ae:1d:c8: ff:63:31:2e:fd:8e:bb:90:95:a2:69:e7:56:bc:4b:82:5b:30: a8:ac:47:d0:f0:6a:93:c6:28:4e:7a:f2:0d:2e:86:33:c5:6a: c1:5f:84:2f:41:e5:71:d4:97:a1:15:48:80:32:10:da:41:b1: 72:f2:6a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwLWLBZ0DtzVJe2AFB90rbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz YzAyYzgwHhcNMjYwMTI5MjAwMTI3WhcNMjYwMTMwMjAwMTI3WjAzMTEwLwYDVQQD Eyg4MmU1ZDgxYTNjYzQ0M2I3ZjRmMjg3NDExNTIxNjdkMjdiMjJhMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFeqgGAPqLM+03A6qutJrUUkBH4j VkcaEssEc07EVfOz9uYdHt9LUyTLW0voclqOt8HJ+/Ud/Ua7OuBgKtMoOw7pZdWM K3Iwpe5eTW9tpJ0GsSuQ2yCMnVgJUOVglT8XeW4nB9HS8H31tiovFIyO49fo8tlV YBhpYUUFJ1rPmI5dPr+itup1p+LTWymPPJieNqNzO+jvbxIH6maqXNObA4vxjw2P 0f9f87qmhs/JtP+d1k0U5WBreEJ6tjO6rYHnIoBLWmcZk/4jhpbCZ+DUQjOyzTvp 3fekCo1HHPZqonEPZCa/KpJDnmewdPqd23bsi9QSq8oO64pWHkj4z1B5PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILl2Bo8xEO39PKHQRUhZ9J7IqJTMB8GA1UdIwQY MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZtZTrRq aKJI0qCkCsA5YzfwYpvStNEA44hEXWEgbrFUOV0qxS5qynjGaCNbcSXgwZ6F0PHd QjCMM2DCKj1mfgRjFU/N77bebbhf2yslz1fj4MOSQT9FigfvYaJHjlxspoEkClRk KBlBqygW80J71YvGZZUKsRkmTcE+14H+3vVW+fhP3bDgOaFW/Wexwu0Rtb9nmu6S 5KMNFw1TEe49a4OII2TNUwZlxP4IIWePGRH9Icas0Nt1AGfDXayEbPlvpJsErh3I /2MxLv2Ou5CVomnnVrxLglswqKxH0PBqk8YoTnryDS6GM8VqwV+EL0HlcdSXoRVI gDIQ2kGxcvJqgA== -----END CERTIFICATE-----Generated at Fri Jan 30 00:57:37 2026 by rpki-client