This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json) Hash identifier: 9jPMoI97vtfNyCsNtNKhdB2jDHPYYQlhayox5hAT2RM= Subject key identifier: CF:D0:7E:C0:C7:B2:B9:2F:1E:C5:9F:3A:83:35:DD:B4:AA:06:3A:8F Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802 Certificate serial: 019BA535602F6678C253642C5B184B74209B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft Manifest number: 14E2 Signing time: Sat 10 Jan 2026 00:01:37 +0000 Manifest this update: Sat 10 Jan 2026 00:01:37 +0000 Manifest next update: Sun 11 Jan 2026 00:01:37 +0000 Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: ASxYiWDYrnKTczTFeZ1Ex2886HmI4/vFS3ZvnYhgfKs=) 2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=) 3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a5:35:60:2f:66:78:c2:53:64:2c:5b:18:4b:74:20:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8d822165e7f01f722c973967f7554605240802 Validity Not Before: Jan 10 00:01:37 2026 GMT Not After : Jan 11 00:01:37 2026 GMT Subject: CN=cfd07ec0c7b2b92f1ec59f3a8335ddb4aa063a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:9e:ff:27:73:89:87:cf:e4:66:35:3d:bf: 6b:5f:34:df:b5:99:bd:45:67:73:df:b7:ad:f7:a3: ed:d4:33:10:50:eb:4c:ee:07:84:1a:dd:28:a4:39: b5:84:bf:08:48:bf:04:3f:f5:cd:bc:43:58:1e:ef: fb:5b:5c:d0:cd:b3:12:53:40:d5:14:06:a3:f4:f5: 91:7d:4d:47:4b:c7:b4:02:0f:97:c0:30:78:86:48: 2e:43:a6:a0:d2:c1:a4:8e:68:20:64:9a:71:dd:fb: bb:f5:30:85:c7:2e:d0:f2:81:1e:2b:65:03:09:dc: 89:1b:f0:40:55:03:0c:0f:fa:5a:88:dd:32:3d:e2: 9a:9a:cc:ca:53:0e:c3:3d:f5:22:6c:70:a3:81:76: 9c:55:db:1c:53:f1:84:f6:53:32:09:a1:6f:c1:cc: a2:b8:e1:70:7f:f4:79:fd:1c:36:11:e6:cd:a6:be: ba:47:01:e6:d4:2d:8b:40:4e:3a:2e:f3:4b:71:b9: db:ae:1a:5a:37:e7:e7:c1:e3:8d:4a:1f:3f:1e:b4: 29:3d:94:3d:3c:0c:08:dc:1c:64:d5:49:b7:ab:7e: 78:5d:63:5f:a7:b7:e7:f9:3b:75:e1:1b:3f:41:47: 01:22:3f:a6:89:89:af:fc:80:86:d6:40:ec:64:97: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D0:7E:C0:C7:B2:B9:2F:1E:C5:9F:3A:83:35:DD:B4:AA:06:3A:8F X509v3 Authority Key Identifier: keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3c:0c:72:94:50:51:2c:52:67:d4:f1:ac:9d:e0:21:dd:ba: 8c:79:84:55:07:77:c9:09:43:7b:60:f2:9d:52:f8:1f:51:dd: 8f:eb:b9:93:1c:ba:76:73:ce:27:bf:1c:ab:65:4e:45:73:32: ad:67:7d:fa:ed:dc:2d:0f:45:5b:1d:ea:b5:94:ad:b1:61:28: 0d:23:08:0e:95:aa:e6:d3:80:76:e6:eb:ee:16:7f:1e:e7:37: 4b:3e:de:af:96:94:73:2d:14:5a:27:45:4a:2e:46:7f:65:0b: e8:9e:3e:c4:53:94:e0:52:14:68:87:58:b5:bd:5e:5f:a1:cb: ca:e6:8e:db:10:e8:4c:3c:27:89:65:9c:63:af:e6:b4:36:35: 3c:08:3a:9f:e7:13:36:04:05:9d:55:d6:0d:5f:e2:4d:21:29: 9e:6c:10:66:1b:aa:a5:0a:a9:cb:70:a1:88:50:56:dc:b5:8a: 22:04:e3:f8:b7:7e:fa:ab:3c:e1:43:79:02:31:0c:3b:53:6b: 07:68:67:b8:4c:12:85:ce:a4:6e:6a:53:bc:43:60:81:46:df: 56:35:77:8c:07:95:02:50:73:b4:06:64:25:d0:a9:bc:dd:58: a9:73:9e:dc:1d:8a:36:f1:c9:35:07:81:d7:5f:c3:51:5a:55: 81:2b:69:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZulNWAvZnjCU2QsWxhLdCCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy NDA4MDIwHhcNMjYwMTEwMDAwMTM3WhcNMjYwMTExMDAwMTM3WjAzMTEwLwYDVQQD EyhjZmQwN2VjMGM3YjJiOTJmMWVjNTlmM2E4MzM1ZGRiNGFhMDYzYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG6e/ydziYfP5GY1Pb9rXzTftZm9 RWdz37et96Pt1DMQUOtM7geEGt0opDm1hL8ISL8EP/XNvENYHu/7W1zQzbMSU0DV FAaj9PWRfU1HS8e0Ag+XwDB4hkguQ6ag0sGkjmggZJpx3fu79TCFxy7Q8oEeK2UD CdyJG/BAVQMMD/paiN0yPeKamszKUw7DPfUibHCjgXacVdscU/GE9lMyCaFvwcyi uOFwf/R5/Rw2EebNpr66RwHm1C2LQE46LvNLcbnbrhpaN+fnweONSh8/HrQpPZQ9 PAwI3Bxk1Um3q354XWNfp7fn+Tt14Rs/QUcBIj+miYmv/ICG1kDsZJfGaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/QfsDHsrkvHsWfOoM13bSqBjqPMB8GA1UdIwQY MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzwMcpRQ USxSZ9TxrJ3gId26jHmEVQd3yQlDe2DynVL4H1Hdj+u5kxy6dnPOJ78cq2VORXMy rWd9+u3cLQ9FWx3qtZStsWEoDSMIDpWq5tOAdubr7hZ/Huc3Sz7er5aUcy0UWidF Si5Gf2UL6J4+xFOU4FIUaIdYtb1eX6HLyuaO2xDoTDwniWWcY6/mtDY1PAg6n+cT NgQFnVXWDV/iTSEpnmwQZhuqpQqpy3ChiFBW3LWKIgTj+Ld++qs84UN5AjEMO1Nr B2hnuEwShc6kbmpTvENggUbfVjV3jAeVAlBztAZkJdCpvN1YqXOe3B2KNvHJNQeB 11/DUVpVgStp2w== -----END CERTIFICATE-----Generated at Sat Jan 10 06:03:08 2026 by rpki-client