This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json) Hash identifier: jcOGeM2S7GU4KUHlTz6g0ARuNXSINNaBhj8FNWkyPTk= Subject key identifier: 2E:2D:79:B7:6D:C1:F3:B8:98:10:19:49:69:8A:08:76:EF:1D:71:7A Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Certificate serial: 019BD8EB77A8E1F8B5FBAC50FFBCF8C9A7F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft Manifest number: 0B4A Signing time: Tue 20 Jan 2026 01:01:08 +0000 Manifest this update: Tue 20 Jan 2026 01:01:08 +0000 Manifest next update: Wed 21 Jan 2026 01:01:08 +0000 Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: 41uX7r+0/cvivnVz6GUQV4tKyuxmdNb9FKXIv/Q7Sx8=) 2: lPpzGgNvjwukwqRL_whPt-OBcMY.roa (hash: l0AQK9le+F2uKp/8HEL6F8vAlRq18weB4VjzJ0OIimM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:eb:77:a8:e1:f8:b5:fb:ac:50:ff:bc:f8:c9:a7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Validity Not Before: Jan 20 01:01:08 2026 GMT Not After : Jan 21 01:01:08 2026 GMT Subject: CN=2e2d79b76dc1f3b898101949698a0876ef1d717a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:c5:82:83:68:d2:5f:c6:de:d0:38:87:61: b2:25:d5:5c:3c:92:47:eb:a2:31:fa:17:2b:52:fb: 97:4d:5d:32:6b:8e:bf:a5:36:37:ba:1f:f0:f6:e7: 70:94:c6:de:61:17:17:e9:01:9d:de:02:1d:c4:25: 51:af:84:19:48:64:b8:37:26:b8:5f:cb:8d:68:02: a0:eb:19:5c:4f:6a:86:fa:77:57:21:2b:7f:cb:79: 97:07:e1:e9:6d:0e:9a:53:1c:23:e4:83:3a:7f:f3: 19:6b:49:59:50:75:15:b4:0a:da:55:72:49:b7:8d: ab:ff:ce:d8:ae:d8:7b:6d:b7:e6:8f:9b:90:40:e5: 1f:c3:13:bb:1a:a6:65:88:e5:17:34:9c:75:f1:07: a8:72:99:77:57:9d:7a:10:f8:2d:97:48:48:b3:49: 88:53:9b:c6:a5:8e:4b:d7:d4:39:21:f9:b5:93:75: 47:9a:ff:b2:82:17:40:d9:b6:a4:98:bc:84:4a:ba: 88:34:17:61:89:72:97:50:3b:45:11:6d:68:6c:a0: b3:d8:b9:73:fe:60:fc:26:d6:19:00:5b:a8:d8:33: 5a:a6:8f:ca:ec:5b:ed:08:6a:8b:16:16:b1:52:1f: e6:f5:e3:77:36:b7:f8:c2:bd:4d:79:92:24:50:d6: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2D:79:B7:6D:C1:F3:B8:98:10:19:49:69:8A:08:76:EF:1D:71:7A X509v3 Authority Key Identifier: keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:be:74:58:c4:22:3c:9a:59:27:1c:ef:77:e9:78:6c:2f:13: 05:47:88:d4:44:b9:3e:3d:dc:26:ec:f9:cd:5e:85:4d:0b:4f: a8:8f:14:e2:f2:92:a9:b5:e6:18:bd:f3:93:8b:d7:33:0b:4c: e2:a8:88:24:25:33:94:a3:07:9a:17:64:47:a1:2c:10:e7:bc: 3d:04:b0:62:4d:5c:cd:a7:b5:d1:db:8e:42:59:f4:fc:00:ee: 63:76:e4:90:33:14:9c:6a:04:64:80:8c:b5:4a:69:92:79:9b: c7:c8:fd:a5:97:c8:7d:82:63:8b:bb:aa:a4:c1:f8:6d:fa:aa: ae:8e:9a:31:5f:db:c1:18:85:4d:f5:4c:42:eb:67:89:c9:3b: eb:86:91:50:e3:02:6f:e9:95:29:a1:b3:77:29:49:90:af:fd: 19:1d:bf:e7:77:64:2d:a9:bc:63:a0:b8:13:f0:ee:d9:be:78: f6:4d:22:03:0c:9b:99:c2:99:0a:19:99:29:bc:cf:60:51:9c: cd:5e:92:16:fc:d4:0c:c2:af:c3:18:e9:d4:11:08:32:98:e1: 83:7d:14:1f:8e:a6:64:c0:26:cb:0c:85:92:a2:61:3b:28:8e: 23:08:db:a2:e8:a9:c0:36:ed:8b:2b:55:76:d3:ed:82:1d:ad: 65:2e:b8:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvY63eo4fi1+6xQ/7z4yafyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk MDVjNmYwHhcNMjYwMTIwMDEwMTA4WhcNMjYwMTIxMDEwMTA4WjAzMTEwLwYDVQQD EygyZTJkNzliNzZkYzFmM2I4OTgxMDE5NDk2OThhMDg3NmVmMWQ3MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb/FgoNo0l/G3tA4h2GyJdVcPJJH 66Ix+hcrUvuXTV0ya46/pTY3uh/w9udwlMbeYRcX6QGd3gIdxCVRr4QZSGS4Nya4 X8uNaAKg6xlcT2qG+ndXISt/y3mXB+HpbQ6aUxwj5IM6f/MZa0lZUHUVtAraVXJJ t42r/87Yrth7bbfmj5uQQOUfwxO7GqZliOUXNJx18Qeocpl3V516EPgtl0hIs0mI U5vGpY5L19Q5Ifm1k3VHmv+yghdA2bakmLyESrqINBdhiXKXUDtFEW1obKCz2Llz /mD8JtYZAFuo2DNapo/K7FvtCGqLFhaxUh/m9eN3Nrf4wr1NeZIkUNZJKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4tebdtwfO4mBAZSWmKCHbvHXF6MB8GA1UdIwQY MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL50WMQi PJpZJxzvd+l4bC8TBUeI1ES5Pj3cJuz5zV6FTQtPqI8U4vKSqbXmGL3zk4vXMwtM 4qiIJCUzlKMHmhdkR6EsEOe8PQSwYk1czae10duOQln0/ADuY3bkkDMUnGoEZICM tUppknmbx8j9pZfIfYJji7uqpMH4bfqqro6aMV/bwRiFTfVMQutnick764aRUOMC b+mVKaGzdylJkK/9GR2/53dkLam8Y6C4E/Du2b549k0iAwybmcKZChmZKbzPYFGc zV6SFvzUDMKvwxjp1BEIMpjhg30UH46mZMAmywyFkqJhOyiOIwjbouipwDbtiytV dtPtgh2tZS64OQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:50 2026 by rpki-client