This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json) Hash identifier: nCdgk2DT+uTspBWebmHSSWqLcnikUWKqO/5XGP07Zzc= Subject key identifier: 89:8A:72:70:66:0A:81:39:2B:66:DC:81:D8:8C:38:32:E0:EB:84:4B Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059 Certificate serial: 019BFA9B9D439AC34285B61A3D55FCE87ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 14:01:00 +0000 Manifest this update: Mon 26 Jan 2026 14:01:00 +0000 Manifest next update: Tue 27 Jan 2026 14:01:00 +0000 Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: SLg1CJQLeHugeSoatLlxdxpcdmQbVNs4DhMqB+AhIbo=) 2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:9d:43:9a:c3:42:85:b6:1a:3d:55:fc:e8:7e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059 Validity Not Before: Jan 26 14:01:00 2026 GMT Not After : Jan 27 14:01:00 2026 GMT Subject: CN=898a7270660a81392b66dc81d88c3832e0eb844b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:db:1d:bd:b9:84:ae:ae:43:02:20:14:c8: 25:f6:79:a4:21:a5:55:bc:b5:3f:cc:b4:d0:3a:71: b4:99:7b:e0:c0:3c:34:d8:b7:c5:2f:a1:9c:64:8b: dd:13:06:f8:2e:4b:49:e3:3d:96:49:17:4a:ce:c2: 3b:9a:9d:68:5a:37:69:a7:22:4f:f3:ed:56:b7:63: f8:39:84:53:2a:f7:39:db:81:92:70:3e:e0:61:d7: dd:e6:c0:9e:c6:7e:d8:9b:35:9b:b2:ff:99:82:ad: f8:67:b6:25:ea:0b:42:de:78:43:f9:c9:2b:07:25: 11:d4:09:2f:13:ba:25:c8:4a:e1:4a:01:d7:0d:3c: 8d:c4:fb:0d:57:f8:ac:29:c7:77:28:90:da:29:e2: d8:1c:3c:dc:1c:76:65:94:b9:33:54:25:1a:ee:17: 52:3d:89:82:c8:e9:f7:35:a3:92:69:a6:bc:33:90: 1e:06:a2:c3:84:18:3f:be:57:49:f2:83:15:2f:67: a7:73:5c:f3:62:a0:23:e8:17:8c:ff:ee:35:67:21: 46:71:06:f6:52:e2:dd:96:30:52:9e:e2:27:a4:58: f4:f1:2e:c4:36:9f:1b:b3:81:be:65:00:d4:80:54: 46:37:ab:e3:cb:f3:34:6d:ce:87:7a:5a:75:9b:4c: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:72:70:66:0A:81:39:2B:66:DC:81:D8:8C:38:32:E0:EB:84:4B X509v3 Authority Key Identifier: keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:30:bf:bd:e0:f6:7f:10:67:d7:25:6f:8a:91:8e:76:51:1d: d2:b7:67:4c:d3:53:28:82:a8:23:ce:47:7e:43:65:97:30:74: 1f:84:d3:ba:5b:cf:32:42:5d:64:82:b3:2b:10:e4:6f:db:9e: 3b:75:2c:be:77:20:9e:a5:57:7a:f4:12:7f:0a:cc:53:45:7d: d4:99:a3:9e:91:d4:04:1f:99:c1:82:87:d7:78:0a:b5:2c:cb: a2:f8:ef:24:ce:e1:3f:af:fd:23:41:b3:81:08:07:8e:5c:72: b3:e4:f9:21:a1:a8:7d:a4:19:9a:56:97:c6:93:92:38:86:9e: a2:b2:2c:3d:f4:d8:14:21:7e:ed:75:f2:9b:5e:11:c9:77:7d: be:d0:51:f8:8b:b1:ed:d3:69:0c:b1:81:a4:0c:1c:35:25:e2: 31:c8:b0:7e:bb:0d:df:db:67:3f:02:f4:7d:b2:98:64:50:d0: 29:bc:c2:52:e2:0b:2a:89:01:5e:0c:91:5c:3f:cd:01:f8:84: d6:21:fd:94:a1:00:be:4d:47:9f:99:be:ac:71:f5:67:b2:85: 0c:08:a9:d9:d6:44:8d:8b:8d:50:a2:d4:dd:fd:2e:7f:bb:3c: 98:11:0f:cf:92:15:7c:cb:56:8f:93:fc:bb:63:85:87:2e:17: 48:36:ad:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m51DmsNChbYaPVX86H7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjM3NmNlOTIwODdlNGM3Y2U1MzY2ODY1Mzc3NjllMmNj MzQwNTkwHhcNMjYwMTI2MTQwMTAwWhcNMjYwMTI3MTQwMTAwWjAzMTEwLwYDVQQD Eyg4OThhNzI3MDY2MGE4MTM5MmI2NmRjODFkODhjMzgzMmUwZWI4NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnjbHb25hK6uQwIgFMgl9nmkIaVV vLU/zLTQOnG0mXvgwDw02LfFL6GcZIvdEwb4LktJ4z2WSRdKzsI7mp1oWjdppyJP 8+1Wt2P4OYRTKvc524GScD7gYdfd5sCexn7YmzWbsv+Zgq34Z7Yl6gtC3nhD+ckr ByUR1AkvE7olyErhSgHXDTyNxPsNV/isKcd3KJDaKeLYHDzcHHZllLkzVCUa7hdS PYmCyOn3NaOSaaa8M5AeBqLDhBg/vldJ8oMVL2enc1zzYqAj6BeM/+41ZyFGcQb2 UuLdljBSnuInpFj08S7ENp8bs4G+ZQDUgFRGN6vjy/M0bc6Help1m0wYuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImKcnBmCoE5K2bcgdiMODLg64RLMB8GA1UdIwQY MBaAFEpjds6SCH5MfOU2aGU3dp4sw0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQt NGUxZmI3NmM4NDdhLzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQtNGUxZmI3NmM4NDdh LzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETC/veD2 fxBn1yVvipGOdlEd0rdnTNNTKIKoI85HfkNllzB0H4TTulvPMkJdZIKzKxDkb9ue O3UsvncgnqVXevQSfwrMU0V91JmjnpHUBB+ZwYKH13gKtSzLovjvJM7hP6/9I0Gz gQgHjlxys+T5IaGofaQZmlaXxpOSOIaeorIsPfTYFCF+7XXym14RyXd9vtBR+Iux 7dNpDLGBpAwcNSXiMciwfrsN39tnPwL0fbKYZFDQKbzCUuILKokBXgyRXD/NAfiE 1iH9lKEAvk1Hn5m+rHH1Z7KFDAip2dZEjYuNUKLU3f0uf7s8mBEPz5IVfMtWj5P8 u2OFhy4XSDatjg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:38:32 2026 by rpki-client