This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json) Hash identifier: TzdrdkxpHLmqjPSyQxIoDBl3RrjKhtGdAGsggzxTXN4= Subject key identifier: 42:2F:9C:72:DF:79:C8:A7:B1:28:ED:32:04:87:F7:89:FD:16:48:9D Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Certificate serial: 019BFB09206F532CF118DC8DAF640156A8D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 16:00:37 +0000 Manifest this update: Mon 26 Jan 2026 16:00:37 +0000 Manifest next update: Tue 27 Jan 2026 16:00:37 +0000 Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=) 2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: LdSt3fWzarwtkBzPCfCorUXPbzrR3PEYPCa2NM8gMkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:20:6f:53:2c:f1:18:dc:8d:af:64:01:56:a8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Validity Not Before: Jan 26 16:00:37 2026 GMT Not After : Jan 27 16:00:37 2026 GMT Subject: CN=422f9c72df79c8a7b128ed320487f789fd16489d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:68:86:5f:83:e1:55:e1:ea:82:36:02:6f: b2:3b:5d:75:d7:3d:8e:92:ec:e0:40:96:65:98:45: 7d:f7:5d:9a:7e:ed:f8:4e:72:65:67:39:67:25:17: 08:cb:8f:cc:99:1b:b5:76:f1:d8:b0:bb:91:59:07: 3a:fa:cb:48:b9:ee:81:f8:9a:63:7e:ee:b0:e7:e0: 47:1c:0c:3b:11:9b:37:b4:dc:c8:84:a7:ab:0d:e0: b3:17:fb:5b:dc:61:ba:4f:40:ce:92:c7:1a:d2:d2: 5b:6a:aa:69:a1:ec:59:28:43:45:24:a9:b8:56:f4: 31:1f:24:78:62:ef:d1:01:22:39:73:00:7b:37:ec: 05:cc:cb:fc:9c:7e:41:be:38:6f:6d:bf:28:4a:3d: 0c:59:37:6c:1c:78:97:ca:31:a7:a6:29:47:14:72: 76:ee:79:61:44:23:70:33:ad:4d:24:79:45:32:02: 3b:ac:5b:5f:3f:56:f5:90:8c:84:0c:ae:31:61:de: 11:07:9c:6a:69:e5:09:99:d7:4a:13:f3:0f:b9:de: 48:b4:9b:9e:6a:49:bd:98:84:9e:09:65:5e:8b:f5: ea:19:13:3a:5a:eb:dc:93:19:11:0b:ec:e0:8b:eb: ff:e3:f2:db:2c:6d:84:ac:2d:05:8e:a3:25:3f:27: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:9C:72:DF:79:C8:A7:B1:28:ED:32:04:87:F7:89:FD:16:48:9D X509v3 Authority Key Identifier: keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:df:eb:e3:45:01:b7:bf:de:fd:c2:bc:73:87:05:8b:d4:07: 1b:c8:83:8d:0c:26:52:e1:ff:80:48:75:f5:12:69:2d:39:43: bc:2c:8d:b5:8a:8f:43:ce:55:6f:2a:a6:90:65:65:20:78:71: 21:de:93:15:d4:ca:46:05:2a:7e:9c:8c:bb:1e:f7:4c:e1:7b: db:63:90:7e:8e:00:9f:80:e6:18:1f:8c:b3:58:04:32:16:83: c9:80:00:8b:7b:17:1c:00:a6:cd:fd:49:3f:a1:75:2a:c1:2e: f5:7f:d5:4a:bb:e5:93:12:1f:e2:a6:af:2d:b2:d9:d7:fc:44: 41:57:a9:69:58:7e:81:35:37:1e:a4:6d:31:14:35:ba:ff:75: 62:35:ab:72:cb:53:6d:4e:89:45:2c:51:36:0c:86:76:06:2c: f2:48:a7:58:0b:d0:fd:c0:f2:78:fb:73:a9:3d:84:bc:77:7f: 01:c1:08:d4:40:1b:e7:03:e6:52:87:7d:1e:ee:4d:9f:05:f7: 7b:22:85:ec:2a:1b:0f:6f:3c:18:aa:16:d7:47:a3:6e:a4:cb: 63:e2:7b:cc:20:cd:f4:e2:29:b3:57:63:c0:15:07:17:d7:d8: cc:0f:ee:43:10:73:28:0a:8f:1e:7f:be:db:e3:c3:ad:83:e5: 97:79:4a:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CSBvUyzxGNyNr2QBVqjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk NGJlNGYwHhcNMjYwMTI2MTYwMDM3WhcNMjYwMTI3MTYwMDM3WjAzMTEwLwYDVQQD Eyg0MjJmOWM3MmRmNzljOGE3YjEyOGVkMzIwNDg3Zjc4OWZkMTY0ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxepohl+D4VXh6oI2Am+yO1111z2O kuzgQJZlmEV9912afu34TnJlZzlnJRcIy4/MmRu1dvHYsLuRWQc6+stIue6B+Jpj fu6w5+BHHAw7EZs3tNzIhKerDeCzF/tb3GG6T0DOksca0tJbaqppoexZKENFJKm4 VvQxHyR4Yu/RASI5cwB7N+wFzMv8nH5Bvjhvbb8oSj0MWTdsHHiXyjGnpilHFHJ2 7nlhRCNwM61NJHlFMgI7rFtfP1b1kIyEDK4xYd4RB5xqaeUJmddKE/MPud5ItJue akm9mISeCWVei/XqGRM6WuvckxkRC+zgi+v/4/LbLG2ErC0FjqMlPycftQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIvnHLfecinsSjtMgSH94n9FkidMB8GA1UdIwQY MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN/r40UB t7/e/cK8c4cFi9QHG8iDjQwmUuH/gEh19RJpLTlDvCyNtYqPQ85VbyqmkGVlIHhx Id6TFdTKRgUqfpyMux73TOF722OQfo4An4DmGB+Ms1gEMhaDyYAAi3sXHACmzf1J P6F1KsEu9X/VSrvlkxIf4qavLbLZ1/xEQVepaVh+gTU3HqRtMRQ1uv91YjWrcstT bU6JRSxRNgyGdgYs8kinWAvQ/cDyePtzqT2EvHd/AcEI1EAb5wPmUod9Hu5NnwX3 eyKF7CobD288GKoW10ejbqTLY+J7zCDN9OIps1djwBUHF9fYzA/uQxBzKAqPHn++ 2+PDrYPll3lKJw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:24 2026 by rpki-client