This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json) Hash identifier: MPG2k+czpKwrXmDJ30tx8w78/yIS193J2zdtEucF2uI= Subject key identifier: BE:7F:92:4C:AE:6D:CF:50:9E:4B:44:59:44:69:3F:60:91:B9:52:12 Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd Certificate serial: 019BD846944A7FE71393EB4BB75FF3BD39F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft Manifest number: 04B2 Signing time: Mon 19 Jan 2026 22:01:02 +0000 Manifest this update: Mon 19 Jan 2026 22:01:02 +0000 Manifest next update: Tue 20 Jan 2026 22:01:02 +0000 Files and hashes: 1: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: ZQnt0RuNIKldBV8lcRvs9pStGLXgmud2I7yShwWBRak=) 2: TK0mGYfamFzjvmIKhbAYXRFUv18.roa (hash: mEStbrRzYyO+KhV7aEr8CwcL0UmalaKifwEWpoVMtQg=) 3: Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa (hash: uBEQAFGBVO4swE9ohNLmgnxXcBg9SBRkpgcmULSTVLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:46:94:4a:7f:e7:13:93:eb:4b:b7:5f:f3:bd:39:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd Validity Not Before: Jan 19 22:01:02 2026 GMT Not After : Jan 20 22:01:02 2026 GMT Subject: CN=be7f924cae6dcf509e4b445944693f6091b95212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:b3:13:9a:35:25:25:36:5d:e3:73:35:40: 13:c5:38:22:93:5f:42:0b:b4:18:29:9b:ad:02:f5: 63:9e:f6:3e:ac:87:a3:dc:8a:49:7d:ed:8a:c9:b1: 52:77:81:d4:bb:ee:5a:1f:4c:0f:db:3c:c3:8a:44: c8:f7:08:79:39:ed:52:a4:de:18:62:8b:fe:6a:fd: 7f:b6:26:7c:7f:72:7c:3e:1e:8f:bc:3c:62:4c:44: 69:39:0e:8e:dc:da:43:bd:16:54:82:b8:86:b3:26: d6:6c:ba:04:a0:aa:8c:8d:d1:7f:8d:00:5c:c4:a2: d1:c9:15:54:e6:1a:10:ec:84:69:af:10:8e:36:2e: da:20:f6:ee:02:7d:dd:02:12:0f:af:aa:e7:8e:a9: 1e:93:8b:c7:9f:b1:d8:db:4c:0e:8f:16:48:ee:82: df:86:b0:71:a9:38:ac:04:30:fb:ad:66:fa:4c:71: 3e:f0:4e:28:01:11:40:56:ff:5e:a0:f1:af:cb:89: 1e:10:50:f5:58:6a:72:6c:75:96:39:ac:8a:3e:d5: 26:1a:fc:5f:ac:09:c1:51:4e:37:22:45:02:01:1f: 55:02:44:f2:a0:64:21:fd:9b:58:d9:1b:2d:04:1a: 48:13:4f:98:12:06:27:12:75:14:47:9e:8d:4d:13: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7F:92:4C:AE:6D:CF:50:9E:4B:44:59:44:69:3F:60:91:B9:52:12 X509v3 Authority Key Identifier: keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:cb:e2:a9:47:18:72:1a:d7:0b:26:d0:ac:0c:9d:fa:56:97: ee:c5:50:d2:40:2b:e5:b0:1f:cd:42:32:2c:b9:74:8e:15:f7: f2:5e:02:aa:b5:f1:c6:14:e3:b2:ac:c2:0e:20:e8:e1:28:41: 41:de:77:2f:94:25:3a:14:64:d3:49:be:d3:92:63:a6:9d:82: 26:46:88:87:6d:d9:fc:06:17:3d:69:5c:d4:45:f4:7f:99:4f: fe:70:49:f1:9d:92:1e:bd:68:30:04:8e:a6:75:18:7a:58:e5: 2f:d2:19:bb:33:4b:75:4e:70:d2:97:75:76:77:e1:74:f3:ac: b9:42:3c:9b:02:0f:90:c9:f5:02:db:67:b1:d2:e7:f3:45:6a: 75:bc:51:3c:86:0f:41:1f:53:0f:f2:b9:48:02:12:c1:54:04: 19:2a:17:22:07:b1:60:ed:db:32:73:04:9a:21:8b:76:1b:0b: 57:b4:d1:b8:4f:e5:e8:62:69:f3:fd:ff:f3:50:89:5f:3a:81: fb:40:c6:f8:7c:ea:e6:b1:3b:82:29:e6:c5:b9:eb:14:5e:02: 9b:61:cc:67:e6:c7:c6:28:aa:77:c8:5b:46:7e:25:04:47:08: e5:bd:c6:af:33:e0:2b:60:cd:ac:e1:b8:ca:81:ec:49:7d:52: f2:f1:14:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRpRKf+cTk+tLt1/zvTnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNGZiZmNmNWZkYzQ4YWIwYmZiNTI4NTRmN2EwNGZjMWNm ZjFkYmQwHhcNMjYwMTE5MjIwMTAyWhcNMjYwMTIwMjIwMTAyWjAzMTEwLwYDVQQD EyhiZTdmOTI0Y2FlNmRjZjUwOWU0YjQ0NTk0NDY5M2Y2MDkxYjk1MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQCzE5o1JSU2XeNzNUATxTgik19C C7QYKZutAvVjnvY+rIej3IpJfe2KybFSd4HUu+5aH0wP2zzDikTI9wh5Oe1SpN4Y Yov+av1/tiZ8f3J8Ph6PvDxiTERpOQ6O3NpDvRZUgriGsybWbLoEoKqMjdF/jQBc xKLRyRVU5hoQ7IRprxCONi7aIPbuAn3dAhIPr6rnjqkek4vHn7HY20wOjxZI7oLf hrBxqTisBDD7rWb6THE+8E4oARFAVv9eoPGvy4keEFD1WGpybHWWOayKPtUmGvxf rAnBUU43IkUCAR9VAkTyoGQh/ZtY2RstBBpIE0+YEgYnEnUUR56NTRNn4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5/kkyubc9QnktEWURpP2CRuVISMB8GA1UdIwQY MBaAFEtPv89f3EirC/tShU96BPwc/x29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODIt OTJkZGVjNmJkMGEyLzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODItOTJkZGVjNmJkMGEy LzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8viqUcY chrXCybQrAyd+laX7sVQ0kAr5bAfzUIyLLl0jhX38l4CqrXxxhTjsqzCDiDo4ShB Qd53L5QlOhRk00m+05Jjpp2CJkaIh23Z/AYXPWlc1EX0f5lP/nBJ8Z2SHr1oMASO pnUYeljlL9IZuzNLdU5w0pd1dnfhdPOsuUI8mwIPkMn1AttnsdLn80VqdbxRPIYP QR9TD/K5SAISwVQEGSoXIgexYO3bMnMEmiGLdhsLV7TRuE/l6GJp8/3/81CJXzqB +0DG+Hzq5rE7ginmxbnrFF4Cm2HMZ+bHxiiqd8hbRn4lBEcI5b3GrzPgK2DNrOG4 yoHsSX1S8vEUVQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:49 2026 by rpki-client