This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json) Hash identifier: VzJRzf/vbcqcT0IU5mai9Qdk3/Ef6LE+qWtOM2dAU+s= Subject key identifier: 17:EB:49:D0:10:27:0D:FD:DA:31:B5:51:8C:97:FA:59:DD:4B:B3:A5 Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Certificate serial: 019BDFC94D1A4BAD204DFAB0396C880F531C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft Manifest number: 17EE Signing time: Wed 21 Jan 2026 09:01:10 +0000 Manifest this update: Wed 21 Jan 2026 09:01:10 +0000 Manifest next update: Thu 22 Jan 2026 09:01:10 +0000 Files and hashes: 1: 3d74s89tkzzncXSffISWbS6hXVw.roa (hash: +U2y6IfTYHbMQN2g75zDUMWWHtH4QEWgJBNirsLxjxY=) 2: Gm7B2FAaKewBeF9V__wWov1Lp1Y.roa (hash: LT1djHWsJJKg2p/VdcPsG23ZiYOU6Oqmc3hcCAXKCo8=) 3: qAZnmniLW_dV4hlpW7R2ti-Qf5Y.roa (hash: kn3rkTVNHJAXIfTVxFKEVNSH2gRezL0pTR8nuUYg8FQ=) 4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: ExiShzfyeb09LvfB4e9GZp20DsI1/+SCN+ZUjV+usB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:c9:4d:1a:4b:ad:20:4d:fa:b0:39:6c:88:0f:53:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Validity Not Before: Jan 21 09:01:10 2026 GMT Not After : Jan 22 09:01:10 2026 GMT Subject: CN=17eb49d010270dfdda31b5518c97fa59dd4bb3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:65:98:cf:53:7b:29:4b:34:19:a1:13:9b: d5:8d:bd:dd:23:cf:6f:3d:07:58:72:f4:71:13:c2: b2:1d:80:43:ff:a2:24:d6:fe:8e:0f:f0:d9:70:fa: 15:a7:94:18:56:7c:da:ff:f6:56:fc:a2:95:82:c8: 0f:8d:25:d8:38:2b:2a:a7:6b:82:b9:c8:88:d7:80: cb:21:d6:c2:90:d5:14:af:3c:f7:cc:14:84:ba:fb: 8d:c0:30:53:0b:a0:50:67:cd:58:ef:69:a5:b6:d8: a1:dd:e9:f7:d5:6b:69:20:3b:9d:c6:b0:28:f7:0e: 97:93:f4:87:5f:63:2a:86:78:8a:30:4f:d9:13:1f: de:6e:9e:19:41:37:ed:4c:ec:92:00:c3:bd:08:ee: fb:19:dc:81:1e:ad:87:1b:0c:7a:05:2b:86:5d:76: f4:7c:54:9c:4d:c6:42:09:8b:d2:79:e4:fa:f9:28: da:bc:d7:87:dd:40:17:d7:26:c2:5a:0f:66:95:2f: f4:cf:9a:02:10:71:d3:64:c4:b7:ed:81:c3:65:da: aa:78:b1:64:c6:77:a5:1f:32:27:c7:29:7c:ab:67: 64:37:78:b8:4f:11:da:30:b6:18:96:77:bc:39:2f: 53:8c:14:ae:55:d3:90:c4:b0:6f:78:63:79:b6:40: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EB:49:D0:10:27:0D:FD:DA:31:B5:51:8C:97:FA:59:DD:4B:B3:A5 X509v3 Authority Key Identifier: keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8c:a8:b5:e2:a9:61:f5:5c:2b:34:48:69:8e:cc:c6:86:a0: ce:47:6c:a2:2e:e1:db:cb:33:4c:c2:57:be:b2:b3:9d:22:a9: 69:7b:3d:ce:4c:68:23:7f:9e:f9:7f:26:3f:5f:e4:99:f4:cf: 24:7d:59:e6:00:19:16:79:b2:f6:57:c8:aa:01:71:5b:be:27: b9:9e:da:3b:9b:e9:c1:c3:3c:00:dc:ec:d2:c6:93:23:31:fe: 70:01:18:1c:11:71:d4:b7:2f:69:ae:b5:0a:2a:23:50:8d:ed: 9e:0b:a1:d2:1f:b7:1a:b6:b6:e0:4a:11:35:95:3c:a6:7b:c3: 8d:b2:65:c4:7f:b6:d7:a4:48:4a:77:3a:b3:d8:ec:26:1e:de: 71:ab:bc:42:37:40:12:10:48:74:13:7c:cc:a0:7c:af:d6:8b: 62:d6:65:c0:84:ef:e5:54:55:24:bb:61:1d:d6:71:25:ed:cc: 65:91:74:9b:19:de:45:5c:32:16:a3:b5:c5:79:3c:88:c2:d7: 25:c4:04:c3:0d:8d:61:28:24:c5:b1:fa:3f:d4:68:a2:4b:97: 95:c2:d8:54:5a:3b:9e:ec:2a:a5:5e:8d:55:37:bc:20:a4:8f: 84:c2:8c:c4:90:00:e8:62:21:a8:5d:6c:df:ee:6b:13:d0:70: 92:54:f7:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfyU0aS60gTfqwOWyID1McMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw OWU1MGQwHhcNMjYwMTIxMDkwMTEwWhcNMjYwMTIyMDkwMTEwWjAzMTEwLwYDVQQD EygxN2ViNDlkMDEwMjcwZGZkZGEzMWI1NTE4Yzk3ZmE1OWRkNGJiM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzFlmM9TeylLNBmhE5vVjb3dI89v PQdYcvRxE8KyHYBD/6Ik1v6OD/DZcPoVp5QYVnza//ZW/KKVgsgPjSXYOCsqp2uC uciI14DLIdbCkNUUrzz3zBSEuvuNwDBTC6BQZ81Y72mlttih3en31WtpIDudxrAo 9w6Xk/SHX2MqhniKME/ZEx/ebp4ZQTftTOySAMO9CO77GdyBHq2HGwx6BSuGXXb0 fFScTcZCCYvSeeT6+SjavNeH3UAX1ybCWg9mlS/0z5oCEHHTZMS37YHDZdqqeLFk xnelHzInxyl8q2dkN3i4TxHaMLYYlne8OS9TjBSuVdOQxLBveGN5tkDFWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfrSdAQJw392jG1UYyX+lndS7OlMB8GA1UdIwQY MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5 LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoyoteKp YfVcKzRIaY7Mxoagzkdsoi7h28szTMJXvrKznSKpaXs9zkxoI3+e+X8mP1/kmfTP JH1Z5gAZFnmy9lfIqgFxW74nuZ7aO5vpwcM8ANzs0saTIzH+cAEYHBFx1Lcvaa61 CiojUI3tnguh0h+3Gra24EoRNZU8pnvDjbJlxH+216RISnc6s9jsJh7ecau8QjdA EhBIdBN8zKB8r9aLYtZlwITv5VRVJLthHdZxJe3MZZF0mxneRVwyFqO1xXk8iMLX JcQEww2NYSgkxbH6P9RookuXlcLYVFo7nuwqpV6NVTe8IKSPhMKMxJAA6GIhqF1s 3+5rE9BwklT3dw== -----END CERTIFICATE-----Generated at Wed Jan 21 18:49:08 2026 by rpki-client