This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json) Hash identifier: 2SO29qqSigePRGsUjZZHfT5J6FgU7L54pa6YMqz43LM= Subject key identifier: 08:FC:92:78:6B:9A:9C:0C:D9:FF:45:8F:F7:E3:F0:BE:BB:98:20:4A Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Certificate serial: 019BFC8A5E55E83D9853F7DABD9E011FC819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft Manifest number: 105A Signing time: Mon 26 Jan 2026 23:01:25 +0000 Manifest this update: Mon 26 Jan 2026 23:01:25 +0000 Manifest next update: Tue 27 Jan 2026 23:01:25 +0000 Files and hashes: 1: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (hash: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc=) 2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: +5F9l5xZAKc04gDn83yKZ707z4x6vMaVqQhSlLm9khc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:5e:55:e8:3d:98:53:f7:da:bd:9e:01:1f:c8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Validity Not Before: Jan 26 23:01:25 2026 GMT Not After : Jan 27 23:01:25 2026 GMT Subject: CN=08fc92786b9a9c0cd9ff458ff7e3f0bebb98204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:a3:a2:55:8a:5b:c1:ae:91:45:aa:86:ab: 85:3e:5d:0e:e7:ed:c1:6c:73:c3:6d:7b:df:17:e8: ea:85:b2:04:b1:8d:d2:d9:e1:96:e7:a4:22:6c:ed: 15:9a:2c:ab:1c:15:5f:2b:9f:db:a5:16:8f:ef:f7: ec:0d:e1:8d:fa:0b:03:75:52:bc:41:5c:8c:4a:d1: 8e:c1:35:96:e4:2b:f1:a5:6d:34:2c:36:cd:9f:a1: eb:90:f5:63:5e:3c:de:a1:99:6b:1a:1f:a4:7b:9e: f5:51:be:89:8a:7e:e0:ac:7d:33:28:2c:9b:42:01: 12:79:32:35:65:c7:d6:0d:3b:53:a5:b0:a2:5b:27: c1:8f:f9:03:cb:08:22:27:a8:06:b7:96:04:6b:51: fd:7a:53:bc:74:52:75:4d:7b:6e:dd:20:d6:39:80: 2f:27:6c:10:74:7b:9a:c4:b5:1e:e8:24:5f:1a:75: c8:a7:07:99:07:2e:17:19:6d:3b:f5:9a:78:3f:1a: 13:51:d4:98:93:72:28:f1:75:39:39:4f:a2:56:6d: a0:31:9c:2e:91:65:ec:be:8b:75:57:60:2b:a1:d3: 1f:00:0c:1d:13:15:4e:fe:63:f8:49:37:6d:ea:e9: e7:f9:08:e8:97:b8:2c:0b:95:c0:b9:89:cd:61:75: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FC:92:78:6B:9A:9C:0C:D9:FF:45:8F:F7:E3:F0:BE:BB:98:20:4A X509v3 Authority Key Identifier: keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a3:f7:60:69:3a:3a:4d:da:60:a6:1e:9a:73:2a:e2:e5:ce: 44:07:bd:77:0a:a9:99:32:5c:6f:ec:6b:79:63:8e:6e:f7:18: 01:78:98:98:07:a1:2e:2c:59:cc:c5:7c:43:f4:5c:10:2a:60: e0:56:71:e1:ae:54:43:37:5e:6e:96:1b:2d:93:ce:b1:a6:fc: 95:ce:f8:8a:a8:fa:c9:5d:b4:8a:cc:57:b6:3a:ef:26:18:7e: 86:9c:b0:1d:01:77:28:79:77:ad:69:ef:06:81:5a:53:91:a1: e4:93:03:a3:8e:2a:78:35:bb:8d:ae:80:45:77:df:1a:09:79: 1e:5a:20:8a:49:0c:b3:e6:3f:e3:d2:47:1c:79:b9:cb:ba:98: 1b:82:4f:b8:e2:3b:2c:73:fd:e4:88:f4:9e:01:2b:e9:ad:55: a7:d7:6e:9d:01:cf:ba:aa:4e:28:21:7b:93:cd:68:b3:24:f9: c7:77:41:52:b0:a2:54:84:2d:df:87:1e:24:e9:86:20:51:7c: b8:7f:d0:77:92:31:71:6e:4a:d5:e8:b1:ff:36:d1:02:c1:df: 24:03:38:bf:a0:c0:2a:6f:bf:91:79:75:eb:f5:53:30:94:4f: 06:c8:c5:e7:7b:9f:5f:52:e7:d1:3b:a8:5f:ac:b1:91:92:5a: cf:14:b6:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8il5V6D2YU/favZ4BH8gZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0 MTEyNTcwHhcNMjYwMTI2MjMwMTI1WhcNMjYwMTI3MjMwMTI1WjAzMTEwLwYDVQQD EygwOGZjOTI3ODZiOWE5YzBjZDlmZjQ1OGZmN2UzZjBiZWJiOTgyMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGyjolWKW8GukUWqhquFPl0O5+3B bHPDbXvfF+jqhbIEsY3S2eGW56QibO0VmiyrHBVfK5/bpRaP7/fsDeGN+gsDdVK8 QVyMStGOwTWW5CvxpW00LDbNn6HrkPVjXjzeoZlrGh+ke571Ub6Jin7grH0zKCyb QgESeTI1ZcfWDTtTpbCiWyfBj/kDywgiJ6gGt5YEa1H9elO8dFJ1TXtu3SDWOYAv J2wQdHuaxLUe6CRfGnXIpweZBy4XGW079Zp4PxoTUdSYk3Io8XU5OU+iVm2gMZwu kWXsvot1V2ArodMfAAwdExVO/mP4STdt6unn+Qjol7gsC5XAuYnNYXX8dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj8knhrmpwM2f9Fj/fj8L67mCBKMB8GA1UdIwQY MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaP3YGk6 Ok3aYKYemnMq4uXORAe9dwqpmTJcb+xreWOObvcYAXiYmAehLixZzMV8Q/RcECpg 4FZx4a5UQzdebpYbLZPOsab8lc74iqj6yV20isxXtjrvJhh+hpywHQF3KHl3rWnv BoFaU5Gh5JMDo44qeDW7ja6ARXffGgl5HlogikkMs+Y/49JHHHm5y7qYG4JPuOI7 LHP95Ij0ngEr6a1Vp9dunQHPuqpOKCF7k81osyT5x3dBUrCiVIQt34ceJOmGIFF8 uH/Qd5IxcW5K1eix/zbRAsHfJAM4v6DAKm+/kXl16/VTMJRPBsjF53ufX1Ln0Tuo X6yxkZJazxS2nw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:01 2026 by rpki-client