This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json) Hash identifier: KF67hJ0BuIsYyZD5bSIlgzl7zQaEcsl50WDsqFVHkRA= Subject key identifier: F8:42:88:3C:61:D9:4B:F4:5C:2C:65:DF:42:2B:F7:7B:B7:4E:A3:F5 Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5 Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5 Certificate serial: 019BFB090DF1706D464956BEFB2625149FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 16:00:33 +0000 Manifest this update: Mon 26 Jan 2026 16:00:33 +0000 Manifest next update: Tue 27 Jan 2026 16:00:33 +0000 Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=) 2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: LPtKNQS1XY3bZgUq9NqTfxKfz6STpyfRAdtYnfQ6SzQ=) 3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:0d:f1:70:6d:46:49:56:be:fb:26:25:14:9f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5 Validity Not Before: Jan 26 16:00:33 2026 GMT Not After : Jan 27 16:00:33 2026 GMT Subject: CN=f842883c61d94bf45c2c65df422bf77bb74ea3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:99:97:01:61:20:4d:40:f7:89:4e:e7:1e: 6e:06:36:33:3b:b6:6c:29:66:71:e0:7a:4b:69:16: 97:6c:88:14:20:3d:cd:de:b7:d5:9e:fb:f3:6a:6d: d8:5a:92:db:74:f2:4c:85:39:47:be:62:e1:25:d4: 3c:28:df:ab:22:15:68:70:ce:3c:f0:5b:18:b0:4b: cb:00:86:c5:0f:8b:03:32:c0:34:b2:9c:3e:9f:04: fd:a6:d9:9a:41:42:02:fc:e0:1e:bc:70:df:4e:f2: af:8d:9c:ec:fb:5b:be:97:ac:3d:b0:4e:fe:a8:ca: 03:ba:b1:d5:e4:9a:f3:7e:48:50:49:78:b2:ef:21: 9d:bf:7a:7b:4e:8e:80:0a:0d:b7:a0:5e:77:63:b9: b1:50:49:d2:53:1a:e8:d6:0e:a3:ad:52:63:5c:25: 91:5d:81:7c:2d:bf:51:ac:74:1d:93:f2:30:a2:42: 07:ac:90:a4:1a:61:a7:1c:e0:52:c1:ca:8b:9a:4e: 64:fe:df:43:a4:ff:2c:e0:e0:ea:9e:25:00:5a:91: 50:d5:04:16:7e:29:c5:09:21:07:c3:28:59:c3:c7: 00:89:23:73:88:aa:5e:9c:89:2b:d7:8d:da:14:68: 64:70:c5:ac:b6:93:8c:c1:12:33:92:6b:b4:33:2a: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:42:88:3C:61:D9:4B:F4:5C:2C:65:DF:42:2B:F7:7B:B7:4E:A3:F5 X509v3 Authority Key Identifier: keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a0:fa:49:4d:15:a2:5d:30:3d:56:8d:36:ae:71:de:93:de: a6:87:bb:7e:f2:92:68:08:e1:05:b3:3f:03:78:b0:4c:fc:48: 7b:55:67:48:e6:63:06:6d:ef:43:c9:63:66:ac:45:06:68:35: fb:1c:ef:a5:f7:2f:00:82:df:d2:56:bc:00:63:06:69:e6:80: 25:f8:49:be:98:a7:b0:4e:ec:2a:15:b7:05:e2:b5:a9:f2:b8: f8:18:8c:ed:7d:39:bd:cb:f4:68:e0:19:c9:31:03:40:50:b5: 55:cd:26:9d:46:2b:d9:bd:c6:8a:81:76:94:0d:6d:33:d4:e6: 18:ee:e7:dd:38:4c:92:20:37:27:cc:4a:96:92:82:e8:be:97: 56:b0:f0:e0:cb:dd:38:09:e2:79:79:95:c3:2d:7d:10:23:80: 0b:49:6a:7c:1d:aa:51:cc:1b:b6:4e:00:1f:85:43:d1:33:71: ba:ca:d2:6e:fc:64:ca:d3:be:80:12:74:68:7e:c1:0c:b0:e7: 86:be:69:5f:de:0a:e4:7d:36:e5:ce:f3:39:f1:d7:fb:ab:b0: cd:92:84:f8:46:4b:18:22:84:e8:3f:dd:3a:43:85:08:84:93: 4a:6a:27:ff:f4:7f:de:66:9b:ed:a6:44:47:0d:2d:9d:cd:9c: d1:d6:a9:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CQ3xcG1GSVa++yYlFJ/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2UwODM0MDBjYWY2MTZmMzUwMjAzMjljOGQ3NmYzYzRi ODM5YTUwHhcNMjYwMTI2MTYwMDMzWhcNMjYwMTI3MTYwMDMzWjAzMTEwLwYDVQQD EyhmODQyODgzYzYxZDk0YmY0NWMyYzY1ZGY0MjJiZjc3YmI3NGVhM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBmZlwFhIE1A94lO5x5uBjYzO7Zs KWZx4HpLaRaXbIgUID3N3rfVnvvzam3YWpLbdPJMhTlHvmLhJdQ8KN+rIhVocM48 8FsYsEvLAIbFD4sDMsA0spw+nwT9ptmaQUIC/OAevHDfTvKvjZzs+1u+l6w9sE7+ qMoDurHV5JrzfkhQSXiy7yGdv3p7To6ACg23oF53Y7mxUEnSUxro1g6jrVJjXCWR XYF8Lb9RrHQdk/IwokIHrJCkGmGnHOBSwcqLmk5k/t9DpP8s4ODqniUAWpFQ1QQW finFCSEHwyhZw8cAiSNziKpenIkr143aFGhkcMWstpOMwRIzkmu0MypZqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhCiDxh2Uv0XCxl30Ir93u3TqP1MB8GA1UdIwQY MBaAFEvOCDQAyvYW81AgMpyNdvPEuDmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2Mt ODBhN2ViYTZmOGU5LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2MtODBhN2ViYTZmOGU5 LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaD6SU0V ol0wPVaNNq5x3pPepoe7fvKSaAjhBbM/A3iwTPxIe1VnSOZjBm3vQ8ljZqxFBmg1 +xzvpfcvAILf0la8AGMGaeaAJfhJvpinsE7sKhW3BeK1qfK4+BiM7X05vcv0aOAZ yTEDQFC1Vc0mnUYr2b3GioF2lA1tM9TmGO7n3ThMkiA3J8xKlpKC6L6XVrDw4Mvd OAnieXmVwy19ECOAC0lqfB2qUcwbtk4AH4VD0TNxusrSbvxkytO+gBJ0aH7BDLDn hr5pX94K5H025c7zOfHX+6uwzZKE+EZLGCKE6D/dOkOFCISTSmon//R/3mab7aZE Rw0tnc2c0dapyw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:08 2026 by rpki-client