This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json) Hash identifier: OVI7aniFyV06OsmsqCBk92C4GN4kv5OdQIbicE0haB8= Subject key identifier: A7:3F:10:8E:66:4B:91:07:4A:A1:9A:FC:EE:DC:46:68:E0:8B:42:AB Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c Certificate serial: 019BFB0924A706624BCCD5550A208E9BFE08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft Manifest number: 16C7 Signing time: Mon 26 Jan 2026 16:00:38 +0000 Manifest this update: Mon 26 Jan 2026 16:00:38 +0000 Manifest next update: Tue 27 Jan 2026 16:00:38 +0000 Files and hashes: 1: Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa (hash: 1+a+B/uUbNc1Axp6SF/xxqBjGxtyMv5rURwc4G4VG9Q=) 2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: LqCqbDk8ovMuiufmIutHRaxZlIDuhkkxOC11Kj365ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:24:a7:06:62:4b:cc:d5:55:0a:20:8e:9b:fe:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c Validity Not Before: Jan 26 16:00:38 2026 GMT Not After : Jan 27 16:00:38 2026 GMT Subject: CN=a73f108e664b91074aa19afceedc4668e08b42ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:72:89:15:28:b4:04:5a:8f:3f:88:72:1f: f6:50:36:73:ae:97:96:21:05:30:29:c3:5c:a2:36: 64:92:0b:06:42:5f:6f:61:54:38:85:5c:0c:fc:9f: fb:1c:90:a6:7e:57:03:ba:5a:4a:f3:c0:6c:a5:0e: f2:4d:79:0e:f8:cf:d7:40:34:58:a8:59:71:4b:3c: 01:40:3f:1d:22:56:5d:1b:04:41:80:bf:50:d3:1f: 35:98:ba:12:60:ca:cf:37:19:25:1b:31:7a:91:9e: 79:15:e5:39:13:95:57:00:58:14:65:87:3d:d7:a6: ec:a7:9f:5d:ee:cc:64:aa:0e:03:ae:3e:c2:f9:51: 19:51:c4:44:76:58:54:d9:f2:6f:bb:43:97:ef:a3: f1:cf:19:dd:3f:b0:e7:10:0d:2f:1e:b6:62:89:d3: 0a:2e:79:48:97:06:fe:4a:a9:11:be:72:de:0c:a8: b7:e8:7c:4e:f9:b2:ee:f1:7b:10:30:a8:0a:74:11: 9a:9d:c7:7b:fa:e3:a8:fa:3d:46:2d:a6:53:4c:d7: 09:03:e6:c2:33:d4:7b:3c:4a:1e:58:68:86:39:a7: 8e:77:7f:9d:d8:55:c4:e4:45:41:f0:94:9f:65:2b: 4d:e8:d5:ba:43:75:55:36:6c:ab:df:90:05:63:e7: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3F:10:8E:66:4B:91:07:4A:A1:9A:FC:EE:DC:46:68:E0:8B:42:AB X509v3 Authority Key Identifier: keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7f:49:0a:95:4d:06:1d:59:cc:a6:c2:f9:9d:10:cc:c2:1f: 10:59:d6:7c:0b:bc:2d:b6:c6:ac:f1:7c:5e:8c:07:3f:27:12: cf:fc:fe:47:d9:29:8e:dd:8a:15:d5:df:25:04:b6:db:0d:eb: 6b:43:f0:61:fc:8f:bd:a6:71:7c:c5:cc:19:6c:9d:60:f9:03: a1:85:04:b7:b4:10:bb:d7:ec:4a:4a:b9:dc:8f:e8:d5:cb:9c: fd:07:ed:9f:da:d5:11:60:e1:fd:2b:e8:5d:09:2a:63:0c:70: a9:60:7c:ec:f4:8d:ca:53:72:20:a3:81:6a:f5:31:e7:ea:5d: 52:2f:41:24:86:9f:3d:56:63:f5:08:01:da:43:22:a4:25:91: 6f:c1:28:2c:4c:a9:43:0a:f0:ec:f3:a5:b4:d9:d3:b0:ea:b3: 32:85:2f:09:60:03:46:eb:69:7e:de:da:ca:1b:30:0b:ef:47: a3:60:cd:7a:8e:aa:c0:97:7e:f5:23:34:4f:5f:24:a8:03:95: 36:17:c0:ff:8b:94:8e:00:44:93:b2:df:2f:0b:9b:51:fe:0b: 43:82:d3:84:34:c4:16:b4:aa:76:b1:37:d9:85:99:d3:e9:38: 89:44:d6:59:79:64:a4:8e:30:1d:e9:b9:a3:1d:f9:18:5d:2f: 58:89:2c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CSSnBmJLzNVVCiCOm/4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx N2MzOGMwHhcNMjYwMTI2MTYwMDM4WhcNMjYwMTI3MTYwMDM4WjAzMTEwLwYDVQQD EyhhNzNmMTA4ZTY2NGI5MTA3NGFhMTlhZmNlZWRjNDY2OGUwOGI0MmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwVyiRUotARajz+Ich/2UDZzrpeW IQUwKcNcojZkkgsGQl9vYVQ4hVwM/J/7HJCmflcDulpK88BspQ7yTXkO+M/XQDRY qFlxSzwBQD8dIlZdGwRBgL9Q0x81mLoSYMrPNxklGzF6kZ55FeU5E5VXAFgUZYc9 16bsp59d7sxkqg4Drj7C+VEZUcREdlhU2fJvu0OX76PxzxndP7DnEA0vHrZiidMK LnlIlwb+SqkRvnLeDKi36HxO+bLu8XsQMKgKdBGancd7+uOo+j1GLaZTTNcJA+bC M9R7PEoeWGiGOaeOd3+d2FXE5EVB8JSfZStN6NW6Q3VVNmyr35AFY+dOswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc/EI5mS5EHSqGa/O7cRmjgi0KrMB8GA1UdIwQY MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt OWM3NmQxMGVjNTMyLzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA39JCpVN Bh1ZzKbC+Z0QzMIfEFnWfAu8LbbGrPF8XowHPycSz/z+R9kpjt2KFdXfJQS22w3r a0PwYfyPvaZxfMXMGWydYPkDoYUEt7QQu9fsSkq53I/o1cuc/Qftn9rVEWDh/Svo XQkqYwxwqWB87PSNylNyIKOBavUx5+pdUi9BJIafPVZj9QgB2kMipCWRb8EoLEyp Qwrw7POltNnTsOqzMoUvCWADRutpft7ayhswC+9Ho2DNeo6qwJd+9SM0T18kqAOV NhfA/4uUjgBEk7LfLwubUf4LQ4LThDTEFrSqdrE32YWZ0+k4iUTWWXlkpI4wHem5 ox35GF0vWIksrw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:34 2026 by rpki-client