This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft File: s1ACugiNW9CcFVPc7VsL85B_9zY.mft (raw, json) Hash identifier: nVngLQJCxR3mwgtSzMbndeM+MZJujrbczxOpQn3d4yY= Subject key identifier: 9A:E2:A4:B4:96:34:46:CC:96:39:24:42:F8:5C:31:FF:68:90:16:C4 Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Certificate serial: 019BF83F410E5B1C104F731EFD42CFE7D5EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft Manifest number: 0B0E Signing time: Mon 26 Jan 2026 03:00:53 +0000 Manifest this update: Mon 26 Jan 2026 03:00:53 +0000 Manifest next update: Tue 27 Jan 2026 03:00:53 +0000 Files and hashes: 1: 6aTD1Diwy8BcVWDzJkFw59razas.roa (hash: x3rYw4DajkMDPWuTUBdkKJsPp8gMyPGdL85l8NrV1aI=) 2: kTIXQhS3eDgH0d4aWc7P6cb0ETE.roa (hash: MfaCdUx2k2CrxyHGfLxwy3cZcMrgpr/D+m/kD8xaOjU=) 3: oBXQMOceKxiCCzEWupGkaR0CA7U.roa (hash: KvNrba4A78wX0pvIzSMuYPlcM/0CRAGlh77hE8ILw/8=) 4: s1ACugiNW9CcFVPc7VsL85B_9zY.crl (hash: BhzdGQqJ4sNu8M3VpMvKvaQu6baKpwh6KOvCGVLztcw=) 5: vw7gHWfBBupEylKbz5KlpmkColQ.roa (hash: nY95hIWpw8rUaH69ugJhCtRUoPs5WzlykHcCc1XaBg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:41:0e:5b:1c:10:4f:73:1e:fd:42:cf:e7:d5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Validity Not Before: Jan 26 03:00:53 2026 GMT Not After : Jan 27 03:00:53 2026 GMT Subject: CN=9ae2a4b4963446cc96392442f85c31ff689016c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:1a:79:1f:bc:d9:f6:1b:6e:39:bf:8d:b5: d7:c0:55:04:07:4c:ba:08:d5:32:f6:d0:b2:7a:18: 1e:6d:2b:81:d7:75:2a:6a:82:a4:52:dc:35:05:1f: d5:c5:55:ea:ec:11:d6:0c:88:f8:ae:3a:de:3b:e6: 00:83:95:e2:cd:05:35:13:9c:2c:26:21:20:e1:50: 1b:5d:45:9f:1e:db:1a:5a:23:e4:fb:fb:21:b4:f4: 6d:87:7e:84:84:b9:30:9a:12:04:5a:df:73:9b:db: 2f:c5:bf:ef:77:f4:6f:0d:27:b5:ac:cc:cc:06:81: db:ac:cc:12:32:d2:c0:4b:2a:0c:13:a3:a6:1b:d6: 0c:69:c9:85:36:01:a9:df:0f:50:b8:c0:f7:0d:13: 62:04:0c:5f:0e:a8:46:dd:c8:51:eb:3c:1d:20:bd: bb:d7:22:de:f9:ca:1b:17:d7:56:9a:95:06:4f:23: 76:30:c0:5f:8b:4c:17:52:8d:2a:9e:31:56:60:4a: 52:cd:a2:bb:01:f9:7e:a9:68:77:b6:1c:15:4c:95: c9:32:35:c5:61:c0:d3:b5:aa:27:a8:cc:86:f7:14: e8:5d:71:0a:88:ba:8a:9b:44:a8:13:38:4c:65:5e: 2a:0d:d3:87:e0:43:b6:1c:c9:a0:46:5b:1c:8f:80: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:A4:B4:96:34:46:CC:96:39:24:42:F8:5C:31:FF:68:90:16:C4 X509v3 Authority Key Identifier: keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:21:f6:0b:cf:2d:43:da:20:a5:a1:6b:a8:8c:bc:fc:38:82: 39:08:50:b8:34:78:89:c1:9e:c2:6e:6e:06:b0:6c:bd:45:8b: 69:f7:d1:94:34:e7:b5:ed:27:31:9c:8f:68:28:2d:68:48:f7: 0d:36:6e:02:e3:a3:4c:ec:9f:97:4f:85:15:8b:88:be:72:14: cb:ec:4d:ab:03:b4:d7:8b:4e:e2:13:87:1a:e9:af:8b:0e:41: c4:44:61:48:fc:87:04:d2:5b:85:f6:7b:9c:51:09:f8:1c:34: 1f:6a:3e:0b:dc:9f:ee:f4:de:84:03:30:a2:0f:e6:16:03:6d: 04:87:b4:97:97:3f:d7:d4:8f:f5:6f:39:89:a7:e0:5d:04:3b: f2:a4:32:07:4d:de:a3:d4:9d:b2:f0:cb:b9:38:a3:43:3a:93: 58:78:d0:36:39:9b:3f:1d:87:d9:6f:7f:6b:12:55:62:81:d6: b9:12:49:bf:5c:11:f7:7d:d7:8e:14:28:e5:1e:23:c1:78:e9: 09:59:01:80:3a:6e:27:66:4f:29:f8:39:ab:c7:84:59:66:5c: 21:f1:8d:b2:d8:9a:a6:49:e9:3e:23:eb:55:ec:76:a5:e3:e7: 32:0b:47:ef:12:13:00:36:e1:2e:5a:a4:b8:7c:cf:73:32:f0: a7:9d:c1:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P0EOWxwQT3Me/ULP59XsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3 ZmY3MzYwHhcNMjYwMTI2MDMwMDUzWhcNMjYwMTI3MDMwMDUzWjAzMTEwLwYDVQQD Eyg5YWUyYTRiNDk2MzQ0NmNjOTYzOTI0NDJmODVjMzFmZjY4OTAxNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfwaeR+82fYbbjm/jbXXwFUEB0y6 CNUy9tCyehgebSuB13UqaoKkUtw1BR/VxVXq7BHWDIj4rjreO+YAg5XizQU1E5ws JiEg4VAbXUWfHtsaWiPk+/shtPRth36EhLkwmhIEWt9zm9svxb/vd/RvDSe1rMzM BoHbrMwSMtLASyoME6OmG9YMacmFNgGp3w9QuMD3DRNiBAxfDqhG3chR6zwdIL27 1yLe+cobF9dWmpUGTyN2MMBfi0wXUo0qnjFWYEpSzaK7Afl+qWh3thwVTJXJMjXF YcDTtaonqMyG9xToXXEKiLqKm0SoEzhMZV4qDdOH4EO2HMmgRlscj4AkPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJripLSWNEbMljkkQvhcMf9okBbEMB8GA1UdIwQY MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut YWYxZWYxZDdhZmI4LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4 LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCH2C88t Q9ogpaFrqIy8/DiCOQhQuDR4icGewm5uBrBsvUWLaffRlDTnte0nMZyPaCgtaEj3 DTZuAuOjTOyfl0+FFYuIvnIUy+xNqwO014tO4hOHGumviw5BxERhSPyHBNJbhfZ7 nFEJ+Bw0H2o+C9yf7vTehAMwog/mFgNtBIe0l5c/19SP9W85iafgXQQ78qQyB03e o9SdsvDLuTijQzqTWHjQNjmbPx2H2W9/axJVYoHWuRJJv1wR933XjhQo5R4jwXjp CVkBgDpuJ2ZPKfg5q8eEWWZcIfGNstiapknpPiPrVex2pePnMgtH7xITADbhLlqk uHzPczLwp53Bww== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:51 2026 by rpki-client