This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json) Hash identifier: WYfFseDvNAG55OShVXWmVSlyhFRYRRYkT6324fCfogw= Subject key identifier: 40:70:2E:85:5B:F6:53:BF:E0:70:04:3A:A5:1A:41:6C:0C:6E:F9:CD Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16 Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16 Certificate serial: 019B9E573CBECC12B02C5CED31E15A71C587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft Manifest number: 0792 Signing time: Thu 08 Jan 2026 16:01:15 +0000 Manifest this update: Thu 08 Jan 2026 16:01:15 +0000 Manifest next update: Fri 09 Jan 2026 16:01:15 +0000 Files and hashes: 1: 2VWgK395Xq-hl0LiHskgzImJg8c.roa (hash: 1Spcx7D9L809cgYKQE6qvo1/o5vO9pV81u+jQPAflTI=) 2: dCfhouV-L6NBX1Zdltg4CTcqsVY.roa (hash: q66wLSt9qJ4QLsmrcoF6I4u4fYrxEp3xLBONHaR17ko=) 3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: TsyfdRXIYiMesYnCEPQvRNLhoTg1WASxY8kL71gINcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:57:3c:be:cc:12:b0:2c:5c:ed:31:e1:5a:71:c5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16 Validity Not Before: Jan 8 16:01:15 2026 GMT Not After : Jan 9 16:01:15 2026 GMT Subject: CN=40702e855bf653bfe070043aa51a416c0c6ef9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:62:5f:72:fd:6c:41:c4:14:2a:60:ca:67: e4:7a:c3:0e:6e:18:b3:d5:8f:44:fa:fc:9e:91:d0: 53:1b:ab:5e:95:1f:42:bc:03:8f:7e:47:e8:a1:f4: 45:c2:9d:35:96:d3:6e:7a:b6:5a:d8:74:12:ff:78: 92:4e:74:d2:8e:35:62:05:1b:c0:cf:95:af:b7:fd: f6:e5:40:5f:dd:a6:44:9d:c2:82:1d:b2:33:d4:3f: 4c:cd:c2:f7:e2:db:48:5d:b4:04:28:0c:b4:bd:a2: d9:c4:1b:ee:40:62:17:c8:0e:58:38:15:e8:b2:c2: 2f:13:f7:b3:3f:f1:61:4e:1e:05:5e:1b:9b:a0:e7: 9b:c4:a1:22:b8:d2:8a:91:2b:b7:e3:20:ac:b3:42: 86:db:6a:4e:d4:98:86:b4:c1:23:92:63:81:71:38: 75:8b:3d:bc:aa:d0:2b:a3:41:94:05:93:1a:76:32: ce:f0:2f:51:e4:41:37:05:6c:99:b2:2f:e7:1f:75: 4c:21:0c:36:c3:00:f7:8a:4f:8b:84:9d:4d:8e:6e: ce:6e:4f:42:2f:5d:81:e2:e2:05:ca:a0:44:74:4c: 35:92:ff:a5:a8:3d:ff:9c:9c:87:1e:1c:20:94:21: 73:77:13:33:f5:b5:f3:2f:c5:23:03:7e:2f:e4:55: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:2E:85:5B:F6:53:BF:E0:70:04:3A:A5:1A:41:6C:0C:6E:F9:CD X509v3 Authority Key Identifier: keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6c:ee:b3:d0:ed:58:00:e7:f3:b5:17:3b:e2:1d:3a:5f:a2: b1:81:2b:36:da:c2:6c:86:6a:f8:ac:57:05:82:67:51:b1:8b: 61:07:8c:ee:e1:c1:dd:a6:c8:fb:4b:48:39:95:e7:d4:b8:86: 82:38:2b:b6:ae:5e:41:27:02:4f:59:17:7e:10:4f:7d:a3:87: 22:1d:58:18:0d:70:a3:86:b9:66:ac:fd:f1:b3:7e:ec:55:f3: 31:de:e0:36:37:9a:60:ca:62:7a:86:d5:56:b4:b2:1b:8f:cc: cb:03:b6:97:14:5c:52:57:ff:7e:c8:f9:8d:19:62:f2:e9:fa: 38:c2:c0:26:87:6f:d5:b2:0f:4d:b9:b1:c5:2a:56:c0:f1:5f: 5a:30:83:6c:f7:e6:f0:90:78:8b:35:70:6f:84:70:be:10:a7: 61:58:6a:82:64:4a:dc:48:c4:4b:51:68:e7:f0:c5:2a:70:8f: a1:2f:df:66:24:de:1f:30:30:47:96:2d:92:71:1c:ba:ea:ab: d0:56:ff:80:7d:00:83:60:d7:da:e8:26:d1:ba:25:e6:8a:83: a4:73:20:b9:65:01:49:da:c4:c8:05:66:ee:9a:82:cc:56:d2: 91:7b:4a:02:2a:7f:1b:05:b5:7c:63:a0:dd:bd:89:7a:45:ea: 96:0d:f6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZueVzy+zBKwLFztMeFaccWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNjc0ZTgyMmYzODc2ZDI3ZGVhZWQ1ZjY2ZGJlOWMxYTQy MmViMTYwHhcNMjYwMTA4MTYwMTE1WhcNMjYwMTA5MTYwMTE1WjAzMTEwLwYDVQQD Eyg0MDcwMmU4NTViZjY1M2JmZTA3MDA0M2FhNTFhNDE2YzBjNmVmOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06NiX3L9bEHEFCpgymfkesMObhiz 1Y9E+vyekdBTG6telR9CvAOPfkfoofRFwp01ltNuerZa2HQS/3iSTnTSjjViBRvA z5Wvt/325UBf3aZEncKCHbIz1D9MzcL34ttIXbQEKAy0vaLZxBvuQGIXyA5YOBXo ssIvE/ezP/FhTh4FXhuboOebxKEiuNKKkSu34yCss0KG22pO1JiGtMEjkmOBcTh1 iz28qtAro0GUBZMadjLO8C9R5EE3BWyZsi/nH3VMIQw2wwD3ik+LhJ1Njm7Obk9C L12B4uIFyqBEdEw1kv+lqD3/nJyHHhwglCFzdxMz9bXzL8UjA34v5FWO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBwLoVb9lO/4HAEOqUaQWwMbvnNMB8GA1UdIwQY MBaAFLNnToIvOHbSfertX2bb6cGkIusWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzkt ZjhmMDhmZTY0ODM4LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzktZjhmMDhmZTY0ODM4 LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWzus9Dt WADn87UXO+IdOl+isYErNtrCbIZq+KxXBYJnUbGLYQeM7uHB3abI+0tIOZXn1LiG gjgrtq5eQScCT1kXfhBPfaOHIh1YGA1wo4a5Zqz98bN+7FXzMd7gNjeaYMpieobV VrSyG4/MywO2lxRcUlf/fsj5jRli8un6OMLAJodv1bIPTbmxxSpWwPFfWjCDbPfm 8JB4izVwb4RwvhCnYVhqgmRK3EjES1Fo5/DFKnCPoS/fZiTeHzAwR5YtknEcuuqr 0Fb/gH0Ag2DX2ugm0bol5oqDpHMguWUBSdrEyAVm7pqCzFbSkXtKAip/GwW1fGOg 3b2JekXqlg324Q== -----END CERTIFICATE-----Generated at Fri Jan 9 01:13:21 2026 by rpki-client