This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json) Hash identifier: odREdhpDjx8hIXu0FYz2q1tbT0FY44XlqR7eSxPuapY= Subject key identifier: E0:3B:82:32:39:C4:DD:22:1E:9D:C2:82:F7:B7:F3:E8:29:69:D2:48 Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8 Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8 Certificate serial: 019BFD2E937001B379039C57A633E1F972D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft Manifest number: 0997 Signing time: Tue 27 Jan 2026 02:00:46 +0000 Manifest this update: Tue 27 Jan 2026 02:00:46 +0000 Manifest next update: Wed 28 Jan 2026 02:00:46 +0000 Files and hashes: 1: XzS-ABIitAhoDjgaxod5k36Rzyk.roa (hash: 8qFIpKhqUDM+Zl/pmjZajomHNYIv1lRs91XtmDgIewQ=) 2: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: AGRjm+vLDqv1CdSMUkbN9KXhxz3aJ+KPgTxWNJzYTas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:93:70:01:b3:79:03:9c:57:a6:33:e1:f9:72:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8 Validity Not Before: Jan 27 02:00:46 2026 GMT Not After : Jan 28 02:00:46 2026 GMT Subject: CN=e03b823239c4dd221e9dc282f7b7f3e82969d248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:ca:0a:60:b8:d1:4d:03:25:15:ed:7b:35: ae:a2:2d:8f:7d:ce:41:6a:92:9c:fa:ed:0b:47:2b: 3b:60:d0:0f:b4:54:7a:ef:2c:7d:1e:0d:6e:b6:1d: 9a:ad:04:99:0e:71:2b:22:1f:08:69:30:fe:9d:52: c7:d3:55:fb:b4:1a:17:25:b3:18:10:9b:5f:f6:91: d2:b6:fc:2b:9a:d6:9f:d3:e2:93:76:04:52:96:57: dc:9f:47:d1:e0:b4:1b:6a:65:74:0d:0f:17:b7:3d: 3a:73:c3:a0:83:10:35:56:74:25:67:de:5e:49:0d: b9:9d:78:b1:49:95:98:50:fd:f6:ed:92:54:6a:6f: b3:8e:2f:24:89:5f:2b:fe:67:0a:e7:93:11:cb:fd: 47:a0:b3:57:f9:8d:ee:c9:dd:ba:ad:28:e5:6a:96: 5f:58:58:91:91:13:45:5f:ef:3f:ca:a9:6a:00:6e: b2:77:35:3a:12:e7:87:09:31:57:82:31:e4:08:e4: 6b:3e:42:08:55:d3:aa:04:aa:ae:63:62:eb:9d:d6: b2:28:9b:75:71:b2:28:ca:ba:c5:2e:f3:03:9f:8e: 43:31:e0:d7:46:49:29:4e:ce:e6:d3:01:61:fa:3a: 05:db:69:02:c5:7c:bf:a4:da:e2:2c:94:62:8d:94: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3B:82:32:39:C4:DD:22:1E:9D:C2:82:F7:B7:F3:E8:29:69:D2:48 X509v3 Authority Key Identifier: keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:91:c7:47:c9:cd:2c:6c:75:a2:ca:22:71:bc:da:d1:d8:74: 86:62:06:8e:90:08:58:59:b0:92:2f:23:ad:fa:a3:2d:5b:eb: b6:bb:0f:26:76:33:d9:3b:63:7b:48:ca:ce:a2:4a:ca:d5:93: 97:f0:d7:17:40:d4:7b:73:1b:7d:3a:71:44:f0:ed:3f:e4:18: fa:3a:dc:e9:c3:bd:9c:1f:8f:50:bb:81:2d:34:ea:71:1e:33: c1:b6:74:4e:f2:e4:5a:e7:62:36:96:0e:6f:23:b0:3e:4a:d0: f7:66:5a:47:45:8b:a4:73:36:d3:60:1b:c3:4c:33:fa:34:04: 95:ff:ca:ae:63:c7:66:9d:65:63:98:66:34:b6:9a:e0:c1:35: 4b:11:2a:7a:00:d8:5f:12:fa:06:24:1c:87:30:c2:58:f7:77: 8f:b0:1a:95:84:89:27:98:79:62:25:09:18:1b:31:9d:98:87: a7:b8:a5:d8:71:6e:8a:59:fc:4a:a9:35:59:1d:b3:93:8e:6c: c8:e6:b9:28:65:55:5a:10:fc:9a:72:01:92:8a:69:a0:01:84: 4a:91:62:af:e0:b5:ef:bb:9a:95:4f:44:99:d8:03:c8:f0:b6: 56:c2:54:aa:9c:2e:7c:bc:ea:a2:da:ac:69:f9:6a:cd:99:04: 61:ea:a7:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LpNwAbN5A5xXpjPh+XLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQ2NGVjYzk0NmYyOTJlNDA0ZjJjMzUxOTIyZWNmNGM1 OTBmZDgwHhcNMjYwMTI3MDIwMDQ2WhcNMjYwMTI4MDIwMDQ2WjAzMTEwLwYDVQQD EyhlMDNiODIzMjM5YzRkZDIyMWU5ZGMyODJmN2I3ZjNlODI5NjlkMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraLKCmC40U0DJRXtezWuoi2Pfc5B apKc+u0LRys7YNAPtFR67yx9Hg1uth2arQSZDnErIh8IaTD+nVLH01X7tBoXJbMY EJtf9pHStvwrmtaf0+KTdgRSllfcn0fR4LQbamV0DQ8Xtz06c8OggxA1VnQlZ95e SQ25nXixSZWYUP327ZJUam+zji8kiV8r/mcK55MRy/1HoLNX+Y3uyd26rSjlapZf WFiRkRNFX+8/yqlqAG6ydzU6EueHCTFXgjHkCORrPkIIVdOqBKquY2LrndayKJt1 cbIoyrrFLvMDn45DMeDXRkkpTs7m0wFh+joF22kCxXy/pNriLJRijZSDuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA7gjI5xN0iHp3Cgve38+gpadJIMB8GA1UdIwQY MBaAFK0kZOzJRvKS5ATyw1GSLs9MWQ/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt NTkyZWQ3Mzc2MWNhLzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh LzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJHHR8nN LGx1osoicbza0dh0hmIGjpAIWFmwki8jrfqjLVvrtrsPJnYz2Ttje0jKzqJKytWT l/DXF0DUe3MbfTpxRPDtP+QY+jrc6cO9nB+PULuBLTTqcR4zwbZ0TvLkWudiNpYO byOwPkrQ92ZaR0WLpHM202Abw0wz+jQElf/KrmPHZp1lY5hmNLaa4ME1SxEqegDY XxL6BiQchzDCWPd3j7AalYSJJ5h5YiUJGBsxnZiHp7il2HFuiln8Sqk1WR2zk45s yOa5KGVVWhD8mnIBkoppoAGESpFir+C177ualU9EmdgDyPC2VsJUqpwufLzqotqs aflqzZkEYeqnUg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:51:37 2026 by rpki-client