This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json) Hash identifier: 0J8/YkMzQ8JPV668s+xsrrXvebyc4K+DjepjS+C43qs= Subject key identifier: 2B:ED:AE:0E:92:8C:9E:CC:25:0E:37:B6:4D:13:A5:6C:98:ED:08:07 Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Certificate serial: 019BFE78474CF2E8B65725FC1B8E2AAC1369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft Manifest number: 93 Signing time: Tue 27 Jan 2026 08:00:54 +0000 Manifest this update: Tue 27 Jan 2026 08:00:54 +0000 Manifest next update: Wed 28 Jan 2026 08:00:54 +0000 Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=) 2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: ar+B73hY14DzbbWrHFdC4qJJWfQ6tOMhxp92bfhxo9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:47:4c:f2:e8:b6:57:25:fc:1b:8e:2a:ac:13:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Validity Not Before: Jan 27 08:00:54 2026 GMT Not After : Jan 28 08:00:54 2026 GMT Subject: CN=2bedae0e928c9ecc250e37b64d13a56c98ed0807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:13:8f:a1:84:21:0c:4a:9a:99:59:d8:3a: 1c:27:81:de:2a:2c:19:44:93:ac:50:cd:3b:aa:02: 7e:b7:42:e0:c8:dc:ef:9f:76:82:a8:a4:06:00:c7: c1:c2:02:b8:b8:58:5b:1d:9e:d3:f9:25:4a:69:b6: 79:5b:ec:a4:55:0a:5d:a4:9a:2c:c6:4a:28:4f:01: 24:ba:18:9e:f3:53:5f:49:fb:3e:45:06:43:06:a8: 46:22:d5:7b:78:10:29:cb:77:de:de:0f:29:90:62: 7d:d0:79:a1:3a:a0:e2:ba:56:78:cd:98:40:30:17: 9b:79:33:0d:e7:22:fe:5a:d5:9c:95:28:9c:1a:45: 3c:e3:02:06:5a:d2:fd:b2:07:64:39:79:74:9d:98: 00:8d:b9:8c:16:c0:82:35:82:e6:32:21:b8:0d:e0: b9:3b:cb:67:9c:10:f5:a5:6d:00:75:18:a0:0b:cd: 6d:be:7f:3f:10:20:c0:69:35:ff:94:f2:14:a5:da: 76:20:79:ae:73:1c:e5:49:9e:c3:4b:89:30:83:b5: 3e:54:fd:ba:01:78:17:02:81:90:a1:b7:a8:f8:26: 83:44:f2:f1:c3:0e:6a:da:05:df:0f:77:cc:a8:d1: 4b:60:35:31:b0:3a:47:a0:0f:7c:4f:92:b6:10:65: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:ED:AE:0E:92:8C:9E:CC:25:0E:37:B6:4D:13:A5:6C:98:ED:08:07 X509v3 Authority Key Identifier: keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5c:d2:f1:da:96:b7:dd:33:b8:99:74:dd:77:b4:30:1f:ca: 76:bc:2a:c5:98:de:33:10:91:2d:32:8b:17:a4:09:75:bc:8f: d8:65:7a:53:9a:d1:f8:b7:23:a5:53:8b:71:3c:e4:bd:2c:da: 59:ee:02:73:fa:57:5d:6b:15:4f:6a:48:9d:28:c3:9d:6f:64: de:aa:19:6b:8e:7c:95:41:2c:74:f8:63:e0:74:09:dd:8c:b9: 28:9f:e8:f4:f8:ab:76:2e:50:89:67:87:c0:fd:2e:3d:d5:da: 44:7f:52:7f:61:ac:46:ea:1b:ee:47:62:7d:06:20:6d:e3:92: ce:b2:69:22:25:87:53:d6:bf:55:c0:a8:50:e7:05:2c:e7:0e: db:b3:0e:e0:2f:5c:d7:83:6a:9d:d8:c6:61:5c:51:3f:e8:7a: b5:84:a1:83:59:ed:97:60:78:0a:4f:45:cb:72:c5:80:75:ec: 0b:b0:48:e9:93:3f:a5:6e:08:ce:e4:aa:cb:6c:4a:7b:98:49: 11:fc:00:36:4c:56:61:a8:60:63:15:6e:af:a6:25:d8:cb:29: 51:63:62:4e:2f:54:85:6b:9c:67:2e:97:f8:fa:cb:d9:24:89: 4a:8b:9e:88:80:a9:4b:3c:b1:e5:c3:80:f6:a8:68:df:b1:a0: 77:10:9f:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eEdM8ui2VyX8G44qrBNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjUzMmUyOWYyMmZhMjMxZGM2ZmM4ZTUzMGVmYjFjNzYx MTllMGEwHhcNMjYwMTI3MDgwMDU0WhcNMjYwMTI4MDgwMDU0WjAzMTEwLwYDVQQD EygyYmVkYWUwZTkyOGM5ZWNjMjUwZTM3YjY0ZDEzYTU2Yzk4ZWQwODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjroTj6GEIQxKmplZ2DocJ4HeKiwZ RJOsUM07qgJ+t0LgyNzvn3aCqKQGAMfBwgK4uFhbHZ7T+SVKabZ5W+ykVQpdpJos xkooTwEkuhie81NfSfs+RQZDBqhGItV7eBApy3fe3g8pkGJ90HmhOqDiulZ4zZhA MBebeTMN5yL+WtWclSicGkU84wIGWtL9sgdkOXl0nZgAjbmMFsCCNYLmMiG4DeC5 O8tnnBD1pW0AdRigC81tvn8/ECDAaTX/lPIUpdp2IHmucxzlSZ7DS4kwg7U+VP26 AXgXAoGQobeo+CaDRPLxww5q2gXfD3fMqNFLYDUxsDpHoA98T5K2EGWUPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvtrg6SjJ7MJQ43tk0TpWyY7QgHMB8GA1UdIwQY MBaAFLElMuKfIvojHcb8jlMO+xx2EZ4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2Qt OTMzZWZiZDc3ZjViLzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2QtOTMzZWZiZDc3ZjVi LzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFzS8dqW t90zuJl03Xe0MB/KdrwqxZjeMxCRLTKLF6QJdbyP2GV6U5rR+LcjpVOLcTzkvSza We4Cc/pXXWsVT2pInSjDnW9k3qoZa458lUEsdPhj4HQJ3Yy5KJ/o9Pirdi5QiWeH wP0uPdXaRH9Sf2GsRuob7kdifQYgbeOSzrJpIiWHU9a/VcCoUOcFLOcO27MO4C9c 14NqndjGYVxRP+h6tYShg1ntl2B4Ck9Fy3LFgHXsC7BI6ZM/pW4IzuSqy2xKe5hJ EfwANkxWYahgYxVur6Yl2MspUWNiTi9UhWucZy6X+PrL2SSJSoueiICpSzyx5cOA 9qho37GgdxCfvg== -----END CERTIFICATE-----Generated at Tue Jan 27 10:17:20 2026 by rpki-client