This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json) Hash identifier: w2Nfdibo4t+fmapNX7QASoGxduhBdYm/v5GP8v7dPZ4= Subject key identifier: E9:DA:9A:F5:FB:B2:03:FC:D1:F8:D7:C7:80:0D:1D:93:9A:C8:0C:10 Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Certificate serial: 019BD46A0D9F4368BE630CF13226A0F577D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft Manifest number: 073D Signing time: Mon 19 Jan 2026 04:01:18 +0000 Manifest this update: Mon 19 Jan 2026 04:01:18 +0000 Manifest next update: Tue 20 Jan 2026 04:01:18 +0000 Files and hashes: 1: Bwb-B2AczMd4mj6tvI6rlUDbU5E.roa (hash: JFs8H2Nbvm4sp7IfR/fuT3fkxxYTMFvFgH7jK8vIQfA=) 2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: Pvxb/Fgmw71Nz6fWB0iiIDHEgPV1Bl7T8g1Pjcqwqd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d4:6a:0d:9f:43:68:be:63:0c:f1:32:26:a0:f5:77:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Validity Not Before: Jan 19 04:01:18 2026 GMT Not After : Jan 20 04:01:18 2026 GMT Subject: CN=e9da9af5fbb203fcd1f8d7c7800d1d939ac80c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:50:0e:8a:ff:ec:8f:c3:90:bd:b2:f3:93: 3a:a2:29:51:b3:a3:26:87:d8:8d:3e:fc:52:fe:5a: ba:7b:ca:33:37:0b:98:dd:98:21:c0:3c:cc:b5:4d: 52:eb:0a:b4:d5:1c:ee:b7:11:7f:cd:e4:72:98:88: f1:52:d8:32:a7:78:dc:5d:6d:fb:1d:54:35:30:23: 8c:e2:ef:a5:49:95:d5:ad:ef:96:94:24:a7:8e:29: 6b:60:2a:e1:d3:3a:b1:ca:c5:2b:ab:9e:20:a9:78: e0:36:45:cc:37:37:b1:eb:eb:42:a0:fc:07:df:23: 31:5d:a5:c6:30:1c:57:25:2a:85:e0:52:ca:9f:7b: b6:43:36:53:08:53:18:1c:2f:a1:6e:14:ba:40:5c: 85:33:7d:d7:d5:e9:a1:38:54:de:a0:8b:3d:62:13: 7a:3a:7e:7f:b3:52:c0:e5:4f:18:93:46:91:3a:c2: 33:16:a4:f4:aa:80:e2:cb:22:f9:f1:92:5b:7e:b2: e8:98:87:c3:d1:e1:ec:4d:a1:46:8e:b9:98:09:6e: fd:21:65:c6:4d:24:bd:14:57:af:5a:3f:fc:ba:2a: 61:cb:d1:91:49:7e:b8:16:bb:93:70:64:b6:90:0c: 0b:0a:6a:19:2d:dc:fd:fe:24:d9:93:75:b3:48:41: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DA:9A:F5:FB:B2:03:FC:D1:F8:D7:C7:80:0D:1D:93:9A:C8:0C:10 X509v3 Authority Key Identifier: keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3a:a5:4c:d2:f0:2f:d2:a6:84:04:a6:55:1e:9e:a2:ed:77: b6:ae:84:d8:98:fd:0e:cc:76:61:77:b6:13:8b:0f:3c:7f:fb: d0:f2:f4:72:15:13:bf:b2:8b:b3:ff:77:4d:c9:e5:85:d2:b1: c4:76:77:ee:c2:9b:64:70:45:fb:d5:46:bc:0d:cd:1f:7e:c6: 2a:82:e8:fc:b2:86:d6:e6:ad:29:7f:e4:6a:4f:a6:0c:25:01: 5b:bf:de:ba:ef:0f:a5:00:dd:b2:47:cd:19:4b:c5:ef:9b:7a: 45:96:83:e1:45:ae:bd:0c:cc:cb:12:6d:fa:fe:99:d9:a3:2f: 3f:6a:83:b3:b4:84:4f:3c:ff:1b:42:ee:5e:9b:bb:0f:56:8f: e7:33:d0:c1:00:92:aa:49:be:9f:f8:1c:a8:41:f7:aa:32:1f: e6:66:d5:98:05:f6:e3:c8:2d:8c:27:b3:d3:93:84:46:bf:ed: 6e:30:f8:29:40:dd:52:f8:1b:99:fb:5a:fc:b1:49:45:e5:12: fc:c7:18:e9:9c:e7:f5:2c:7e:c1:b9:62:eb:9d:cb:74:32:33: 8b:2f:ef:65:56:1b:55:80:b5:8a:dc:31:c8:d7:a3:83:03:5f: 85:9d:9e:af:95:20:ef:61:f1:3b:de:ac:a1:e0:d1:32:76:3a: 62:2e:a7:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvUag2fQ2i+YwzxMiag9XfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj OGM3NmYwHhcNMjYwMTE5MDQwMTE4WhcNMjYwMTIwMDQwMTE4WjAzMTEwLwYDVQQD EyhlOWRhOWFmNWZiYjIwM2ZjZDFmOGQ3Yzc4MDBkMWQ5MzlhYzgwYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm61QDor/7I/DkL2y85M6oilRs6Mm h9iNPvxS/lq6e8ozNwuY3ZghwDzMtU1S6wq01RzutxF/zeRymIjxUtgyp3jcXW37 HVQ1MCOM4u+lSZXVre+WlCSnjilrYCrh0zqxysUrq54gqXjgNkXMNzex6+tCoPwH 3yMxXaXGMBxXJSqF4FLKn3u2QzZTCFMYHC+hbhS6QFyFM33X1emhOFTeoIs9YhN6 On5/s1LA5U8Yk0aROsIzFqT0qoDiyyL58ZJbfrLomIfD0eHsTaFGjrmYCW79IWXG TSS9FFevWj/8uiphy9GRSX64FruTcGS2kAwLCmoZLdz9/iTZk3WzSEEVwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnamvX7sgP80fjXx4ANHZOayAwQMB8GA1UdIwQY MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2 LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzqlTNLw L9KmhASmVR6eou13tq6E2Jj9Dsx2YXe2E4sPPH/70PL0chUTv7KLs/93TcnlhdKx xHZ37sKbZHBF+9VGvA3NH37GKoLo/LKG1uatKX/kak+mDCUBW7/euu8PpQDdskfN GUvF75t6RZaD4UWuvQzMyxJt+v6Z2aMvP2qDs7SETzz/G0LuXpu7D1aP5zPQwQCS qkm+n/gcqEH3qjIf5mbVmAX248gtjCez05OERr/tbjD4KUDdUvgbmfta/LFJReUS /McY6Zzn9Sx+wbli653LdDIziy/vZVYbVYC1itwxyNejgwNfhZ2er5Ug72HxO96s oeDRMnY6Yi6naA== -----END CERTIFICATE-----Generated at Mon Jan 19 13:07:22 2026 by rpki-client