This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json) Hash identifier: xfz957FHgSJz1oXIjN84Ry2Bt8Fkifd3RyTzC4lpY6w= Subject key identifier: EC:A6:A2:0D:B6:B9:D6:F4:EB:33:7E:6A:B1:B5:E6:05:CA:71:C9:E5 Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Certificate serial: 019BFBAE3AF6688084133567A175A7C49E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft Manifest number: 0B2A Signing time: Mon 26 Jan 2026 19:00:58 +0000 Manifest this update: Mon 26 Jan 2026 19:00:58 +0000 Manifest next update: Tue 27 Jan 2026 19:00:58 +0000 Files and hashes: 1: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (hash: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU=) 2: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: i4rbd+HlBO3ncs/8Yi/jMrDGlTmTRAsyaUZwqHkcAVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:3a:f6:68:80:84:13:35:67:a1:75:a7:c4:9e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Validity Not Before: Jan 26 19:00:58 2026 GMT Not After : Jan 27 19:00:58 2026 GMT Subject: CN=eca6a20db6b9d6f4eb337e6ab1b5e605ca71c9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:2f:a4:d5:72:27:1a:88:82:7a:de:8e:50: 69:0e:a9:5d:28:35:25:97:73:d8:29:f4:2f:8c:d1: b9:df:c9:fa:57:77:17:00:e8:ed:5e:22:7a:80:74: 04:10:1e:7b:95:2c:bf:8f:c2:1c:74:e6:82:ce:38: 22:10:a4:3b:89:e3:b5:d5:43:1b:2e:44:70:42:65: c1:bf:65:9b:d5:79:9f:65:2c:4c:67:ce:07:da:f7: dd:b8:f7:d5:e2:95:fd:96:6b:f0:cb:45:d5:f6:a3: 92:5b:86:f1:8e:95:cf:a0:b3:01:a9:9a:09:9c:42: b3:79:44:29:a2:85:47:b0:c5:14:10:80:a0:bd:5c: 2c:86:db:c9:ac:a8:d0:d1:95:35:e1:8d:b4:40:1f: 25:9a:5c:8c:dd:3d:fa:a3:2d:82:19:e8:59:1e:35: d5:9f:29:da:66:41:7e:86:58:d2:11:f3:9b:04:27: 2a:53:82:9c:a5:89:03:67:b9:41:69:7f:4b:b1:78: 24:04:86:46:77:ff:25:82:10:f4:60:ad:38:dd:a6: 81:ac:cd:5f:74:0e:aa:b1:8c:d8:bd:f3:e3:75:00: 6c:3b:c6:bf:d4:24:be:31:44:bb:c7:26:43:c8:ba: 6f:8d:72:16:02:68:dd:0c:f7:9a:65:08:2d:89:31: 81:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:A2:0D:B6:B9:D6:F4:EB:33:7E:6A:B1:B5:E6:05:CA:71:C9:E5 X509v3 Authority Key Identifier: keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:f1:19:a3:1c:d2:76:6b:83:1c:49:70:63:50:a6:37:c9: 12:8c:bd:dd:3f:61:eb:71:80:c2:ef:ec:c9:da:04:dc:0d:df: 2b:cf:84:4d:7a:8b:a9:f9:13:98:76:5d:96:b6:42:9e:6d:a0: 6b:10:ad:19:60:78:f7:36:1b:0a:93:ca:77:b7:a2:9a:e6:0e: 02:cc:7f:c3:16:15:41:55:12:6e:53:85:58:93:5c:90:97:1b: 63:08:9b:df:ac:47:d3:55:68:c7:37:33:79:0b:17:a4:57:7f: a4:22:2c:9c:0c:ca:7e:be:af:cd:a4:ca:db:3a:3d:6b:28:d7: 74:f7:74:96:a1:ef:53:dc:16:21:f1:47:7a:3e:f5:bd:e3:f8: f6:0e:0d:68:a0:a0:bd:05:55:94:a3:de:7d:5f:63:37:93:f2: 39:f4:09:e5:97:7f:db:1d:f4:11:04:76:6c:cd:e0:4d:12:ba: 5b:46:73:95:ab:99:a9:59:0e:38:d5:29:26:c5:e0:e9:94:bf: 70:ba:fb:20:df:f1:ba:de:21:73:2a:2a:35:93:b2:99:02:58: f0:b4:c2:6a:f8:30:7d:c6:42:52:36:58:6c:69:f4:09:b2:1a: fd:ca:f7:a3:c3:82:e3:1b:42:20:52:9d:40:db:3d:42:34:19: c5:a8:bf:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rjr2aICEEzVnoXWnxJ6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4 YTdjODEwHhcNMjYwMTI2MTkwMDU4WhcNMjYwMTI3MTkwMDU4WjAzMTEwLwYDVQQD EyhlY2E2YTIwZGI2YjlkNmY0ZWIzMzdlNmFiMWI1ZTYwNWNhNzFjOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+0vpNVyJxqIgnrejlBpDqldKDUl l3PYKfQvjNG538n6V3cXAOjtXiJ6gHQEEB57lSy/j8IcdOaCzjgiEKQ7ieO11UMb LkRwQmXBv2Wb1XmfZSxMZ84H2vfduPfV4pX9lmvwy0XV9qOSW4bxjpXPoLMBqZoJ nEKzeUQpooVHsMUUEICgvVwshtvJrKjQ0ZU14Y20QB8lmlyM3T36oy2CGehZHjXV nynaZkF+hljSEfObBCcqU4KcpYkDZ7lBaX9LsXgkBIZGd/8lghD0YK043aaBrM1f dA6qsYzYvfPjdQBsO8a/1CS+MUS7xyZDyLpvjXIWAmjdDPeaZQgtiTGBLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOymog22udb06zN+arG15gXKccnlMB8GA1UdIwQY MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQrxGaMc 0nZrgxxJcGNQpjfJEoy93T9h63GAwu/sydoE3A3fK8+ETXqLqfkTmHZdlrZCnm2g axCtGWB49zYbCpPKd7eimuYOAsx/wxYVQVUSblOFWJNckJcbYwib36xH01Voxzcz eQsXpFd/pCIsnAzKfr6vzaTK2zo9ayjXdPd0lqHvU9wWIfFHej71veP49g4NaKCg vQVVlKPefV9jN5PyOfQJ5Zd/2x30EQR2bM3gTRK6W0ZzlauZqVkOONUpJsXg6ZS/ cLr7IN/xut4hcyoqNZOymQJY8LTCavgwfcZCUjZYbGn0CbIa/cr3o8OC4xtCIFKd QNs9QjQZxai/jg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:32 2026 by rpki-client