This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json) Hash identifier: r1zUApmuc+uZfjYF4FgJuIUE6QpXa1IEH7o0znv5VjQ= Subject key identifier: F6:E2:58:9E:85:30:95:C0:5B:5E:69:9E:1C:E1:E2:3C:F2:0A:B6:D6 Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Certificate serial: 019C1F4CA5F98ED34497F3624A8E36985FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft Manifest number: 178D Signing time: Mon 02 Feb 2026 17:00:42 +0000 Manifest this update: Mon 02 Feb 2026 17:00:42 +0000 Manifest next update: Tue 03 Feb 2026 17:00:42 +0000 Files and hashes: 1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: XZBXpnaRc0lr8h9wCsDpNv9DRZBH7OXiaDiowmr1l3U=) 2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:4c:a5:f9:8e:d3:44:97:f3:62:4a:8e:36:98:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Validity Not Before: Feb 2 17:00:42 2026 GMT Not After : Feb 3 17:00:42 2026 GMT Subject: CN=f6e2589e853095c05b5e699e1ce1e23cf20ab6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:76:4c:fb:33:08:cc:08:1a:b3:c2:ad:bb: a9:7d:22:0c:7a:3f:9a:00:e0:45:f2:c7:d4:3e:42: d1:83:0a:c1:82:45:56:01:20:0d:65:8d:ea:06:1c: 5c:e6:6c:9f:27:3e:fd:1c:1b:5f:a3:5c:a1:db:74: de:86:ef:b2:4a:70:37:0f:86:bd:b0:ca:49:11:6d: 49:fa:25:25:ba:0a:c9:b4:f9:c7:58:14:bd:ad:64: f2:ae:e6:65:68:0c:d9:b7:79:da:c4:54:06:7f:f0: 62:1e:92:b2:cc:5f:36:dc:f0:58:df:99:69:77:46: 4b:06:ce:4b:57:f6:8a:f1:6f:cb:0f:a0:e5:0f:59: 33:46:83:49:24:8f:85:6a:48:b9:d7:cb:32:47:10: 09:f8:8f:26:4a:95:b2:d7:b6:a4:9a:6c:47:4a:e5: ca:ab:8b:b7:60:f2:cc:69:4d:75:db:2b:82:ff:8f: 06:fa:a8:d1:e7:0e:b0:64:3a:8d:62:c9:b0:f2:fb: 1e:34:d5:a9:5c:0b:3d:a6:a6:f1:7d:b4:37:35:6d: 8e:5f:aa:4c:f6:0e:e1:dd:e5:19:50:3f:66:c9:23: 2a:34:df:0a:76:79:e7:aa:b3:f5:af:7e:df:2d:8b: aa:1c:1a:52:32:d1:32:5d:07:8d:98:b5:4b:15:78: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:58:9E:85:30:95:C0:5B:5E:69:9E:1C:E1:E2:3C:F2:0A:B6:D6 X509v3 Authority Key Identifier: keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d4:41:6d:cd:77:ab:55:80:8a:24:c2:2f:b1:ef:e3:f2:79: 48:b0:5d:f6:55:ce:ed:e0:f0:f9:3a:9d:3f:42:bc:c4:02:5f: 4c:0d:89:66:b7:c0:83:fd:a7:65:23:df:9d:d0:f5:1c:4a:73: 90:bf:0f:5a:d0:d5:83:51:41:05:1e:b3:ce:93:ef:ac:6f:72: 1e:ab:de:17:bc:e4:5d:c6:30:5c:1b:72:19:df:71:53:86:69: 39:e4:35:66:0d:c0:fa:76:cc:7f:b1:30:71:9a:5a:95:05:14: 84:48:0a:aa:38:68:56:9a:dc:4d:9f:9d:a5:dd:2c:e8:ab:05: f3:f7:81:e1:d9:72:14:1e:24:b2:ec:b7:7d:26:29:12:c6:a6: f2:ce:85:57:4d:92:2a:82:2f:ff:72:65:e1:05:8e:73:ca:23: c7:6b:05:06:31:b7:00:74:eb:c2:a4:12:81:43:92:52:f7:04: d5:9f:0d:2c:f4:a2:3a:32:5f:93:21:1f:56:45:81:0d:aa:58: 83:f5:30:dc:c3:da:ca:80:9d:7c:86:d4:de:c3:c7:f6:7f:8e: d6:b0:91:65:53:c1:44:4a:35:7b:95:10:be:14:1a:c1:7f:a7: d6:81:df:eb:ec:10:56:2c:c4:17:69:28:33:71:23:08:c1:c1: 20:20:3a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfTKX5jtNEl/NiSo42mF/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm NDgwMWUwHhcNMjYwMjAyMTcwMDQyWhcNMjYwMjAzMTcwMDQyWjAzMTEwLwYDVQQD EyhmNmUyNTg5ZTg1MzA5NWMwNWI1ZTY5OWUxY2UxZTIzY2YyMGFiNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ll2TPszCMwIGrPCrbupfSIMej+a AOBF8sfUPkLRgwrBgkVWASANZY3qBhxc5myfJz79HBtfo1yh23Tehu+ySnA3D4a9 sMpJEW1J+iUlugrJtPnHWBS9rWTyruZlaAzZt3naxFQGf/BiHpKyzF823PBY35lp d0ZLBs5LV/aK8W/LD6DlD1kzRoNJJI+Faki518syRxAJ+I8mSpWy17akmmxHSuXK q4u3YPLMaU112yuC/48G+qjR5w6wZDqNYsmw8vseNNWpXAs9pqbxfbQ3NW2OX6pM 9g7h3eUZUD9mySMqNN8KdnnnqrP1r37fLYuqHBpSMtEyXQeNmLVLFXgQhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbiWJ6FMJXAW15pnhzh4jzyCrbWMB8GA1UdIwQY MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtRBbc13 q1WAiiTCL7Hv4/J5SLBd9lXO7eDw+TqdP0K8xAJfTA2JZrfAg/2nZSPfndD1HEpz kL8PWtDVg1FBBR6zzpPvrG9yHqveF7zkXcYwXBtyGd9xU4ZpOeQ1Zg3A+nbMf7Ew cZpalQUUhEgKqjhoVprcTZ+dpd0s6KsF8/eB4dlyFB4ksuy3fSYpEsam8s6FV02S KoIv/3Jl4QWOc8ojx2sFBjG3AHTrwqQSgUOSUvcE1Z8NLPSiOjJfkyEfVkWBDapY g/Uw3MPayoCdfIbU3sPH9n+O1rCRZVPBREo1e5UQvhQawX+n1oHf6+wQVizEF2ko M3EjCMHBICA6Kg== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:48 2026 by rpki-client