This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json) Hash identifier: YQfWjQ4+Hf3lnzz32MTEhutUEEQZVLha4ymXe9gDJZU= Subject key identifier: 92:0C:69:00:07:39:93:66:BC:FE:5B:31:05:49:DD:9E:DA:7D:71:07 Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Certificate serial: 019BFC532B1D6752EE0FFAB0B18D1D7EA0E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft Manifest number: 17FF Signing time: Mon 26 Jan 2026 22:01:07 +0000 Manifest this update: Mon 26 Jan 2026 22:01:07 +0000 Manifest next update: Tue 27 Jan 2026 22:01:07 +0000 Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=) 2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=) 3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=) 4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: UQMGs6ooe8OyF7odw9X+zC3u1xSxIo4m1KRnI390k8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:2b:1d:67:52:ee:0f:fa:b0:b1:8d:1d:7e:a0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Validity Not Before: Jan 26 22:01:07 2026 GMT Not After : Jan 27 22:01:07 2026 GMT Subject: CN=920c690007399366bcfe5b310549dd9eda7d7107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:db:27:02:89:ae:de:ef:86:19:30:7c:bb: ba:8f:29:c2:5f:96:df:4f:6a:05:be:bf:12:c2:f7: 54:5c:29:f9:34:74:79:8e:d7:5c:ea:fa:d3:15:63: c8:8d:c5:d4:8c:65:e5:68:ec:52:53:f8:a5:92:e5: 1d:c4:67:07:ec:d1:b2:ca:56:20:6a:90:57:55:27: b1:e7:a5:b8:5c:23:d7:ec:1b:e6:3c:3b:2a:89:79: 36:2f:30:55:4f:e1:cd:4f:f9:eb:58:71:9a:3a:6d: c1:34:a4:5d:e7:e6:53:ce:3e:26:b7:9d:f8:af:6e: ba:5d:42:60:5c:3b:73:21:fb:26:a8:a4:fe:3a:8c: 9b:ee:3c:0f:70:20:bb:dd:fe:69:6c:a6:5b:af:16: 1f:08:d6:29:ee:de:84:f8:87:43:cd:77:c0:e5:d7: 5e:d3:10:78:5c:8c:c4:6b:41:15:3c:55:d8:55:1a: 0a:1c:ef:3b:cf:66:4b:eb:4d:7b:1b:d3:44:ca:f5: d6:56:c6:f6:b0:5b:74:1e:ee:50:7b:5c:5e:1b:f9: 55:7e:b5:85:b4:68:71:13:75:a6:8c:09:3c:0a:75: 44:9f:1a:26:f7:3b:bc:65:3f:89:02:45:30:d4:f6: d8:e5:38:b1:8e:8b:74:14:b2:ec:45:8f:08:cb:de: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0C:69:00:07:39:93:66:BC:FE:5B:31:05:49:DD:9E:DA:7D:71:07 X509v3 Authority Key Identifier: keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8d:0b:7f:1b:50:6d:0f:6f:59:80:32:d2:a4:bb:a5:e8:08: b4:67:6d:59:e2:f5:46:9b:97:48:5c:c0:90:32:6c:de:43:da: 5b:8b:26:f4:11:58:68:b9:54:91:84:b0:a8:c3:69:13:26:e1: 1a:a6:f5:5f:6e:48:fb:db:19:8c:2c:eb:eb:17:8d:cd:20:a8: 4a:2b:13:05:bf:b1:f7:b3:e6:88:11:13:cd:03:d0:f4:ea:d3: 58:d7:54:17:0f:36:10:26:c4:11:ce:92:97:fe:fe:35:db:cd: 0b:91:b9:c6:4a:58:61:08:18:e6:2f:16:9f:ff:fc:dd:2c:33: f3:33:97:70:96:7f:d8:e6:14:80:40:df:9e:a6:fc:09:64:7e: a0:4c:d6:d8:c9:e5:03:80:2d:30:c4:f6:ad:bf:4a:e9:16:5e: 03:c0:7a:bb:b4:7a:d3:59:1c:f0:b6:72:d9:5f:5e:ae:f5:e4: 75:ef:69:39:8d:e8:9d:36:5a:47:8e:c0:6d:8c:d8:a0:fd:49: b6:53:4a:70:43:57:b9:eb:1a:8b:4e:b0:d2:bc:58:9a:68:73: 79:2f:1a:88:e4:c2:6e:63:b4:97:2d:af:f0:e1:94:d5:1f:5c: 35:e8:6e:b4:cd:11:e3:52:43:db:ff:0f:1a:c7:3e:06:3b:cc: f9:c6:53:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UysdZ1LuD/qwsY0dfqDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz OWNkYjgwHhcNMjYwMTI2MjIwMTA3WhcNMjYwMTI3MjIwMTA3WjAzMTEwLwYDVQQD Eyg5MjBjNjkwMDA3Mzk5MzY2YmNmZTViMzEwNTQ5ZGQ5ZWRhN2Q3MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqajbJwKJrt7vhhkwfLu6jynCX5bf T2oFvr8SwvdUXCn5NHR5jtdc6vrTFWPIjcXUjGXlaOxSU/ilkuUdxGcH7NGyylYg apBXVSex56W4XCPX7BvmPDsqiXk2LzBVT+HNT/nrWHGaOm3BNKRd5+ZTzj4mt534 r266XUJgXDtzIfsmqKT+Ooyb7jwPcCC73f5pbKZbrxYfCNYp7t6E+IdDzXfA5dde 0xB4XIzEa0EVPFXYVRoKHO87z2ZL6017G9NEyvXWVsb2sFt0Hu5Qe1xeG/lVfrWF tGhxE3WmjAk8CnVEnxom9zu8ZT+JAkUw1PbY5Tixjot0FLLsRY8Iy96H0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIMaQAHOZNmvP5bMQVJ3Z7afXEHMB8GA1UdIwQY MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt M2E1NjI4Y2M4MWQ5LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5 LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH40LfxtQ bQ9vWYAy0qS7pegItGdtWeL1RpuXSFzAkDJs3kPaW4sm9BFYaLlUkYSwqMNpEybh Gqb1X25I+9sZjCzr6xeNzSCoSisTBb+x97PmiBETzQPQ9OrTWNdUFw82ECbEEc6S l/7+NdvNC5G5xkpYYQgY5i8Wn//83Swz8zOXcJZ/2OYUgEDfnqb8CWR+oEzW2Mnl A4AtMMT2rb9K6RZeA8B6u7R601kc8LZy2V9ervXkde9pOY3onTZaR47AbYzYoP1J tlNKcENXuesai06w0rxYmmhzeS8aiOTCbmO0ly2v8OGU1R9cNehutM0R41JD2/8P Gsc+BjvM+cZTMw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:48 2026 by rpki-client