This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json) Hash identifier: LHKZkccloF+2jH8Co7OnST+UYeAfbdGtE+m5HR5FeOY= Subject key identifier: C1:A1:DF:F1:7B:24:42:36:8D:32:E7:5E:D6:B6:41:9B:D3:53:BC:0E Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c Certificate serial: 019BE112CE1A5117927D7245E60A7B856CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft Manifest number: 17DB Signing time: Wed 21 Jan 2026 15:01:04 +0000 Manifest this update: Wed 21 Jan 2026 15:01:04 +0000 Manifest next update: Thu 22 Jan 2026 15:01:04 +0000 Files and hashes: 1: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: OGz+xKexRAfNQo8YQW7DHnX4fJGEqJkfgBUxtbj0LU8=) 2: pth9nCfBOVCefSZjAlug7noCoiE.roa (hash: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98=) 3: ukI_HPYNJmvBtX0I8YnAqCqHIKc.roa (hash: V4VFe3RvbqJ8JaD1mJXWX5JH1StQafZpQ0cqoqd+N6E=) 4: z8VOUiSLPVMno5KoGBbOODeDDys.roa (hash: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:12:ce:1a:51:17:92:7d:72:45:e6:0a:7b:85:6c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c Validity Not Before: Jan 21 15:01:04 2026 GMT Not After : Jan 22 15:01:04 2026 GMT Subject: CN=c1a1dff17b2442368d32e75ed6b6419bd353bc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:d0:38:a2:23:33:04:f0:73:84:54:0a:be: d5:9a:66:bc:4c:4b:3d:be:63:6c:3b:9d:fd:7a:c5: 41:8f:68:f4:86:09:c9:6f:ff:f5:8e:e8:09:f6:df: de:3a:90:27:48:5f:0a:58:0a:01:5d:71:38:27:ac: bf:3d:77:bc:0b:c1:6d:84:93:1f:70:11:93:51:ed: ab:b4:78:e5:a6:c8:b8:db:98:10:97:62:b9:ff:b2: 18:61:bc:67:9e:a4:05:ec:ec:45:ea:e6:b8:d2:7f: 44:ac:ca:02:be:6d:3d:01:ef:57:12:ef:5a:ca:c2: 6a:99:4e:9f:0a:fd:b4:08:b1:d5:a2:5f:ab:07:df: 63:d4:f9:ad:42:20:5e:f4:1a:65:22:ee:64:56:85: 27:a4:cc:60:5f:dc:b6:39:3d:5a:5d:31:d2:08:49: 05:e8:e7:c5:62:c3:9b:89:b0:9f:ab:f5:0b:cb:a5: 2c:e0:8b:65:e4:ed:2d:42:ca:89:9f:ad:ab:7a:29: 76:16:94:a9:10:c9:d8:c2:8a:91:50:b8:12:ad:c3: 97:da:d6:51:bb:21:67:42:b8:51:71:85:84:e8:e6: 08:c0:c3:ed:e8:a8:15:1e:fb:3a:fb:39:39:c4:ad: 31:54:cc:8b:ec:61:f0:da:d2:ee:f8:c4:89:87:73: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:DF:F1:7B:24:42:36:8D:32:E7:5E:D6:B6:41:9B:D3:53:BC:0E X509v3 Authority Key Identifier: keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:65:ea:a6:1a:18:eb:1f:6d:48:70:05:80:7d:12:55:ca:9a: 5f:39:21:d9:a9:fe:8a:65:ab:68:a8:ea:76:29:05:31:7b:c4: 6a:2a:15:dd:f9:e1:86:2d:4c:32:93:72:a0:31:53:b3:31:7c: 4d:3f:84:92:a5:75:03:17:0e:02:54:29:38:7b:d1:69:34:4d: 5e:ae:c1:e0:96:11:58:89:93:2b:8b:b6:54:23:05:3e:7c:11: 53:03:95:42:16:e2:d6:7a:3b:d2:37:98:c3:e7:18:4d:3d:32: c5:c9:86:30:06:bf:5d:65:56:5e:ab:d6:e4:0e:d4:6c:5a:66: 65:0f:2f:74:09:1b:b9:c5:11:1b:33:aa:68:8b:e8:c2:1d:15: 8d:11:76:e8:46:8f:b4:8f:bd:b1:f0:c4:75:77:a4:5b:e0:c5: 8f:04:20:81:4f:cc:e5:5b:bc:f4:82:41:0d:92:25:be:41:d4: ac:76:88:29:8d:1a:cd:d3:e7:da:3a:d6:ba:20:84:ac:cd:bb: 72:1d:e4:01:8d:5f:88:e0:f5:6e:83:cc:ae:5c:6c:c3:80:79: 5f:ab:fb:ac:03:c9:ff:ae:59:86:86:c3:af:89:a2:a4:65:fb: 7c:d8:5f:01:df:1e:b2:54:ec:d4:21:2e:2e:aa:42:8e:e0:26: 33:13:de:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvhEs4aUReSfXJF5gp7hWzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODA5NTkyN2VlNTdjY2VlMjU2YWE0MzlmMTYzNjg2YjU4 YzU3MGMwHhcNMjYwMTIxMTUwMTA0WhcNMjYwMTIyMTUwMTA0WjAzMTEwLwYDVQQD EyhjMWExZGZmMTdiMjQ0MjM2OGQzMmU3NWVkNmI2NDE5YmQzNTNiYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnzQOKIjMwTwc4RUCr7Vmma8TEs9 vmNsO539esVBj2j0hgnJb//1jugJ9t/eOpAnSF8KWAoBXXE4J6y/PXe8C8FthJMf cBGTUe2rtHjlpsi425gQl2K5/7IYYbxnnqQF7OxF6ua40n9ErMoCvm09Ae9XEu9a ysJqmU6fCv20CLHVol+rB99j1PmtQiBe9BplIu5kVoUnpMxgX9y2OT1aXTHSCEkF 6OfFYsObibCfq/ULy6Us4Itl5O0tQsqJn62reil2FpSpEMnYwoqRULgSrcOX2tZR uyFnQrhRcYWE6OYIwMPt6KgVHvs6+zk5xK0xVMyL7GHw2tLu+MSJh3MX9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGh3/F7JEI2jTLnXta2QZvTU7wOMB8GA1UdIwQY MBaAFEqAlZJ+5XzO4laqQ58WNoa1jFcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEt MGY5ZDQzZDg2NGJiLzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEtMGY5ZDQzZDg2NGJi LzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWXqphoY 6x9tSHAFgH0SVcqaXzkh2an+imWraKjqdikFMXvEaioV3fnhhi1MMpNyoDFTszF8 TT+EkqV1AxcOAlQpOHvRaTRNXq7B4JYRWImTK4u2VCMFPnwRUwOVQhbi1no70jeY w+cYTT0yxcmGMAa/XWVWXqvW5A7UbFpmZQ8vdAkbucURGzOqaIvowh0VjRF26EaP tI+9sfDEdXekW+DFjwQggU/M5Vu89IJBDZIlvkHUrHaIKY0azdPn2jrWuiCErM27 ch3kAY1fiOD1boPMrlxsw4B5X6v7rAPJ/65ZhobDr4mipGX7fNhfAd8eslTs1CEu LqpCjuAmMxPegA== -----END CERTIFICATE-----Generated at Wed Jan 21 18:48:30 2026 by rpki-client