This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json) Hash identifier: s9z0+oVQhYWffgJ7zOcCCl2aQqeXgV8XTRUqnUGl59g= Subject key identifier: 93:DA:6A:FD:D6:91:3F:4E:92:CE:D2:27:2E:AD:40:32:2C:6B:25:7A Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f Certificate serial: 019BAF4B1BB50D7926DFF0813EC983956EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 23:01:33 +0000 Manifest this update: Sun 11 Jan 2026 23:01:33 +0000 Manifest next update: Mon 12 Jan 2026 23:01:33 +0000 Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=) 2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: 0KSmSIi8gIM7qvFnMznq783ub7Y0G3OX5+STJOYCY5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 23:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4b:1b:b5:0d:79:26:df:f0:81:3e:c9:83:95:6e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f Validity Not Before: Jan 11 23:01:33 2026 GMT Not After : Jan 12 23:01:33 2026 GMT Subject: CN=93da6afdd6913f4e92ced2272ead40322c6b257a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e5:90:f2:e1:15:98:f8:e9:0d:93:9b:49:57: 3f:de:2e:5d:ea:37:79:3e:1d:9d:ca:12:4b:44:13: 96:3e:d4:38:2e:0d:4c:2b:fd:47:c3:96:6d:84:56: a7:98:ff:99:e2:18:71:8c:b9:90:3b:61:4c:90:7e: f6:b2:ea:f6:32:24:78:c1:8c:35:e9:b1:94:2e:15: 7e:ad:05:36:81:76:52:fd:4e:a4:f8:25:57:af:01: 9a:02:b5:3b:80:2e:94:a4:46:23:c8:fe:19:c8:87: c1:5a:a0:11:d6:0d:0b:aa:de:77:99:51:b9:1e:4e: fa:d3:3f:b5:10:2f:b1:70:bb:d3:bc:dd:f8:8b:fe: 35:43:e8:76:02:18:3f:c8:31:4c:7d:a8:54:11:54: 01:1b:dc:53:f1:a9:a4:4f:22:b8:b1:7d:a1:6d:57: 85:87:78:35:40:61:a8:40:5c:cc:e3:6c:58:ba:0a: 62:77:a0:17:4d:a6:a6:c4:00:64:3c:2c:01:08:95: 7c:20:3c:3b:c8:f0:de:cc:72:1d:2a:dc:98:2e:dc: 3c:fe:d0:f7:33:a4:18:92:b4:94:dc:52:f8:34:d7: 83:06:6e:9a:93:4d:d3:35:46:f2:b1:20:3c:a8:a3: 3f:4a:75:42:b8:b4:bd:fd:9d:af:37:65:e8:e3:d6: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DA:6A:FD:D6:91:3F:4E:92:CE:D2:27:2E:AD:40:32:2C:6B:25:7A X509v3 Authority Key Identifier: keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f2:18:de:e9:42:57:dc:3a:a1:14:6d:ee:ac:ec:51:33:b5: cc:b6:90:be:e7:31:0e:66:b5:86:11:af:14:77:cb:b1:1c:10: d5:ac:90:b3:48:36:1c:95:a6:db:f2:c4:7f:96:df:51:07:67: 3c:5c:27:7d:6c:57:49:c7:db:66:34:ee:3a:1a:54:e3:34:8d: 25:78:7f:6c:dd:67:ce:54:a0:a1:11:d9:d3:b6:70:13:4d:ed: 56:2d:b6:41:b3:b1:49:51:db:75:f2:3e:bf:31:74:23:af:0b: 03:ef:60:00:47:22:25:9a:33:02:d3:d4:3c:e7:36:8a:c6:d4: 91:78:dc:3f:8e:28:84:a2:0d:a4:64:1d:83:d7:a2:d2:45:aa: 02:0b:3e:7e:c8:db:7a:3f:fc:88:dc:b9:b0:22:c2:60:aa:f4: 54:85:36:ae:f1:80:97:cb:d0:4d:d0:3c:92:01:9e:bb:3e:4a: 53:f2:52:8c:e8:ab:d9:7c:8a:ae:2f:ce:31:a1:9a:f1:ae:08: 70:ce:81:15:3a:92:3d:4d:5c:a1:49:5b:b8:4f:36:a0:8d:68: 47:e7:9a:da:8a:9a:e9:8f:fb:0b:a1:2b:7d:c1:ae:5f:df:5f: 5f:62:32:5a:17:c5:5c:68:f3:27:29:2a:03:51:a8:e3:21:51: 99:17:f2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvSxu1DXkm3/CBPsmDlW7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDQ2N2YxNmQwOTUxZTQzMDcxMzgzMmM2Yzc1OTU2MWU3 NjA0MWYwHhcNMjYwMTExMjMwMTMzWhcNMjYwMTEyMjMwMTMzWjAzMTEwLwYDVQQD Eyg5M2RhNmFmZGQ2OTEzZjRlOTJjZWQyMjcyZWFkNDAzMjJjNmIyNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+WQ8uEVmPjpDZObSVc/3i5d6jd5 Ph2dyhJLRBOWPtQ4Lg1MK/1Hw5ZthFanmP+Z4hhxjLmQO2FMkH72sur2MiR4wYw1 6bGULhV+rQU2gXZS/U6k+CVXrwGaArU7gC6UpEYjyP4ZyIfBWqAR1g0Lqt53mVG5 Hk760z+1EC+xcLvTvN34i/41Q+h2Ahg/yDFMfahUEVQBG9xT8amkTyK4sX2hbVeF h3g1QGGoQFzM42xYugpid6AXTaamxABkPCwBCJV8IDw7yPDezHIdKtyYLtw8/tD3 M6QYkrSU3FL4NNeDBm6ak03TNUbysSA8qKM/SnVCuLS9/Z2vN2Xo49YvawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPaav3WkT9Oks7SJy6tQDIsayV6MB8GA1UdIwQY MBaAFErUZ/FtCVHkMHE4MsbHWVYedgQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAt NTY0MjM1M2Q0MzFhLzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAtNTY0MjM1M2Q0MzFh LzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvIY3ulC V9w6oRRt7qzsUTO1zLaQvucxDma1hhGvFHfLsRwQ1ayQs0g2HJWm2/LEf5bfUQdn PFwnfWxXScfbZjTuOhpU4zSNJXh/bN1nzlSgoRHZ07ZwE03tVi22QbOxSVHbdfI+ vzF0I68LA+9gAEciJZozAtPUPOc2isbUkXjcP44ohKINpGQdg9ei0kWqAgs+fsjb ej/8iNy5sCLCYKr0VIU2rvGAl8vQTdA8kgGeuz5KU/JSjOir2XyKri/OMaGa8a4I cM6BFTqSPU1coUlbuE82oI1oR+ea2oqa6Y/7C6ErfcGuX99fX2IyWhfFXGjzJykq A1Go4yFRmRfyJw== -----END CERTIFICATE-----Generated at Mon Jan 12 09:24:45 2026 by rpki-client