This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json) Hash identifier: 935otOUWU+wPcslaPgngkOppMM9H2CJEjbCkEAv1u6Y= Subject key identifier: 32:BA:D2:3F:96:74:F0:90:C0:83:FF:8E:B5:57:11:18:A0:81:04:DD Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Certificate serial: 019B9CD71C724341A916B65A7EE3A9DE4420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft Manifest number: 1616 Signing time: Thu 08 Jan 2026 09:01:41 +0000 Manifest this update: Thu 08 Jan 2026 09:01:41 +0000 Manifest next update: Fri 09 Jan 2026 09:01:41 +0000 Files and hashes: 1: cMQiZnAEZAcj3C0lkcgvF6RD5y8.roa (hash: 42uo0Cj9Z9TNuXBZG2n2ywXXuk81qWLkR5LdFIJRmv0=) 2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: vfjqAYaMuOfueKhUQq9UJXC4fwMLRkzOBfoAU4Lo9qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:d7:1c:72:43:41:a9:16:b6:5a:7e:e3:a9:de:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Validity Not Before: Jan 8 09:01:41 2026 GMT Not After : Jan 9 09:01:41 2026 GMT Subject: CN=32bad23f9674f090c083ff8eb5571118a08104dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:1c:1f:cc:48:09:a7:ff:62:37:95:2b:5a: 01:50:a1:cd:3e:59:57:e0:dd:52:1d:7e:78:c2:67: 4f:c2:18:a3:ad:2f:36:3a:b7:fe:50:d5:10:47:d4: 17:97:41:b1:f9:d0:5b:c2:6f:eb:73:8f:b2:69:09: c2:5c:4f:58:02:04:9c:82:85:d0:c2:a8:06:25:ec: 37:b5:20:1b:6b:d4:f9:e1:26:13:bf:1a:cc:86:9d: b5:45:89:fa:82:77:68:75:ad:08:b0:ea:1d:73:ae: 48:21:d4:e8:7b:8a:d5:fb:f3:3f:ca:7c:5c:ab:fb: 77:42:fc:60:ec:1f:11:82:3d:9b:db:8a:09:db:e6: 7f:93:10:3f:2f:18:23:05:80:ab:88:be:08:80:be: a5:20:f1:0c:bf:5b:5f:4f:83:59:2d:d0:fa:41:58: c2:2d:65:d3:34:2b:f6:fe:da:54:b8:10:69:e1:d5: 9a:93:dc:12:fd:af:5f:7d:a8:3a:09:d7:c2:f6:12: 07:1a:56:3d:63:84:7f:eb:5e:a7:fa:9d:93:f6:e0: bc:62:e5:fe:17:de:20:42:8e:ae:13:40:3e:41:dd: 91:a7:8a:fc:85:78:95:4a:f0:db:c5:1f:52:47:45: 74:29:a3:99:c5:7a:98:5c:7e:c4:a3:c2:f2:07:fc: 82:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BA:D2:3F:96:74:F0:90:C0:83:FF:8E:B5:57:11:18:A0:81:04:DD X509v3 Authority Key Identifier: keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bb:9b:72:8b:6c:21:be:c5:17:fa:8f:27:74:5b:af:e8:40: e1:7a:f9:80:b1:6f:15:f0:6a:1a:e2:7d:77:63:88:3c:7b:96: 13:50:75:4d:7b:5f:70:b6:c2:4a:96:eb:6d:5c:1b:20:3f:cc: c3:94:b0:11:b2:b0:f1:61:71:51:fa:b8:dd:9a:68:ed:e2:32: 02:6d:44:9f:28:a2:1e:cf:e9:63:cb:fd:89:50:72:5f:61:51: 88:42:1f:17:a5:81:e2:25:c4:fc:89:61:7c:d1:d3:51:44:1e: ee:ed:8c:62:ec:63:4c:cb:1f:51:f4:83:80:da:8d:ed:ca:7d: a8:d4:9a:03:38:01:0c:cb:98:c9:45:c6:bb:3d:fc:7d:7c:64: ad:85:ae:73:8b:f9:c5:d9:6b:83:a9:6f:5c:02:38:23:45:d7: 9a:3c:45:2a:7f:4d:d3:7b:0c:17:59:53:62:eb:83:73:5b:6f: ab:dc:de:39:1d:be:45:76:ac:d4:10:c4:2d:e5:1d:49:5f:78: cf:7f:8e:80:da:4a:a8:4c:78:51:e5:e9:0a:3d:78:18:66:d5: a1:4e:e4:d8:47:5e:44:42:6e:a1:a4:00:c5:4b:43:2d:23:0b: 07:e4:66:12:f2:3f:06:b5:f3:d9:96:a6:95:f4:53:f5:2e:cd: 71:73:f6:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuc1xxyQ0GpFrZafuOp3kQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNGIxY2RmNTA2Y2U1ZTk5MzdlNzdmODI2M2VjZjZkZGIy NTViMDUwHhcNMjYwMTA4MDkwMTQxWhcNMjYwMTA5MDkwMTQxWjAzMTEwLwYDVQQD EygzMmJhZDIzZjk2NzRmMDkwYzA4M2ZmOGViNTU3MTExOGEwODEwNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEgcH8xICaf/YjeVK1oBUKHNPllX 4N1SHX54wmdPwhijrS82Orf+UNUQR9QXl0Gx+dBbwm/rc4+yaQnCXE9YAgScgoXQ wqgGJew3tSAba9T54SYTvxrMhp21RYn6gndoda0IsOodc65IIdToe4rV+/M/ynxc q/t3Qvxg7B8Rgj2b24oJ2+Z/kxA/LxgjBYCriL4IgL6lIPEMv1tfT4NZLdD6QVjC LWXTNCv2/tpUuBBp4dWak9wS/a9ffag6CdfC9hIHGlY9Y4R/616n+p2T9uC8YuX+ F94gQo6uE0A+Qd2Rp4r8hXiVSvDbxR9SR0V0KaOZxXqYXH7Eo8LyB/yChQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK60j+WdPCQwIP/jrVXERiggQTdMB8GA1UdIwQY MBaAFLBLHN9QbOXpk353+CY+z23bJVsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAt Y2U1MDE5MjY0ODk1LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAtY2U1MDE5MjY0ODk1 LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLubcots Ib7FF/qPJ3Rbr+hA4Xr5gLFvFfBqGuJ9d2OIPHuWE1B1TXtfcLbCSpbrbVwbID/M w5SwEbKw8WFxUfq43Zpo7eIyAm1EnyiiHs/pY8v9iVByX2FRiEIfF6WB4iXE/Ilh fNHTUUQe7u2MYuxjTMsfUfSDgNqN7cp9qNSaAzgBDMuYyUXGuz38fXxkrYWuc4v5 xdlrg6lvXAI4I0XXmjxFKn9N03sMF1lTYuuDc1tvq9zeOR2+RXas1BDELeUdSV94 z3+OgNpKqEx4UeXpCj14GGbVoU7k2EdeREJuoaQAxUtDLSMLB+RmEvI/BrXz2Zam lfRT9S7NcXP2BQ== -----END CERTIFICATE-----Generated at Thu Jan 8 17:06:14 2026 by rpki-client