This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json) Hash identifier: VzPg68vQrOiCQETJmmWPve3tWGqF4eeHXh3mf4dabPU= Subject key identifier: 08:40:EE:31:95:48:8A:BA:5F:2C:07:CB:62:67:3D:91:3C:81:2A:B3 Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8 Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8 Certificate serial: 019BB24BAC474467D22AC6BA877D52957FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft Manifest number: 1502 Signing time: Mon 12 Jan 2026 13:01:02 +0000 Manifest this update: Mon 12 Jan 2026 13:01:02 +0000 Manifest next update: Tue 13 Jan 2026 13:01:02 +0000 Files and hashes: 1: HVNyPpshDup5-VV20Zvos0kqjfw.roa (hash: feauyuxnsf6ozUYlBnDdKhJOIjOdxAMV8HCT2qzKw9w=) 2: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: dfvAUnxxu/okLrSLXdzPvmS2FsjajSLNoY99/r+9dN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4b:ac:47:44:67:d2:2a:c6:ba:87:7d:52:95:7f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8 Validity Not Before: Jan 12 13:01:02 2026 GMT Not After : Jan 13 13:01:02 2026 GMT Subject: CN=0840ee3195488aba5f2c07cb62673d913c812ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c8:ef:aa:b9:de:58:d0:8f:d7:9f:04:c9:c3: ab:27:dd:ee:d2:53:70:2d:d0:b1:a0:ae:1a:6c:3a: 93:ac:a1:78:b1:4a:20:68:fa:f4:2d:2c:09:c7:43: 75:f4:38:58:26:36:8b:17:ea:63:55:5b:ba:86:9b: b0:ee:1f:06:75:d3:e1:cf:0d:08:fa:b4:37:35:a4: 96:77:ef:97:a9:be:d3:51:e6:d7:38:3d:12:33:88: 5e:47:3b:77:5e:89:5c:de:a6:8f:6f:9f:c5:b3:73: 04:f4:ff:9e:e8:82:0c:88:13:ac:42:d4:cd:da:20: f6:c8:46:ee:66:24:2c:7d:c6:24:d1:87:36:fc:a5: c0:a2:b3:25:0b:88:7b:e2:b2:a4:be:bf:57:64:ff: ab:2e:09:91:32:28:9a:96:b2:71:20:1a:5d:36:4e: b0:c9:64:99:e4:63:34:ca:30:ca:a5:72:27:e4:8c: 2f:99:2f:c5:88:08:04:12:0f:67:ac:81:32:29:30: 0a:e7:01:a6:35:5c:a4:76:68:92:06:f1:5c:a7:7b: aa:97:b6:4a:07:02:f8:9b:0a:33:d8:72:4c:77:96: 00:5a:4f:91:ac:02:89:5d:20:3d:51:89:51:99:f4: d2:6f:53:77:e7:73:75:ac:07:04:9e:9f:00:09:51: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:40:EE:31:95:48:8A:BA:5F:2C:07:CB:62:67:3D:91:3C:81:2A:B3 X509v3 Authority Key Identifier: keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7c:2c:08:2b:13:c9:89:8c:0d:a7:7b:73:4d:82:7b:90:56: a4:1b:2e:e8:14:dd:39:b7:2a:9f:4c:1c:f1:d3:cf:ac:fb:ef: 5b:0d:1b:c6:69:a0:93:3d:d4:97:6a:f0:47:fa:73:84:86:1b: 71:9b:f6:e2:4e:d3:74:ab:36:8f:e5:a7:2c:7d:58:54:38:41: b8:98:29:eb:f2:f1:30:4e:8f:2c:c3:73:2d:b8:e5:34:30:18: 74:1d:71:d8:b0:13:2f:0a:4b:f8:7c:db:f1:aa:56:18:2f:b1: a3:0b:21:2f:a4:0f:5a:2c:1a:5f:91:77:6e:ce:9e:35:c4:df: 5b:7b:45:6a:79:82:3a:30:56:99:28:83:45:8a:dd:c6:f5:d2: 1c:37:d0:c3:b9:5f:a7:6c:ad:8f:f7:af:1a:f4:44:7d:4c:13: 10:1a:73:6d:6c:15:98:e5:af:c3:89:ec:82:e8:10:b4:e9:09: 90:08:f7:88:7f:d2:56:28:aa:63:57:35:92:f3:20:21:fb:bc: 88:5b:3b:52:39:40:dd:15:38:25:f9:6a:a0:8e:25:61:94:67: e1:42:72:dd:92:e1:ff:f4:8c:62:fd:13:da:33:4a:ea:ac:e3: 18:16:69:90:7d:8d:e4:7c:29:7e:22:ae:df:66:58:94:48:91: 86:90:45:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyS6xHRGfSKsa6h31SlX/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWNkY2I5MGI5ODMyMDE2NzQ4YTdlMjY4Y2MxZWZmMjM5 MjYyZjgwHhcNMjYwMTEyMTMwMTAyWhcNMjYwMTEzMTMwMTAyWjAzMTEwLwYDVQQD EygwODQwZWUzMTk1NDg4YWJhNWYyYzA3Y2I2MjY3M2Q5MTNjODEyYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MjvqrneWNCP158EycOrJ93u0lNw LdCxoK4abDqTrKF4sUogaPr0LSwJx0N19DhYJjaLF+pjVVu6hpuw7h8GddPhzw0I +rQ3NaSWd++Xqb7TUebXOD0SM4heRzt3Xolc3qaPb5/Fs3ME9P+e6IIMiBOsQtTN 2iD2yEbuZiQsfcYk0Yc2/KXAorMlC4h74rKkvr9XZP+rLgmRMiialrJxIBpdNk6w yWSZ5GM0yjDKpXIn5IwvmS/FiAgEEg9nrIEyKTAK5wGmNVykdmiSBvFcp3uql7ZK BwL4mwoz2HJMd5YAWk+RrAKJXSA9UYlRmfTSb1N353N1rAcEnp8ACVHqZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhA7jGVSIq6XywHy2JnPZE8gSqzMB8GA1UdIwQY MBaAFEsc3LkLmDIBZ0in4mjMHv8jkmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgt YWVmYzE4OWZkODUxLzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgtYWVmYzE4OWZkODUx LzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3wsCCsT yYmMDad7c02Ce5BWpBsu6BTdObcqn0wc8dPPrPvvWw0bxmmgkz3Ul2rwR/pzhIYb cZv24k7TdKs2j+WnLH1YVDhBuJgp6/LxME6PLMNzLbjlNDAYdB1x2LATLwpL+Hzb 8apWGC+xowshL6QPWiwaX5F3bs6eNcTfW3tFanmCOjBWmSiDRYrdxvXSHDfQw7lf p2ytj/evGvREfUwTEBpzbWwVmOWvw4nsgugQtOkJkAj3iH/SViiqY1c1kvMgIfu8 iFs7UjlA3RU4JflqoI4lYZRn4UJy3ZLh//SMYv0T2jNK6qzjGBZpkH2N5HwpfiKu 32ZYlEiRhpBFFA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:05:16 2026 by rpki-client