This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft File: 96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json) Hash identifier: 8d8Jra+/il1RRPxkXI079l2wA2mttFaNRKzpk7z29bQ= Subject key identifier: 8A:4F:EF:97:FA:BF:68:BF:E3:E2:E4:7E:3B:FF:B8:C7:BF:61:50:1D Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C Certificate issuer: /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c Certificate serial: 019BA67EEC32F547959D435B671318E2DBB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft Manifest number: 0522 Signing time: Sat 10 Jan 2026 06:01:34 +0000 Manifest this update: Sat 10 Jan 2026 06:01:34 +0000 Manifest next update: Sun 11 Jan 2026 06:01:34 +0000 Files and hashes: 1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: O+bCWneS830k82EZZvVAFjz5bNxSnck5cHiX61V0aho=) 2: d4KrySsXtgR3TbJYSM5N4Uqx4KU.roa (hash: EHWSR+qUf6znYV7HsqlNW+Vcbs+/lAqwQEe/T0CiYVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a6:7e:ec:32:f5:47:95:9d:43:5b:67:13:18:e2:db:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c Validity Not Before: Jan 10 06:01:34 2026 GMT Not After : Jan 11 06:01:34 2026 GMT Subject: CN=8a4fef97fabf68bfe3e2e47e3bffb8c7bf61501d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:8f:5d:a4:d3:62:99:06:c9:dd:04:d9:c5: 8b:e3:3d:0d:b2:b7:2a:68:32:ad:b9:e6:63:4d:b3: 50:d7:89:d2:7f:4a:61:7b:5a:2d:93:d6:37:68:de: 2e:ff:f9:a4:1e:76:b1:4d:b1:a1:9d:ce:f4:58:19: 3a:69:3c:4c:42:2c:0b:53:cb:7a:3b:c6:49:d6:9a: 0f:ef:24:fb:60:bf:94:8b:ab:f1:77:7f:35:2b:c6: ea:0e:6d:a7:03:fe:8d:d6:e1:66:08:0c:ed:85:b9: 9d:f0:65:6b:80:65:47:09:a8:21:78:19:0d:43:df: 13:f8:d0:c9:12:f1:48:e5:70:b8:e8:b1:2d:c1:a4: 90:d6:12:7a:c9:c5:be:5e:e0:10:e4:33:8e:03:1f: 5f:03:e5:7d:fa:c1:d5:a5:3e:5d:38:ef:7e:ea:49: 4e:8b:4c:a9:c3:12:3d:ff:5c:d5:32:45:33:b1:0a: a3:c1:78:6e:d6:9c:25:96:e5:d8:70:50:89:11:23: 17:29:f8:bf:14:b6:a3:f4:07:8c:a0:39:c4:19:69: 5b:49:56:23:61:5b:35:47:3c:28:f0:57:fb:e9:d8: c7:13:60:58:1f:5d:27:fa:7b:a6:bf:68:c6:90:17: ab:1e:4e:37:6a:97:8f:cb:5c:35:3b:68:fd:90:4c: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4F:EF:97:FA:BF:68:BF:E3:E2:E4:7E:3B:FF:B8:C7:BF:61:50:1D X509v3 Authority Key Identifier: keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0f:d8:26:5a:83:46:0c:41:42:5e:5d:9c:84:d6:c2:0f:c4: 16:a5:a6:05:da:dc:d7:70:28:95:39:e2:e1:8d:8e:5f:db:4b: e0:59:d8:de:28:86:d2:c6:98:4b:a7:c3:8b:d7:96:ff:69:e0: dc:a5:b8:34:ce:f1:8e:e2:c9:f1:27:4c:66:7c:49:5a:3f:57: cc:fb:15:9f:83:19:87:98:20:da:2c:76:14:c6:bb:fd:98:3d: eb:b7:24:72:91:6f:70:14:38:7c:1a:f8:0e:53:4d:92:f4:77: 27:71:55:45:e8:c2:0e:d9:ba:31:82:0e:bd:51:ca:40:7c:51: a3:e2:02:cf:a8:b8:e1:49:3f:27:7a:36:68:97:ec:be:ab:4e: a7:87:e2:f5:17:9c:23:93:b9:d6:9b:24:fe:bb:2b:49:3d:0c: cf:bc:51:30:99:11:63:48:c2:92:ce:f2:74:7e:b6:fa:8d:41: 7b:29:e5:ad:a8:63:cf:35:b3:94:f7:62:22:e5:0a:61:21:07: 23:91:eb:7c:1e:76:4b:00:3a:1f:ec:73:ce:da:c6:0a:dd:5f: 7f:ca:23:e3:af:e0:46:d9:02:dd:94:4b:dc:b2:af:95:d5:fb: 31:64:29:42:42:b7:6d:29:87:bb:c0:ec:eb:b2:df:94:5f:0d: 78:ee:20:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZumfuwy9UeVnUNbZxMY4tu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YTRhNmZhMGZjM2UzYjkzNjU3ZWVmMTBhZWRhYzBmYjJj NDUzOGMwHhcNMjYwMTEwMDYwMTM0WhcNMjYwMTExMDYwMTM0WjAzMTEwLwYDVQQD Eyg4YTRmZWY5N2ZhYmY2OGJmZTNlMmU0N2UzYmZmYjhjN2JmNjE1MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM6PXaTTYpkGyd0E2cWL4z0Nsrcq aDKtueZjTbNQ14nSf0phe1otk9Y3aN4u//mkHnaxTbGhnc70WBk6aTxMQiwLU8t6 O8ZJ1poP7yT7YL+Ui6vxd381K8bqDm2nA/6N1uFmCAzthbmd8GVrgGVHCagheBkN Q98T+NDJEvFI5XC46LEtwaSQ1hJ6ycW+XuAQ5DOOAx9fA+V9+sHVpT5dOO9+6klO i0ypwxI9/1zVMkUzsQqjwXhu1pwlluXYcFCJESMXKfi/FLaj9AeMoDnEGWlbSVYj YVs1Rzwo8Ff76djHE2BYH10n+numv2jGkBerHk43apePy1w1O2j9kEw6/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpP75f6v2i/4+Lkfjv/uMe/YVAdMB8GA1UdIwQY MBaAFPekpvoPw+O5Nlfu8QrtrA+yxFOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MDRiYTUtYzQ2Ni00M2MzLWE2MTYt OWUwNDA3NjI2NjY3LzEvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MDRiYTUtYzQ2Ni00M2MzLWE2MTYtOWUwNDA3NjI2NjY3 LzEvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw/YJlqD RgxBQl5dnITWwg/EFqWmBdrc13AolTni4Y2OX9tL4FnY3iiG0saYS6fDi9eW/2ng 3KW4NM7xjuLJ8SdMZnxJWj9XzPsVn4MZh5gg2ix2FMa7/Zg967ckcpFvcBQ4fBr4 DlNNkvR3J3FVRejCDtm6MYIOvVHKQHxRo+ICz6i44Uk/J3o2aJfsvqtOp4fi9Rec I5O51psk/rsrST0Mz7xRMJkRY0jCks7ydH62+o1BeynlrahjzzWzlPdiIuUKYSEH I5HrfB52SwA6H+xzztrGCt1ff8oj46/gRtkC3ZRL3LKvldX7MWQpQkK3bSmHu8Ds 67LflF8NeO4g5g== -----END CERTIFICATE-----Generated at Sat Jan 10 10:46:41 2026 by rpki-client