This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json) Hash identifier: xXofPQbF5CXCYKQ8qnujKirsVo9owCttBzTXspbRHvw= Subject key identifier: 6D:3F:71:96:CE:E7:FD:59:E4:29:7B:F6:5C:F2:6F:05:7A:3E:05:22 Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Certificate serial: 019BAD5CE01402EF0D73DECAB5F7099C7E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft Manifest number: 1031 Signing time: Sun 11 Jan 2026 14:01:43 +0000 Manifest this update: Sun 11 Jan 2026 14:01:43 +0000 Manifest next update: Mon 12 Jan 2026 14:01:43 +0000 Files and hashes: 1: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (hash: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc=) 2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: y+mhAj2x8zybIT+eNNuhGdlj93jQrx+9/UaXemo3yQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:e0:14:02:ef:0d:73:de:ca:b5:f7:09:9c:7e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Validity Not Before: Jan 11 14:01:43 2026 GMT Not After : Jan 12 14:01:43 2026 GMT Subject: CN=6d3f7196cee7fd59e4297bf65cf26f057a3e0522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:ca:37:25:62:49:4f:34:13:8f:8c:24:8b: 6d:49:45:2a:6d:a5:18:9a:3c:5f:0b:94:2d:6b:29: 34:94:11:46:52:bc:f0:ce:85:e9:9d:5c:4d:23:67: 1d:60:ac:a2:23:b5:7c:92:95:db:97:fb:c3:d9:ac: 7b:ce:30:5e:c6:ed:98:de:0b:6f:e2:a2:15:e6:52: de:0a:e6:ee:2d:31:74:07:25:a4:2a:00:09:a2:2b: b9:d8:6a:27:07:eb:d9:94:bf:a0:d0:13:f0:b6:e7: 7a:1b:6d:c2:32:bb:50:ac:91:8d:72:47:f1:1f:d8: 61:a6:08:95:e0:52:d0:57:dd:e1:89:17:7b:fe:5e: b1:23:d4:71:f7:f1:42:20:e7:d5:2c:c8:fa:27:81: 1b:93:fb:3a:f5:9b:9f:e0:0f:cf:7a:c5:24:28:21: be:d4:c6:fe:f9:0c:22:6b:96:c3:c7:c8:0f:ba:22: 76:97:85:0f:a1:ca:fe:f5:a9:e0:16:37:df:5d:6d: 52:2c:97:1c:2f:d9:7a:28:51:a5:f2:bd:f0:4f:7c: 3c:30:73:76:75:9f:e9:c6:b7:b7:90:17:9e:48:d3: ac:b7:a3:eb:b6:f5:5c:40:21:51:23:15:f6:d1:e7: 68:56:37:b0:34:73:58:8b:68:17:2e:ed:0f:f5:41: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:71:96:CE:E7:FD:59:E4:29:7B:F6:5C:F2:6F:05:7A:3E:05:22 X509v3 Authority Key Identifier: keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1b:1d:29:fe:24:de:bd:0f:8a:21:5e:90:27:11:6a:e2:a1: eb:51:54:89:d0:a5:33:00:63:e7:4b:3f:8a:89:d4:52:18:d0: 9b:34:a2:51:0f:d6:c2:7b:3f:23:36:bf:89:d6:5b:d0:92:a9: d9:61:0d:e5:bd:b6:2b:9b:f6:fc:9a:a0:27:80:d2:a5:60:f3: 6f:b9:50:38:cc:d0:ed:ec:4b:db:42:68:2e:f5:e6:56:9b:73: e9:47:2d:39:84:da:f7:8e:cc:8b:56:90:8a:7a:4e:04:ea:28: aa:86:94:09:5c:03:3e:df:f9:c5:28:0c:a6:95:51:cb:75:e8: f1:9a:1d:2b:f8:a7:43:fc:f2:1e:11:6f:ed:95:bf:3b:0e:4f: 15:df:4f:76:5f:36:3e:b0:8e:4a:77:c7:39:00:b6:d3:da:8f: 92:75:ac:b0:07:92:f6:b9:70:d4:7b:1f:56:1d:44:0e:6e:5d: 5b:6f:9c:f3:1c:a1:f3:95:e2:10:44:2a:06:1b:d8:35:ed:9b: ba:a9:75:fd:e8:06:d4:df:dd:5a:6e:3b:98:e4:90:c7:64:23: 3c:e4:ab:4b:5d:af:d4:aa:0e:84:77:7c:d3:55:e4:a6:ae:5b: 64:e8:e6:7b:56:7a:a3:68:96:9d:4c:87:81:c2:f4:25:41:84: e4:d9:be:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXOAUAu8Nc97KtfcJnH5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0 MTEyNTcwHhcNMjYwMTExMTQwMTQzWhcNMjYwMTEyMTQwMTQzWjAzMTEwLwYDVQQD Eyg2ZDNmNzE5NmNlZTdmZDU5ZTQyOTdiZjY1Y2YyNmYwNTdhM2UwNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycfKNyViSU80E4+MJIttSUUqbaUY mjxfC5Qtayk0lBFGUrzwzoXpnVxNI2cdYKyiI7V8kpXbl/vD2ax7zjBexu2Y3gtv 4qIV5lLeCubuLTF0ByWkKgAJoiu52GonB+vZlL+g0BPwtud6G23CMrtQrJGNckfx H9hhpgiV4FLQV93hiRd7/l6xI9Rx9/FCIOfVLMj6J4Ebk/s69Zuf4A/PesUkKCG+ 1Mb++Qwia5bDx8gPuiJ2l4UPocr+9angFjffXW1SLJccL9l6KFGl8r3wT3w8MHN2 dZ/pxre3kBeeSNOst6PrtvVcQCFRIxX20edoVjewNHNYi2gXLu0P9UEiTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0/cZbO5/1Z5Cl79lzybwV6PgUiMB8GA1UdIwQY MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhsdKf4k 3r0PiiFekCcRauKh61FUidClMwBj50s/ionUUhjQmzSiUQ/Wwns/Iza/idZb0JKp 2WEN5b22K5v2/JqgJ4DSpWDzb7lQOMzQ7exL20JoLvXmVptz6UctOYTa947Mi1aQ inpOBOooqoaUCVwDPt/5xSgMppVRy3Xo8ZodK/inQ/zyHhFv7ZW/Ow5PFd9Pdl82 PrCOSnfHOQC209qPknWssAeS9rlw1HsfVh1EDm5dW2+c8xyh85XiEEQqBhvYNe2b uql1/egG1N/dWm47mOSQx2QjPOSrS12v1KoOhHd801Xkpq5bZOjme1Z6o2iWnUyH gcL0JUGE5Nm+Qg== -----END CERTIFICATE-----Generated at Sun Jan 11 22:28:40 2026 by rpki-client