This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json) Hash identifier: p1dSPVjVI36zso6wXCNHPO2ePQO/tiaEw5B1uatsvd0= Subject key identifier: 92:4B:BA:56:F9:1D:30:2F:F4:AE:F8:93:6F:9C:3C:98:54:DD:1D:9E Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Certificate serial: 019BACB75E08114CFB11294ACF6DB0087A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft Manifest number: 17D8 Signing time: Sun 11 Jan 2026 11:00:56 +0000 Manifest this update: Sun 11 Jan 2026 11:00:56 +0000 Manifest next update: Mon 12 Jan 2026 11:00:56 +0000 Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=) 2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: 444aBsYe6YeTbUg/I8C1G0pzeWYkQy5BX+8zY//Ro2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:b7:5e:08:11:4c:fb:11:29:4a:cf:6d:b0:08:7a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Validity Not Before: Jan 11 11:00:56 2026 GMT Not After : Jan 12 11:00:56 2026 GMT Subject: CN=924bba56f91d302ff4aef8936f9c3c9854dd1d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:35:76:e3:bf:27:61:be:e1:6a:4e:ca:1d: 44:9d:65:4a:7f:b4:22:e5:d1:57:5d:e7:bf:c3:ec: a4:d4:a5:b9:4a:e7:59:ef:bd:cc:77:ae:86:62:7f: 85:22:77:61:92:7c:a1:4a:0d:23:d1:97:b6:ca:be: de:90:f8:98:04:17:e1:9d:34:73:ab:6f:4b:88:94: de:29:35:0d:bf:f6:a7:8f:cf:5f:67:67:f7:26:72: 15:db:8f:71:1d:d9:8d:49:52:67:70:26:bc:db:43: a5:2f:c7:87:1a:4c:79:af:f9:ad:c7:38:47:5f:46: f1:5c:af:87:36:a7:f6:02:47:db:57:ed:03:a8:eb: 65:e6:5f:63:d4:34:f7:74:3c:81:7f:23:a9:6c:09: 4e:21:2e:11:47:c4:13:e0:d1:6e:32:7c:6f:89:4a: a7:61:d6:f8:3a:eb:2e:db:9b:3a:ea:98:43:77:2e: e4:15:02:fb:a1:ee:10:95:80:c6:3b:d4:c2:be:4f: 7d:47:e2:5c:b7:63:f5:ea:e2:e5:c1:08:43:e9:5a: 5e:89:49:f7:59:cf:b8:30:e3:91:e2:50:76:d2:e5: 18:36:d7:a4:3d:de:17:31:02:2d:b1:a9:c3:8b:c6: a4:71:63:30:aa:2d:49:55:c5:7a:64:5e:f8:65:ec: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4B:BA:56:F9:1D:30:2F:F4:AE:F8:93:6F:9C:3C:98:54:DD:1D:9E X509v3 Authority Key Identifier: keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:4f:f8:aa:c0:94:a3:c5:55:5a:20:45:13:33:df:fd:2a:ce: 0d:dd:51:a2:67:b3:47:4a:c8:a0:10:6b:b1:9d:a5:ad:65:7c: 04:28:2e:62:c0:ad:d0:f6:8b:b0:9f:ad:5c:37:05:7b:c1:37: 2b:9b:e5:c2:1e:e1:bb:76:56:4e:47:c4:9e:df:7d:7f:47:bb: 17:74:6f:22:54:44:97:7f:89:88:61:c3:58:45:03:a2:c7:cb: 20:56:04:0c:bc:d8:9d:b6:6e:72:a5:c0:4a:05:a5:b6:92:b7: 1f:3f:55:99:69:22:b6:62:a3:49:15:54:69:8c:36:86:87:d0: b8:1e:f9:c7:5d:e1:e0:48:e2:90:d5:51:2b:d1:79:6d:08:ec: 49:c8:78:11:ba:7c:e8:29:8a:df:ef:42:e0:f5:d3:a4:b8:2e: 3d:b1:96:2b:ca:c2:ab:d9:ec:1c:9e:ba:5b:8c:65:da:26:fd: 5f:42:b9:ff:2a:1d:67:5d:2c:ec:9a:5f:0f:3f:65:d8:54:de: 1d:af:77:79:79:23:ec:4e:4d:29:f9:95:22:56:9e:c4:42:72: 96:a2:db:86:66:60:59:94:f8:e5:52:e9:8f:1b:cc:8d:4e:9b: a7:d0:99:89:7c:08:69:3c:8c:af:42:73:02:41:e8:48:aa:d1: 99:b9:e4:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZust14IEUz7ESlKz22wCHpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi OGUwNzAwHhcNMjYwMTExMTEwMDU2WhcNMjYwMTEyMTEwMDU2WjAzMTEwLwYDVQQD Eyg5MjRiYmE1NmY5MWQzMDJmZjRhZWY4OTM2ZjljM2M5ODU0ZGQxZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNg1duO/J2G+4WpOyh1EnWVKf7Qi 5dFXXee/w+yk1KW5SudZ773Md66GYn+FIndhknyhSg0j0Ze2yr7ekPiYBBfhnTRz q29LiJTeKTUNv/anj89fZ2f3JnIV249xHdmNSVJncCa820OlL8eHGkx5r/mtxzhH X0bxXK+HNqf2AkfbV+0DqOtl5l9j1DT3dDyBfyOpbAlOIS4RR8QT4NFuMnxviUqn Ydb4Ousu25s66phDdy7kFQL7oe4QlYDGO9TCvk99R+Jct2P16uLlwQhD6VpeiUn3 Wc+4MOOR4lB20uUYNtekPd4XMQItsanDi8akcWMwqi1JVcV6ZF74ZeySSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJLulb5HTAv9K74k2+cPJhU3R2eMB8GA1UdIwQY MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAU/4qsCU o8VVWiBFEzPf/SrODd1RomezR0rIoBBrsZ2lrWV8BCguYsCt0PaLsJ+tXDcFe8E3 K5vlwh7hu3ZWTkfEnt99f0e7F3RvIlREl3+JiGHDWEUDosfLIFYEDLzYnbZucqXA SgWltpK3Hz9VmWkitmKjSRVUaYw2hofQuB75x13h4EjikNVRK9F5bQjsSch4Ebp8 6CmK3+9C4PXTpLguPbGWK8rCq9nsHJ66W4xl2ib9X0K5/yodZ10s7JpfDz9l2FTe Ha93eXkj7E5NKfmVIlaexEJylqLbhmZgWZT45VLpjxvMjU6bp9CZiXwIaTyMr0Jz AkHoSKrRmbnk1Q== -----END CERTIFICATE-----Generated at Sun Jan 11 15:14:30 2026 by rpki-client