This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json) Hash identifier: EplCuKYfGuVNsD0FRW+mTPMIwxZ8qnbXoliqKJ/8klc= Subject key identifier: 06:F6:97:D2:FF:C3:68:61:16:F6:9E:24:83:4B:3E:A3:6C:34:B7:0E Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Certificate serial: 019BF6BF5287DC6B67357E2E64A3A80D4911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 20:01:32 +0000 Manifest this update: Sun 25 Jan 2026 20:01:32 +0000 Manifest next update: Mon 26 Jan 2026 20:01:32 +0000 Files and hashes: 1: JlOAjttYipL0TGtbfBsFFvLjAR8.roa (hash: TVmfCw1v4XJ8nqxuPkYqDh+JoZDFJOLgqdhk5gRKV6o=) 2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: y48MhN8tf8szYCNnUL5+741tfXppTudN9qd+K0O0cxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:52:87:dc:6b:67:35:7e:2e:64:a3:a8:0d:49:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Validity Not Before: Jan 25 20:01:32 2026 GMT Not After : Jan 26 20:01:32 2026 GMT Subject: CN=06f697d2ffc3686116f69e24834b3ea36c34b70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:cb:20:c7:df:4a:72:01:02:85:2e:14:0d: 4b:4c:c4:b6:72:a6:17:8b:46:66:6e:b6:4e:a2:88: 95:3e:b5:91:2e:be:af:25:10:94:56:24:41:bb:f4: d0:7e:08:04:ff:ed:0e:27:ef:e9:1f:3d:b0:0c:c4: 91:b1:e7:e1:06:0b:59:4d:ef:58:88:fc:a6:e9:80: 4c:a4:c4:ff:59:9b:ee:75:93:14:0b:56:25:5d:f0: 3a:27:70:21:06:9d:9a:71:2a:19:3d:04:30:28:1e: 35:78:c6:b4:f8:0c:ef:dd:82:e9:6a:35:64:28:cd: 38:1b:1a:9a:ff:a8:af:5a:6c:87:05:3c:aa:ca:60: 8e:6f:0d:79:82:d1:b0:6c:79:46:84:de:8c:25:59: 4b:b6:c9:c2:c1:a4:09:66:75:1e:4d:e9:cb:54:1a: f6:03:00:cd:8a:02:78:eb:b0:45:06:98:88:fe:ef: ba:68:4b:29:ef:09:7d:2a:bf:3a:ba:a5:10:bf:f1: 61:9f:5d:e8:03:47:3a:69:aa:5f:8d:95:54:62:a3: 5b:a9:a6:c6:ac:0f:c8:77:55:ae:e7:61:4c:55:93: 8d:87:4c:05:f3:f9:73:ba:73:81:93:81:04:d3:7f: 18:a2:6d:4b:b4:dc:03:a9:a4:ec:5f:d6:ca:94:46: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F6:97:D2:FF:C3:68:61:16:F6:9E:24:83:4B:3E:A3:6C:34:B7:0E X509v3 Authority Key Identifier: keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:95:d3:c5:a0:c0:96:f0:16:36:65:b6:06:33:7e:6a:b4:bb: ce:eb:5d:a4:7e:ac:78:dc:43:31:0a:c1:cc:e4:52:b9:24:5e: 16:bd:54:82:97:d5:2e:dc:3b:9a:0b:79:4b:4c:4d:89:fa:7f: f1:16:8f:eb:20:98:fc:de:4f:00:05:c3:41:cf:43:2d:e8:f8: 1e:30:f8:bf:e6:c5:f4:44:bc:9b:34:8d:ed:4d:69:fb:2f:59: f8:ba:59:17:97:6a:65:70:5b:87:30:76:f9:c1:e4:02:01:ee: 57:e1:5c:8f:73:ab:44:cd:e0:42:fd:df:66:fb:e9:6f:fe:e4: f4:f5:22:9d:a1:2e:4d:fe:42:1f:b6:76:76:d4:cb:99:f5:99: 39:3a:4e:c2:0c:32:74:d7:bb:2f:82:6a:a1:c7:ab:ea:e4:90: 06:dd:2e:83:6e:5c:a9:b3:52:bc:00:8e:6f:91:e7:02:ec:ad: 08:66:40:10:bd:66:4a:fc:0c:ef:da:8e:4f:91:94:5a:8a:01: 69:53:56:a4:0b:f5:7c:c1:97:65:1c:41:6c:f8:fe:80:6b:47: 89:b8:3f:e6:3a:db:7c:e0:dc:f6:14:3b:34:53:57:52:d1:03: bf:0c:40:2e:02:35:4f:23:31:77:39:b8:14:37:3e:48:cf:c2: 17:b2:c0:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v1KH3GtnNX4uZKOoDUkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl ZmNlZWMwHhcNMjYwMTI1MjAwMTMyWhcNMjYwMTI2MjAwMTMyWjAzMTEwLwYDVQQD EygwNmY2OTdkMmZmYzM2ODYxMTZmNjllMjQ4MzRiM2VhMzZjMzRiNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSnLIMffSnIBAoUuFA1LTMS2cqYX i0ZmbrZOooiVPrWRLr6vJRCUViRBu/TQfggE/+0OJ+/pHz2wDMSRsefhBgtZTe9Y iPym6YBMpMT/WZvudZMUC1YlXfA6J3AhBp2acSoZPQQwKB41eMa0+Azv3YLpajVk KM04Gxqa/6ivWmyHBTyqymCObw15gtGwbHlGhN6MJVlLtsnCwaQJZnUeTenLVBr2 AwDNigJ467BFBpiI/u+6aEsp7wl9Kr86uqUQv/Fhn13oA0c6aapfjZVUYqNbqabG rA/Id1Wu52FMVZONh0wF8/lzunOBk4EE038Yom1LtNwDqaTsX9bKlEbXdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAb2l9L/w2hhFvaeJINLPqNsNLcOMB8GA1UdIwQY MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt ZjAxNmNhNWRhMjE5LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5 LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZXTxaDA lvAWNmW2BjN+arS7zutdpH6seNxDMQrBzORSuSReFr1UgpfVLtw7mgt5S0xNifp/ 8RaP6yCY/N5PAAXDQc9DLej4HjD4v+bF9ES8mzSN7U1p+y9Z+LpZF5dqZXBbhzB2 +cHkAgHuV+Fcj3OrRM3gQv3fZvvpb/7k9PUinaEuTf5CH7Z2dtTLmfWZOTpOwgwy dNe7L4Jqocer6uSQBt0ug25cqbNSvACOb5HnAuytCGZAEL1mSvwM79qOT5GUWooB aVNWpAv1fMGXZRxBbPj+gGtHibg/5jrbfODc9hQ7NFNXUtEDvwxALgI1TyMxdzm4 FDc+SM/CF7LABg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:54 2026 by rpki-client