This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json) Hash identifier: v98JsNPJxszDXVXYVUEJh06a69wir5bND5MNjag4szE= Subject key identifier: 87:60:32:98:07:A2:38:44:FC:A5:22:53:7A:D1:6F:56:42:E8:E4:AC Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Certificate serial: 019BF27447BD80758C42F12D1ABE0C7E70A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 00:01:05 +0000 Manifest this update: Sun 25 Jan 2026 00:01:05 +0000 Manifest next update: Mon 26 Jan 2026 00:01:05 +0000 Files and hashes: 1: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (hash: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY=) 2: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (hash: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw=) 3: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (hash: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M=) 4: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: YU6QiUPQE4WbCMxrwY6wO0j6s02s/BXq8cOYPLFBx9E=) 5: wjwk4znZSgE3afujO_o00KJ1wc4.roa (hash: /EHRjEt0mZL7bm2KcS0WqhNixMXZVUS3aHhSERVsdww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:47:bd:80:75:8c:42:f1:2d:1a:be:0c:7e:70:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Validity Not Before: Jan 25 00:01:05 2026 GMT Not After : Jan 26 00:01:05 2026 GMT Subject: CN=8760329807a23844fca522537ad16f5642e8e4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:6a:6a:72:09:e9:c9:ce:81:33:bc:78:89: 45:87:37:35:cd:45:65:bc:8b:21:89:9a:e4:c0:c0: 2d:7d:ec:0b:f0:3d:f8:61:8d:bc:be:df:9b:97:f0: 32:59:22:3a:a4:0c:e9:27:b0:23:90:2b:c7:b4:74: d5:a8:f4:5e:68:e9:40:5a:33:eb:a1:db:89:75:a8: a2:f9:23:1c:25:7d:60:c5:3d:24:77:9a:5a:e3:37: 8d:5e:19:20:ae:57:39:0e:69:6c:de:4b:af:35:f1: a1:9b:8b:90:f7:17:f3:e2:a0:6e:5b:b2:04:b7:0f: 26:84:2e:3b:7f:d8:da:d9:30:86:ee:ef:10:eb:a9: dd:c3:b0:c3:d6:fe:fe:be:a0:d8:27:d7:e6:47:f4: 52:b5:08:cd:ac:fe:51:4d:cc:28:40:ac:54:3c:a0: 2e:39:57:61:52:89:2a:f8:47:53:a1:b4:17:15:31: f8:30:f3:79:d5:7c:4f:92:ab:39:c3:68:bc:72:fe: 06:0d:81:1f:fb:84:5d:dd:2e:58:29:d9:a3:0d:e1: 65:d0:e0:ac:f3:09:45:95:5c:6e:fb:ee:84:5d:fd: e2:2e:5c:c5:4e:71:bc:04:1e:45:c2:0d:71:7c:d1: 04:ba:79:3f:c5:ad:79:4e:ca:8b:a8:3d:33:48:f2: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:60:32:98:07:A2:38:44:FC:A5:22:53:7A:D1:6F:56:42:E8:E4:AC X509v3 Authority Key Identifier: keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:ac:a4:1c:a3:5a:3a:d7:6c:49:0b:3b:6a:5c:74:47:4f: 52:c1:0b:9e:11:f3:7e:20:08:11:92:3f:e1:ba:e6:6b:e2:96: 1e:b8:27:e7:bf:fa:79:72:33:53:dc:20:f2:ae:74:68:05:19: ba:f1:4f:4b:bc:0d:43:58:8f:de:3c:47:65:ec:88:43:05:92: 43:52:2b:9a:9e:70:85:5d:00:f7:14:26:c1:83:97:33:18:9d: e2:b2:3e:55:47:29:52:3f:c9:91:a5:8c:9a:1c:a8:cc:38:48: 4f:ab:92:e9:7a:21:c7:7a:fe:e1:37:47:18:60:3e:e0:5f:bf: 24:51:83:88:0a:b1:20:65:ec:94:41:89:7c:6c:1d:54:e6:7b: 20:6d:51:62:a8:1c:8c:8d:bc:07:19:63:2e:0f:76:8d:72:01: 37:e7:4e:4b:1e:ed:17:7a:ae:94:7e:28:b9:79:43:a3:9b:0e: e8:33:ce:54:7f:99:64:ec:47:9d:51:ca:3e:86:8e:44:89:6a: 7f:18:53:fe:c7:cc:b6:c3:a9:bf:c9:b4:9c:9b:39:59:c9:e3: c0:21:3c:71:3b:98:1f:bd:74:d9:cb:d1:f5:fa:48:7f:91:a2: 63:fc:48:0a:45:9f:75:c5:65:94:c4:3f:c8:4a:31:ba:5a:d4: bb:ce:f6:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydEe9gHWMQvEtGr4MfnCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz NmYyZjQwHhcNMjYwMTI1MDAwMTA1WhcNMjYwMTI2MDAwMTA1WjAzMTEwLwYDVQQD Eyg4NzYwMzI5ODA3YTIzODQ0ZmNhNTIyNTM3YWQxNmY1NjQyZThlNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20tqanIJ6cnOgTO8eIlFhzc1zUVl vIshiZrkwMAtfewL8D34YY28vt+bl/AyWSI6pAzpJ7AjkCvHtHTVqPReaOlAWjPr oduJdaii+SMcJX1gxT0kd5pa4zeNXhkgrlc5Dmls3kuvNfGhm4uQ9xfz4qBuW7IE tw8mhC47f9ja2TCG7u8Q66ndw7DD1v7+vqDYJ9fmR/RStQjNrP5RTcwoQKxUPKAu OVdhUokq+EdTobQXFTH4MPN51XxPkqs5w2i8cv4GDYEf+4Rd3S5YKdmjDeFl0OCs 8wlFlVxu++6EXf3iLlzFTnG8BB5Fwg1xfNEEunk/xa15TsqLqD0zSPK0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdgMpgHojhE/KUiU3rRb1ZC6OSsMB8GA1UdIwQY MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt N2Y1Zjc4MzQ2ZDZmLzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFKspByj WjrXbEkLO2pcdEdPUsELnhHzfiAIEZI/4brma+KWHrgn57/6eXIzU9wg8q50aAUZ uvFPS7wNQ1iP3jxHZeyIQwWSQ1Irmp5whV0A9xQmwYOXMxid4rI+VUcpUj/JkaWM mhyozDhIT6uS6Xohx3r+4TdHGGA+4F+/JFGDiAqxIGXslEGJfGwdVOZ7IG1RYqgc jI28BxljLg92jXIBN+dOSx7tF3qulH4ouXlDo5sO6DPOVH+ZZOxHnVHKPoaORIlq fxhT/sfMtsOpv8m0nJs5WcnjwCE8cTuYH7102cvR9fpIf5GiY/xICkWfdcVllMQ/ yEoxulrUu872xw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:48:31 2026 by rpki-client