This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json) Hash identifier: QLBdpbYO1Tia7RgnncZVOwkWuiYyxuvaJxeP0S/0S5g= Subject key identifier: F7:8B:99:12:FA:E5:E6:6C:27:35:58:78:F0:2B:DC:D4:2B:3D:FF:89 Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Certificate serial: 019BF3BDBCFFF55A2E6827DC1BF14BABD638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 06:00:56 +0000 Manifest this update: Sun 25 Jan 2026 06:00:56 +0000 Manifest next update: Mon 26 Jan 2026 06:00:56 +0000 Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: k/2WFZSHtkXdFGfLarvmXJhirVapc+mZOu71jfwQhN4=) 2: W4KHw-He6kWePo83bS5E3YXxts0.roa (hash: HnOkT9H7Ca2rZOkZ/pXWIqV8bBgY7J8LEGyl2k3M+hY=) 3: _a5oTu8gmKTkulokRAA15ZrEXNM.roa (hash: m1okP9QJB17W56hE2P8J+CdYw56KQB54uec3dsvEZRc=) 4: xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa (hash: +vp8PoavLw4YQsjZPIBnjlGldFa1m0sRHbYb6KV//EE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:bc:ff:f5:5a:2e:68:27:dc:1b:f1:4b:ab:d6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Validity Not Before: Jan 25 06:00:56 2026 GMT Not After : Jan 26 06:00:56 2026 GMT Subject: CN=f78b9912fae5e66c27355878f02bdcd42b3dff89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:34:c9:83:09:40:df:99:d9:dc:b1:bf:f0: 4e:93:2a:34:cf:63:88:c3:df:e9:73:f4:78:f2:a6: be:b2:7a:45:3d:11:6b:22:08:1b:37:14:f4:2c:a4: 21:60:b3:05:b5:4f:9d:fc:b6:49:ca:fd:ed:7b:01: 8d:e6:ed:b4:b0:74:47:fa:57:f0:aa:f3:3f:bc:b6: 33:20:76:e9:d9:c2:89:d6:46:d1:6e:28:e4:ab:0b: af:27:9d:52:3c:19:d7:d2:a5:ee:8e:76:c6:b5:e2: 4b:73:67:48:79:83:d1:bc:5a:7c:91:dd:49:47:88: 48:8e:5c:18:63:b7:b1:d2:ce:57:13:a0:82:de:bb: 7f:76:b7:36:07:bf:f3:d4:22:6a:f7:6f:52:8b:03: 51:e8:57:55:07:d4:34:1b:7b:24:12:37:9d:b7:4a: f1:b4:f8:43:0a:91:3c:65:2d:96:4d:56:e9:7b:8f: a5:19:9d:d2:49:1b:ea:91:72:df:9e:12:41:22:c6: 61:a1:32:06:94:d7:53:1e:e9:bf:4c:42:09:41:52: f2:85:cd:3a:1d:9f:0e:84:44:2e:cc:b8:7a:48:f8: d4:2f:a7:e3:b2:bb:8f:64:18:62:17:b5:08:c9:d2: 18:3b:32:57:66:6f:1d:c9:fd:4c:2a:10:68:16:ff: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:99:12:FA:E5:E6:6C:27:35:58:78:F0:2B:DC:D4:2B:3D:FF:89 X509v3 Authority Key Identifier: keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1f:03:bf:c7:35:45:b4:e7:49:57:57:6b:ac:dd:82:5c:44: 1f:9d:bb:59:0a:e2:74:c0:20:4d:57:06:5d:6f:b4:7a:58:76: 35:dd:92:0e:c7:30:63:ee:95:b0:f4:88:17:68:1d:62:69:57: f0:81:cd:72:2a:d7:1d:92:f1:30:a3:d9:ff:67:75:03:3f:da: 9c:2d:a9:06:ef:53:42:4b:14:7e:0b:4d:a7:a6:45:8a:91:85: c1:f5:ae:ee:ce:fa:5a:0a:93:d5:a0:9e:01:ad:5c:1c:e0:d7: 9b:11:c2:1a:23:e4:b7:d3:5b:2b:c4:fb:c3:fc:4f:c4:5c:76: a1:0f:b4:c7:5d:f5:59:d1:e2:cf:88:61:b5:36:17:45:ea:46: 49:3e:04:02:74:ed:d5:4a:26:c5:41:c8:e7:4f:a2:81:5a:15: 21:2c:b4:62:b6:e3:bf:5a:76:6b:6b:a9:43:91:83:6b:1b:82: 2a:55:be:35:91:8b:eb:ea:29:e6:ab:9b:1e:3d:c8:dd:d1:e3: 3f:6f:71:a1:62:56:3a:ba:e6:a6:27:2e:60:65:0e:71:03:3f: 1a:08:ca:07:06:d4:66:3d:ff:83:29:de:c9:17:30:91:21:0d: b7:5c:2f:23:60:3b:5b:be:2e:c0:e7:aa:8a:22:71:6b:66:9a: 5e:44:0b:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvbz/9VouaCfcG/FLq9Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWUzZWUxYzMyNTgxNzVmNGZmNmQ5YjU1OWRhNTRjODNl YzBiNGYwHhcNMjYwMTI1MDYwMDU2WhcNMjYwMTI2MDYwMDU2WjAzMTEwLwYDVQQD EyhmNzhiOTkxMmZhZTVlNjZjMjczNTU4NzhmMDJiZGNkNDJiM2RmZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMM0yYMJQN+Z2dyxv/BOkyo0z2OI w9/pc/R48qa+snpFPRFrIggbNxT0LKQhYLMFtU+d/LZJyv3tewGN5u20sHRH+lfw qvM/vLYzIHbp2cKJ1kbRbijkqwuvJ51SPBnX0qXujnbGteJLc2dIeYPRvFp8kd1J R4hIjlwYY7ex0s5XE6CC3rt/drc2B7/z1CJq929SiwNR6FdVB9Q0G3skEjedt0rx tPhDCpE8ZS2WTVbpe4+lGZ3SSRvqkXLfnhJBIsZhoTIGlNdTHum/TEIJQVLyhc06 HZ8OhEQuzLh6SPjUL6fjsruPZBhiF7UIydIYOzJXZm8dyf1MKhBoFv9ALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeLmRL65eZsJzVYePAr3NQrPf+JMB8GA1UdIwQY MBaAFEhePuHDJYF19P9tm1WdpUyD7AtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDkt OWM5MzNjY2QxNmM3LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDktOWM5MzNjY2QxNmM3 LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB8Dv8c1 RbTnSVdXa6zdglxEH527WQridMAgTVcGXW+0elh2Nd2SDscwY+6VsPSIF2gdYmlX 8IHNcirXHZLxMKPZ/2d1Az/anC2pBu9TQksUfgtNp6ZFipGFwfWu7s76WgqT1aCe Aa1cHODXmxHCGiPkt9NbK8T7w/xPxFx2oQ+0x131WdHiz4hhtTYXRepGST4EAnTt 1UomxUHI50+igVoVISy0Yrbjv1p2a2upQ5GDaxuCKlW+NZGL6+op5qubHj3I3dHj P29xoWJWOrrmpicuYGUOcQM/GgjKBwbUZj3/gyneyRcwkSENt1wvI2A7W74uwOeq iiJxa2aaXkQLvg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:55 2026 by rpki-client