This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft File: sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json) Hash identifier: yjzBqOpWnO9GdgpdrOrLZGtxkmvltq6XZstjBeh7N7g= Subject key identifier: 2F:82:C8:4E:53:64:C9:27:2A:A7:F8:52:EF:FA:41:72:0E:62:B3:7F Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Certificate serial: 019BF91BF799949363A6FF6D5BD427DD3D95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft Manifest number: 1394 Signing time: Mon 26 Jan 2026 07:01:58 +0000 Manifest this update: Mon 26 Jan 2026 07:01:58 +0000 Manifest next update: Tue 27 Jan 2026 07:01:58 +0000 Files and hashes: 1: Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa (hash: juQkDFo0AIVz1+RSIS9ayHrDC2gpBK7MmNeN9tyG2go=) 2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: WNsMleg5YT3t3ho1vjPSa/ezu6YqL2bi64icCv2Zdi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:f7:99:94:93:63:a6:ff:6d:5b:d4:27:dd:3d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Validity Not Before: Jan 26 07:01:58 2026 GMT Not After : Jan 27 07:01:58 2026 GMT Subject: CN=2f82c84e5364c9272aa7f852effa41720e62b37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:ce:ae:35:08:dd:b9:99:cd:52:ae:c2:5c: 73:58:d9:6d:53:f7:00:b4:22:6b:6f:74:c5:5f:e3: 27:2d:d7:cb:29:d9:47:90:0e:23:9e:7e:60:34:e4: 5a:69:69:fb:64:e6:e6:fb:d3:ff:95:5f:49:b7:47: 51:4f:71:b9:8d:05:b5:bd:6e:e9:a3:96:f0:79:25: ed:52:2d:40:cd:6f:f0:1e:af:9c:2a:90:e8:a5:3d: a5:46:4a:47:d2:a5:4e:40:28:67:d0:d6:00:fe:10: d0:4b:fe:3f:5f:54:a3:e8:01:c7:d1:71:10:a3:17: 7c:fe:11:52:d0:21:62:2a:52:bd:5c:f7:ad:d8:2e: 8a:1f:bc:f3:61:41:2b:49:f2:c2:ec:8a:87:67:6a: 5b:8d:05:58:fa:11:09:2c:05:66:1f:0e:11:f4:a0: 66:c5:79:21:97:62:28:51:81:70:59:d2:8e:c9:92: 3b:e6:fb:03:0a:03:2c:9e:db:8c:a0:81:26:31:b7: e5:1d:7b:d2:dc:20:34:91:fb:19:23:79:6b:36:7a: 87:7d:50:06:23:ea:46:16:5b:d8:f8:8d:dd:fb:06: 93:85:0f:2f:1c:d4:9e:14:fa:f4:db:e5:f6:1c:bd: 5c:7d:ab:b5:7f:46:ad:b9:00:70:0c:40:0b:e3:71: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:82:C8:4E:53:64:C9:27:2A:A7:F8:52:EF:FA:41:72:0E:62:B3:7F X509v3 Authority Key Identifier: keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9e:8a:eb:5a:9a:7a:d3:3f:ac:08:a5:5f:66:51:ae:45:c5: 53:27:73:59:8b:15:d1:13:65:0a:5d:51:00:59:c4:5c:66:bd: f9:de:af:24:63:c1:a5:58:cf:9e:ce:0a:00:33:56:46:98:15: 7e:a1:e0:23:84:7b:01:f2:4f:cf:07:c0:64:8b:7d:b5:2c:a9: c8:ee:2f:d2:5b:1a:1a:ca:36:ad:48:70:fc:b5:3b:df:a1:8c: f0:4a:5f:61:85:78:69:57:e2:87:9c:47:6b:8f:78:ba:09:3a: cf:86:41:b1:18:a4:15:88:28:df:ca:f9:74:3b:0d:c8:1e:38: 5f:f4:35:3b:ff:70:b7:b0:4a:0a:b7:29:c6:1a:43:fd:fc:64: 57:e9:e3:48:f2:5e:d4:52:6b:fc:95:23:c7:11:8d:b5:d1:9d: 82:15:7d:a9:77:9f:38:75:75:b8:63:e6:0f:05:7b:0e:14:22: f0:83:d3:0d:62:c8:47:a7:b7:fa:0b:af:3d:eb:a6:c5:61:9b: 5e:fa:cb:13:04:90:5a:9d:84:e8:6e:4a:8c:45:fa:d5:d0:b8: 36:01:ba:49:2b:7e:e3:1e:8d:93:fa:3a:13:8a:4d:de:6e:3a: 21:4a:e4:5d:28:6e:cb:13:f3:a7:29:21:99:2c:d5:10:d4:52: d7:83:ba:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G/eZlJNjpv9tW9Qn3T2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWNhMmY2ODZkNGU0ODRhNzdjMzRjMTczNDc2YmY2OWQy MzdiN2QwHhcNMjYwMTI2MDcwMTU4WhcNMjYwMTI3MDcwMTU4WjAzMTEwLwYDVQQD EygyZjgyYzg0ZTUzNjRjOTI3MmFhN2Y4NTJlZmZhNDE3MjBlNjJiMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H/OrjUI3bmZzVKuwlxzWNltU/cA tCJrb3TFX+MnLdfLKdlHkA4jnn5gNORaaWn7ZObm+9P/lV9Jt0dRT3G5jQW1vW7p o5bweSXtUi1AzW/wHq+cKpDopT2lRkpH0qVOQChn0NYA/hDQS/4/X1Sj6AHH0XEQ oxd8/hFS0CFiKlK9XPet2C6KH7zzYUErSfLC7IqHZ2pbjQVY+hEJLAVmHw4R9KBm xXkhl2IoUYFwWdKOyZI75vsDCgMsntuMoIEmMbflHXvS3CA0kfsZI3lrNnqHfVAG I+pGFlvY+I3d+waThQ8vHNSeFPr02+X2HL1cfau1f0atuQBwDEAL43FWwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+CyE5TZMknKqf4Uu/6QXIOYrN/MB8GA1UdIwQY MBaAFLFcovaG1OSEp3w0wXNHa/adI3t9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2Qt Mzg1ZjNmNTJhOTZiLzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2QtMzg1ZjNmNTJhOTZi LzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp6K61qa etM/rAilX2ZRrkXFUydzWYsV0RNlCl1RAFnEXGa9+d6vJGPBpVjPns4KADNWRpgV fqHgI4R7AfJPzwfAZIt9tSypyO4v0lsaGso2rUhw/LU736GM8EpfYYV4aVfih5xH a494ugk6z4ZBsRikFYgo38r5dDsNyB44X/Q1O/9wt7BKCrcpxhpD/fxkV+njSPJe 1FJr/JUjxxGNtdGdghV9qXefOHV1uGPmDwV7DhQi8IPTDWLIR6e3+guvPeumxWGb XvrLEwSQWp2E6G5KjEX61dC4NgG6SSt+4x6Nk/o6E4pN3m46IUrkXShuyxPzpykh mSzVENRS14O6Pg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:42 2026 by rpki-client