This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json) Hash identifier: 3SgTqOvNSR3iZTB7xBBRfY7AmlKnj/3De1aaiq+xH+U= Subject key identifier: 15:79:F0:30:B4:91:BA:6E:E8:4D:EB:91:D7:83:95:C5:9B:C7:3C:7E Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Certificate serial: 019BF79A649C8B985EA66AC4BA0F1855DB4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft Manifest number: 0B09 Signing time: Mon 26 Jan 2026 00:00:49 +0000 Manifest this update: Mon 26 Jan 2026 00:00:49 +0000 Manifest next update: Tue 27 Jan 2026 00:00:49 +0000 Files and hashes: 1: fwlXtqb10A-wV_bek-0TtXLyN60.roa (hash: EBH4JtRrxBkeHaZ/uJMc1tdnxhG7UT1SgBTpReFISGs=) 2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: O3k7m2go54WArMdghg6soDrxZOpg/3udhJwfCmxOAUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:64:9c:8b:98:5e:a6:6a:c4:ba:0f:18:55:db:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Validity Not Before: Jan 26 00:00:49 2026 GMT Not After : Jan 27 00:00:49 2026 GMT Subject: CN=1579f030b491ba6ee84deb91d78395c59bc73c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:51:7b:0f:34:66:b1:d8:bd:07:e7:8d:65: d0:b0:5f:ad:4c:61:96:8b:1c:70:7e:87:60:c0:42: 49:0b:f6:08:8e:94:14:21:92:79:2a:28:e5:b0:90: dc:a0:0b:9f:f4:8a:e1:a3:72:c7:e6:8e:7d:a4:7d: 5d:e2:d1:f1:d2:cd:ee:40:4c:e1:4c:0a:c7:e3:65: 32:1a:6f:b1:2b:7f:08:22:07:fe:ef:ee:48:c8:dd: 75:62:16:fc:58:8d:85:fc:64:17:e3:14:c9:c5:f0: a7:ae:8a:75:89:69:46:1d:0f:3e:03:a6:a1:e5:0a: 2e:2e:eb:c3:e7:d2:17:f0:76:e9:1f:38:4e:2d:cb: 2a:07:27:63:80:ea:88:50:7c:ff:6d:7e:77:c3:ea: bb:f2:78:ac:62:84:5c:b4:e3:dd:b6:a3:34:36:60: a3:e3:8a:43:fe:f0:30:c0:dd:a4:e3:30:94:56:9e: 31:5f:c8:25:0a:9b:a0:a2:64:32:cc:1c:65:b1:fe: d2:ec:d1:70:25:b0:4a:b0:3a:1a:eb:8c:8a:f3:a9: 74:35:82:da:bd:48:75:a4:6f:67:9c:c3:db:1e:3d: ab:49:38:28:79:65:b7:b7:84:78:0d:e8:d2:0a:15: e4:53:0e:6d:2d:ee:9d:19:f1:fd:29:67:18:7e:e5: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:79:F0:30:B4:91:BA:6E:E8:4D:EB:91:D7:83:95:C5:9B:C7:3C:7E X509v3 Authority Key Identifier: keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:19:a0:8a:b9:18:11:bb:98:af:ee:fd:58:7e:0d:26:ca:e0: a3:68:c2:13:37:b8:d1:60:41:41:bc:98:cb:30:5a:a3:91:97: 01:09:10:8c:72:6d:e7:d3:09:d5:fb:4f:86:65:59:88:82:c5: 7c:d1:45:9d:85:9a:52:6a:10:32:b5:c2:ac:41:0e:0e:cd:a8: 56:4e:fb:a1:55:c4:c0:b2:07:64:28:43:c3:76:54:4b:9d:37: 52:b0:85:86:5c:a0:75:8b:df:c6:78:66:94:7a:69:3f:07:c0: d3:b5:0d:2f:e9:ca:24:9e:16:18:10:c9:42:09:3e:b8:3e:52: 13:70:90:e8:61:8b:9f:8b:70:12:b6:72:87:98:9c:75:a0:e1: 8c:6a:b2:73:d5:9f:c9:09:db:29:c8:e6:c5:42:2f:fe:a6:f3: f4:27:8d:40:6f:2a:78:72:06:a6:60:7f:c3:5c:13:dd:73:da: 80:1f:63:9c:74:8d:78:33:1d:4a:39:04:65:96:a8:31:e1:ec: e5:f3:33:45:27:d6:aa:35:46:a1:22:ad:c9:ca:d6:dc:6b:78: e6:c3:8c:57:69:e7:49:97:77:4a:4a:dc:9f:3f:c4:45:bf:50: 08:e9:6f:e7:84:3f:27:d7:eb:d9:49:a7:af:38:96:2f:53:c0: 4c:c7:15:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mmSci5hepmrEug8YVdtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2 MDU5NDcwHhcNMjYwMTI2MDAwMDQ5WhcNMjYwMTI3MDAwMDQ5WjAzMTEwLwYDVQQD EygxNTc5ZjAzMGI0OTFiYTZlZTg0ZGViOTFkNzgzOTVjNTliYzczYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxdRew80ZrHYvQfnjWXQsF+tTGGW ixxwfodgwEJJC/YIjpQUIZJ5KijlsJDcoAuf9Irho3LH5o59pH1d4tHx0s3uQEzh TArH42UyGm+xK38IIgf+7+5IyN11Yhb8WI2F/GQX4xTJxfCnrop1iWlGHQ8+A6ah 5QouLuvD59IX8HbpHzhOLcsqBydjgOqIUHz/bX53w+q78nisYoRctOPdtqM0NmCj 44pD/vAwwN2k4zCUVp4xX8glCpugomQyzBxlsf7S7NFwJbBKsDoa64yK86l0NYLa vUh1pG9nnMPbHj2rSTgoeWW3t4R4DejSChXkUw5tLe6dGfH9KWcYfuV/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV58DC0kbpu6E3rkdeDlcWbxzx+MB8GA1UdIwQY MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt MmFhZGM1YzNjNTdkLzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshmgirkY EbuYr+79WH4NJsrgo2jCEze40WBBQbyYyzBao5GXAQkQjHJt59MJ1ftPhmVZiILF fNFFnYWaUmoQMrXCrEEODs2oVk77oVXEwLIHZChDw3ZUS503UrCFhlygdYvfxnhm lHppPwfA07UNL+nKJJ4WGBDJQgk+uD5SE3CQ6GGLn4twErZyh5icdaDhjGqyc9Wf yQnbKcjmxUIv/qbz9CeNQG8qeHIGpmB/w1wT3XPagB9jnHSNeDMdSjkEZZaoMeHs 5fMzRSfWqjVGoSKtycrW3Gt45sOMV2nnSZd3Skrcnz/ERb9QCOlv54Q/J9fr2Umn rziWL1PATMcVPA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:59 2026 by rpki-client