This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json) Hash identifier: 8OuRT6tExlWrqxLXIS57iIaAK6prw6o2kZucSXOG12c= Subject key identifier: 89:01:91:73:24:5C:3E:C9:44:72:25:0F:A0:6A:AF:9D:EE:CD:7D:69 Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Certificate serial: 019BF79AE04433A828CA2067C509D5FEEB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft Manifest number: 040C Signing time: Mon 26 Jan 2026 00:01:20 +0000 Manifest this update: Mon 26 Jan 2026 00:01:20 +0000 Manifest next update: Tue 27 Jan 2026 00:01:20 +0000 Files and hashes: 1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=) 2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: OpxJR+jZzcGmxopsPHvLD9zhIIY+NdcqmCOtFLIzq3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:e0:44:33:a8:28:ca:20:67:c5:09:d5:fe:eb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Validity Not Before: Jan 26 00:01:20 2026 GMT Not After : Jan 27 00:01:20 2026 GMT Subject: CN=89019173245c3ec94472250fa06aaf9deecd7d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:f7:31:e1:5a:ae:ec:59:9d:d9:52:05:c8: e9:d1:84:a1:b5:58:3a:8e:37:38:d4:1d:44:7f:35: 82:4b:07:01:f6:17:27:2a:7e:cf:f6:06:c9:98:fd: da:c8:08:4a:6a:cb:c8:3a:77:9c:22:ea:68:79:97: 68:a9:4b:fa:13:49:88:8d:34:6c:87:9e:e4:1a:ed: 0c:6c:f5:b9:b3:6c:64:92:da:0d:c3:6a:3a:e2:90: b5:52:92:a4:d3:82:11:47:9f:10:07:f1:4c:2a:f7: 3d:9b:aa:f9:17:de:12:b1:72:96:5f:e1:43:dd:c5: 3a:ee:08:d3:7b:c4:0c:a9:2d:79:29:13:c2:fb:73: fe:bd:91:ad:10:0e:bc:2f:f5:cb:ac:ff:12:a3:14: 7d:d5:de:65:49:c2:24:00:1b:21:34:94:37:2a:2a: d3:68:b7:8d:c8:ad:f3:30:1a:5f:0d:45:ca:07:0f: dd:77:5a:9b:80:e9:c9:93:9d:eb:a9:bc:c6:21:78: 0f:b2:d1:a6:aa:6d:16:36:e3:6a:b3:15:3f:89:b9: 37:b5:d7:86:61:16:9a:f0:2c:7a:2c:13:83:0f:b9: a4:28:df:2c:3a:63:25:1c:da:a8:41:2d:2a:4c:f0: b6:b5:d3:df:39:e5:2a:ca:2a:59:6c:e5:34:3a:88: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:01:91:73:24:5C:3E:C9:44:72:25:0F:A0:6A:AF:9D:EE:CD:7D:69 X509v3 Authority Key Identifier: keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c3:22:e3:56:be:b5:67:ae:6c:a0:fa:b8:d0:e6:02:e7:c7: 37:6d:f7:c4:fa:71:22:a3:25:86:85:b8:ef:64:f1:c8:39:01: c0:a5:67:65:ca:8c:06:66:58:17:3b:10:3e:f5:82:9a:55:57: 7f:fb:64:ce:69:4e:26:e2:55:fb:fc:c1:ff:a3:8c:05:a9:d3: c7:1d:8e:0f:83:4e:02:dc:f7:10:9b:24:aa:f8:72:fe:67:58: 1d:a8:ef:4b:9a:1b:2b:b5:da:c5:22:aa:cd:3e:9c:82:6a:a5: 93:2c:82:80:a9:7e:f6:f2:e2:df:7c:70:0e:b2:79:1c:29:8a: d7:6b:a2:84:c8:4d:39:be:44:ff:7b:a7:42:f7:06:c8:6d:05: d3:4e:8d:cc:69:3c:b9:a1:f7:2c:62:db:9f:0b:13:ac:0d:f4: ad:de:b5:d1:63:c2:e4:c9:4e:25:68:df:34:34:0e:d5:1d:65: e4:54:00:6b:bd:4d:b8:16:b5:bb:4c:0a:6b:c1:7a:52:4f:e5: bb:f7:73:02:42:c8:21:78:d1:13:3f:01:48:18:73:0a:06:9d: db:73:16:e0:ce:22:65:62:c1:30:9f:ad:be:cf:78:d6:b4:c4: 69:aa:5e:96:2f:12:57:e0:08:f5:72:4c:d8:f3:9c:ce:bc:60: 04:3f:49:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muBEM6goyiBnxQnV/usFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh YmVkNTUwHhcNMjYwMTI2MDAwMTIwWhcNMjYwMTI3MDAwMTIwWjAzMTEwLwYDVQQD Eyg4OTAxOTE3MzI0NWMzZWM5NDQ3MjI1MGZhMDZhYWY5ZGVlY2Q3ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjX3MeFaruxZndlSBcjp0YShtVg6 jjc41B1EfzWCSwcB9hcnKn7P9gbJmP3ayAhKasvIOnecIupoeZdoqUv6E0mIjTRs h57kGu0MbPW5s2xkktoNw2o64pC1UpKk04IRR58QB/FMKvc9m6r5F94SsXKWX+FD 3cU67gjTe8QMqS15KRPC+3P+vZGtEA68L/XLrP8SoxR91d5lScIkABshNJQ3KirT aLeNyK3zMBpfDUXKBw/dd1qbgOnJk53rqbzGIXgPstGmqm0WNuNqsxU/ibk3tdeG YRaa8Cx6LBODD7mkKN8sOmMlHNqoQS0qTPC2tdPfOeUqyipZbOU0Ooho0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkBkXMkXD7JRHIlD6Bqr53uzX1pMB8GA1UdIwQY MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4 LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsMi41a+ tWeubKD6uNDmAufHN233xPpxIqMlhoW472TxyDkBwKVnZcqMBmZYFzsQPvWCmlVX f/tkzmlOJuJV+/zB/6OMBanTxx2OD4NOAtz3EJskqvhy/mdYHajvS5obK7XaxSKq zT6cgmqlkyyCgKl+9vLi33xwDrJ5HCmK12uihMhNOb5E/3unQvcGyG0F006NzGk8 uaH3LGLbnwsTrA30rd610WPC5MlOJWjfNDQO1R1l5FQAa71NuBa1u0wKa8F6Uk/l u/dzAkLIIXjREz8BSBhzCgad23MW4M4iZWLBMJ+tvs941rTEaapeli8SV+AI9XJM 2POczrxgBD9Jng== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:46 2026 by rpki-client