This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json) Hash identifier: /3LhDp0nvxLgCqFNwCBv97b61pozmN4FwJR+zi4Vuko= Subject key identifier: B1:93:17:38:9E:65:05:46:9B:A8:4E:19:CD:DB:D0:FB:D3:FB:B1:B3 Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Certificate serial: 019BF91C0B61CE442BB49BDFB8C535B6A790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft Manifest number: 04E4 Signing time: Mon 26 Jan 2026 07:02:03 +0000 Manifest this update: Mon 26 Jan 2026 07:02:03 +0000 Manifest next update: Tue 27 Jan 2026 07:02:03 +0000 Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=) 2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: o8MoQt6hru4Yf5b+lXMJqKborUmSLE2BZsJ0+biUeeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1c:0b:61:ce:44:2b:b4:9b:df:b8:c5:35:b6:a7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Validity Not Before: Jan 26 07:02:03 2026 GMT Not After : Jan 27 07:02:03 2026 GMT Subject: CN=b19317389e6505469ba84e19cddbd0fbd3fbb1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:de:35:90:a1:67:e0:c9:31:b8:e6:41:54: ea:a8:14:43:54:29:7c:16:71:1c:39:71:75:77:06: 22:f0:3a:bb:2f:48:2d:b5:c1:9a:07:44:a8:cc:57: 5e:d6:b7:49:2a:6d:74:3f:22:79:1a:34:1d:89:a2: 34:25:dd:e8:d0:d8:73:d7:f8:0a:c6:06:a8:c5:3b: 12:8e:ad:99:97:7d:fc:8c:9a:b3:72:7e:64:b8:70: 5b:cb:db:e4:f8:67:72:a0:bc:03:9a:27:ad:06:dd: 6e:d4:de:9e:e4:dd:40:65:35:f7:00:5f:d5:1b:07: a4:2a:31:4b:6a:cb:6d:ac:9a:6f:ee:63:2b:56:78: 46:96:f4:11:2c:1c:d5:13:c6:85:12:7f:9a:7d:00: bc:3f:c3:2c:bf:07:23:79:63:ea:39:5e:2d:39:eb: 5b:83:09:f5:83:c4:a2:bc:8a:b0:f1:ff:8a:06:5d: b4:58:55:20:9c:7c:8b:44:db:3a:32:88:4a:4a:7f: e6:ec:f6:55:22:65:e5:92:4b:b5:19:a1:79:bb:2f: c6:ba:48:d1:23:99:ea:e5:39:a1:4e:89:0b:a1:2e: 53:80:97:d2:0e:0b:9d:02:8e:9d:f4:0b:46:0d:59: 48:81:c1:2f:33:f5:65:e8:69:cd:87:f4:15:69:22: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:17:38:9E:65:05:46:9B:A8:4E:19:CD:DB:D0:FB:D3:FB:B1:B3 X509v3 Authority Key Identifier: keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1b:b1:7f:28:ba:81:98:99:29:c2:79:76:a0:56:59:3a:44: a0:d5:d5:d5:e7:a1:24:a6:1b:3c:95:9f:d4:ad:45:1a:64:7a: d4:6e:c9:49:7b:16:6b:c7:4d:88:d4:4d:ee:ca:7c:41:eb:77: 16:ea:d6:5a:6d:9a:14:b6:87:e4:d3:1b:33:d6:bb:fa:a9:9c: 1c:be:11:4b:68:b3:1c:f2:e2:c2:da:cd:67:4a:c5:67:df:45: 96:a6:16:b6:59:9b:0a:7a:b9:16:25:79:d4:a6:58:18:48:75: 48:4a:a0:dd:9c:c4:35:39:7a:31:58:d8:6b:af:ee:49:7e:da: 32:82:db:1c:b8:be:35:d1:cb:b6:92:75:46:52:60:c6:ed:2b: 05:f4:c2:22:8d:ad:84:11:04:b2:60:74:cd:32:6d:34:1e:02: af:75:b5:6f:52:17:13:6c:66:0a:15:bb:f1:1f:09:9b:ed:d6: 07:5b:e2:e7:6b:d6:b7:68:3c:80:cc:29:ba:cc:c3:4a:63:e8: b7:07:61:a6:ba:c3:43:7f:62:ed:06:7f:f6:a5:8d:2b:d5:ad: 75:c0:f1:83:17:e3:94:f0:c4:28:58:5f:cf:cb:b8:c7:f7:99: 2a:51:80:ad:56:be:2f:0c:e0:f3:6c:f9:d1:7d:c3:7b:4d:d1: 45:3f:48:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5HAthzkQrtJvfuMU1tqeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMTE1N2M5OGYyNjI3OWZjM2VlZDJkYWIzY2YxMTgzNzJi ZGJlMWIwHhcNMjYwMTI2MDcwMjAzWhcNMjYwMTI3MDcwMjAzWjAzMTEwLwYDVQQD EyhiMTkzMTczODllNjUwNTQ2OWJhODRlMTljZGRiZDBmYmQzZmJiMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkLeNZChZ+DJMbjmQVTqqBRDVCl8 FnEcOXF1dwYi8Dq7L0gttcGaB0SozFde1rdJKm10PyJ5GjQdiaI0Jd3o0Nhz1/gK xgaoxTsSjq2Zl338jJqzcn5kuHBby9vk+GdyoLwDmietBt1u1N6e5N1AZTX3AF/V GwekKjFLasttrJpv7mMrVnhGlvQRLBzVE8aFEn+afQC8P8MsvwcjeWPqOV4tOetb gwn1g8SivIqw8f+KBl20WFUgnHyLRNs6MohKSn/m7PZVImXlkku1GaF5uy/GukjR I5nq5TmhTokLoS5TgJfSDgudAo6d9AtGDVlIgcEvM/Vl6GnNh/QVaSKgKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGTFzieZQVGm6hOGc3b0PvT+7GzMB8GA1UdIwQY MBaAFLERV8mPJiefw+7S2rPPEYNyvb4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYt ZTBhY2FjYzEwZWY1LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYtZTBhY2FjYzEwZWY1 LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABuxfyi6 gZiZKcJ5dqBWWTpEoNXV1eehJKYbPJWf1K1FGmR61G7JSXsWa8dNiNRN7sp8Qet3 FurWWm2aFLaH5NMbM9a7+qmcHL4RS2izHPLiwtrNZ0rFZ99FlqYWtlmbCnq5FiV5 1KZYGEh1SEqg3ZzENTl6MVjYa6/uSX7aMoLbHLi+NdHLtpJ1RlJgxu0rBfTCIo2t hBEEsmB0zTJtNB4Cr3W1b1IXE2xmChW78R8Jm+3WB1vi52vWt2g8gMwpuszDSmPo twdhprrDQ39i7QZ/9qWNK9WtdcDxgxfjlPDEKFhfz8u4x/eZKlGArVa+Lwzg82z5 0X3De03RRT9IfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:56 2026 by rpki-client