This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json) Hash identifier: 7Bzn5wGrXqqzlx//EdihvgRwE7EUKYwn3za8N8c2b/c= Subject key identifier: BF:04:E5:01:9F:0D:D1:B0:22:2B:EC:74:71:DC:0E:69:37:12:57:AC Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Certificate serial: 019BF5E33ED284220AC853CF34DA91ED0D9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft Manifest number: 1121 Signing time: Sun 25 Jan 2026 16:01:09 +0000 Manifest this update: Sun 25 Jan 2026 16:01:09 +0000 Manifest next update: Mon 26 Jan 2026 16:01:09 +0000 Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=) 2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=) 3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: +MXZU/vloMMowwUpiSWKoX86WmLiCRhwJrE9q7ZVjrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:3e:d2:84:22:0a:c8:53:cf:34:da:91:ed:0d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Validity Not Before: Jan 25 16:01:09 2026 GMT Not After : Jan 26 16:01:09 2026 GMT Subject: CN=bf04e5019f0dd1b0222bec7471dc0e69371257ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:24:95:b1:54:2a:a5:aa:b3:32:6d:1b:b5: 69:e2:7d:20:a3:9f:93:7c:3e:32:5a:e8:39:bb:1a: d7:41:fd:c3:06:a4:e0:34:36:2d:39:f4:43:08:b0: f1:69:78:f6:bb:fa:66:46:63:97:6e:20:11:15:6b: 21:25:2e:de:1e:ad:40:b6:c0:c6:74:e1:e0:79:e4: f8:23:2d:65:be:61:77:ef:a5:81:2a:ec:7d:d9:41: d6:a2:0e:b4:ee:64:43:de:b2:39:5c:ac:42:d7:71: c4:2c:b4:29:bc:e1:60:cf:fc:51:d0:c7:ba:d4:13: 5f:d7:d1:32:f7:d1:6f:e4:69:ed:89:2f:80:a3:11: 65:c6:ec:82:78:32:73:34:61:c6:be:7d:f2:2c:3a: 43:cb:f7:67:e9:4d:93:b6:64:15:5c:98:e0:dc:13: 0d:5d:05:ea:4d:25:5b:7a:78:15:03:a4:a4:fe:9c: b6:52:1d:75:05:99:d2:34:c1:0d:bc:ec:46:62:79: 1f:49:0a:dd:f2:e1:01:84:a9:fa:ce:58:d4:70:28: 91:c0:ba:4f:0f:c4:91:31:fd:89:a3:f5:fb:02:ef: 92:85:90:e7:60:d7:a1:be:9f:7c:de:b6:54:b1:06: 04:aa:1f:df:64:80:c5:90:0f:bf:13:2c:6f:d4:fa: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:04:E5:01:9F:0D:D1:B0:22:2B:EC:74:71:DC:0E:69:37:12:57:AC X509v3 Authority Key Identifier: keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e0:d9:1d:39:48:06:e4:ff:20:02:9a:69:59:a5:98:55:e4: 52:b1:3e:e2:90:3e:31:e9:1b:4a:44:e2:a1:d5:2c:81:16:fe: 98:b6:b4:09:79:90:da:d1:3c:a2:ce:e0:ea:63:0e:a1:09:58: 5f:66:c5:d6:e4:65:9f:8a:cf:af:fa:3e:80:c6:8a:d4:f1:30: ea:5f:8f:e2:6a:7c:00:3d:19:ff:8a:20:48:fa:3b:ef:8c:0e: 11:4c:52:29:81:f7:65:6e:dc:16:c9:9f:9f:d1:84:30:56:c8: cd:0f:e1:c9:1c:58:29:d3:53:13:c0:f7:52:c8:18:a0:c6:65: d5:87:bc:a1:7a:c0:b8:ab:02:e9:c3:ca:96:4b:d8:19:36:4f: 8c:bb:09:28:ed:43:dd:a5:34:2a:c1:ae:aa:7c:08:77:29:e6: 63:0c:ab:8d:e2:6b:11:76:e1:b3:05:24:c0:2a:6a:ab:5c:8c: 90:0e:c1:4e:3c:34:c0:4d:7c:d4:07:63:bd:84:56:8d:b6:ae: 6e:f9:a1:ea:9b:1d:8d:e3:cf:ff:89:29:2f:4c:18:29:6a:b7: b8:54:01:1b:e6:1f:09:e0:13:3c:13:02:45:bf:97:29:4c:ec: 8a:7f:1f:3c:3a:fb:1a:ab:11:8b:e2:eb:61:32:9a:bd:d5:5f: 2a:46:56:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14z7ShCIKyFPPNNqR7Q2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi Mjc1ZWUwHhcNMjYwMTI1MTYwMTA5WhcNMjYwMTI2MTYwMTA5WjAzMTEwLwYDVQQD EyhiZjA0ZTUwMTlmMGRkMWIwMjIyYmVjNzQ3MWRjMGU2OTM3MTI1N2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpsklbFUKqWqszJtG7Vp4n0go5+T fD4yWug5uxrXQf3DBqTgNDYtOfRDCLDxaXj2u/pmRmOXbiARFWshJS7eHq1AtsDG dOHgeeT4Iy1lvmF376WBKux92UHWog607mRD3rI5XKxC13HELLQpvOFgz/xR0Me6 1BNf19Ey99Fv5GntiS+AoxFlxuyCeDJzNGHGvn3yLDpDy/dn6U2TtmQVXJjg3BMN XQXqTSVbengVA6Sk/py2Uh11BZnSNMENvOxGYnkfSQrd8uEBhKn6zljUcCiRwLpP D8SRMf2Jo/X7Au+ShZDnYNehvp983rZUsQYEqh/fZIDFkA+/Eyxv1PrntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8E5QGfDdGwIivsdHHcDmk3ElesMB8GA1UdIwQY MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+DZHTlI BuT/IAKaaVmlmFXkUrE+4pA+MekbSkTiodUsgRb+mLa0CXmQ2tE8os7g6mMOoQlY X2bF1uRln4rPr/o+gMaK1PEw6l+P4mp8AD0Z/4ogSPo774wOEUxSKYH3ZW7cFsmf n9GEMFbIzQ/hyRxYKdNTE8D3UsgYoMZl1Ye8oXrAuKsC6cPKlkvYGTZPjLsJKO1D 3aU0KsGuqnwIdynmYwyrjeJrEXbhswUkwCpqq1yMkA7BTjw0wE181AdjvYRWjbau bvmh6psdjePP/4kpL0wYKWq3uFQBG+YfCeATPBMCRb+XKUzsin8fPDr7GqsRi+Lr YTKavdVfKkZWUg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:51 2026 by rpki-client