This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json) Hash identifier: /gyMy7Xd+2IIUp9DNkcQiAcksxdY8xBVw6dWQN1J9Ys= Subject key identifier: 62:97:92:FB:0D:12:C9:CA:35:0D:B8:13:61:E0:50:BB:64:6D:7D:CA Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Certificate serial: 019BF650FCAF07E29F6896779A9202B5C2B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft Manifest number: 01CE Signing time: Sun 25 Jan 2026 18:01:01 +0000 Manifest this update: Sun 25 Jan 2026 18:01:01 +0000 Manifest next update: Mon 26 Jan 2026 18:01:01 +0000 Files and hashes: 1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=) 2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: R6s0vVuxBMDlO7Y8ZINZfwB9gjmzOEdSmrR8TUe3fjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:fc:af:07:e2:9f:68:96:77:9a:92:02:b5:c2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Validity Not Before: Jan 25 18:01:01 2026 GMT Not After : Jan 26 18:01:01 2026 GMT Subject: CN=629792fb0d12c9ca350db81361e050bb646d7dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:23:f9:35:43:45:c2:ac:27:fd:59:63:22: 88:ec:ee:2b:be:20:0e:88:75:57:18:20:27:01:c6: 14:9b:2f:5b:64:6b:62:c3:68:af:8d:a6:48:e2:2f: 09:f8:a0:49:61:46:3a:a5:38:e2:f5:4e:e7:d4:31: 3c:56:5d:37:e3:f5:88:eb:e9:4a:57:bb:b4:af:a4: 99:1f:6e:56:9d:37:fb:c1:b2:67:ff:7e:40:9a:95: a8:31:25:b1:18:11:75:41:20:fe:60:0b:8e:10:ad: a8:2d:ad:91:9a:b5:33:ae:07:e7:b3:85:62:2c:ef: 91:87:59:ae:da:c7:30:db:ec:bc:7e:19:10:27:a9: b9:c3:c7:0c:c1:e2:bc:a3:0d:dc:55:f3:57:a4:48: 82:ea:a0:73:04:ad:96:59:6b:e2:d6:74:69:31:c4: 36:d2:59:83:52:9f:2f:a4:49:20:b8:27:cd:1b:cf: a2:21:13:a6:f9:58:39:9f:ed:02:ce:ea:61:51:27: 84:b5:79:d5:1b:88:35:3f:9b:87:4b:5e:8a:90:7c: 50:fb:e8:21:94:85:dd:c7:a0:7b:74:bf:ce:fc:0a: 0d:0e:f7:75:56:42:47:72:29:75:d5:fa:c3:80:09: 2d:7a:bd:ee:d0:81:be:80:ac:ca:2b:81:0e:e9:b5: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:97:92:FB:0D:12:C9:CA:35:0D:B8:13:61:E0:50:BB:64:6D:7D:CA X509v3 Authority Key Identifier: keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4c:ac:ae:6e:db:45:4c:39:1e:a0:1f:41:fc:87:21:fa:cf: 1b:01:33:1f:f9:14:ef:ba:56:db:62:20:66:ae:d2:71:42:25: 4a:d3:55:03:ee:36:a1:fa:76:a2:7d:c3:d0:20:b4:2a:9c:c4: 10:15:90:13:4d:8e:5f:b8:d4:0b:34:09:48:cd:f4:bc:dc:d4: 11:d0:e7:23:21:a6:8d:ef:7e:a0:34:43:dd:7c:15:17:2f:cb: 6c:ac:89:9f:2a:ca:ee:40:02:df:62:94:c9:3b:df:43:d7:c0: 1e:28:c8:9b:e1:50:57:76:c9:f1:ca:73:4b:82:64:60:fd:19: 11:27:e6:26:22:10:01:a2:f9:f5:b1:81:b0:bb:89:66:e7:77: 9f:2b:c8:7d:93:50:af:39:87:0c:f2:e9:22:f3:0c:b9:0e:7a: 64:cd:2c:6a:6a:b5:08:cf:b1:c6:36:0e:ee:d4:e2:c3:63:c1: f9:5a:18:7e:4e:b4:10:47:6b:da:c1:b1:e6:f9:0c:cd:38:08: 57:95:15:55:ca:7d:24:2e:84:ab:2a:f1:3c:c9:98:1f:0c:b0: 77:b5:1c:41:14:d3:f5:ea:7c:65:29:c9:fe:e4:ea:17:22:30: ad:89:55:ff:88:a2:cd:b2:4a:27:10:49:cc:12:76:0e:c1:2f: 74:91:fb:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UPyvB+KfaJZ3mpICtcK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm NzM5Y2EwHhcNMjYwMTI1MTgwMTAxWhcNMjYwMTI2MTgwMTAxWjAzMTEwLwYDVQQD Eyg2Mjk3OTJmYjBkMTJjOWNhMzUwZGI4MTM2MWUwNTBiYjY0NmQ3ZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG0j+TVDRcKsJ/1ZYyKI7O4rviAO iHVXGCAnAcYUmy9bZGtiw2ivjaZI4i8J+KBJYUY6pTji9U7n1DE8Vl034/WI6+lK V7u0r6SZH25WnTf7wbJn/35AmpWoMSWxGBF1QSD+YAuOEK2oLa2RmrUzrgfns4Vi LO+Rh1mu2scw2+y8fhkQJ6m5w8cMweK8ow3cVfNXpEiC6qBzBK2WWWvi1nRpMcQ2 0lmDUp8vpEkguCfNG8+iIROm+Vg5n+0CzuphUSeEtXnVG4g1P5uHS16KkHxQ++gh lIXdx6B7dL/O/AoNDvd1VkJHcil11frDgAkter3u0IG+gKzKK4EO6bWokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKXkvsNEsnKNQ24E2HgULtkbX3KMB8GA1UdIwQY MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt ZTM3NDk5Njc5ZDQ2LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2 LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUysrm7b RUw5HqAfQfyHIfrPGwEzH/kU77pW22IgZq7ScUIlStNVA+42ofp2on3D0CC0KpzE EBWQE02OX7jUCzQJSM30vNzUEdDnIyGmje9+oDRD3XwVFy/LbKyJnyrK7kAC32KU yTvfQ9fAHijIm+FQV3bJ8cpzS4JkYP0ZESfmJiIQAaL59bGBsLuJZud3nyvIfZNQ rzmHDPLpIvMMuQ56ZM0samq1CM+xxjYO7tTiw2PB+VoYfk60EEdr2sGx5vkMzTgI V5UVVcp9JC6EqyrxPMmYHwywd7UcQRTT9ep8ZSnJ/uTqFyIwrYlV/4iizbJKJxBJ zBJ2DsEvdJH7iA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:15 2026 by rpki-client