This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json) Hash identifier: Tr1I8ZywW/ZWno7zxXGDa0WPjPBRpPgUozoAe8tpBSk= Subject key identifier: 6C:F1:F1:9C:A1:A6:36:DB:64:3A:4F:12:6C:EA:EF:27:7B:BB:22:6C Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea Certificate serial: 019BF5ABC8667C87EEA8F1DDCA239FFCB1FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft Manifest number: 1381 Signing time: Sun 25 Jan 2026 15:00:34 +0000 Manifest this update: Sun 25 Jan 2026 15:00:34 +0000 Manifest next update: Mon 26 Jan 2026 15:00:34 +0000 Files and hashes: 1: D0z_b7e-rsQh7ZbCT6eQYmgthJ0.roa (hash: XLv+C72GwzVUJmQsJo6uNUU5zA5BClnc8om305/wq6I=) 2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: PgkiEW2nXv0AxZk+scKXlR3c1uafb0OOBCnXNc0Ctbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c8:66:7c:87:ee:a8:f1:dd:ca:23:9f:fc:b1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea Validity Not Before: Jan 25 15:00:34 2026 GMT Not After : Jan 26 15:00:34 2026 GMT Subject: CN=6cf1f19ca1a636db643a4f126ceaef277bbb226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:94:3e:cb:df:cc:ef:76:c8:7e:86:d9:c1: 1a:99:32:86:0e:ba:b3:79:32:b7:ca:de:5a:3d:45: 92:81:d2:1d:eb:0a:ff:2f:d4:0c:1c:91:7d:74:fa: cb:a9:22:eb:37:67:18:43:ce:ea:44:65:f0:73:03: 48:74:0f:58:27:39:f0:08:6e:7f:62:61:f6:be:78: d2:29:71:90:67:96:07:1e:98:f1:2a:7d:a2:ec:ba: 65:62:8f:f3:01:f4:8a:a1:f0:21:0c:93:eb:76:12: 91:a3:ca:f0:04:06:d0:8b:ef:0d:57:23:d1:36:67: 05:9e:bf:1f:27:c3:6c:59:97:d7:22:52:d7:7e:06: 25:b2:38:19:92:46:fb:2c:1a:7f:d0:eb:0c:ef:25: 90:c6:6e:70:cb:0e:14:d4:6b:61:76:6e:34:61:e3: 96:d9:5b:65:9e:a7:39:d9:4d:e0:b1:9f:8d:32:70: 82:be:3b:08:ee:88:1c:cc:73:f2:01:59:a5:29:19: da:df:50:b6:d6:1c:c1:7a:ab:de:97:14:3f:0a:5c: 79:c7:66:c4:e9:ab:56:e5:2a:6e:91:5b:70:70:eb: 14:a9:29:a5:27:b7:2a:1d:23:a3:b8:cf:1b:04:52: c9:6f:39:6d:49:7a:3b:53:22:16:41:e1:5d:0d:5c: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F1:F1:9C:A1:A6:36:DB:64:3A:4F:12:6C:EA:EF:27:7B:BB:22:6C X509v3 Authority Key Identifier: keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2c:28:77:7c:fe:33:96:93:0a:50:0b:4c:48:7d:02:f6:ab: 84:9b:5f:be:53:1d:96:ae:a3:d6:df:bc:46:59:fb:d0:dc:75: 42:37:47:9a:97:4c:ca:43:b7:ae:8d:70:d5:04:fa:32:e2:d4: 9b:8d:2b:cc:2e:64:8a:7e:3f:41:92:55:b0:94:24:4c:61:e2: 4e:07:37:29:34:10:85:ce:9e:25:51:e2:78:c9:1e:e5:c6:1e: 98:3d:f4:fb:96:44:c0:cb:92:92:ec:c0:c1:2e:13:2f:69:51: a1:ca:07:c7:34:01:ad:c4:d9:97:ec:22:b2:58:73:92:42:2d: e2:06:6a:50:5d:5c:db:f0:9c:12:88:fc:41:fa:e7:93:c4:04: cc:72:9d:ae:b0:24:50:cc:0c:bb:56:59:41:16:52:cc:34:84: a6:69:34:e5:1c:90:25:18:5c:09:e2:90:40:b6:8a:73:51:f8: d0:8d:47:7a:19:91:5c:d7:2e:a8:97:81:83:ec:1b:dc:99:52: f4:28:4f:1a:e5:e2:ac:0f:00:ae:37:f4:e8:fc:8e:8a:7a:32: 91:1a:3d:50:3f:84:19:86:0d:26:22:22:6f:48:9c:39:fd:05: 8e:47:ae:df:a6:6b:5b:5f:43:aa:69:b7:45:66:87:23:55:4f: 16:92:c8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8hmfIfuqPHdyiOf/LH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZmFjYWQyNzk4ODU2ZjBmMDY1YTI2NWExMDk3MDY5NDFh Y2E4ZWEwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD Eyg2Y2YxZjE5Y2ExYTYzNmRiNjQzYTRmMTI2Y2VhZWYyNzdiYmIyMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgyUPsvfzO92yH6G2cEamTKGDrqz eTK3yt5aPUWSgdId6wr/L9QMHJF9dPrLqSLrN2cYQ87qRGXwcwNIdA9YJznwCG5/ YmH2vnjSKXGQZ5YHHpjxKn2i7LplYo/zAfSKofAhDJPrdhKRo8rwBAbQi+8NVyPR NmcFnr8fJ8NsWZfXIlLXfgYlsjgZkkb7LBp/0OsM7yWQxm5wyw4U1Gthdm40YeOW 2Vtlnqc52U3gsZ+NMnCCvjsI7ogczHPyAVmlKRna31C21hzBeqvelxQ/Clx5x2bE 6atW5SpukVtwcOsUqSmlJ7cqHSOjuM8bBFLJbzltSXo7UyIWQeFdDVypEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzx8ZyhpjbbZDpPEmzq7yd7uyJsMB8GA1UdIwQY MBaAFEr6ytJ5iFbw8GWiZaEJcGlBrKjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUt NzgzNDY5MjY5YjM1LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUtNzgzNDY5MjY5YjM1 LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApywod3z+ M5aTClALTEh9AvarhJtfvlMdlq6j1t+8Rln70Nx1QjdHmpdMykO3ro1w1QT6MuLU m40rzC5kin4/QZJVsJQkTGHiTgc3KTQQhc6eJVHieMke5cYemD30+5ZEwMuSkuzA wS4TL2lRocoHxzQBrcTZl+wislhzkkIt4gZqUF1c2/CcEoj8Qfrnk8QEzHKdrrAk UMwMu1ZZQRZSzDSEpmk05RyQJRhcCeKQQLaKc1H40I1HehmRXNcuqJeBg+wb3JlS 9ChPGuXirA8Arjf06PyOinoykRo9UD+EGYYNJiIib0icOf0Fjkeu36ZrW19Dqmm3 RWaHI1VPFpLIxw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:40 2026 by rpki-client