This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json) Hash identifier: R9c9xOd756ANCZymM+mOckEC1STOJL28hEOM9+frc5E= Subject key identifier: A0:E1:71:4B:C1:7B:4F:59:BF:F8:98:A9:A5:4C:F2:B5:82:D6:83:D3 Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809 Certificate serial: 019BF5AC31453BB1E88BD479E70406E71570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft Manifest number: 1179 Signing time: Sun 25 Jan 2026 15:01:01 +0000 Manifest this update: Sun 25 Jan 2026 15:01:01 +0000 Manifest next update: Mon 26 Jan 2026 15:01:01 +0000 Files and hashes: 1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=) 2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: 8+66TEaQl96P1cREwo6lU3+wqiZles8blrTtsGDzCNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:31:45:3b:b1:e8:8b:d4:79:e7:04:06:e7:15:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809 Validity Not Before: Jan 25 15:01:01 2026 GMT Not After : Jan 26 15:01:01 2026 GMT Subject: CN=a0e1714bc17b4f59bff898a9a54cf2b582d683d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:71:ef:9c:18:c0:49:18:10:64:a8:e7:23: 3c:f4:f0:48:94:44:80:ab:89:ad:52:9a:02:3d:ed: c3:88:19:e6:6a:16:a9:24:82:6d:fc:50:bb:78:48: 84:e9:18:33:fd:de:d0:b0:8f:82:6b:15:96:b8:74: 06:f2:54:bb:79:87:18:3c:be:1a:5b:05:4e:6a:93: 9f:f5:2f:6e:fc:59:e1:bd:cf:73:fa:9b:de:02:2f: a5:c4:fe:ec:c9:8f:8e:e9:82:89:26:5e:20:05:4a: f5:21:68:89:ee:fa:97:1b:78:fb:f7:31:b2:32:30: b1:62:6b:be:9e:c8:38:72:a6:d6:76:27:7a:97:6f: 93:95:6e:54:e3:8d:8a:d9:ef:bd:09:36:6d:ed:96: a7:49:a8:d3:09:86:5d:bc:6f:3f:ad:89:95:5f:f0: 73:b6:ad:18:50:da:a1:e2:16:75:62:30:91:7c:d8: 77:7b:c6:8e:b4:23:a2:72:98:5f:30:41:ef:e8:db: 67:88:8d:18:4e:5a:3a:a7:4e:bf:9e:0a:56:6b:92: 64:f8:17:86:05:38:21:2b:ca:58:48:0e:fb:37:74: 5d:8a:ce:b0:0e:4d:b3:48:f0:3e:07:4c:4d:d4:3e: 5a:a9:b1:00:b6:d7:12:27:6d:d5:a9:61:92:17:e3: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E1:71:4B:C1:7B:4F:59:BF:F8:98:A9:A5:4C:F2:B5:82:D6:83:D3 X509v3 Authority Key Identifier: keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f5:53:4a:04:5a:f3:19:7a:84:fe:c1:1f:0f:3d:41:5b:45: ad:f9:43:9b:d8:d7:6b:5d:7d:34:ee:dc:35:87:2d:14:5f:6e: e7:2c:c1:d2:4c:e3:7a:27:88:89:92:a6:3b:c3:c3:a1:75:51: 5b:d6:a7:3d:c8:3a:af:56:ce:80:9f:8c:32:7a:a6:52:a2:52: 24:aa:62:65:12:2b:1a:53:1b:ca:41:7e:d3:c7:ef:cb:ed:89: 38:7f:03:14:82:09:d1:d9:d7:8c:ec:b8:d9:26:33:c6:97:27: 69:9e:dd:fa:e4:c6:f3:4e:a3:7c:62:22:ce:87:54:67:59:1b: 31:b2:75:96:05:4a:b2:98:5b:f4:c3:c8:b1:e9:e9:bd:30:9f: 2c:f8:0b:5f:e5:cf:9d:f5:da:70:a1:82:aa:57:3d:cb:96:cd: db:cf:fa:b7:33:1d:85:8b:54:0e:d0:2c:0e:b5:45:65:5f:5a: 7a:f3:68:13:24:0c:f0:5f:b2:66:3d:62:f6:05:c8:07:97:d5: 5b:f2:00:27:4b:9f:ea:12:9a:04:0b:86:57:95:a7:b5:01:5a: 18:ac:eb:df:58:1b:93:2f:f3:aa:35:6d:e7:d0:04:ac:96:35: 0e:34:5a:9a:c5:04:18:2b:87:5b:97:2a:36:a0:ac:21:2e:d6: a1:65:0f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDFFO7Hoi9R55wQG5xVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx Mjc4MDkwHhcNMjYwMTI1MTUwMTAxWhcNMjYwMTI2MTUwMTAxWjAzMTEwLwYDVQQD EyhhMGUxNzE0YmMxN2I0ZjU5YmZmODk4YTlhNTRjZjJiNTgyZDY4M2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBZx75wYwEkYEGSo5yM89PBIlESA q4mtUpoCPe3DiBnmahapJIJt/FC7eEiE6Rgz/d7QsI+CaxWWuHQG8lS7eYcYPL4a WwVOapOf9S9u/Fnhvc9z+pveAi+lxP7syY+O6YKJJl4gBUr1IWiJ7vqXG3j79zGy MjCxYmu+nsg4cqbWdid6l2+TlW5U442K2e+9CTZt7ZanSajTCYZdvG8/rYmVX/Bz tq0YUNqh4hZ1YjCRfNh3e8aOtCOicphfMEHv6NtniI0YTlo6p06/ngpWa5Jk+BeG BTghK8pYSA77N3Rdis6wDk2zSPA+B0xN1D5aqbEAttcSJ23VqWGSF+M5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDhcUvBe09Zv/iYqaVM8rWC1oPTMB8GA1UdIwQY MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvVTSgRa 8xl6hP7BHw89QVtFrflDm9jXa119NO7cNYctFF9u5yzB0kzjeieIiZKmO8PDoXVR W9anPcg6r1bOgJ+MMnqmUqJSJKpiZRIrGlMbykF+08fvy+2JOH8DFIIJ0dnXjOy4 2SYzxpcnaZ7d+uTG806jfGIizodUZ1kbMbJ1lgVKsphb9MPIsenpvTCfLPgLX+XP nfXacKGCqlc9y5bN28/6tzMdhYtUDtAsDrVFZV9aevNoEyQM8F+yZj1i9gXIB5fV W/IAJ0uf6hKaBAuGV5WntQFaGKzr31gbky/zqjVt59AErJY1DjRamsUEGCuHW5cq NqCsIS7WoWUP7A== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:53 2026 by rpki-client