This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json) Hash identifier: 9MP0lY589gDgOYiZkL2P/CxKvAQHMpapnmNWovyfNNA= Subject key identifier: 6E:8A:6C:12:61:13:BB:1E:DB:F6:7F:D2:B2:1B:1F:73:3B:4E:BC:B9 Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88 Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388 Certificate serial: 019BF50708E3A119180949B3EA6A35F6A8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft Manifest number: 17D1 Signing time: Sun 25 Jan 2026 12:00:37 +0000 Manifest this update: Sun 25 Jan 2026 12:00:37 +0000 Manifest next update: Mon 26 Jan 2026 12:00:37 +0000 Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: +o/tCDdGfIVMcvF9fbLZm9vJOKboPbRyXkxWboGAKrM=) 2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:08:e3:a1:19:18:09:49:b3:ea:6a:35:f6:a8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388 Validity Not Before: Jan 25 12:00:37 2026 GMT Not After : Jan 26 12:00:37 2026 GMT Subject: CN=6e8a6c126113bb1edbf67fd2b21b1f733b4ebcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:b7:4c:d1:cd:73:63:be:6f:2d:04:d4:ee: 22:e8:f6:ea:62:ed:4c:07:0d:ff:8c:1a:d8:94:ee: 82:0f:0a:22:bd:16:ce:af:b8:13:65:33:fd:e4:a4: c1:be:08:0e:4f:71:41:2c:39:43:d5:c1:d8:fc:fa: f9:02:89:8b:e3:ed:9f:bf:03:19:e8:7f:2e:c2:6d: fd:7d:fd:d9:ca:fa:c2:22:08:ed:f8:a6:99:e6:53: aa:ea:25:7b:72:7f:5a:24:93:8f:1a:8f:d3:c8:0f: 98:79:b2:fd:38:f3:d1:1c:3d:f8:82:63:28:f8:ac: 8b:c0:1b:f9:69:5c:d0:03:bb:29:76:61:dd:e2:6f: 5c:73:60:3a:53:48:78:d8:ec:94:33:0a:0e:21:e1: 10:cf:a0:08:57:87:b7:b0:b7:72:97:a1:c7:24:ba: ad:84:02:d3:c5:55:dc:83:a2:5c:6f:77:b8:0f:0c: 68:be:d6:e2:2b:45:cf:3c:d9:4a:7d:1a:72:ca:cb: 42:ea:db:f9:73:7b:25:99:23:61:aa:af:b3:2d:dd: 40:35:45:18:73:e6:b6:50:39:cb:8e:21:00:88:e7: 38:01:e2:94:f9:7a:37:f0:61:51:df:b2:84:04:76: 79:5b:01:27:00:59:e7:b9:cb:df:a3:0d:bf:32:1f: 7c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8A:6C:12:61:13:BB:1E:DB:F6:7F:D2:B2:1B:1F:73:3B:4E:BC:B9 X509v3 Authority Key Identifier: keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ea:ae:72:f7:5a:fb:02:dd:57:93:47:50:41:42:a0:cb:7e: 83:9d:9a:26:10:81:98:b5:a9:dd:26:15:40:b9:65:15:af:d6: 81:2b:05:7c:7f:09:e7:04:c5:cb:07:62:7c:c9:da:a5:0e:69: fa:59:2d:c3:4a:ee:ef:ea:80:92:01:0e:8b:84:b6:bc:5d:4f: 41:97:43:3b:73:e3:06:ed:fd:bf:73:b1:2e:29:b7:9c:45:4e: 0c:d6:82:5b:f9:78:a4:87:49:6e:78:90:22:55:7e:e4:74:a6: 05:8c:15:73:3a:7d:58:b0:63:57:af:d8:74:c7:0a:07:0d:4d: 38:e4:ee:39:9b:9c:c6:ea:19:1d:f6:5c:8d:f8:ab:7e:7d:02: 57:bb:af:12:f1:b9:9f:f0:1c:76:22:da:60:89:7f:bb:bf:68: a7:7f:ac:ff:d0:93:8f:b2:e6:d9:ec:8b:61:27:fd:88:88:25: b4:ed:5f:e5:16:97:8f:6f:9a:8a:6a:79:8a:72:99:19:07:e4: 14:26:ea:aa:41:3b:75:56:97:54:94:dc:aa:ab:bb:bb:26:b7: ad:ef:92:ad:f8:69:38:a2:ae:71:53:5e:b2:b1:e3:67:ee:ab: 54:85:a3:7a:81:ad:8e:5a:ff:ad:c4:e7:38:d9:8b:43:aa:7f: 2e:97:47:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwjjoRkYCUmz6mo19qjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjgwNjk3ZmUyZTJkOTdiNTkxYWQ1YjkxNTgwNTU1YTQ0 ZDAzODgwHhcNMjYwMTI1MTIwMDM3WhcNMjYwMTI2MTIwMDM3WjAzMTEwLwYDVQQD Eyg2ZThhNmMxMjYxMTNiYjFlZGJmNjdmZDJiMjFiMWY3MzNiNGViY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumu3TNHNc2O+by0E1O4i6PbqYu1M Bw3/jBrYlO6CDwoivRbOr7gTZTP95KTBvggOT3FBLDlD1cHY/Pr5AomL4+2fvwMZ 6H8uwm39ff3ZyvrCIgjt+KaZ5lOq6iV7cn9aJJOPGo/TyA+YebL9OPPRHD34gmMo +KyLwBv5aVzQA7spdmHd4m9cc2A6U0h42OyUMwoOIeEQz6AIV4e3sLdyl6HHJLqt hALTxVXcg6Jcb3e4DwxovtbiK0XPPNlKfRpyystC6tv5c3slmSNhqq+zLd1ANUUY c+a2UDnLjiEAiOc4AeKU+Xo38GFR37KEBHZ5WwEnAFnnucvfow2/Mh98FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6KbBJhE7se2/Z/0rIbH3M7Try5MB8GA1UdIwQY MBaAFEn4Bpf+Li2XtZGtW5FYBVWkTQOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUt MWE2NGE4MDc3YjE0LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUtMWE2NGE4MDc3YjE0 LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+qucvda +wLdV5NHUEFCoMt+g52aJhCBmLWp3SYVQLllFa/WgSsFfH8J5wTFywdifMnapQ5p +lktw0ru7+qAkgEOi4S2vF1PQZdDO3PjBu39v3OxLim3nEVODNaCW/l4pIdJbniQ IlV+5HSmBYwVczp9WLBjV6/YdMcKBw1NOOTuOZucxuoZHfZcjfirfn0CV7uvEvG5 n/AcdiLaYIl/u79op3+s/9CTj7Lm2eyLYSf9iIgltO1f5RaXj2+aimp5inKZGQfk FCbqqkE7dVaXVJTcqqu7uya3re+SrfhpOKKucVNesrHjZ+6rVIWjeoGtjlr/rcTn ONmLQ6p/LpdHng== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:11 2026 by rpki-client