This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json) Hash identifier: e4m9vCaUu7FlHwKQ0GJbwT+/t7Oa5NR769a95ZXuIk8= Subject key identifier: 32:17:77:6D:6E:6D:58:1D:A3:7B:69:5D:74:48:CD:4E:4E:F7:70:D1 Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Certificate serial: 019BF3BD5762C81223B2D2D1B16BE82831B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 06:00:30 +0000 Manifest this update: Sun 25 Jan 2026 06:00:30 +0000 Manifest next update: Mon 26 Jan 2026 06:00:30 +0000 Files and hashes: 1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=) 2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=) 3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=) 4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: FRT2AVtJPF3XINFe+rNmPh93NbuWjBu6H7eMyNviFcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:57:62:c8:12:23:b2:d2:d1:b1:6b:e8:28:31:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Validity Not Before: Jan 25 06:00:30 2026 GMT Not After : Jan 26 06:00:30 2026 GMT Subject: CN=3217776d6e6d581da37b695d7448cd4e4ef770d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:bf:56:2b:4e:c4:17:04:1b:c3:0f:01:15: ea:9e:90:62:8b:df:63:51:13:3c:32:41:38:c7:70: d4:07:0a:c4:af:43:13:4d:37:db:8a:4f:a0:05:aa: 2c:8d:06:de:d9:0d:20:0a:d0:0e:26:81:40:3b:96: 32:8d:76:4b:59:f6:5e:d8:fd:ff:98:99:b5:92:c4: 46:42:8a:90:e2:9c:5a:5a:3b:73:4b:c8:e0:73:a5: 9e:f1:b8:67:6c:27:16:a6:ca:b0:6e:fb:49:ce:d7: 38:88:4f:2f:b4:4e:96:79:bc:4c:3d:81:e5:92:ce: 91:ca:3e:aa:dc:52:c0:6a:75:87:78:1a:f7:34:bd: c3:be:d3:19:3b:3f:65:bc:22:f6:37:8d:06:fb:5e: 71:43:27:d5:a2:85:87:5f:06:03:d1:90:ef:86:1e: 3e:5d:14:4a:fa:4a:64:bb:61:f3:34:f9:e9:61:62: e0:0f:2e:f8:fb:ad:6e:c4:62:c0:a5:08:cd:30:46: c1:27:85:4f:a5:aa:26:7b:59:88:23:f0:21:47:9c: be:be:a3:62:26:cb:1a:23:7a:5a:32:98:fe:67:9a: 5e:b1:b9:ab:24:62:d0:d2:8d:84:15:aa:d3:e2:ff: 62:e5:a4:56:6f:bf:73:a2:63:59:e7:ed:6f:3e:8d: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:17:77:6D:6E:6D:58:1D:A3:7B:69:5D:74:48:CD:4E:4E:F7:70:D1 X509v3 Authority Key Identifier: keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:84:4c:80:7e:26:73:3a:4d:5d:cb:78:f1:b9:20:e3:59:e9: 0b:f6:61:6b:8b:f2:60:fa:40:47:67:4a:c9:12:1e:49:93:f4: 91:62:75:af:b2:a8:b9:33:a0:3c:ba:64:8d:4a:a4:f2:7d:ab: 7b:f0:88:51:08:99:af:10:1f:72:4d:9b:67:09:ad:4a:87:48: d6:c0:81:04:be:ff:49:4c:d4:0f:3e:9e:8f:f2:1c:9d:83:96: 06:0d:df:18:f1:cb:36:33:d3:1e:6a:87:ed:f5:7d:18:70:0f: 00:33:b2:9f:ca:a1:71:0b:1d:47:af:ae:b7:21:12:de:81:a5: 54:a6:e4:17:7d:7e:35:aa:9a:d6:ac:bc:88:28:86:16:36:3f: 5d:f6:9b:71:9f:c5:2b:bf:84:14:92:a7:44:2e:8a:2d:16:7d: 20:54:b2:59:46:25:5b:c6:50:6f:05:5c:23:b1:65:c3:e7:42: a6:bb:2c:8a:53:9e:93:da:04:34:fa:94:59:a1:e5:73:bd:8f: b7:4c:6b:93:ec:2c:49:75:97:0e:d2:30:9e:4c:5f:a7:fd:cf: e5:4b:ca:ad:eb:e6:5c:88:80:32:5c:22:c7:73:33:5f:b5:69: b8:50:2d:a1:eb:ba:37:58:27:68:2f:c3:fe:1f:05:f9:d7:db: 52:8e:7b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvVdiyBIjstLRsWvoKDG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4 YTU4NWUwHhcNMjYwMTI1MDYwMDMwWhcNMjYwMTI2MDYwMDMwWjAzMTEwLwYDVQQD EygzMjE3Nzc2ZDZlNmQ1ODFkYTM3YjY5NWQ3NDQ4Y2Q0ZTRlZjc3MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikS/VitOxBcEG8MPARXqnpBii99j URM8MkE4x3DUBwrEr0MTTTfbik+gBaosjQbe2Q0gCtAOJoFAO5YyjXZLWfZe2P3/ mJm1ksRGQoqQ4pxaWjtzS8jgc6We8bhnbCcWpsqwbvtJztc4iE8vtE6WebxMPYHl ks6Ryj6q3FLAanWHeBr3NL3DvtMZOz9lvCL2N40G+15xQyfVooWHXwYD0ZDvhh4+ XRRK+kpku2HzNPnpYWLgDy74+61uxGLApQjNMEbBJ4VPpaome1mII/AhR5y+vqNi JssaI3paMpj+Z5pesbmrJGLQ0o2EFarT4v9i5aRWb79zomNZ5+1vPo1QQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIXd21ubVgdo3tpXXRIzU5O93DRMB8GA1UdIwQY MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt MTdmYjRmZmI5ZmFkLzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoRMgH4m czpNXct48bkg41npC/Zha4vyYPpAR2dKyRIeSZP0kWJ1r7KouTOgPLpkjUqk8n2r e/CIUQiZrxAfck2bZwmtSodI1sCBBL7/SUzUDz6ej/IcnYOWBg3fGPHLNjPTHmqH 7fV9GHAPADOyn8qhcQsdR6+utyES3oGlVKbkF31+Naqa1qy8iCiGFjY/XfabcZ/F K7+EFJKnRC6KLRZ9IFSyWUYlW8ZQbwVcI7Flw+dCprssilOek9oENPqUWaHlc72P t0xrk+wsSXWXDtIwnkxfp/3P5UvKrevmXIiAMlwix3MzX7VpuFAtoeu6N1gnaC/D /h8F+dfbUo57pQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:08 2026 by rpki-client