This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json) Hash identifier: zoEltlze214z+7r+O/WV4PtwdIYeUza2yL6YBQkqj3s= Subject key identifier: BD:00:F6:72:53:A5:C8:C6:4F:5C:81:39:00:B2:C7:E5:9D:86:CF:35 Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf Certificate serial: 019BF4D02E6A02BA524084F6BCA6654F8645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft Manifest number: 153E Signing time: Sun 25 Jan 2026 11:00:42 +0000 Manifest this update: Sun 25 Jan 2026 11:00:42 +0000 Manifest next update: Mon 26 Jan 2026 11:00:42 +0000 Files and hashes: 1: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (hash: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w=) 2: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (hash: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw=) 3: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: W0nNvXAbw+YU2IQcNzfjSFIH5N+q3eeGgEXZ4hcjOX8=) 4: yXa8XbTaH683GFEjkOW8VCRIjpE.roa (hash: l5nJIcq0a2VDJfhrhqSb9wFUsKAsvOaRuHeId15ZhA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:2e:6a:02:ba:52:40:84:f6:bc:a6:65:4f:86:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Validity Not Before: Jan 25 11:00:42 2026 GMT Not After : Jan 26 11:00:42 2026 GMT Subject: CN=bd00f67253a5c8c64f5c813900b2c7e59d86cf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:3d:35:34:6a:5a:b6:0a:3e:cf:dc:2a:a4: 97:6d:4f:0a:2b:16:86:91:3f:8c:d7:97:14:ca:b9: c4:44:95:07:37:35:9d:7c:5a:98:80:32:e5:27:06: 66:e0:e8:b1:9a:ae:59:cd:b3:6e:1d:ea:2b:74:ec: 07:10:13:97:4b:c2:49:91:40:6d:d5:05:09:6a:51: ea:0c:c1:b2:d9:5d:ba:01:22:c5:15:71:f0:d9:22: b3:c0:bb:d6:74:06:77:6d:11:98:4a:fc:28:1a:1e: 25:bc:ca:4d:b1:90:5e:09:1a:5b:75:34:6c:03:17: 51:13:78:90:0e:da:13:74:de:1c:8d:c7:df:2c:c9: 64:c6:a2:20:a6:cf:e2:82:74:ae:04:ba:e3:b2:fc: 86:8b:ab:d2:a4:0c:23:8a:f9:96:86:b8:49:64:8e: dd:f8:44:a2:20:91:88:d4:38:0a:8e:76:9c:c9:04: 3e:26:79:a4:da:2a:48:1b:11:99:b3:05:b9:73:1f: 93:c3:85:b1:3e:0c:89:17:da:38:a5:67:8f:e7:f7: c1:19:b5:c9:af:d3:72:7b:44:73:52:3b:33:90:79: db:80:0b:63:77:99:5a:c0:2a:42:08:20:52:1e:96: 6d:d3:05:a8:b5:d7:dc:35:66:f2:8b:b5:25:7b:76: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:F6:72:53:A5:C8:C6:4F:5C:81:39:00:B2:C7:E5:9D:86:CF:35 X509v3 Authority Key Identifier: keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6f:f2:0b:fa:3b:29:a7:97:98:08:fb:ba:4f:a0:6d:31:26: 81:f3:ed:13:fc:0f:d0:7d:08:d7:56:b4:33:17:f3:31:b5:46: 75:8e:31:c7:ff:f5:18:b6:a8:9d:e1:d3:a7:32:6d:c1:27:d8: 93:a3:1f:85:b3:dc:fd:0a:34:c0:30:72:5a:89:7d:28:07:6e: 5c:ea:1d:f2:e5:61:2a:f5:9f:9b:42:65:62:c7:6d:5f:f7:c5: 30:73:da:1c:54:d0:cd:5e:1a:e3:f5:c8:f3:e5:63:ce:b9:d5: 89:2d:1a:9d:56:92:ef:d2:aa:95:a7:b5:81:5b:02:38:eb:60: a3:d2:f3:a9:cd:c3:e1:e3:3e:38:b5:1a:0e:f7:69:6d:56:59: 5a:9c:ac:a8:70:a6:8a:51:27:8b:61:4e:31:79:b4:77:27:0e: 6a:86:68:7a:d0:f7:78:aa:ca:db:38:a1:ac:11:8a:23:83:60: 79:e9:48:1f:cd:96:a0:41:a8:42:71:b7:aa:ce:03:c8:4f:13: cc:8a:a0:ee:a8:ae:fa:cb:a7:0f:84:43:b7:96:8a:eb:ad:2c: fa:bc:3b:90:46:6e:8f:7f:e1:b3:2f:01:b1:8a:24:d4:32:21: 3a:30:1e:15:4c:98:8a:7e:45:b4:ea:31:da:01:c6:ea:7e:e1: 38:84:e8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00C5qArpSQIT2vKZlT4ZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4 OTZkYmYwHhcNMjYwMTI1MTEwMDQyWhcNMjYwMTI2MTEwMDQyWjAzMTEwLwYDVQQD EyhiZDAwZjY3MjUzYTVjOGM2NGY1YzgxMzkwMGIyYzdlNTlkODZjZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56s9NTRqWrYKPs/cKqSXbU8KKxaG kT+M15cUyrnERJUHNzWdfFqYgDLlJwZm4Oixmq5ZzbNuHeordOwHEBOXS8JJkUBt 1QUJalHqDMGy2V26ASLFFXHw2SKzwLvWdAZ3bRGYSvwoGh4lvMpNsZBeCRpbdTRs AxdRE3iQDtoTdN4cjcffLMlkxqIgps/ignSuBLrjsvyGi6vSpAwjivmWhrhJZI7d +ESiIJGI1DgKjnacyQQ+Jnmk2ipIGxGZswW5cx+Tw4WxPgyJF9o4pWeP5/fBGbXJ r9Nye0RzUjszkHnbgAtjd5lawCpCCCBSHpZt0wWotdfcNWbyi7Ule3aWQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0A9nJTpcjGT1yBOQCyx+Wdhs81MB8GA1UdIwQY MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt NzUzZDk2OWEwNzAyLzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW/yC/o7 KaeXmAj7uk+gbTEmgfPtE/wP0H0I11a0MxfzMbVGdY4xx//1GLaoneHTpzJtwSfY k6MfhbPc/Qo0wDByWol9KAduXOod8uVhKvWfm0JlYsdtX/fFMHPaHFTQzV4a4/XI 8+VjzrnViS0anVaS79Kqlae1gVsCOOtgo9Lzqc3D4eM+OLUaDvdpbVZZWpysqHCm ilEni2FOMXm0dycOaoZoetD3eKrK2zihrBGKI4NgeelIH82WoEGoQnG3qs4DyE8T zIqg7qiu+sunD4RDt5aK660s+rw7kEZuj3/hsy8BsYok1DIhOjAeFUyYin5FtOox 2gHG6n7hOITokg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:54 2026 by rpki-client