This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json) Hash identifier: Up66zZi51edrmQ5wHIT31goftF4QprP7dY+rTrM25BI= Subject key identifier: 32:CB:F3:10:9F:66:89:11:C2:71:33:6D:9F:BB:E7:B7:67:E9:4C:7D Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd Certificate serial: 019BF91BD2CCA4A7A6B84BC53C28606EF703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 07:01:48 +0000 Manifest this update: Mon 26 Jan 2026 07:01:48 +0000 Manifest next update: Tue 27 Jan 2026 07:01:48 +0000 Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: ak/smqvAqI5g3WjUaRtBGcVHjXrwwbxif25rmCeX8dQ=) 2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:d2:cc:a4:a7:a6:b8:4b:c5:3c:28:60:6e:f7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd Validity Not Before: Jan 26 07:01:48 2026 GMT Not After : Jan 27 07:01:48 2026 GMT Subject: CN=32cbf3109f668911c271336d9fbbe7b767e94c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:14:5f:62:2b:de:ff:1a:7b:45:36:b5:78: e9:d8:4c:c8:fc:9b:9d:2d:93:e4:6e:8c:84:3f:ae: a0:f9:2f:39:7c:c8:e2:c6:2e:d4:53:da:1a:a1:21: 15:f3:68:01:9c:6c:bc:67:c0:16:36:01:1a:9e:99: 31:6c:9b:a4:6f:4f:55:d8:7e:ee:cd:72:ff:99:7b: 6b:69:4b:0c:45:48:65:b8:c5:00:3f:65:fd:ab:52: 62:41:ad:31:11:eb:51:c2:ed:6a:df:df:e7:a2:63: 3a:ee:3d:c4:b2:82:a2:f6:c6:14:72:4c:1c:78:c7: fd:83:9c:c8:72:71:11:9f:f0:80:e3:19:a1:b7:00: ac:b7:06:49:11:bf:7b:62:a5:e1:82:16:6e:03:ae: 20:40:5d:3a:0d:11:7e:09:64:fc:df:86:ff:f6:25: 3b:6e:41:2d:d4:4b:d4:60:b6:7b:8d:70:b4:ae:0b: c0:0a:5a:b3:29:ce:0f:78:b8:93:60:66:b1:13:ce: 15:5f:1d:dc:cd:a5:2f:85:31:b9:50:14:2f:bc:1c: b3:f2:49:f6:e3:ca:11:37:d3:f6:fa:13:58:08:4b: 3d:61:3c:6d:58:bc:ce:0b:73:a8:a0:6b:71:45:cf: 07:7d:aa:a1:a4:91:05:5f:c2:61:ff:f6:b0:0d:20: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:F3:10:9F:66:89:11:C2:71:33:6D:9F:BB:E7:B7:67:E9:4C:7D X509v3 Authority Key Identifier: keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2d:30:d1:25:5f:fe:90:41:41:75:51:98:36:40:f9:f2:9c: ab:78:03:8f:40:71:a4:67:01:a7:61:83:75:86:98:6c:5f:7f: 99:ff:8b:cc:4c:8a:82:5f:40:30:54:36:cf:84:7f:c7:e9:92: c4:67:28:d3:3c:d9:dc:6a:d9:91:8e:f7:79:8a:c2:ca:7f:93: 4a:5a:ad:57:48:5a:af:32:19:10:e9:a4:27:ef:69:79:d8:60: fe:b6:54:b0:ce:31:55:7d:9d:d3:cf:82:6d:9f:ea:a8:00:32: 23:5b:7d:8b:84:c6:66:da:02:35:94:4d:d0:f0:36:e8:c8:cb: be:57:a7:2b:4d:b9:6d:a1:1f:83:37:35:7e:73:9a:3f:32:40: 6f:57:be:88:13:fa:ac:ee:98:1f:2a:be:25:fb:51:20:38:2b: 35:09:0b:50:d8:e7:f0:35:1d:68:5e:68:da:f1:7d:1a:d7:cc: c6:e5:5d:e4:72:9d:17:52:ec:22:96:d3:e0:e0:f9:9b:10:6a: ff:45:d7:a6:c8:86:a6:57:e3:d2:f5:af:95:9a:0d:d1:e0:d5: 83:3b:95:2a:d6:61:20:67:16:b9:9d:2e:82:30:7f:1f:45:a8: ae:db:36:c6:19:a4:74:c2:ca:43:47:4d:ae:bb:88:97:34:91: e3:62:74:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G9LMpKemuEvFPChgbvcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMmI2ZDJhNWQ0MTMwNTYwZjYxNzk2M2Q5ZmJjOTM0NDJk YzFjY2QwHhcNMjYwMTI2MDcwMTQ4WhcNMjYwMTI3MDcwMTQ4WjAzMTEwLwYDVQQD EygzMmNiZjMxMDlmNjY4OTExYzI3MTMzNmQ5ZmJiZTdiNzY3ZTk0YzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2kUX2Ir3v8ae0U2tXjp2EzI/Jud LZPkboyEP66g+S85fMjixi7UU9oaoSEV82gBnGy8Z8AWNgEanpkxbJukb09V2H7u zXL/mXtraUsMRUhluMUAP2X9q1JiQa0xEetRwu1q39/nomM67j3EsoKi9sYUckwc eMf9g5zIcnERn/CA4xmhtwCstwZJEb97YqXhghZuA64gQF06DRF+CWT834b/9iU7 bkEt1EvUYLZ7jXC0rgvAClqzKc4PeLiTYGaxE84VXx3czaUvhTG5UBQvvByz8kn2 48oRN9P2+hNYCEs9YTxtWLzOC3OooGtxRc8HfaqhpJEFX8Jh//awDSBbsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLL8xCfZokRwnEzbZ+757dn6Ux9MB8GA1UdIwQY MBaAFEsrbSpdQTBWD2F5Y9n7yTRC3BzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMt YzU3NDE1ODUwMmM4LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMtYzU3NDE1ODUwMmM4 LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC0w0SVf /pBBQXVRmDZA+fKcq3gDj0BxpGcBp2GDdYaYbF9/mf+LzEyKgl9AMFQ2z4R/x+mS xGco0zzZ3GrZkY73eYrCyn+TSlqtV0harzIZEOmkJ+9pedhg/rZUsM4xVX2d08+C bZ/qqAAyI1t9i4TGZtoCNZRN0PA26MjLvlenK025baEfgzc1fnOaPzJAb1e+iBP6 rO6YHyq+JftRIDgrNQkLUNjn8DUdaF5o2vF9GtfMxuVd5HKdF1LsIpbT4OD5mxBq /0XXpsiGplfj0vWvlZoN0eDVgzuVKtZhIGcWuZ0ugjB/H0Worts2xhmkdMLKQ0dN rruIlzSR42J0wg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:39 2026 by rpki-client