This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json) Hash identifier: ddumVnqNe7hpiuOtgPOONYpyZkcsbFSJSx6s6e2ZoK4= Subject key identifier: 8A:65:33:D6:B8:2D:31:FA:CC:42:C2:BD:DC:01:A7:61:45:6B:C4:BE Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c Certificate serial: 019BF68841B03B0784A67114F7BBB72E43DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft Manifest number: 11B5 Signing time: Sun 25 Jan 2026 19:01:23 +0000 Manifest this update: Sun 25 Jan 2026 19:01:23 +0000 Manifest next update: Mon 26 Jan 2026 19:01:23 +0000 Files and hashes: 1: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: aAPPotXIoYlqDfPJaW011w9blDfnRU3EBnvnopnl9Bk=) 2: d8KM-uWtl5I_naikawUKGzZuO94.roa (hash: 1CwXzGBT5z5cvBmqOXP3+kg+AY9+POz75YELMqDBG6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:41:b0:3b:07:84:a6:71:14:f7:bb:b7:2e:43:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c Validity Not Before: Jan 25 19:01:23 2026 GMT Not After : Jan 26 19:01:23 2026 GMT Subject: CN=8a6533d6b82d31facc42c2bddc01a761456bc4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:9b:e9:e1:0d:7b:95:fe:b2:e8:5f:8a:b5: e2:ca:b1:5d:58:1b:6d:0c:06:9c:09:98:43:0c:5e: 62:31:1c:c4:44:23:47:f5:08:25:99:51:43:15:d3: 5a:bc:75:0e:a9:63:90:37:41:f9:35:53:96:33:0d: 6f:78:cd:46:d8:d8:c6:53:c3:23:9f:5d:b3:05:ea: 74:93:01:49:13:72:b0:55:cb:6a:d0:c1:0f:6f:ec: 3f:fd:c0:9a:5b:60:a1:a9:55:89:43:85:f0:fd:50: b4:9d:2a:f5:04:85:ba:aa:83:cf:46:d5:8c:09:50: 48:7e:80:7a:89:cb:91:d5:e6:2f:c7:c1:55:98:6f: 80:bb:0f:63:50:bc:a8:5b:aa:64:25:53:da:cc:be: 0c:f8:36:0e:58:0c:84:40:28:2b:06:2c:f1:41:4b: d8:ea:73:c8:76:01:5d:e4:b4:e6:4a:1b:0c:4d:59: 64:2d:b9:81:7e:5e:23:20:59:fe:9a:c1:fa:bc:6e: 06:37:93:2d:bd:73:61:19:3f:27:e8:81:1a:08:7a: 58:4a:73:17:1d:d9:f6:4e:cb:33:bd:00:a1:85:d0: e4:7d:a8:43:ac:34:d3:ad:77:a7:cd:27:92:95:87: 06:4b:20:99:0e:05:84:ae:5a:3b:2f:3b:32:b1:53: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:65:33:D6:B8:2D:31:FA:CC:42:C2:BD:DC:01:A7:61:45:6B:C4:BE X509v3 Authority Key Identifier: keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:18:f2:ce:6f:37:a7:f3:7a:47:ab:6a:85:5f:7f:4e:4a:5a: 10:68:ac:30:68:08:88:c2:66:1c:4a:a4:cb:10:b7:8f:08:4a: 4a:89:8f:90:e1:79:19:d3:8c:6c:ff:e1:44:b0:c1:ab:66:f9: ec:71:c1:1b:30:3d:f7:a5:aa:1b:f9:72:1d:b3:e2:63:58:cf: 69:8d:b7:42:24:2e:40:e4:47:c1:be:11:bc:c8:3b:0b:a8:07: a5:80:66:60:f2:ab:0a:11:c8:c0:36:85:ff:47:f3:ef:85:92: 77:26:af:5b:b9:cd:53:ea:15:d6:fd:0c:bd:cb:eb:35:2f:7b: fb:67:b0:37:f7:1f:bb:2a:79:5b:63:a1:14:35:45:6c:a7:03: 62:8f:59:24:b4:16:59:2b:42:33:09:a2:ab:1b:02:c6:0c:4c: 22:d6:6c:a2:83:62:d6:fa:72:2e:c4:46:bc:02:b0:03:b4:60: 52:f9:4f:83:90:0f:50:b2:76:2d:2f:58:8e:21:17:37:36:fb: 5c:a8:c4:1f:90:0a:46:91:9c:1f:3e:0f:f8:08:4e:ce:68:23: 9a:3e:59:59:fe:5b:6d:55:dc:7d:30:34:57:74:e6:32:4a:e8: 2c:8a:0f:72:22:e7:1c:2d:bd:cd:dc:d2:6e:98:12:e6:51:3e: 07:3e:aa:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEGwOweEpnEU97u3LkPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTM3NTE5MWQxYzJlNTA5ODIxMDhmZGQ0MDdiYmNmNzNl OTc5NWMwHhcNMjYwMTI1MTkwMTIzWhcNMjYwMTI2MTkwMTIzWjAzMTEwLwYDVQQD Eyg4YTY1MzNkNmI4MmQzMWZhY2M0MmMyYmRkYzAxYTc2MTQ1NmJjNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqySb6eENe5X+suhfirXiyrFdWBtt DAacCZhDDF5iMRzERCNH9QglmVFDFdNavHUOqWOQN0H5NVOWMw1veM1G2NjGU8Mj n12zBep0kwFJE3KwVctq0MEPb+w//cCaW2ChqVWJQ4Xw/VC0nSr1BIW6qoPPRtWM CVBIfoB6icuR1eYvx8FVmG+Auw9jULyoW6pkJVPazL4M+DYOWAyEQCgrBizxQUvY 6nPIdgFd5LTmShsMTVlkLbmBfl4jIFn+msH6vG4GN5MtvXNhGT8n6IEaCHpYSnMX Hdn2TsszvQChhdDkfahDrDTTrXenzSeSlYcGSyCZDgWErlo7LzsysVODiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIplM9a4LTH6zELCvdwBp2FFa8S+MB8GA1UdIwQY MBaAFEhTdRkdHC5QmCEI/dQHu89z6XlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUt NmViZmY2NGJjYTFjLzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUtNmViZmY2NGJjYTFj LzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxjyzm83 p/N6R6tqhV9/TkpaEGisMGgIiMJmHEqkyxC3jwhKSomPkOF5GdOMbP/hRLDBq2b5 7HHBGzA996WqG/lyHbPiY1jPaY23QiQuQORHwb4RvMg7C6gHpYBmYPKrChHIwDaF /0fz74WSdyavW7nNU+oV1v0MvcvrNS97+2ewN/cfuyp5W2OhFDVFbKcDYo9ZJLQW WStCMwmiqxsCxgxMItZsooNi1vpyLsRGvAKwA7RgUvlPg5APULJ2LS9YjiEXNzb7 XKjEH5AKRpGcHz4P+AhOzmgjmj5ZWf5bbVXcfTA0V3TmMkroLIoPciLnHC29zdzS bpgS5lE+Bz6qVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:23 2026 by rpki-client