This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json) Hash identifier: pwW538ZqVVWJly68xn8p1VnCFcrj4PhQZHDX1y8233k= Subject key identifier: 38:E7:AC:90:18:6D:62:D2:A5:37:1D:A6:77:62:63:CE:0E:98:2A:6A Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59 Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59 Certificate serial: 019BF273C56F214DC47BF038A1B7E16498B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft Manifest number: 10F1 Signing time: Sun 25 Jan 2026 00:00:32 +0000 Manifest this update: Sun 25 Jan 2026 00:00:32 +0000 Manifest next update: Mon 26 Jan 2026 00:00:32 +0000 Files and hashes: 1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=) 2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=) 3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=) 4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: lco7c17AtT+LV8YwPvM8KtWej3SOIw5/DAClREASeIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:73:c5:6f:21:4d:c4:7b:f0:38:a1:b7:e1:64:98:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59 Validity Not Before: Jan 25 00:00:32 2026 GMT Not After : Jan 26 00:00:32 2026 GMT Subject: CN=38e7ac90186d62d2a5371da6776263ce0e982a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7b:3e:06:ff:c5:90:e3:03:dd:e4:00:e9:e3: a5:e3:9f:52:27:cd:d1:13:3c:ce:86:a4:1a:5a:0d: b4:0a:d6:ed:eb:4a:22:c6:79:60:af:c1:12:9d:0b: 9d:8d:48:c0:fa:e4:92:99:c3:d3:53:8d:89:30:dd: f3:8c:42:17:a2:68:8b:2c:6f:04:e6:30:29:37:7d: ef:cc:12:bb:a0:7a:bd:81:8b:43:5e:49:80:c9:57: 93:56:7b:b9:08:b4:c4:35:76:17:7f:5e:e1:80:01: 51:d4:32:f6:02:5c:87:c6:f3:63:fb:7b:2b:9b:74: 49:96:a5:65:bf:5a:09:e8:ae:1a:fe:25:fc:4f:63: 4b:e4:a5:e7:04:7d:82:ed:4b:65:45:13:c6:ee:09: 5b:f8:d1:9c:d8:50:4b:9a:55:15:35:a3:58:f6:65: 16:46:0e:fb:32:09:ca:b1:1d:c5:5d:fb:1b:53:52: 03:9a:21:31:67:a2:ca:38:88:ec:17:34:cc:ae:bd: 1b:e7:a1:d7:3b:4c:b1:99:6a:a7:db:6c:69:de:39: 3e:06:4a:b4:e7:a8:f9:60:d9:75:92:30:ae:fc:10: f9:c8:41:ba:89:64:b9:f8:bc:7f:0c:d0:f3:0b:66: f8:b0:7e:d6:a6:e0:d0:03:45:82:14:2f:a0:6d:3e: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:AC:90:18:6D:62:D2:A5:37:1D:A6:77:62:63:CE:0E:98:2A:6A X509v3 Authority Key Identifier: keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7e:f6:02:c9:ff:31:f6:ce:a9:a4:bb:e5:0e:7a:3e:01:d1: 90:5c:16:43:5c:aa:ca:0d:dc:a5:a8:6d:1d:e0:b8:f1:4b:d9: 22:b7:63:58:b3:85:f0:83:70:bc:c7:00:92:e1:7d:6d:2a:b5: 52:16:46:e5:4c:08:01:d2:16:87:1f:6a:97:2a:1f:5a:92:40: 4a:9f:95:2c:3b:a9:16:09:5d:8f:8a:51:65:e2:e6:81:50:96: 14:47:d5:35:84:4c:2a:c7:2c:1a:a2:7d:58:47:a0:03:65:b9: 45:8e:5d:90:2f:25:0d:6c:fe:5f:f8:fa:ac:74:6f:bb:d9:80: bd:44:19:f4:59:e0:b6:cc:f4:d6:b1:23:19:b9:80:e1:c2:8a: 9d:19:44:6f:71:98:62:f6:66:14:39:dd:04:ba:17:d5:c4:f8: 64:1a:73:fc:26:aa:b0:ad:2b:80:94:e0:5d:34:c3:f4:81:32: 7d:6e:61:65:43:03:8f:53:87:74:6a:a0:e7:71:22:7e:f6:4f: 74:c1:04:14:9d:6f:08:e0:f1:45:26:31:a9:c7:e8:9d:39:7d: 42:d5:35:9a:2f:3c:c8:a1:e8:de:18:bb:dd:f7:2e:f0:5f:52: f1:96:8c:52:8d:aa:f4:7d:aa:c8:82:33:a0:0c:76:d2:39:c1: a3:55:98:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyc8VvIU3Ee/A4obfhZJi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODE0YTI4YThjMWViZTBhZGMzM2ExNTE5Yjk4ODNlMzA4 NGJiNTkwHhcNMjYwMTI1MDAwMDMyWhcNMjYwMTI2MDAwMDMyWjAzMTEwLwYDVQQD EygzOGU3YWM5MDE4NmQ2MmQyYTUzNzFkYTY3NzYyNjNjZTBlOTgyYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Xs+Bv/FkOMD3eQA6eOl459SJ83R EzzOhqQaWg20Ctbt60oixnlgr8ESnQudjUjA+uSSmcPTU42JMN3zjEIXomiLLG8E 5jApN33vzBK7oHq9gYtDXkmAyVeTVnu5CLTENXYXf17hgAFR1DL2AlyHxvNj+3sr m3RJlqVlv1oJ6K4a/iX8T2NL5KXnBH2C7UtlRRPG7glb+NGc2FBLmlUVNaNY9mUW Rg77MgnKsR3FXfsbU1IDmiExZ6LKOIjsFzTMrr0b56HXO0yxmWqn22xp3jk+Bkq0 56j5YNl1kjCu/BD5yEG6iWS5+Lx/DNDzC2b4sH7WpuDQA0WCFC+gbT6fGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjnrJAYbWLSpTcdpndiY84OmCpqMB8GA1UdIwQY MBaAFLGBSiiowevgrcM6FRm5iD4whLtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGIt ODFkYWJjODFjMDVjLzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGItODFkYWJjODFjMDVj LzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX72Asn/ MfbOqaS75Q56PgHRkFwWQ1yqyg3cpahtHeC48UvZIrdjWLOF8INwvMcAkuF9bSq1 UhZG5UwIAdIWhx9qlyofWpJASp+VLDupFgldj4pRZeLmgVCWFEfVNYRMKscsGqJ9 WEegA2W5RY5dkC8lDWz+X/j6rHRvu9mAvUQZ9Fngtsz01rEjGbmA4cKKnRlEb3GY YvZmFDndBLoX1cT4ZBpz/CaqsK0rgJTgXTTD9IEyfW5hZUMDj1OHdGqg53EifvZP dMEEFJ1vCODxRSYxqcfonTl9QtU1mi88yKHo3hi73fcu8F9S8ZaMUo2q9H2qyIIz oAx20jnBo1WYuw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:05 2026 by rpki-client