This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json) Hash identifier: gWGWsKypp4IRLkZOd0fDH78UBq0+ds+hyoFa0E3bXhc= Subject key identifier: A5:E4:86:1E:C9:75:FF:6B:0C:8A:EF:CF:5E:E6:09:A1:14:14:83:C8 Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31 Certificate serial: 019BFB778D7B67033AE3A6BD29679E048B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft Manifest number: 172B Signing time: Mon 26 Jan 2026 18:01:14 +0000 Manifest this update: Mon 26 Jan 2026 18:01:14 +0000 Manifest next update: Tue 27 Jan 2026 18:01:14 +0000 Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=) 2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: ObY279MqvaNbZ2zCxRPRZuU8KZ3qKz1g3Q3gxPHV1yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:8d:7b:67:03:3a:e3:a6:bd:29:67:9e:04:8b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31 Validity Not Before: Jan 26 18:01:14 2026 GMT Not After : Jan 27 18:01:14 2026 GMT Subject: CN=a5e4861ec975ff6b0c8aefcf5ee609a1141483c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:d2:85:06:74:8f:c0:b7:6d:3e:7f:c5:27: 4a:d5:c3:23:13:cf:d4:fa:85:64:03:74:fb:d0:1b: fc:41:b7:11:aa:4a:36:0a:ac:0e:d1:49:6e:a6:0d: 0f:26:91:42:54:d2:eb:2d:94:68:05:f0:ca:82:f2: 5a:37:e2:65:02:b0:0a:e1:63:4a:44:5f:eb:1a:51: a3:70:28:55:f2:1b:9c:4d:bf:52:e6:e0:e6:98:93: 2d:0c:5e:4a:42:8f:36:f3:12:35:20:8a:67:22:e5: 37:09:b2:4a:d4:a3:6d:c3:d3:79:a7:15:b2:74:4e: e7:68:1c:db:67:a7:f2:d1:5c:8d:7d:fc:2a:28:54: 5e:c7:87:9b:dc:38:89:37:c5:e4:9b:2c:1e:fa:08: 59:0f:fc:65:b6:70:bf:34:0a:a4:ba:8a:6f:76:74: 5c:97:f0:35:a5:da:ea:fa:d9:98:74:ff:c9:0e:05: 07:59:c5:35:6d:10:9f:72:2e:3d:a1:c8:c6:40:03: a7:3e:57:43:ba:3c:ae:05:fd:1f:d6:aa:b6:cc:07: 79:77:b4:24:6f:3e:7d:2f:ad:14:b0:81:37:41:18: 71:bf:d0:1a:31:95:57:82:cd:06:19:53:61:c3:1f: c0:ad:f6:85:7b:c3:dd:b6:c3:36:ae:67:57:4f:a6: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E4:86:1E:C9:75:FF:6B:0C:8A:EF:CF:5E:E6:09:A1:14:14:83:C8 X509v3 Authority Key Identifier: keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7e:a6:98:49:64:67:70:66:06:9e:c2:25:b2:d4:02:9c:b1: 90:95:07:fb:34:23:07:9d:81:99:11:60:d0:de:c5:40:ec:e3: 6a:ac:36:9d:34:2d:59:7a:b9:46:65:bd:4d:08:ae:65:b8:41: dc:68:5a:f0:2e:8f:4d:b8:a7:8d:5f:93:3e:a3:3b:01:35:65: ad:e3:ec:24:86:49:64:09:db:46:18:3f:f8:9d:3b:e7:5b:47: c5:17:6b:1e:51:f0:b3:1d:f0:fd:91:d9:b8:80:74:9c:e7:86: 35:24:af:9e:34:03:0e:46:b5:5b:cb:98:ad:51:1b:bc:ae:00: 14:cf:e0:26:73:d1:d5:d3:af:44:ae:87:75:d3:cd:98:d6:d0: 03:db:86:f9:ff:4e:b9:e8:73:4d:3e:d4:26:97:ed:a0:b9:4e: 36:a4:6e:d2:48:2e:ff:41:2a:01:12:05:03:89:e5:6e:1a:01: 0c:d4:b1:e1:96:14:27:29:d1:79:52:5f:fb:55:b4:9e:a3:da: 68:4a:02:2c:37:10:45:ad:00:29:ce:be:4a:3f:e3:6f:ff:2e: 04:3f:88:5f:43:e0:75:af:bf:22:26:87:10:7b:a4:07:ab:b2: b1:87:18:6f:59:6e:47:8a:be:a9:90:cf:1d:d9:a3:97:cd:6d: f3:ec:55:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d417ZwM646a9KWeeBIuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI3MDJkMWEwNzI2MTc1ZTM5YWYxNjk3NGU1Mzc1ZGNh ZWZjMzEwHhcNMjYwMTI2MTgwMTE0WhcNMjYwMTI3MTgwMTE0WjAzMTEwLwYDVQQD EyhhNWU0ODYxZWM5NzVmZjZiMGM4YWVmY2Y1ZWU2MDlhMTE0MTQ4M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlszShQZ0j8C3bT5/xSdK1cMjE8/U +oVkA3T70Bv8QbcRqko2CqwO0Ulupg0PJpFCVNLrLZRoBfDKgvJaN+JlArAK4WNK RF/rGlGjcChV8hucTb9S5uDmmJMtDF5KQo828xI1IIpnIuU3CbJK1KNtw9N5pxWy dE7naBzbZ6fy0VyNffwqKFRex4eb3DiJN8Xkmywe+ghZD/xltnC/NAqkuopvdnRc l/A1pdrq+tmYdP/JDgUHWcU1bRCfci49ocjGQAOnPldDujyuBf0f1qq2zAd5d7Qk bz59L60UsIE3QRhxv9AaMZVXgs0GGVNhwx/ArfaFe8PdtsM2rmdXT6ZrnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXkhh7Jdf9rDIrvz17mCaEUFIPIMB8GA1UdIwQY MBaAFEnycC0aByYXXjmvFpdOU3XcrvwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgt M2QxYTBlYmQwZjU5LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgtM2QxYTBlYmQwZjU5 LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX6mmElk Z3BmBp7CJbLUApyxkJUH+zQjB52BmRFg0N7FQOzjaqw2nTQtWXq5RmW9TQiuZbhB 3Gha8C6PTbinjV+TPqM7ATVlrePsJIZJZAnbRhg/+J0751tHxRdrHlHwsx3w/ZHZ uIB0nOeGNSSvnjQDDka1W8uYrVEbvK4AFM/gJnPR1dOvRK6HddPNmNbQA9uG+f9O uehzTT7UJpftoLlONqRu0kgu/0EqARIFA4nlbhoBDNSx4ZYUJynReVJf+1W0nqPa aEoCLDcQRa0AKc6+Sj/jb/8uBD+IX0Pgda+/IiaHEHukB6uysYcYb1luR4q+qZDP Hdmjl81t8+xV7A== -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:42 2026 by rpki-client