This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json) Hash identifier: H4ilEsoZ4A2XJVLwAUKjLxn0/bgnbgKuqJb6fPRMNzA= Subject key identifier: 37:D6:B6:2B:DA:E3:12:54:6D:9F:62:9A:6D:BD:5B:0E:78:9B:29:2B Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a Certificate serial: 019BF46306C20ECC97667215FE788D8048A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft Manifest number: 07C7 Signing time: Sun 25 Jan 2026 09:01:28 +0000 Manifest this update: Sun 25 Jan 2026 09:01:28 +0000 Manifest next update: Mon 26 Jan 2026 09:01:28 +0000 Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=) 2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: XOkXz/fFq+hwz4LCogXq7dh3yoQS6vq7kGZxkWxpmk4=) 3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=) 4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:06:c2:0e:cc:97:66:72:15:fe:78:8d:80:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Validity Not Before: Jan 25 09:01:28 2026 GMT Not After : Jan 26 09:01:28 2026 GMT Subject: CN=37d6b62bdae312546d9f629a6dbd5b0e789b292b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ac:bf:ec:86:44:aa:1f:43:f7:88:20:d9:90: 96:b9:cf:01:50:d0:93:08:95:f9:c2:b8:58:e1:1d: 62:cb:66:46:1c:4a:2c:27:97:95:41:47:59:9d:98: e1:22:03:c4:c6:81:51:79:ce:d1:54:f2:70:d1:de: e9:11:1a:0f:f4:20:4e:b5:5c:69:6a:be:3b:ab:a3: 2d:7e:22:4b:8c:81:70:32:dd:37:f6:5c:bf:c8:ff: 87:b1:27:b6:30:9b:50:68:c0:e2:ae:45:db:33:7b: b7:f1:37:09:e1:3b:bd:29:f4:cb:1a:b5:a5:99:82: 84:7d:dd:84:64:f3:89:7e:9c:be:d0:b0:67:e5:4d: 18:2f:59:31:69:81:22:6b:57:be:a6:d5:2f:b6:13: 0b:8a:9b:33:ef:d2:e5:83:ea:b1:bc:65:9b:e2:aa: 46:5a:2f:0d:f1:ba:c3:cb:f1:6e:f0:d2:4e:7a:b2: 2f:37:dd:74:be:ad:25:8c:6c:45:64:bf:39:db:7a: 4d:4a:dd:d6:95:73:84:ea:c1:9e:f7:bd:6f:f6:ef: 35:33:ea:47:f2:68:9d:36:45:94:40:c0:97:56:a3: 9d:ce:2d:87:50:c5:e9:cf:1c:80:b3:dc:23:d8:55: 1c:f6:ee:27:ca:54:de:e8:db:c0:d7:38:6f:77:70: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D6:B6:2B:DA:E3:12:54:6D:9F:62:9A:6D:BD:5B:0E:78:9B:29:2B X509v3 Authority Key Identifier: keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d9:ae:d5:ea:13:8c:12:54:2c:ed:a6:64:99:0a:a5:2c:05: cf:e8:40:ba:56:fd:fc:2b:8d:2a:f9:42:e2:be:2a:96:f1:f0: c5:98:e2:b9:1c:a1:8c:16:b6:86:cb:99:04:a8:b0:59:24:7c: 48:57:12:e9:07:79:3f:f9:ae:9c:ec:d9:bd:d9:54:94:94:d2: 1a:26:2a:ad:6b:05:9a:4c:48:20:bf:fa:2a:91:dd:7b:0f:42: da:69:6d:e0:b6:48:fe:54:c9:2c:cc:75:89:9e:af:cd:06:02: 1e:b9:a8:aa:eb:27:57:18:6c:08:76:a7:43:de:37:15:ec:6c: 39:f4:e1:53:db:6d:a7:3e:af:26:65:70:fa:cf:0e:b1:bd:07: e9:79:c7:7b:69:97:68:9d:6e:e0:a4:aa:8f:1f:51:8d:d0:31: 9c:4f:73:43:ff:6f:d6:30:97:02:13:38:4f:06:28:9b:a2:c7: ef:0e:e1:6c:f3:e7:5e:ae:66:76:14:32:81:7c:b9:39:58:b7: bf:96:80:96:ef:22:eb:29:e5:55:92:35:59:6f:6e:81:16:a2: 29:22:09:09:33:b4:4a:8c:c5:4d:34:e9:a7:20:4b:eb:09:fa: 70:e2:85:14:a2:6a:2a:8b:67:bc:62:40:be:56:6f:6a:47:64: fd:10:7d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YwbCDsyXZnIV/niNgEigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm MzM1OGEwHhcNMjYwMTI1MDkwMTI4WhcNMjYwMTI2MDkwMTI4WjAzMTEwLwYDVQQD EygzN2Q2YjYyYmRhZTMxMjU0NmQ5ZjYyOWE2ZGJkNWIwZTc4OWIyOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ay/7IZEqh9D94gg2ZCWuc8BUNCT CJX5wrhY4R1iy2ZGHEosJ5eVQUdZnZjhIgPExoFRec7RVPJw0d7pERoP9CBOtVxp ar47q6MtfiJLjIFwMt039ly/yP+HsSe2MJtQaMDirkXbM3u38TcJ4Tu9KfTLGrWl mYKEfd2EZPOJfpy+0LBn5U0YL1kxaYEia1e+ptUvthMLipsz79Llg+qxvGWb4qpG Wi8N8brDy/Fu8NJOerIvN910vq0ljGxFZL8523pNSt3WlXOE6sGe971v9u81M+pH 8midNkWUQMCXVqOdzi2HUMXpzxyAs9wj2FUc9u4nylTe6NvA1zhvd3AHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfWtiva4xJUbZ9imm29Ww54mykrMB8GA1UdIwQY MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdmu1eoT jBJULO2mZJkKpSwFz+hAulb9/CuNKvlC4r4qlvHwxZjiuRyhjBa2hsuZBKiwWSR8 SFcS6Qd5P/munOzZvdlUlJTSGiYqrWsFmkxIIL/6KpHdew9C2mlt4LZI/lTJLMx1 iZ6vzQYCHrmoqusnVxhsCHanQ943FexsOfThU9ttpz6vJmVw+s8Osb0H6XnHe2mX aJ1u4KSqjx9RjdAxnE9zQ/9v1jCXAhM4TwYom6LH7w7hbPPnXq5mdhQygXy5OVi3 v5aAlu8i6ynlVZI1WW9ugRaiKSIJCTO0SozFTTTppyBL6wn6cOKFFKJqKotnvGJA vlZvakdk/RB9zg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:36 2026 by rpki-client