This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json) Hash identifier: 2iD26WGR+YUhC153m/rRaOlvum8WUc9SSH1/RpEH+k0= Subject key identifier: 47:00:DF:CE:A3:D7:87:81:49:A4:F9:82:30:BC:D0:DD:D1:AF:CC:33 Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Certificate serial: 019BFCF83C1D550D7AF0FC7A868742CEB961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft Manifest number: 1745 Signing time: Tue 27 Jan 2026 01:01:25 +0000 Manifest this update: Tue 27 Jan 2026 01:01:25 +0000 Manifest next update: Wed 28 Jan 2026 01:01:25 +0000 Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=) 2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=) 3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: tWqWi5hGSKaDql8gXEfPuJNWWz+8yGBSON45kunrUj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:3c:1d:55:0d:7a:f0:fc:7a:86:87:42:ce:b9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Validity Not Before: Jan 27 01:01:25 2026 GMT Not After : Jan 28 01:01:25 2026 GMT Subject: CN=4700dfcea3d7878149a4f98230bcd0ddd1afcc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:23:b2:c8:89:76:e6:f0:50:eb:d6:ee:e0: 63:c1:66:7b:26:af:47:d3:f5:c9:9e:b3:5d:7b:5f: 27:18:1a:4d:9c:39:7e:94:9b:82:9c:23:d5:67:9f: 32:8f:71:d0:6e:d5:f3:45:cd:83:6e:15:b8:f4:e0: 24:0b:07:22:f8:d9:fb:c1:e8:02:fd:15:ca:16:ea: 92:81:c0:87:bf:2a:d6:c9:06:d9:22:1a:41:a8:5f: 3c:f2:6c:4a:16:42:cd:8d:ae:ca:9e:ee:9f:d0:05: 41:d5:df:4f:02:2b:da:c7:57:10:97:45:f2:21:46: d1:03:3f:b7:86:86:f8:e8:8b:13:f4:7b:d4:a6:1b: eb:8b:a7:c6:b5:07:f0:8a:9a:c1:95:6e:65:f5:28: 3b:24:00:88:b8:aa:84:dc:67:8f:51:25:94:bd:f5: d6:c3:fb:7b:26:dd:da:9e:a7:fb:bc:b6:fa:29:de: d9:17:6d:3e:ab:1f:52:9b:b7:15:5b:df:07:ac:de: 71:60:f8:bf:ef:1f:b4:97:c2:e2:28:de:cc:09:4b: 33:71:d2:6c:3f:54:be:ac:9d:06:4c:28:01:5e:1d: e6:41:0c:33:7b:af:73:69:db:66:6c:34:2d:9f:f0: ef:9f:b2:28:8a:4a:e6:5a:dd:11:14:11:87:70:82: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:DF:CE:A3:D7:87:81:49:A4:F9:82:30:BC:D0:DD:D1:AF:CC:33 X509v3 Authority Key Identifier: keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0e:cf:4a:90:ce:63:71:8f:9c:8e:35:eb:97:18:29:b7:f0: bc:23:38:27:c0:83:06:71:9e:59:16:f0:20:26:99:e5:f3:42: 99:b5:35:fe:53:95:f1:33:f7:6d:ff:a8:9e:7e:96:33:6a:bc: 23:b5:77:a3:47:03:e1:53:67:ef:9f:b2:9d:0a:88:3b:30:b6: fd:0d:21:33:bd:57:bd:84:2f:b5:77:0b:72:27:c8:67:0d:e6: 8f:5b:47:f3:f1:ad:96:13:4a:ba:95:07:4b:f6:db:2e:70:ff: 17:f5:cf:b8:28:e4:8e:ea:18:99:c0:d1:a4:4e:5d:82:3a:d4: 9d:4a:3b:c4:70:9a:df:5d:2d:20:15:41:38:ec:88:d5:2c:da: a5:6b:4f:b1:af:4e:bc:d3:a0:f4:41:ea:dd:ef:40:9c:27:50: ae:49:ce:c7:d8:11:04:72:0d:c5:0c:1d:d5:3f:9a:be:82:11: ef:a0:94:de:05:ff:a2:56:91:69:47:70:76:d6:b2:cc:5c:62: ca:72:11:f2:9d:eb:35:fd:8a:88:f7:f8:e7:b9:cf:20:7a:c0: f9:31:27:fd:17:62:18:e9:a7:04:db:0d:1f:48:88:c6:82:ac: eb:27:f0:23:69:0c:ad:5f:75:00:38:3e:58:3a:2a:22:6d:4c: f2:af:66:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+DwdVQ168Px6hodCzrlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw Y2E1OGYwHhcNMjYwMTI3MDEwMTI1WhcNMjYwMTI4MDEwMTI1WjAzMTEwLwYDVQQD Eyg0NzAwZGZjZWEzZDc4NzgxNDlhNGY5ODIzMGJjZDBkZGQxYWZjYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuekjssiJdubwUOvW7uBjwWZ7Jq9H 0/XJnrNde18nGBpNnDl+lJuCnCPVZ58yj3HQbtXzRc2DbhW49OAkCwci+Nn7wegC /RXKFuqSgcCHvyrWyQbZIhpBqF888mxKFkLNja7Knu6f0AVB1d9PAivax1cQl0Xy IUbRAz+3hob46IsT9HvUphvri6fGtQfwiprBlW5l9Sg7JACIuKqE3GePUSWUvfXW w/t7Jt3anqf7vLb6Kd7ZF20+qx9Sm7cVW98HrN5xYPi/7x+0l8LiKN7MCUszcdJs P1S+rJ0GTCgBXh3mQQwze69zadtmbDQtn/Dvn7IoikrmWt0RFBGHcIKN8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcA386j14eBSaT5gjC80N3Rr8wzMB8GA1UdIwQY MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQ7PSpDO Y3GPnI4165cYKbfwvCM4J8CDBnGeWRbwICaZ5fNCmbU1/lOV8TP3bf+onn6WM2q8 I7V3o0cD4VNn75+ynQqIOzC2/Q0hM71XvYQvtXcLcifIZw3mj1tH8/GtlhNKupUH S/bbLnD/F/XPuCjkjuoYmcDRpE5dgjrUnUo7xHCa310tIBVBOOyI1SzapWtPsa9O vNOg9EHq3e9AnCdQrknOx9gRBHINxQwd1T+avoIR76CU3gX/olaRaUdwdtayzFxi ynIR8p3rNf2KiPf457nPIHrA+TEn/RdiGOmnBNsNH0iIxoKs6yfwI2kMrV91ADg+ WDoqIm1M8q9mnw== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:40 2026 by rpki-client