This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json) Hash identifier: SB476hFwXUgJkRMEHB2Xi9sbcWfLpUaoNeEkrB4rcv8= Subject key identifier: B8:E3:E5:14:F3:9B:D0:59:83:B0:BD:8B:D2:C0:5A:78:7F:B8:6C:DB Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Certificate serial: 019BFD9D472598CD88337E17B66CD0D2468E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft Manifest number: 1125 Signing time: Tue 27 Jan 2026 04:01:41 +0000 Manifest this update: Tue 27 Jan 2026 04:01:41 +0000 Manifest next update: Wed 28 Jan 2026 04:01:41 +0000 Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=) 2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=) 3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: Wpkb504+ilLNRSQhSF7VZIHeLBeCclQrxi6WUAn+yNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9d:47:25:98:cd:88:33:7e:17:b6:6c:d0:d2:46:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Validity Not Before: Jan 27 04:01:41 2026 GMT Not After : Jan 28 04:01:41 2026 GMT Subject: CN=b8e3e514f39bd05983b0bd8bd2c05a787fb86cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ed:82:f5:4a:0d:a6:c0:d8:3f:2d:2f:71:d0: 6a:0d:8a:e9:57:e5:97:1c:7c:5f:74:ba:08:12:47: f9:ca:15:3f:72:6d:d0:de:76:01:e3:1c:68:9f:07: 94:9a:14:b3:0c:38:9a:4b:2b:58:9e:1a:98:d8:44: db:51:b2:b9:cf:35:b4:2a:af:ce:c1:23:52:50:6b: 94:66:6a:2f:69:bb:ab:7b:2d:54:b1:0c:6e:c0:fd: 3a:d7:50:64:72:89:c5:7d:ef:7e:45:75:42:9b:eb: f9:8a:9a:95:3d:48:ac:4a:10:fe:1a:9a:81:55:f9: 43:a9:11:9c:25:21:3e:52:75:13:8d:1f:f1:c8:b5: 93:a9:34:0e:5a:64:c6:04:4d:02:41:fa:49:68:c6: 83:8c:08:25:9c:df:ea:87:8f:52:1d:8d:03:20:a3: 63:50:85:f4:ac:e2:0d:f7:0a:56:00:5b:3b:9f:fd: 02:c8:78:ca:57:8b:6f:85:45:7f:d9:d4:64:d7:b9: ab:db:b6:c6:ea:c6:7c:6e:db:c1:e8:df:54:2f:17: 36:27:53:d8:07:47:bf:cb:7b:c2:dc:5d:51:30:05: 83:c9:25:2f:f8:2f:f0:b9:39:17:33:f2:07:ee:b0: a5:af:c9:d9:40:8b:e3:0e:ae:3e:9f:63:3b:f9:a8: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E3:E5:14:F3:9B:D0:59:83:B0:BD:8B:D2:C0:5A:78:7F:B8:6C:DB X509v3 Authority Key Identifier: keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:70:b4:74:92:be:1c:bd:d3:4b:8f:c4:1f:19:61:96:c5:9d: f3:26:d5:a1:a8:5e:87:42:e7:95:3f:ba:63:33:bc:f7:75:43: 34:1a:50:c9:83:b3:9a:56:da:f8:3c:97:90:e5:35:30:17:1d: c8:91:68:97:fc:49:70:ee:54:c5:af:3b:fc:27:27:6d:2e:a3: c2:c5:7b:07:40:4f:cd:68:46:5e:25:ee:94:2b:2d:a5:d9:a5: 02:e3:a5:7d:ba:03:1b:d8:5b:c1:f2:97:b4:dd:7d:28:1c:8f: e2:01:3d:1f:04:60:30:f4:9f:32:b7:a4:17:62:05:74:1a:a0: e9:72:f7:26:91:da:7d:73:3f:7f:e4:ec:cf:15:6b:9d:18:14: 35:94:e8:da:93:ac:eb:3b:9c:ed:1f:96:49:7a:66:bf:7f:b8: 94:44:69:20:11:e6:bd:8e:66:2a:db:31:c7:c2:7f:16:a5:d9: a8:69:19:7d:bf:d5:ed:e3:c0:c5:1f:af:30:08:4e:7d:b8:45: 7e:ad:3b:20:35:ca:1e:00:c1:ab:42:58:44:78:a7:71:12:e9: a9:be:06:99:42:66:79:f9:c9:e1:0d:58:89:e6:53:10:70:32: 60:f2:e0:94:f4:f6:f2:65:95:a9:4d:3e:98:93:dc:90:60:2c: 3f:e5:51:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nUclmM2IM34XtmzQ0kaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi Mjc1ZWUwHhcNMjYwMTI3MDQwMTQxWhcNMjYwMTI4MDQwMTQxWjAzMTEwLwYDVQQD EyhiOGUzZTUxNGYzOWJkMDU5ODNiMGJkOGJkMmMwNWE3ODdmYjg2Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u2C9UoNpsDYPy0vcdBqDYrpV+WX HHxfdLoIEkf5yhU/cm3Q3nYB4xxonweUmhSzDDiaSytYnhqY2ETbUbK5zzW0Kq/O wSNSUGuUZmovaburey1UsQxuwP0611BkconFfe9+RXVCm+v5ipqVPUisShD+GpqB VflDqRGcJSE+UnUTjR/xyLWTqTQOWmTGBE0CQfpJaMaDjAglnN/qh49SHY0DIKNj UIX0rOIN9wpWAFs7n/0CyHjKV4tvhUV/2dRk17mr27bG6sZ8btvB6N9ULxc2J1PY B0e/y3vC3F1RMAWDySUv+C/wuTkXM/IH7rClr8nZQIvjDq4+n2M7+aggcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjj5RTzm9BZg7C9i9LAWnh/uGzbMB8GA1UdIwQY MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnC0dJK+ HL3TS4/EHxlhlsWd8ybVoaheh0LnlT+6YzO893VDNBpQyYOzmlba+DyXkOU1MBcd yJFol/xJcO5Uxa87/CcnbS6jwsV7B0BPzWhGXiXulCstpdmlAuOlfboDG9hbwfKX tN19KByP4gE9HwRgMPSfMrekF2IFdBqg6XL3JpHafXM/f+TszxVrnRgUNZTo2pOs 6zuc7R+WSXpmv3+4lERpIBHmvY5mKtsxx8J/FqXZqGkZfb/V7ePAxR+vMAhOfbhF fq07IDXKHgDBq0JYRHincRLpqb4GmUJmefnJ4Q1YieZTEHAyYPLglPT28mWVqU0+ mJPckGAsP+VR8Q== -----END CERTIFICATE-----Generated at Tue Jan 27 07:39:58 2026 by rpki-client