This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json) Hash identifier: Ilts+XqAcoOhG+a1W1TKftCr6+nFN8jMFOimf8Gu5Vs= Subject key identifier: C7:2E:4D:67:96:5A:42:48:74:30:E0:27:26:99:A1:27:4A:7F:E0:8F Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Certificate serial: 019C24AA6437E44E9957F1449470F3F8D696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft Manifest number: 01E6 Signing time: Tue 03 Feb 2026 18:01:12 +0000 Manifest this update: Tue 03 Feb 2026 18:01:12 +0000 Manifest next update: Wed 04 Feb 2026 18:01:12 +0000 Files and hashes: 1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=) 2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: IbK5SdQ3BkqBpptRpAu77gluoh8f89QLDqEUXXUT8cM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:aa:64:37:e4:4e:99:57:f1:44:94:70:f3:f8:d6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Validity Not Before: Feb 3 18:01:12 2026 GMT Not After : Feb 4 18:01:12 2026 GMT Subject: CN=c72e4d67965a42487430e0272699a1274a7fe08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:46:d8:d4:1d:ae:6a:0a:e7:d7:67:c7:7a: d2:a0:d3:a4:fc:b3:dc:31:8b:86:1d:07:07:67:68: d8:5f:6c:7b:98:03:d8:70:83:51:19:a2:f4:30:16: 5b:34:e7:12:c4:a5:44:5e:87:dd:91:46:94:f7:3d: b4:82:f1:b4:d8:19:9f:ca:53:06:5d:96:bd:4f:3d: 38:af:70:ce:63:08:74:b7:44:75:b2:92:07:77:cb: d5:f3:af:52:04:a9:3f:d3:7a:a7:dd:a1:95:76:69: 8a:d3:80:ad:a1:90:8b:9a:65:6b:7e:30:96:bd:88: 79:40:93:04:63:f5:fb:d2:d9:2b:e1:ae:ac:00:06: 89:78:0a:f3:de:6e:d2:98:d2:58:77:84:aa:9f:c5: 1c:bb:dd:69:ba:c3:78:9c:bf:5f:e8:84:b3:cd:00: b8:b4:cf:57:fd:4f:44:18:54:42:23:49:64:a0:e0: b0:41:61:fe:81:53:b7:66:c8:e1:9d:f5:be:5c:40: 8f:19:d0:9f:c1:a5:59:c7:e4:f4:8c:5d:b6:2e:3f: 92:36:8f:c9:76:d6:a1:b1:6c:5e:87:fc:a3:c3:43: de:91:b8:2e:10:cb:72:28:9f:5e:0e:2c:fb:38:70: a5:da:83:91:a0:65:6f:a1:0e:0b:87:37:9f:b6:5c: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2E:4D:67:96:5A:42:48:74:30:E0:27:26:99:A1:27:4A:7F:E0:8F X509v3 Authority Key Identifier: keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:84:f1:c5:d3:bf:17:44:17:b8:30:40:e6:80:73:bd:80:dd: 49:20:f9:cb:09:70:90:ff:17:c3:b6:ca:8c:06:6d:d4:ab:84: 70:39:16:82:6b:12:82:c7:28:37:7f:51:91:7e:c5:28:ae:d0: 77:f9:c8:7a:6e:f3:e2:ae:d8:cc:8a:02:ea:78:1d:ed:6c:2c: a5:18:8d:84:91:c5:78:08:db:c5:a0:c4:68:71:0a:b2:0a:4c: 12:70:bf:c4:3a:cf:6a:f5:28:72:2d:26:de:72:5d:70:b9:d3: 80:28:fb:85:72:b9:02:fa:3c:a8:bd:44:91:40:47:0f:b2:a6: e9:4e:9a:fb:c4:e0:c6:7b:5c:a2:55:08:73:c7:f7:75:69:89: b3:a7:2e:27:99:e3:6c:18:45:77:15:5e:d6:41:9c:0d:4a:f1: 3c:03:70:33:15:d4:88:f7:c8:56:43:44:22:c8:d6:a0:55:11: fc:88:3f:54:b1:2d:70:57:59:8c:9c:d9:56:73:ea:b4:b3:ce: 93:40:72:71:30:79:7c:df:1d:c9:57:aa:41:97:ef:c8:8a:ba: 77:21:f2:bd:a3:a0:db:cf:7c:d4:d8:fb:50:91:c2:0c:dc:19: 77:de:65:65:15:3f:fc:04:4e:2e:eb:99:71:a3:95:3a:6f:19: 1f:dd:40:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwkqmQ35E6ZV/FElHDz+NaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm NzM5Y2EwHhcNMjYwMjAzMTgwMTEyWhcNMjYwMjA0MTgwMTEyWjAzMTEwLwYDVQQD EyhjNzJlNGQ2Nzk2NWE0MjQ4NzQzMGUwMjcyNjk5YTEyNzRhN2ZlMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd5G2NQdrmoK59dnx3rSoNOk/LPc MYuGHQcHZ2jYX2x7mAPYcINRGaL0MBZbNOcSxKVEXofdkUaU9z20gvG02BmfylMG XZa9Tz04r3DOYwh0t0R1spIHd8vV869SBKk/03qn3aGVdmmK04CtoZCLmmVrfjCW vYh5QJMEY/X70tkr4a6sAAaJeArz3m7SmNJYd4Sqn8Ucu91pusN4nL9f6ISzzQC4 tM9X/U9EGFRCI0lkoOCwQWH+gVO3ZsjhnfW+XECPGdCfwaVZx+T0jF22Lj+SNo/J dtahsWxeh/yjw0PekbguEMtyKJ9eDiz7OHCl2oORoGVvoQ4Lhzeftlwj+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcuTWeWWkJIdDDgJyaZoSdKf+CPMB8GA1UdIwQY MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt ZTM3NDk5Njc5ZDQ2LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2 LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYTxxdO/ F0QXuDBA5oBzvYDdSSD5ywlwkP8Xw7bKjAZt1KuEcDkWgmsSgscoN39RkX7FKK7Q d/nIem7z4q7YzIoC6ngd7WwspRiNhJHFeAjbxaDEaHEKsgpMEnC/xDrPavUoci0m 3nJdcLnTgCj7hXK5Avo8qL1EkUBHD7Km6U6a+8TgxntcolUIc8f3dWmJs6cuJ5nj bBhFdxVe1kGcDUrxPANwMxXUiPfIVkNEIsjWoFUR/Ig/VLEtcFdZjJzZVnPqtLPO k0BycTB5fN8dyVeqQZfvyIq6dyHyvaOg28981Nj7UJHCDNwZd95lZRU//AROLuuZ caOVOm8ZH91AHQ== -----END CERTIFICATE-----Generated at Tue Feb 3 21:58:56 2026 by rpki-client