This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json) Hash identifier: 70oom6lDb1ojEKV+KfEOcUqLcErAyC85ijwdQpeigCo= Subject key identifier: E7:D9:69:8A:4A:47:0A:47:4B:48:B2:FB:30:20:CE:2F:47:E4:6C:E6 Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0 Certificate serial: 019C2B50B07F500A662189914F4F97BEBB87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft Manifest number: 0836 Signing time: Thu 05 Feb 2026 01:00:34 +0000 Manifest this update: Thu 05 Feb 2026 01:00:34 +0000 Manifest next update: Fri 06 Feb 2026 01:00:34 +0000 Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: RfUB69aUO3lDTXp2a9e4liSE9I5TXZGq+mnKuayYgpg=) 2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2b:50:b0:7f:50:0a:66:21:89:91:4f:4f:97:be:bb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0 Validity Not Before: Feb 5 01:00:34 2026 GMT Not After : Feb 6 01:00:34 2026 GMT Subject: CN=e7d9698a4a470a474b48b2fb3020ce2f47e46ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:d1:13:b5:9d:df:b2:8a:ad:11:47:45:d2: 57:5e:2b:fc:f7:b6:ba:b4:42:84:08:a4:d5:88:44: bc:3f:0b:c3:22:79:3b:c5:84:ae:03:ac:18:7c:92: 39:d8:35:0b:54:14:3c:68:59:14:49:13:84:f6:5a: 37:03:9a:ab:58:57:9a:7a:a9:06:1f:7a:08:83:39: 7b:fe:c1:27:50:9d:c4:21:7a:1b:5c:6a:52:5e:79: 3c:de:73:77:56:00:db:94:f8:25:cd:44:78:97:9f: 37:25:45:f5:04:fd:29:e2:21:eb:28:f8:73:be:21: 4e:b2:9e:7c:a8:e5:0f:c7:aa:0f:68:65:a0:1f:ff: 74:7b:cf:5b:5e:e0:39:49:c9:b3:c5:26:e1:b5:e9: bb:6a:cd:7f:33:49:65:a5:ab:08:46:5e:7a:d2:a6: 69:a2:90:c5:3d:8c:4c:f7:80:8a:f5:a5:05:5e:73: 1f:ac:7d:e6:4c:61:e0:6d:c5:7a:2b:58:cb:ba:6e: 68:14:6c:bc:71:b6:ec:60:1a:61:29:05:34:3f:d7: 7d:c2:8b:da:ed:80:e5:97:39:75:4a:11:b9:8e:f1: 17:66:16:0f:cd:4f:81:0c:76:2d:b0:4e:56:72:e0: cf:0c:4f:16:32:8a:55:1e:26:7f:46:6b:c2:b9:5a: 70:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D9:69:8A:4A:47:0A:47:4B:48:B2:FB:30:20:CE:2F:47:E4:6C:E6 X509v3 Authority Key Identifier: keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9c:8a:0f:2e:dc:ec:89:16:7c:bc:9d:15:81:5f:87:16:1f: 97:4a:32:e2:bd:48:62:c9:8d:3f:fd:48:75:4f:00:cc:a8:2a: 54:7e:51:eb:de:84:3a:9e:6c:a2:17:4c:c2:77:5f:5d:15:1a: d4:15:bf:18:a9:1b:4c:6d:5a:94:b3:7c:37:c4:8d:92:cd:57: 09:7d:85:90:d3:25:2e:c0:8e:65:68:0f:20:bd:5d:bb:6a:b2: d2:5c:d0:90:cc:9b:91:32:87:3c:63:eb:1c:e4:a8:80:29:2d: ae:f2:11:2c:8f:d5:f3:8c:c2:b9:6a:3e:ca:00:de:d5:9f:68: 17:c5:08:1b:fc:95:bf:53:84:70:ec:9b:fb:d6:60:24:01:aa: 97:19:06:f9:14:bf:fd:e8:67:89:47:0c:ee:cb:54:3f:bf:1d: df:da:a7:11:44:09:83:e3:1b:81:4a:0f:9a:99:89:3b:80:b4: bb:cb:b6:64:71:e8:e5:53:f7:d2:ca:ba:80:b3:39:c8:1b:58: 85:1f:8a:1c:8b:a4:83:e8:e9:3c:fd:c9:b2:f7:a2:aa:24:19: 74:ed:66:0a:07:ed:26:10:75:30:fe:2e:0e:7c:b2:d3:da:97: be:8f:d5:a9:1c:b1:5a:6e:96:60:eb:0a:4a:37:59:f7:56:fe: 4f:2c:b0:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwrULB/UApmIYmRT0+XvruHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGU1NzhkYWM3OTJkOTVlMjE3ZDk4NzFlMDRmNjY5NzNi YjdlYjAwHhcNMjYwMjA1MDEwMDM0WhcNMjYwMjA2MDEwMDM0WjAzMTEwLwYDVQQD EyhlN2Q5Njk4YTRhNDcwYTQ3NGI0OGIyZmIzMDIwY2UyZjQ3ZTQ2Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkzRE7Wd37KKrRFHRdJXXiv897a6 tEKECKTViES8PwvDInk7xYSuA6wYfJI52DULVBQ8aFkUSROE9lo3A5qrWFeaeqkG H3oIgzl7/sEnUJ3EIXobXGpSXnk83nN3VgDblPglzUR4l583JUX1BP0p4iHrKPhz viFOsp58qOUPx6oPaGWgH/90e89bXuA5ScmzxSbhtem7as1/M0llpasIRl560qZp opDFPYxM94CK9aUFXnMfrH3mTGHgbcV6K1jLum5oFGy8cbbsYBphKQU0P9d9wova 7YDllzl1ShG5jvEXZhYPzU+BDHYtsE5WcuDPDE8WMopVHiZ/RmvCuVpwUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfZaYpKRwpHS0iy+zAgzi9H5GzmMB8GA1UdIwQY MBaAFEneV42seS2V4hfZhx4E9mlzu36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYt NjNlMDIwZmVlY2Y5LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYtNjNlMDIwZmVlY2Y5 LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJyKDy7c 7IkWfLydFYFfhxYfl0oy4r1IYsmNP/1IdU8AzKgqVH5R696EOp5sohdMwndfXRUa 1BW/GKkbTG1alLN8N8SNks1XCX2FkNMlLsCOZWgPIL1du2qy0lzQkMybkTKHPGPr HOSogCktrvIRLI/V84zCuWo+ygDe1Z9oF8UIG/yVv1OEcOyb+9ZgJAGqlxkG+RS/ /ehniUcM7stUP78d39qnEUQJg+MbgUoPmpmJO4C0u8u2ZHHo5VP30sq6gLM5yBtY hR+KHIukg+jpPP3JsveiqiQZdO1mCgftJhB1MP4uDnyy09qXvo/VqRyxWm6WYOsK SjdZ91b+TyywJQ== -----END CERTIFICATE-----Generated at Thu Feb 5 04:27:24 2026 by rpki-client