This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json) Hash identifier: AF9EZSxBVh6M0m1f4QB9yNb5yZJjHByz6jy1jYMexxo= Subject key identifier: 53:BC:9B:D9:D1:D5:60:CE:A9:B1:FF:D9:CC:22:1C:91:65:68:F3:91 Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74 Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74 Certificate serial: 019C0A45B6717F1AE0C712FE0BB376424DD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft Manifest number: 1785 Signing time: Thu 29 Jan 2026 15:01:06 +0000 Manifest this update: Thu 29 Jan 2026 15:01:06 +0000 Manifest next update: Fri 30 Jan 2026 15:01:06 +0000 Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: 1Q/+42f+QUPmJJ5RwJfkRosVi2dOGpfnUcQXK8lhEx0=) 2: b3LXnlq9k-Ne9E6Mygo7-fqX-j0.roa (hash: IcAFyrVK2cFcgloap4jKZ9gt4tybwfvmhwEuaPNFdVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:45:b6:71:7f:1a:e0:c7:12:fe:0b:b3:76:42:4d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74 Validity Not Before: Jan 29 15:01:06 2026 GMT Not After : Jan 30 15:01:06 2026 GMT Subject: CN=53bc9bd9d1d560cea9b1ffd9cc221c916568f391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:8e:56:b4:be:6a:9e:cf:22:8c:15:c4:0d: 63:e8:47:b1:24:6a:e9:73:7b:60:7a:f4:8d:32:d9: 75:08:38:87:1e:f2:67:90:49:5d:11:ce:e3:a9:b2: 04:65:c0:95:fa:02:92:7c:9e:c7:42:70:87:9b:37: 03:9b:6c:ca:d6:51:a1:0f:b9:ce:8c:a5:fc:c7:4a: 11:5e:f1:a4:a5:22:18:2c:af:cf:63:36:7b:33:a7: 75:39:8b:7c:66:de:e0:a1:cd:f3:04:09:6b:d8:a9: f7:47:26:22:15:b7:39:52:81:0d:12:6e:98:8d:67: 18:68:19:b4:92:3d:08:3f:f8:66:0c:83:38:74:b7: 5f:86:fa:9f:d6:70:9a:0d:b2:db:4a:29:5c:46:03: 4a:1b:52:23:b7:0e:59:dd:9e:a4:dd:be:7a:c4:b2: f4:9c:df:8e:ad:2a:91:cb:8e:21:1b:00:c8:a0:d0: 95:51:b2:41:76:26:d3:35:35:ca:d0:50:ba:b2:49: e8:67:81:1f:5b:aa:e3:cd:76:02:e9:bc:c6:3f:93: 27:44:17:9f:a4:ee:3e:90:d2:0c:36:c5:7b:ff:2d: 9e:78:a9:3d:94:d5:55:38:c9:70:fb:7d:7f:48:59: fd:f4:6e:f3:6c:6d:38:8e:64:b3:ca:7a:6f:56:26: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BC:9B:D9:D1:D5:60:CE:A9:B1:FF:D9:CC:22:1C:91:65:68:F3:91 X509v3 Authority Key Identifier: keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:73:84:35:04:6f:5e:0f:1e:a2:bc:a2:71:b6:4f:c5:1c:51: 51:a9:b8:7a:d7:3e:2c:c3:a7:68:09:71:f4:d8:e4:e1:af:5e: 01:bf:67:82:4c:b4:d9:3d:46:9b:0d:17:c4:9d:94:20:5f:18: e1:8f:e0:d5:e1:5b:15:57:aa:60:e4:eb:77:59:f3:06:f9:39: 3f:14:73:f3:81:21:ec:33:fd:ff:94:89:2d:45:85:24:1c:4a: 96:43:25:19:5a:ac:bf:32:b3:03:bc:17:ef:bd:08:14:ef:d4: 4f:04:5a:12:5e:27:8b:04:46:4b:35:32:4a:bd:2c:0c:6a:48: 0e:33:a1:1c:46:9a:0a:d7:fb:7f:a1:4b:bd:81:72:ec:40:26: 84:8b:14:c1:08:35:31:ff:37:ad:2f:0e:da:0c:1b:1a:22:32: 79:a7:c4:c2:e8:1f:9d:df:01:a9:71:9b:53:94:71:8f:cb:b2: 48:d8:08:a1:f1:4f:fe:74:5e:3b:b4:20:65:62:19:51:8a:02: 40:38:d6:40:17:d1:26:9a:22:85:b5:56:60:c4:2f:42:49:92: 43:51:cd:bc:66:5a:ad:c4:ca:20:1d:13:e3:86:be:24:7f:55: 25:4f:be:36:4a:e9:27:c4:48:a6:8f:71:78:d1:3b:52:96:08: 03:35:38:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwKRbZxfxrgxxL+C7N2Qk3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZmVjZjY2NDJhNDUwYjUzYjA3NmQ0NDY0ODJkOWMxYTg5 ZGVkNzQwHhcNMjYwMTI5MTUwMTA2WhcNMjYwMTMwMTUwMTA2WjAzMTEwLwYDVQQD Eyg1M2JjOWJkOWQxZDU2MGNlYTliMWZmZDljYzIyMWM5MTY1NjhmMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVCOVrS+ap7PIowVxA1j6EexJGrp c3tgevSNMtl1CDiHHvJnkEldEc7jqbIEZcCV+gKSfJ7HQnCHmzcDm2zK1lGhD7nO jKX8x0oRXvGkpSIYLK/PYzZ7M6d1OYt8Zt7goc3zBAlr2Kn3RyYiFbc5UoENEm6Y jWcYaBm0kj0IP/hmDIM4dLdfhvqf1nCaDbLbSilcRgNKG1Ijtw5Z3Z6k3b56xLL0 nN+OrSqRy44hGwDIoNCVUbJBdibTNTXK0FC6sknoZ4EfW6rjzXYC6bzGP5MnRBef pO4+kNIMNsV7/y2eeKk9lNVVOMlw+31/SFn99G7zbG04jmSzynpvViaj5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO8m9nR1WDOqbH/2cwiHJFlaPORMB8GA1UdIwQY MBaAFEr+z2ZCpFC1OwdtRGSC2cGone10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQt NDI4YTExMWFjNWUwLzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQtNDI4YTExMWFjNWUw LzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHOENQRv Xg8eoryicbZPxRxRUam4etc+LMOnaAlx9Njk4a9eAb9ngky02T1Gmw0XxJ2UIF8Y 4Y/g1eFbFVeqYOTrd1nzBvk5PxRz84Eh7DP9/5SJLUWFJBxKlkMlGVqsvzKzA7wX 770IFO/UTwRaEl4niwRGSzUySr0sDGpIDjOhHEaaCtf7f6FLvYFy7EAmhIsUwQg1 Mf83rS8O2gwbGiIyeafEwugfnd8BqXGbU5Rxj8uySNgIofFP/nReO7QgZWIZUYoC QDjWQBfRJpoihbVWYMQvQkmSQ1HNvGZarcTKIB0T44a+JH9VJU++NkrpJ8RIpo9x eNE7UpYIAzU4Gg== -----END CERTIFICATE-----Generated at Fri Jan 30 00:57:24 2026 by rpki-client