This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json) Hash identifier: DjofwtxGsyPaGGzfgThRk4Ktk+RZWGsZQxSSMgE/LBU= Subject key identifier: 85:DB:21:09:48:22:92:A4:55:AB:F7:38:E7:81:93:9B:18:2B:D0:BA Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74 Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74 Certificate serial: 019C0C3449671A773E68B890E09ED39DEDC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft Manifest number: 1786 Signing time: Fri 30 Jan 2026 00:01:19 +0000 Manifest this update: Fri 30 Jan 2026 00:01:19 +0000 Manifest next update: Sat 31 Jan 2026 00:01:19 +0000 Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: K33Tr+satV5Yq4MvsgkspAZduZ5it6YtzpuYaNiUPxc=) 2: b3LXnlq9k-Ne9E6Mygo7-fqX-j0.roa (hash: IcAFyrVK2cFcgloap4jKZ9gt4tybwfvmhwEuaPNFdVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0c:34:49:67:1a:77:3e:68:b8:90:e0:9e:d3:9d:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74 Validity Not Before: Jan 30 00:01:19 2026 GMT Not After : Jan 31 00:01:19 2026 GMT Subject: CN=85db2109482292a455abf738e781939b182bd0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:4c:14:96:db:b0:f3:27:a8:2c:55:5a:1e: 9a:6a:d1:cb:be:22:95:0c:19:df:af:53:97:15:f3: 3a:2a:a8:bb:8f:e0:3c:fc:8f:df:51:0b:76:66:e5: 47:90:5c:2c:03:79:f5:dc:53:43:9a:6a:30:34:61: 16:ba:6b:cb:db:aa:d2:3e:ef:10:7c:c7:56:e6:9f: 03:b9:1d:01:1c:a0:1d:7c:0d:e2:77:b8:93:15:95: 8f:57:bf:6c:d4:73:ff:43:66:53:d5:14:63:24:b1: a9:fc:cd:19:ad:93:97:80:d7:cc:af:96:a2:0f:81: 03:f5:91:3d:98:b7:b3:14:f8:c5:74:c1:df:93:7c: 1d:31:74:9e:bf:bf:bf:30:ca:10:9c:35:1f:60:aa: 2f:c5:63:50:49:fc:44:f5:16:23:f7:fd:27:cc:94: c2:dc:a8:02:f6:ca:57:7c:86:6d:d8:6a:e8:5c:4a: d1:44:68:4c:09:ff:0c:8f:81:e8:03:8b:2b:80:f8: 2d:c0:6e:1a:5c:3e:be:89:53:43:c8:c9:5e:c1:d7: 1d:66:a9:b8:48:d0:68:00:fb:10:39:3f:e3:18:93: 34:15:e8:6d:49:05:12:9b:51:76:86:fb:28:47:cd: 7f:f0:d9:31:61:80:17:da:dc:74:31:6c:72:4d:e1: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DB:21:09:48:22:92:A4:55:AB:F7:38:E7:81:93:9B:18:2B:D0:BA X509v3 Authority Key Identifier: keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:67:5c:63:fd:14:38:31:af:38:21:2a:98:7a:08:6a:1b:12: 59:06:0f:15:7b:9a:8a:6c:21:24:c4:a0:aa:80:61:70:4b:d7: b3:a1:09:14:b1:11:ac:f6:6a:0e:52:0f:3b:45:b3:1b:1a:c9: ac:b2:e4:50:6b:14:7f:b9:12:96:dd:75:b0:e7:50:d9:f9:f8: 30:54:44:ec:f8:1a:b0:52:8c:66:79:3d:0d:64:61:cc:f8:5c: 18:65:cc:f2:ac:b2:b4:96:62:52:b5:1a:85:85:f5:09:3a:36: 81:c9:79:7f:22:f2:dd:c1:f8:0a:ce:50:46:ef:1f:0e:98:de: 70:aa:bf:dd:4b:6b:34:66:8d:f8:89:57:36:a1:4b:9f:1a:14: 5e:10:b2:8b:02:22:18:48:cc:4b:73:98:75:be:7c:cc:ce:e7: b4:ef:44:fe:37:73:31:c6:b8:c8:8a:90:7d:36:f1:a6:2d:f4: 5d:34:df:14:f4:32:b6:43:12:c8:e3:66:60:bd:85:bb:0b:2a: 98:c0:70:d4:f8:d1:ce:b5:b9:31:bc:dc:fa:3b:4b:b6:5e:4e: 03:d5:fb:09:89:84:64:42:8c:32:c3:b4:fa:05:73:1e:d9:ff: 3e:18:34:cb:f9:0d:7e:68:59:b3:7a:85:63:3c:8d:0c:e5:d6: 8f:99:9e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwMNElnGnc+aLiQ4J7Tne3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZmVjZjY2NDJhNDUwYjUzYjA3NmQ0NDY0ODJkOWMxYTg5 ZGVkNzQwHhcNMjYwMTMwMDAwMTE5WhcNMjYwMTMxMDAwMTE5WjAzMTEwLwYDVQQD Eyg4NWRiMjEwOTQ4MjI5MmE0NTVhYmY3MzhlNzgxOTM5YjE4MmJkMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWNMFJbbsPMnqCxVWh6aatHLviKV DBnfr1OXFfM6Kqi7j+A8/I/fUQt2ZuVHkFwsA3n13FNDmmowNGEWumvL26rSPu8Q fMdW5p8DuR0BHKAdfA3id7iTFZWPV79s1HP/Q2ZT1RRjJLGp/M0ZrZOXgNfMr5ai D4ED9ZE9mLezFPjFdMHfk3wdMXSev7+/MMoQnDUfYKovxWNQSfxE9RYj9/0nzJTC 3KgC9spXfIZt2GroXErRRGhMCf8Mj4HoA4srgPgtwG4aXD6+iVNDyMlewdcdZqm4 SNBoAPsQOT/jGJM0FehtSQUSm1F2hvsoR81/8NkxYYAX2tx0MWxyTeFARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXbIQlIIpKkVav3OOeBk5sYK9C6MB8GA1UdIwQY MBaAFEr+z2ZCpFC1OwdtRGSC2cGone10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQt NDI4YTExMWFjNWUwLzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQtNDI4YTExMWFjNWUw LzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2dcY/0U ODGvOCEqmHoIahsSWQYPFXuaimwhJMSgqoBhcEvXs6EJFLERrPZqDlIPO0WzGxrJ rLLkUGsUf7kSlt11sOdQ2fn4MFRE7PgasFKMZnk9DWRhzPhcGGXM8qyytJZiUrUa hYX1CTo2gcl5fyLy3cH4Cs5QRu8fDpjecKq/3UtrNGaN+IlXNqFLnxoUXhCyiwIi GEjMS3OYdb58zM7ntO9E/jdzMca4yIqQfTbxpi30XTTfFPQytkMSyONmYL2Fuwsq mMBw1PjRzrW5Mbzc+jtLtl5OA9X7CYmEZEKMMsO0+gVzHtn/Phg0y/kNfmhZs3qF YzyNDOXWj5megA== -----END CERTIFICATE-----Generated at Fri Jan 30 02:32:59 2026 by rpki-client