This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json) Hash identifier: LVhYPCkuu/lSAYqWAZ+odVNfnrsvPX/UVJtizcc8iZw= Subject key identifier: 49:92:FE:C3:0A:D2:22:A5:80:F8:D9:A0:08:A6:4D:DD:7B:F1:8C:56 Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50 Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50 Certificate serial: 019BFB09DA958AF9ADFEACA381C63263F3DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 16:01:25 +0000 Manifest this update: Mon 26 Jan 2026 16:01:25 +0000 Manifest next update: Tue 27 Jan 2026 16:01:25 +0000 Files and hashes: 1: 9TOqGu4162v0qWS1r5J3RslyKWk.asa (hash: blkV+1hYOV+uGdGMlHV2otVp88CM6pTuGTFsjZqUK1U=) 2: msFdZet1jGf9Pxj7w6VmCeW1jMQ.roa (hash: fyqpHHLV2QyOw8iBPdNynqjL383PMJfcyHqqNVPJBtE=) 3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: 961onR4KDUSR2yfFNQK1LpJGLlWU+jHWY8kfU9JUtyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:da:95:8a:f9:ad:fe:ac:a3:81:c6:32:63:f3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50 Validity Not Before: Jan 26 16:01:25 2026 GMT Not After : Jan 27 16:01:25 2026 GMT Subject: CN=4992fec30ad222a580f8d9a008a64ddd7bf18c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:62:67:79:7b:fe:6e:39:ec:9c:67:bd:01: 10:8b:32:d2:36:69:a0:33:24:b8:6f:9a:55:52:ba: 53:09:4e:d6:a6:55:f2:4c:a6:f4:c5:92:02:64:9e: d2:66:6d:fa:6a:bb:f3:6e:b3:68:06:3d:1c:bd:0c: 50:00:c6:73:66:60:84:16:a4:ce:be:51:27:5e:ff: 93:47:fe:65:e2:1a:ed:50:1a:60:c6:f6:4f:39:2a: 7a:d3:36:df:58:52:9c:ec:b3:7d:41:6d:47:f9:07: ab:bc:d6:03:8e:e3:a0:a3:36:71:5e:c1:d7:9c:78: 5c:a7:24:ff:e2:58:9b:ab:c8:ad:d1:e0:91:79:2a: 75:14:fe:aa:f2:b7:c3:3f:9a:c4:a9:f0:cd:6d:66: 84:2f:28:9b:08:2a:70:88:35:b9:7d:d6:7f:dd:db: cb:6f:61:02:2e:29:ac:45:6a:37:2a:05:18:06:c0: ab:76:92:db:89:9d:5c:9f:a0:74:b5:37:ad:bc:e9: 7c:e5:7c:66:3e:d7:e2:9f:5d:65:56:ab:6b:67:d8: 46:81:a0:e4:08:eb:9f:ec:d7:44:ae:df:a2:90:be: 02:95:45:f2:b2:eb:4e:d5:55:ec:94:f2:25:08:5c: 6d:35:70:f6:d2:fd:be:9f:fa:5b:16:b6:84:d3:64: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:FE:C3:0A:D2:22:A5:80:F8:D9:A0:08:A6:4D:DD:7B:F1:8C:56 X509v3 Authority Key Identifier: keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:36:74:eb:11:e3:1e:bc:90:e3:5a:54:0d:ad:75:0b:6c:aa: fa:73:7a:15:cd:67:e8:66:b4:fe:71:0d:b4:ee:2f:9c:17:1e: c6:6d:8d:25:86:f0:d5:2b:99:6b:ea:89:f9:d6:98:43:b9:2f: e0:60:9d:21:6f:5c:3c:36:93:41:9b:83:6f:20:e4:a1:58:fd: b3:a9:9a:de:7b:8b:86:da:55:05:76:53:99:07:11:34:3e:03: 3b:e3:b9:c8:80:da:bc:c3:b2:55:80:87:b4:4d:ef:81:89:60: 1b:e1:23:29:f3:3f:ed:1c:b3:75:1b:b2:6c:d4:64:17:25:2f: b8:8b:0c:1b:4a:b1:2b:5b:a2:ba:78:10:8c:e0:c3:11:01:b8: 78:e4:e4:83:19:a8:56:67:ac:b5:29:00:6c:48:4f:ce:7a:97: e9:ba:32:44:d2:28:e0:97:e3:86:e1:67:d3:58:04:70:aa:69: 68:23:1f:eb:1e:43:3e:32:38:06:95:aa:09:3b:51:b2:d0:95: 7b:3d:16:40:cd:c3:49:6c:4d:11:df:9d:6c:99:02:37:9f:b4: 54:0f:f1:47:9a:57:fd:98:df:67:de:c4:21:cc:09:5a:80:96: cc:70:8d:3b:e4:65:6a:5a:d1:e1:ab:67:38:41:68:0a:3e:b4: f3:00:d0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CdqVivmt/qyjgcYyY/PeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm OWNhNTAwHhcNMjYwMTI2MTYwMTI1WhcNMjYwMTI3MTYwMTI1WjAzMTEwLwYDVQQD Eyg0OTkyZmVjMzBhZDIyMmE1ODBmOGQ5YTAwOGE2NGRkZDdiZjE4YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbxiZ3l7/m457JxnvQEQizLSNmmg MyS4b5pVUrpTCU7WplXyTKb0xZICZJ7SZm36arvzbrNoBj0cvQxQAMZzZmCEFqTO vlEnXv+TR/5l4hrtUBpgxvZPOSp60zbfWFKc7LN9QW1H+QervNYDjuOgozZxXsHX nHhcpyT/4libq8it0eCReSp1FP6q8rfDP5rEqfDNbWaELyibCCpwiDW5fdZ/3dvL b2ECLimsRWo3KgUYBsCrdpLbiZ1cn6B0tTetvOl85XxmPtfin11lVqtrZ9hGgaDk COuf7NdErt+ikL4ClUXysutO1VXslPIlCFxtNXD20v2+n/pbFraE02S2oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmS/sMK0iKlgPjZoAimTd178YxWMB8GA1UdIwQY MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt Njk0ZDc4YjMyZDIwLzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjZ06xHj HryQ41pUDa11C2yq+nN6Fc1n6Ga0/nENtO4vnBcexm2NJYbw1SuZa+qJ+daYQ7kv 4GCdIW9cPDaTQZuDbyDkoVj9s6ma3nuLhtpVBXZTmQcRND4DO+O5yIDavMOyVYCH tE3vgYlgG+EjKfM/7RyzdRuybNRkFyUvuIsMG0qxK1uiungQjODDEQG4eOTkgxmo VmestSkAbEhPznqX6boyRNIo4JfjhuFn01gEcKppaCMf6x5DPjI4BpWqCTtRstCV ez0WQM3DSWxNEd+dbJkCN5+0VA/xR5pX/ZjfZ97EIcwJWoCWzHCNO+RlalrR4atn OEFoCj608wDQ4g== -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:16 2026 by rpki-client