This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft File: syj-JYobm_YUimzg6KcS8YhAkEw.mft (raw, json) Hash identifier: v7YaEBT+3QeEUIADfBBqIWOORHaHpBmX5M7Ue8z4lPQ= Subject key identifier: B5:85:B1:9A:AF:6A:D5:53:6B:CF:3F:EF:35:9A:AF:54:CD:A5:16:6F Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C Certificate issuer: /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c Certificate serial: 019BFA2D602D13DADFCA67748439BFDCCA85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 12:00:36 +0000 Manifest this update: Mon 26 Jan 2026 12:00:36 +0000 Manifest next update: Tue 27 Jan 2026 12:00:36 +0000 Files and hashes: 1: SA61zsgG810GXWoVTQr9UfM3Akc.roa (hash: sowBWjgYryIo2nwKnfPLsbqzgHkt4JyZalRf+7yBWok=) 2: syj-JYobm_YUimzg6KcS8YhAkEw.crl (hash: XWKGxP/FSt0G1e1zG2//cIn2Y3D1/Q1AWP/+E0CrFkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:60:2d:13:da:df:ca:67:74:84:39:bf:dc:ca:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c Validity Not Before: Jan 26 12:00:36 2026 GMT Not After : Jan 27 12:00:36 2026 GMT Subject: CN=b585b19aaf6ad5536bcf3fef359aaf54cda5166f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:42:2c:b7:6d:95:b7:2f:cc:74:e6:af:8a: 68:a0:19:3c:25:bc:77:de:d4:41:2d:0e:68:15:39: 9b:db:88:9d:79:db:90:5c:d0:e7:03:2b:4e:a7:7c: 2d:96:72:ee:8c:44:a7:77:f1:8d:46:ac:36:e4:60: 9b:92:a1:c3:2b:f5:46:96:4d:f3:f4:1c:62:4e:14: ee:69:78:0e:0e:15:85:a1:41:51:0e:a9:c7:c0:14: 86:c1:6c:d4:e7:f6:b5:dc:b0:81:21:af:b2:95:e3: b1:d4:43:2a:4c:09:13:a9:ce:e0:38:b5:35:ea:4b: de:29:c1:b3:94:90:27:cb:88:c2:f0:d9:06:35:68: 75:4d:06:ad:95:95:ad:b3:09:35:99:ee:90:6d:21: cf:02:74:0a:63:97:f6:6d:41:96:bb:94:a0:c7:b8: f3:41:82:90:60:ec:e5:d3:ec:dc:c0:97:48:99:97: ff:46:80:bf:f0:e1:4f:ae:0f:ee:ae:ac:5c:55:ac: 9f:f2:ce:e3:67:1f:66:03:be:b2:fc:b4:10:d8:2f: 52:25:54:de:35:f9:82:5c:da:06:9e:15:7f:eb:c7: 9a:a0:e9:48:d1:19:9b:81:d5:28:f2:77:45:d8:19: a0:bb:7d:de:ef:a6:28:15:65:fd:fc:4b:e2:5f:48: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:B1:9A:AF:6A:D5:53:6B:CF:3F:EF:35:9A:AF:54:CD:A5:16:6F X509v3 Authority Key Identifier: keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:93:98:ed:12:18:ea:64:55:ff:30:de:f0:f6:8f:36:38:db: 24:63:6d:1c:62:93:38:42:d5:14:84:ee:90:ba:cb:f6:8a:dd: d0:b7:32:2c:a0:63:d6:a2:f7:ae:87:37:a1:3c:17:42:ba:a3: fc:47:a1:7f:03:ee:62:15:8f:3f:9b:67:05:91:23:18:4c:42: ee:5f:53:1a:a9:13:ce:f5:1a:7f:33:7a:32:01:53:50:6e:73: 48:71:4d:b7:9b:b9:89:b3:1f:79:b1:bd:e7:45:67:58:77:0a: f8:b1:c5:c1:b7:87:2a:a4:69:86:17:88:92:a2:e4:a8:da:a8: e4:be:d7:97:fa:3c:96:e5:c0:9d:e9:76:9e:9b:88:ce:e8:5f: 60:62:f6:43:ac:63:1e:9b:cf:d0:a1:d8:22:b1:1f:02:0d:db: fd:e9:ea:2a:c4:7d:53:8e:02:94:5c:70:a2:db:77:73:e2:27: 53:fe:a0:04:68:0f:dd:80:1b:a8:37:12:2d:a4:91:ea:45:f5: c9:9e:4c:23:0d:12:4a:e5:6d:e0:46:1c:f8:d3:04:bd:ef:56: b8:28:9f:d7:fb:36:48:47:16:ba:e6:59:4c:66:83:b6:d2:22: 8a:86:e9:1f:62:85:c9:87:fe:0d:18:78:a7:ee:5c:0a:46:31: df:64:6c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LWAtE9rfymd0hDm/3MqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjhmZTI1OGExYjliZjYxNDhhNmNlMGU4YTcxMmYxODg0 MDkwNGMwHhcNMjYwMTI2MTIwMDM2WhcNMjYwMTI3MTIwMDM2WjAzMTEwLwYDVQQD EyhiNTg1YjE5YWFmNmFkNTUzNmJjZjNmZWYzNTlhYWY1NGNkYTUxNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhhCLLdtlbcvzHTmr4pooBk8Jbx3 3tRBLQ5oFTmb24ideduQXNDnAytOp3wtlnLujESnd/GNRqw25GCbkqHDK/VGlk3z 9BxiThTuaXgODhWFoUFRDqnHwBSGwWzU5/a13LCBIa+yleOx1EMqTAkTqc7gOLU1 6kveKcGzlJAny4jC8NkGNWh1TQatlZWtswk1me6QbSHPAnQKY5f2bUGWu5Sgx7jz QYKQYOzl0+zcwJdImZf/RoC/8OFPrg/urqxcVayf8s7jZx9mA76y/LQQ2C9SJVTe NfmCXNoGnhV/68eaoOlI0RmbgdUo8ndF2Bmgu33e76YoFWX9/EviX0gRswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWFsZqvatVTa88/7zWar1TNpRZvMB8GA1UdIwQY MBaAFLMo/iWKG5v2FIps4OinEvGIQJBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODkt ZWQ4NGEwMDU4YTlmLzEvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODktZWQ4NGEwMDU4YTlm LzEvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZOY7RIY 6mRV/zDe8PaPNjjbJGNtHGKTOELVFITukLrL9ord0LcyLKBj1qL3roc3oTwXQrqj /EehfwPuYhWPP5tnBZEjGExC7l9TGqkTzvUafzN6MgFTUG5zSHFNt5u5ibMfebG9 50VnWHcK+LHFwbeHKqRphheIkqLkqNqo5L7Xl/o8luXAnel2npuIzuhfYGL2Q6xj HpvP0KHYIrEfAg3b/enqKsR9U44ClFxwott3c+InU/6gBGgP3YAbqDcSLaSR6kX1 yZ5MIw0SSuVt4EYc+NMEve9WuCif1/s2SEcWuuZZTGaDttIiiobpH2KFyYf+DRh4 p+5cCkYx32Rskw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:29 2026 by rpki-client