This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json) Hash identifier: N+S6xJEiys+BRt40FPnLYn5NAjtsrGgozaJvBSClY04= Subject key identifier: F1:79:40:92:DC:89:53:E9:30:B1:CE:7C:15:F0:CA:6C:94:80:38:68 Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809 Certificate serial: 019BF79AC15976F689E55C92BEC00AAD55C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft Manifest number: 117A Signing time: Mon 26 Jan 2026 00:01:12 +0000 Manifest this update: Mon 26 Jan 2026 00:01:12 +0000 Manifest next update: Tue 27 Jan 2026 00:01:12 +0000 Files and hashes: 1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=) 2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: 46gkgIfgT9OQiQ77vjLm8mHvy2W/VBRAYfow4vnfYag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:c1:59:76:f6:89:e5:5c:92:be:c0:0a:ad:55:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809 Validity Not Before: Jan 26 00:01:12 2026 GMT Not After : Jan 27 00:01:12 2026 GMT Subject: CN=f1794092dc8953e930b1ce7c15f0ca6c94803868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:71:74:5a:11:83:0f:07:12:26:f7:e1:8b: 91:9c:1b:a5:b8:3b:8e:1d:d0:ee:b6:b3:a9:2c:b2: c9:62:e1:08:a4:08:b1:08:a1:ad:ec:dd:b4:ca:00: 78:36:a0:cd:3b:0c:1a:a5:17:3f:2e:62:28:37:bd: bc:87:11:c9:ba:a3:71:5c:d8:e3:14:5a:ec:32:fc: 32:b8:c6:3d:a4:dd:cd:b3:60:fd:20:5a:7a:86:d2: 3a:7a:35:3e:44:50:0b:04:7e:3d:b9:7a:4a:bb:1c: 47:25:c9:24:e9:2a:5c:4d:9f:8a:50:7a:16:c3:d5: f9:c3:bf:d2:4f:ff:48:a3:9e:62:28:04:3c:1a:f6: 22:72:bf:d0:35:af:30:16:b2:98:17:49:d0:a1:92: e6:f8:c3:16:6c:83:64:e1:f0:81:e3:73:53:3a:83: d4:df:f8:f0:a7:f5:f3:16:b4:ed:ea:fe:b1:26:0e: 4a:51:aa:67:b2:3b:56:70:db:b6:7c:aa:92:94:e3: 08:2a:7b:6a:a7:f6:61:f3:00:c9:5c:40:36:76:9f: b6:14:5b:06:31:9f:9b:4f:e4:e9:f2:26:a1:8c:71: 5a:8f:89:00:7a:b2:f5:ba:b9:6d:90:50:fd:87:ef: 7e:2a:2c:9f:7a:07:74:27:7d:0f:7b:6e:68:7f:23: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:79:40:92:DC:89:53:E9:30:B1:CE:7C:15:F0:CA:6C:94:80:38:68 X509v3 Authority Key Identifier: keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:06:52:21:89:8a:ae:41:30:0b:3f:9e:33:0d:dc:38:1e:29: 26:bc:b4:0e:f7:69:14:9a:77:38:9f:9a:98:8b:79:3f:f6:47: 2c:e2:4c:e9:1d:92:51:d7:aa:ef:a0:81:7d:17:f7:14:3a:c9: 3b:45:76:a5:11:1c:f7:4c:85:aa:80:82:13:19:2d:60:d9:03: 93:9c:43:37:1a:8d:a8:e7:51:9e:1e:fb:e0:58:bf:69:9d:b7: ae:f2:97:85:09:32:da:c9:71:a0:d4:df:0d:df:7c:88:2b:4d: bc:57:b5:b3:39:b7:6a:de:44:15:b1:47:17:18:84:7d:a6:53: d4:40:41:a2:b4:9a:7e:66:3d:c5:9b:41:b7:8e:ef:bc:f6:5a: c8:f2:88:8d:50:b5:b3:ba:f3:c5:13:c0:58:9a:e2:8c:47:20: 15:78:83:5c:10:f9:69:98:bb:ff:12:79:d4:94:9d:f9:ed:a3: 7a:38:8b:4a:b8:f2:1f:d3:c6:e1:3f:5d:8e:16:81:0c:a0:0b: ac:81:6d:83:25:e4:14:08:02:b0:09:cf:72:a3:5f:25:75:5a: 15:67:cb:5a:6b:74:8d:e9:af:c3:ed:95:48:81:9b:ea:b5:5b: 64:09:99:f4:4a:d9:a7:0b:8f:97:10:73:4b:38:a7:52:7b:ac: f1:83:71:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3msFZdvaJ5VySvsAKrVXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx Mjc4MDkwHhcNMjYwMTI2MDAwMTEyWhcNMjYwMTI3MDAwMTEyWjAzMTEwLwYDVQQD EyhmMTc5NDA5MmRjODk1M2U5MzBiMWNlN2MxNWYwY2E2Yzk0ODAzODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH9xdFoRgw8HEib34YuRnBuluDuO HdDutrOpLLLJYuEIpAixCKGt7N20ygB4NqDNOwwapRc/LmIoN728hxHJuqNxXNjj FFrsMvwyuMY9pN3Ns2D9IFp6htI6ejU+RFALBH49uXpKuxxHJckk6SpcTZ+KUHoW w9X5w7/ST/9Io55iKAQ8GvYicr/QNa8wFrKYF0nQoZLm+MMWbINk4fCB43NTOoPU 3/jwp/XzFrTt6v6xJg5KUapnsjtWcNu2fKqSlOMIKntqp/Zh8wDJXEA2dp+2FFsG MZ+bT+Tp8iahjHFaj4kAerL1urltkFD9h+9+Kiyfegd0J30Pe25ofyPvgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF5QJLciVPpMLHOfBXwymyUgDhoMB8GA1UdIwQY MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAZSIYmK rkEwCz+eMw3cOB4pJry0DvdpFJp3OJ+amIt5P/ZHLOJM6R2SUdeq76CBfRf3FDrJ O0V2pREc90yFqoCCExktYNkDk5xDNxqNqOdRnh774Fi/aZ23rvKXhQky2slxoNTf Dd98iCtNvFe1szm3at5EFbFHFxiEfaZT1EBBorSafmY9xZtBt47vvPZayPKIjVC1 s7rzxRPAWJrijEcgFXiDXBD5aZi7/xJ51JSd+e2jejiLSrjyH9PG4T9djhaBDKAL rIFtgyXkFAgCsAnPcqNfJXVaFWfLWmt0jemvw+2VSIGb6rVbZAmZ9ErZpwuPlxBz SzinUnus8YNxTg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:55:12 2026 by rpki-client