This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json) Hash identifier: VW0YOllK2rnOM9xEe4EN8hHJH3KS052iwmheCU5FCDo= Subject key identifier: E9:76:0D:58:B4:4F:F9:28:82:E6:90:6F:45:D7:EB:B1:11:5D:21:BF Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8 Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8 Certificate serial: 019C194A7C620A53914428C8A551CE487A04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft Manifest number: 03D8 Signing time: Sun 01 Feb 2026 13:00:37 +0000 Manifest this update: Sun 01 Feb 2026 13:00:37 +0000 Manifest next update: Mon 02 Feb 2026 13:00:37 +0000 Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: WKHER5NyfFJozzEz7GlzOR2NSF1cAB1+sRbruWdeJtY=) 2: zqYVRlTgvHpJDmnzblzgqUd1qtQ.roa (hash: e8da42eEgoMlNnpHHSa7Q7x96Sq3pNxhBs6tD28L410=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 10:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:19:4a:7c:62:0a:53:91:44:28:c8:a5:51:ce:48:7a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8 Validity Not Before: Feb 1 13:00:37 2026 GMT Not After : Feb 2 13:00:37 2026 GMT Subject: CN=e9760d58b44ff92882e6906f45d7ebb1115d21bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:d8:1f:be:7a:01:0f:43:af:e7:3f:0a:67: 18:64:dc:df:84:78:cb:0f:52:84:bf:0c:1f:01:d0: fd:bb:a8:8e:d7:a7:c0:73:f2:42:5c:58:b3:90:18: a3:75:3c:95:6e:99:9c:08:32:be:8f:54:95:ff:ac: fb:0a:12:9b:d6:f9:ee:b3:00:b2:f4:b9:da:a3:40: b1:58:80:c1:d3:a4:6b:2b:13:a9:af:c2:7b:38:79: e8:c5:86:e1:54:b0:ee:00:ae:42:24:3c:82:62:b9: 17:37:25:72:19:00:ec:e1:39:54:be:d0:0d:a9:c8: 41:d9:c6:93:98:19:56:1c:06:71:24:bf:5e:e5:d8: 1d:56:4b:da:a3:47:73:de:00:a6:fe:87:6b:f4:6e: 26:50:9c:aa:c2:ea:7a:3a:3a:eb:70:80:57:9a:d9: c5:61:a3:6e:63:3c:d4:80:61:5d:cb:dd:9d:6d:ef: f8:86:64:d0:79:85:ed:f6:7a:cf:97:78:0d:0e:fe: 6f:3a:dd:1e:a5:0c:14:66:57:68:12:ec:c3:ac:c5: 67:50:ff:17:56:00:c0:e0:65:dd:7d:f4:ee:53:a4: 17:98:ff:37:cb:98:6e:1d:b5:02:66:fd:37:88:61: 5d:3c:48:93:6c:16:c6:05:69:31:14:f0:c1:89:a2: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:76:0D:58:B4:4F:F9:28:82:E6:90:6F:45:D7:EB:B1:11:5D:21:BF X509v3 Authority Key Identifier: keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f0:a6:49:ab:3c:b7:79:b8:c0:9a:69:33:8a:d1:6d:0f:04: 67:1d:6b:18:a2:29:cc:97:3f:b5:8b:0e:1b:72:de:bb:87:7b: 2a:db:0f:5d:59:a8:a5:cf:74:b6:6d:d4:c3:38:ae:54:4d:a0: c8:36:1a:59:a7:f9:78:87:7e:65:3c:a0:38:b5:92:c4:95:b9: 2c:df:40:0b:72:66:5f:e6:31:e6:f3:de:50:1d:95:65:55:fb: 68:1d:ff:b5:5d:4f:3e:93:8a:a9:6f:07:a8:4d:23:52:8b:51: 7a:25:9c:09:3e:bd:0d:b3:14:39:a1:15:f6:24:3b:a5:bf:3a: f3:6b:a1:c9:93:b2:44:bd:af:88:16:54:44:0b:b8:15:43:e0: b0:76:58:dd:aa:48:f1:66:27:0d:d2:55:4d:0f:3a:07:60:5a: d7:07:91:59:4c:f5:22:e9:58:71:26:aa:e9:82:b4:f0:b2:c8: 1e:65:e5:0a:38:cf:c0:8b:4a:91:28:b5:ae:93:ed:f9:12:62: 54:53:01:9d:51:26:6d:73:3a:ff:78:ce:c1:d1:fb:ed:f5:57: 87:06:fc:0f:f3:0a:22:16:f9:63:ee:3a:04:dd:d5:fb:01:b8: 19:b8:87:e9:4c:a6:5d:6f:76:84:60:0b:66:15:77:4d:60:fd: 1b:89:1f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwZSnxiClORRCjIpVHOSHoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODNlOTZmZjI3MGY0ZWNhOTcwMTI1ODA4MWJiNWNmODE4 OTY2YzgwHhcNMjYwMjAxMTMwMDM3WhcNMjYwMjAyMTMwMDM3WjAzMTEwLwYDVQQD EyhlOTc2MGQ1OGI0NGZmOTI4ODJlNjkwNmY0NWQ3ZWJiMTExNWQyMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYLYH756AQ9Dr+c/CmcYZNzfhHjL D1KEvwwfAdD9u6iO16fAc/JCXFizkBijdTyVbpmcCDK+j1SV/6z7ChKb1vnuswCy 9Lnao0CxWIDB06RrKxOpr8J7OHnoxYbhVLDuAK5CJDyCYrkXNyVyGQDs4TlUvtAN qchB2caTmBlWHAZxJL9e5dgdVkvao0dz3gCm/odr9G4mUJyqwup6OjrrcIBXmtnF YaNuYzzUgGFdy92dbe/4hmTQeYXt9nrPl3gNDv5vOt0epQwUZldoEuzDrMVnUP8X VgDA4GXdffTuU6QXmP83y5huHbUCZv03iGFdPEiTbBbGBWkxFPDBiaKXCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl2DVi0T/koguaQb0XX67ERXSG/MB8GA1UdIwQY MBaAFEmD6W/ycPTsqXASWAgbtc+BiWbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTct NmNmNjgyYTE4NWQ0LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTctNmNmNjgyYTE4NWQ0 LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/CmSas8 t3m4wJppM4rRbQ8EZx1rGKIpzJc/tYsOG3Leu4d7KtsPXVmopc90tm3UwziuVE2g yDYaWaf5eId+ZTygOLWSxJW5LN9AC3JmX+Yx5vPeUB2VZVX7aB3/tV1PPpOKqW8H qE0jUotReiWcCT69DbMUOaEV9iQ7pb8682uhyZOyRL2viBZURAu4FUPgsHZY3apI 8WYnDdJVTQ86B2Ba1weRWUz1IulYcSaq6YK08LLIHmXlCjjPwItKkSi1rpPt+RJi VFMBnVEmbXM6/3jOwdH77fVXhwb8D/MKIhb5Y+46BN3V+wG4GbiH6UymXW92hGAL ZhV3TWD9G4kfOg== -----END CERTIFICATE-----Generated at Sun Feb 1 18:46:44 2026 by rpki-client