This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json) Hash identifier: hDtfFW6plDW+8v2kSxjV9aWZQcBl126TcVCK166zgoM= Subject key identifier: F7:A9:23:44:4F:EB:50:20:42:4C:67:2C:18:5B:E3:F1:C2:F5:B8:BD Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf Certificate serial: 019BFA9B625E8D4507178F6C57E132AA5787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft Manifest number: 1541 Signing time: Mon 26 Jan 2026 14:00:45 +0000 Manifest this update: Mon 26 Jan 2026 14:00:45 +0000 Manifest next update: Tue 27 Jan 2026 14:00:45 +0000 Files and hashes: 1: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (hash: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w=) 2: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (hash: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw=) 3: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: qhxrsvxdzVAyrRfa8IErj7Rub3atfskjGqHrlEdzkYk=) 4: yXa8XbTaH683GFEjkOW8VCRIjpE.roa (hash: l5nJIcq0a2VDJfhrhqSb9wFUsKAsvOaRuHeId15ZhA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:62:5e:8d:45:07:17:8f:6c:57:e1:32:aa:57:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Validity Not Before: Jan 26 14:00:45 2026 GMT Not After : Jan 27 14:00:45 2026 GMT Subject: CN=f7a923444feb5020424c672c185be3f1c2f5b8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:71:e7:4a:27:a4:4e:60:e8:87:24:80:4f: ee:5f:07:40:ae:47:7c:81:87:be:ff:de:f0:19:aa: 19:58:32:2e:70:85:d5:46:d0:ca:51:1e:c2:d1:b8: 9a:70:2f:06:5a:e3:0f:0e:53:8e:c8:70:47:fd:ee: e2:1a:be:a2:30:67:b6:b1:03:7f:0f:80:09:bb:32: 83:46:8f:6d:a0:54:0d:86:f3:18:ef:75:ad:3e:3a: 99:e9:1d:d2:7f:4e:ab:49:da:88:3d:00:ac:0c:33: 32:1c:a3:da:8d:96:14:c0:ba:85:94:40:41:eb:37: 02:28:56:ce:6e:01:cf:09:c0:3e:aa:63:6a:02:aa: bf:23:11:44:5e:c9:3e:b5:ba:6d:e0:dc:b9:9a:0d: 77:64:06:a8:59:39:f6:b6:51:b9:06:cb:88:fb:96: 70:35:8c:c9:d6:56:e7:13:6e:91:12:21:10:4b:0a: 59:cf:f0:fb:e0:6d:03:8e:7f:f6:8e:c5:0e:fd:2b: 3d:16:aa:5c:17:e1:1e:b3:41:61:0b:a1:64:11:a9: 63:18:95:19:cc:1d:77:9c:09:3c:4d:4e:51:ba:13: 61:bd:8e:38:69:ca:9c:3b:b7:9d:56:fb:06:12:0f: 63:12:9a:e2:ee:ae:43:9a:2f:0a:8d:82:6b:e1:f4: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A9:23:44:4F:EB:50:20:42:4C:67:2C:18:5B:E3:F1:C2:F5:B8:BD X509v3 Authority Key Identifier: keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:00:43:ad:b4:e8:d5:ef:73:99:e6:18:00:29:0c:82:6f:83: 8d:f1:2b:75:6e:8c:37:35:46:3a:bf:2f:08:99:15:bc:9d:7e: b8:b3:a6:0e:b7:88:e2:28:cc:55:76:7c:e9:96:8e:8d:33:01: 8a:b4:0e:f6:d7:b2:c6:c6:ef:af:4d:09:40:26:51:ef:61:e5: 40:f2:47:b8:f7:5f:ce:3b:97:04:33:1a:3f:c0:9b:90:ac:7c: c8:e4:c8:7b:dc:d1:9e:40:3c:28:37:25:48:8a:48:30:64:95: 3e:ca:b4:07:87:9d:b4:34:1f:b1:4b:81:a1:92:93:b0:7f:47: 4c:66:25:d2:f8:56:06:94:fb:7e:e3:f0:c9:bb:c7:76:5e:e3: dc:9b:46:fa:98:6c:bd:39:c4:5c:71:95:f7:16:c8:98:7d:40: d0:75:1b:93:46:ff:34:95:a7:39:ec:f6:cd:ff:37:19:c4:98: c0:37:3a:67:eb:6a:d7:2d:0b:d5:bd:2c:40:9b:ba:7c:d0:88: 96:99:31:41:7a:8a:05:cd:ac:7a:7a:90:9e:89:96:5b:90:61: 9f:5e:f7:22:2e:bd:56:4e:22:27:02:bc:1d:6e:97:ce:0a:60: f5:68:41:6e:e5:ce:54:b2:4e:aa:1a:81:48:71:61:0c:b5:76: 44:f3:c7:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m2JejUUHF49sV+EyqleHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4 OTZkYmYwHhcNMjYwMTI2MTQwMDQ1WhcNMjYwMTI3MTQwMDQ1WjAzMTEwLwYDVQQD EyhmN2E5MjM0NDRmZWI1MDIwNDI0YzY3MmMxODViZTNmMWMyZjViOGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIZx50onpE5g6IckgE/uXwdArkd8 gYe+/97wGaoZWDIucIXVRtDKUR7C0biacC8GWuMPDlOOyHBH/e7iGr6iMGe2sQN/ D4AJuzKDRo9toFQNhvMY73WtPjqZ6R3Sf06rSdqIPQCsDDMyHKPajZYUwLqFlEBB 6zcCKFbObgHPCcA+qmNqAqq/IxFEXsk+tbpt4Ny5mg13ZAaoWTn2tlG5BsuI+5Zw NYzJ1lbnE26REiEQSwpZz/D74G0Djn/2jsUO/Ss9FqpcF+Ees0FhC6FkEaljGJUZ zB13nAk8TU5RuhNhvY44acqcO7edVvsGEg9jEpri7q5Dmi8KjYJr4fSNswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPepI0RP61AgQkxnLBhb4/HC9bi9MB8GA1UdIwQY MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt NzUzZDk2OWEwNzAyLzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgBDrbTo 1e9zmeYYACkMgm+DjfErdW6MNzVGOr8vCJkVvJ1+uLOmDreI4ijMVXZ86ZaOjTMB irQO9teyxsbvr00JQCZR72HlQPJHuPdfzjuXBDMaP8CbkKx8yOTIe9zRnkA8KDcl SIpIMGSVPsq0B4edtDQfsUuBoZKTsH9HTGYl0vhWBpT7fuPwybvHdl7j3JtG+phs vTnEXHGV9xbImH1A0HUbk0b/NJWnOez2zf83GcSYwDc6Z+tq1y0L1b0sQJu6fNCI lpkxQXqKBc2senqQnomWW5Bhn173Ii69Vk4iJwK8HW6Xzgpg9WhBbuXOVLJOqhqB SHFhDLV2RPPH6g== -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:54 2026 by rpki-client