This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json) Hash identifier: ib1PMyrYwBiSc3Q32l56XUv0h8HSXfOVkxdTSNrhgSI= Subject key identifier: A0:42:64:E5:2D:AE:29:28:32:B4:88:1E:C9:1B:61:8C:2C:6A:0B:53 Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59 Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59 Certificate serial: 019B7CA7197D1EFC3665F15C39C8448F5BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft Manifest number: 10B4 Signing time: Fri 02 Jan 2026 03:01:24 +0000 Manifest this update: Fri 02 Jan 2026 03:01:24 +0000 Manifest next update: Sat 03 Jan 2026 03:01:24 +0000 Files and hashes: 1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=) 2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=) 3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=) 4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: CX+LhkvS/5jqdgwshISUUQvz3fOBnS8i+14kNs4Jcuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:a7:19:7d:1e:fc:36:65:f1:5c:39:c8:44:8f:5b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59 Validity Not Before: Jan 2 03:01:24 2026 GMT Not After : Jan 3 03:01:24 2026 GMT Subject: CN=a04264e52dae292832b4881ec91b618c2c6a0b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:91:f6:aa:52:66:8b:1f:2e:f3:c5:61:19:09: d8:6c:f1:7d:d6:0b:d2:03:db:ee:f2:0e:1a:61:ab: 5c:27:de:c2:6a:de:fd:df:6b:52:61:c1:95:3d:1e: 25:f3:f3:56:d6:79:27:e7:f8:35:84:54:45:b9:6b: 04:80:c2:4a:51:a3:ca:f3:50:eb:4d:70:d4:37:31: 00:0c:0a:55:88:1e:f0:5f:5d:71:b4:dd:a7:ee:07: 7a:ea:9c:6e:16:8e:30:78:e8:ad:43:39:1f:ad:a1: bb:8f:b9:3d:81:85:e8:a6:25:5b:65:d6:a9:13:e4: 55:99:9a:91:73:0a:2e:e8:0e:8f:9e:01:9b:b9:be: 85:4c:c9:61:ac:aa:aa:eb:cc:87:a7:b0:43:8d:5b: 90:c0:44:95:11:9b:09:1f:e1:f9:a0:5b:25:82:3b: af:b9:9d:9a:fe:8a:da:dc:b8:42:a3:66:d0:40:e0: d0:68:60:34:a5:36:cb:40:b2:e9:24:24:9b:96:26: c8:65:d0:38:05:8b:ec:63:38:5d:a9:d6:7e:dd:6a: a8:9b:3f:17:5d:e4:fc:c8:72:a4:45:d2:b2:ca:de: 40:ea:47:7d:75:44:d4:ef:9f:ee:e6:5d:79:99:bf: b2:59:7a:7c:81:28:a0:d7:c4:07:44:df:f8:2e:c1: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:64:E5:2D:AE:29:28:32:B4:88:1E:C9:1B:61:8C:2C:6A:0B:53 X509v3 Authority Key Identifier: keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:bf:fd:ae:67:be:f6:c5:e0:b8:92:db:4d:16:e4:58:63: 8f:9a:3d:8f:1c:0b:60:26:29:6a:e7:d5:c2:01:88:53:94:8e: 14:60:cc:db:0d:fe:f1:d1:47:ea:30:c7:10:b4:1a:fb:39:44: c7:38:cc:9c:45:22:28:e4:cb:79:61:84:c6:8b:3f:0d:dc:e6: 76:e2:69:ae:44:5b:19:65:fc:dc:1e:24:94:29:f8:45:66:50: 0a:34:6f:b9:c3:72:5d:9e:8d:7a:63:04:fb:ad:65:10:9b:90: 68:0b:fb:f3:8e:4b:8c:a0:6e:fe:1a:5c:05:0c:32:aa:6a:a2: 01:f8:06:14:9f:52:e1:ae:1e:0d:e2:19:b1:8e:76:30:13:7e: c0:ce:50:c1:9a:0a:b6:ca:3c:00:99:84:81:06:12:4a:9b:5a: 00:88:7b:d9:f5:ef:1d:2e:10:72:22:ee:06:24:3a:06:ac:f1: f5:78:6c:a6:08:54:cc:02:58:70:66:bc:25:8d:7a:2f:31:f5: 46:e6:af:5c:79:3b:b8:f8:22:97:2b:4a:20:48:44:9d:6d:13: 1f:4f:a9:bf:39:1b:33:35:6e:c6:39:d5:60:28:10:35:b9:e9: ff:b2:44:3b:a9:85:57:27:a5:a0:e1:dc:33:3d:3a:cb:51:a4: 08:2a:71:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8pxl9Hvw2ZfFcOchEj1v8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODE0YTI4YThjMWViZTBhZGMzM2ExNTE5Yjk4ODNlMzA4 NGJiNTkwHhcNMjYwMTAyMDMwMTI0WhcNMjYwMTAzMDMwMTI0WjAzMTEwLwYDVQQD EyhhMDQyNjRlNTJkYWUyOTI4MzJiNDg4MWVjOTFiNjE4YzJjNmEwYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JH2qlJmix8u88VhGQnYbPF91gvS A9vu8g4aYatcJ97Cat7932tSYcGVPR4l8/NW1nkn5/g1hFRFuWsEgMJKUaPK81Dr TXDUNzEADApViB7wX11xtN2n7gd66pxuFo4weOitQzkfraG7j7k9gYXopiVbZdap E+RVmZqRcwou6A6PngGbub6FTMlhrKqq68yHp7BDjVuQwESVEZsJH+H5oFslgjuv uZ2a/ora3LhCo2bQQODQaGA0pTbLQLLpJCSblibIZdA4BYvsYzhdqdZ+3Wqomz8X XeT8yHKkRdKyyt5A6kd9dUTU75/u5l15mb+yWXp8gSig18QHRN/4LsE0BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBCZOUtrikoMrSIHskbYYwsagtTMB8GA1UdIwQY MBaAFLGBSiiowevgrcM6FRm5iD4whLtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGIt ODFkYWJjODFjMDVjLzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGItODFkYWJjODFjMDVj LzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfR+//a5n vvbF4LiS200W5Fhjj5o9jxwLYCYpaufVwgGIU5SOFGDM2w3+8dFH6jDHELQa+zlE xzjMnEUiKOTLeWGExos/DdzmduJprkRbGWX83B4klCn4RWZQCjRvucNyXZ6NemME +61lEJuQaAv7845LjKBu/hpcBQwyqmqiAfgGFJ9S4a4eDeIZsY52MBN+wM5QwZoK tso8AJmEgQYSSptaAIh72fXvHS4QciLuBiQ6Bqzx9XhspghUzAJYcGa8JY16LzH1 RuavXHk7uPgilytKIEhEnW0TH0+pvzkbMzVuxjnVYCgQNbnp/7JEO6mFVyeloOHc Mz06y1GkCCpxpQ== -----END CERTIFICATE-----Generated at Fri Jan 2 11:18:26 2026 by rpki-client