This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json) Hash identifier: 78I0G/fkiA8dlk4R+TBJrFgCE+/44iBkynGlAFHPtyk= Subject key identifier: 3A:78:8B:9F:63:60:0E:6A:1E:AC:9B:0E:8A:D1:A5:CE:87:33:1D:DF Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019C0E90267D4B0E78EDD998F2FFB91B1DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft Manifest number: 1889 Signing time: Fri 30 Jan 2026 11:00:53 +0000 Manifest this update: Fri 30 Jan 2026 11:00:53 +0000 Manifest next update: Sat 31 Jan 2026 11:00:53 +0000 Files and hashes: 1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=) 2: 4jDuY8VO0qUXF7q46qoMV9gLKuM.roa (hash: viGMatLEXcz0cMUCHgF1aDM1PbJJdZT8heBBxrGwjjQ=) 3: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=) 4: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=) 5: DblLYXIGEMn10bjafoE3RYpg084.roa (hash: /9cYHrgPsrPV+y83ZtewE2z9k66ot5C9ns5yRKrm9zs=) 6: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: 62IN+NcMo+FIqNBik3VvvHoi/AWbc2jzwyChayPsqDQ=) 7: Y3783nUrRTFZBbngMY7aX-quJlo.roa (hash: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY=) 8: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=) 9: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:90:26:7d:4b:0e:78:ed:d9:98:f2:ff:b9:1b:1d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Jan 30 11:00:53 2026 GMT Not After : Jan 31 11:00:53 2026 GMT Subject: CN=3a788b9f63600e6a1eac9b0e8ad1a5ce87331ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:0e:cf:a6:e8:d4:4d:36:c2:47:40:92:b5: dd:f5:56:ff:6f:04:65:39:0a:ad:72:a0:9a:47:f7: 20:30:20:76:09:9b:c7:d5:79:08:80:2b:de:96:48: 23:a7:cd:7b:a2:1a:65:3d:94:96:60:c9:9a:08:e1: 1e:28:7f:0a:22:a2:35:f3:d4:48:1a:b6:8f:4c:a7: 49:b9:f8:f9:3c:09:b2:54:2b:79:0e:08:85:4b:1e: 8e:94:fb:2d:71:cd:6b:d7:b7:f6:d0:fb:0e:cb:d1: be:45:3e:60:34:6e:89:a4:e6:68:eb:70:a2:7e:de: e2:5d:2f:da:15:79:ae:7e:51:81:2e:ed:ed:33:b3: 64:9a:f6:95:df:7c:e3:b8:aa:4a:96:82:d3:10:4c: 9d:ee:a9:d3:bf:6c:a5:39:ef:49:e2:c8:9e:9f:3b: 2c:ac:7d:2f:4e:50:30:5d:0d:5c:dd:28:62:5e:e3: c5:93:f4:00:39:94:c2:43:b8:9c:77:96:11:d1:58: d2:73:15:7b:97:ef:f0:ad:2e:25:1c:a5:02:f5:24: bc:f1:0d:ac:0f:6b:37:f6:b8:9f:41:69:04:86:c5: 55:5d:f1:cc:96:ae:47:71:4e:01:68:8c:f8:bc:46: 27:18:10:1b:c0:0f:df:fa:d4:1d:ba:92:ea:74:b7: 62:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:8B:9F:63:60:0E:6A:1E:AC:9B:0E:8A:D1:A5:CE:87:33:1D:DF X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e5:fd:69:81:c7:76:cc:f1:80:92:78:e7:8e:60:98:4f:d1: e0:ef:35:bc:35:79:ce:37:15:23:d2:1f:8c:07:db:92:97:3b: c2:e7:32:f9:61:7e:bf:1f:d5:af:58:0a:9e:65:16:1d:62:4f: 61:da:ba:14:85:8f:95:b9:83:ab:9d:c2:5f:6d:06:ba:72:e6: 4b:c7:d9:4e:f9:99:7b:c8:b2:f4:df:2d:33:b9:b5:a5:4e:0d: 9a:02:9f:c5:cc:35:f2:cc:30:61:fb:82:25:5e:31:55:f6:d5: af:a1:be:31:82:fc:13:42:42:31:92:c6:38:1c:a3:51:83:c5: 20:d8:33:a9:e2:e5:c1:c8:c4:98:b0:54:78:7c:80:cd:5b:ad: 04:32:2b:04:f1:01:7a:c0:cf:e1:65:44:3f:37:98:c8:70:55: ea:c9:15:6e:a4:13:d6:a7:a1:25:dd:ea:78:54:f8:5f:d6:18: 3e:11:35:1b:ec:1f:54:a0:e9:3d:fe:e0:31:20:17:d5:7a:2e: e6:be:34:1d:7b:87:05:72:d9:44:04:f4:75:fe:17:90:b9:0a: f3:e2:a3:98:17:5c:7d:c2:b0:6d:86:a0:b8:18:a3:a7:7b:e9: 67:83:fa:ab:bd:fb:7e:6a:e3:7d:d7:54:bb:de:38:07:30:bb: cb:d2:52:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwOkCZ9Sw547dmY8v+5Gx3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwMTMwMTEwMDUzWhcNMjYwMTMxMTEwMDUzWjAzMTEwLwYDVQQD EygzYTc4OGI5ZjYzNjAwZTZhMWVhYzliMGU4YWQxYTVjZTg3MzMxZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa8Oz6bo1E02wkdAkrXd9Vb/bwRl OQqtcqCaR/cgMCB2CZvH1XkIgCvelkgjp817ohplPZSWYMmaCOEeKH8KIqI189RI GraPTKdJufj5PAmyVCt5DgiFSx6OlPstcc1r17f20PsOy9G+RT5gNG6JpOZo63Ci ft7iXS/aFXmuflGBLu3tM7NkmvaV33zjuKpKloLTEEyd7qnTv2ylOe9J4sienzss rH0vTlAwXQ1c3ShiXuPFk/QAOZTCQ7icd5YR0VjScxV7l+/wrS4lHKUC9SS88Q2s D2s39rifQWkEhsVVXfHMlq5HcU4BaIz4vEYnGBAbwA/f+tQdupLqdLdiOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp4i59jYA5qHqybDorRpc6HMx3fMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+X9aYHH dszxgJJ4545gmE/R4O81vDV5zjcVI9IfjAfbkpc7wucy+WF+vx/Vr1gKnmUWHWJP Ydq6FIWPlbmDq53CX20GunLmS8fZTvmZe8iy9N8tM7m1pU4NmgKfxcw18swwYfuC JV4xVfbVr6G+MYL8E0JCMZLGOByjUYPFINgzqeLlwcjEmLBUeHyAzVutBDIrBPEB esDP4WVEPzeYyHBV6skVbqQT1qehJd3qeFT4X9YYPhE1G+wfVKDpPf7gMSAX1Xou 5r40HXuHBXLZRAT0df4XkLkK8+KjmBdcfcKwbYaguBijp3vpZ4P6q737fmrjfddU u944BzC7y9JSGw== -----END CERTIFICATE-----Generated at Fri Jan 30 14:29:01 2026 by rpki-client