This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json) Hash identifier: 16PN7fKItFQkrRzTTdL25fhScUo1FD4Gq8AFnlziMd4= Subject key identifier: 65:45:A4:B5:6C:85:02:4E:A7:E0:4A:A8:5D:49:A3:7E:02:01:B7:42 Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Certificate serial: 019BFD65710262F8AF5553A74E9BC36D9ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft Manifest number: 14D2 Signing time: Tue 27 Jan 2026 03:00:42 +0000 Manifest this update: Tue 27 Jan 2026 03:00:42 +0000 Manifest next update: Wed 28 Jan 2026 03:00:42 +0000 Files and hashes: 1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=) 2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: FMc6+m9XRjF06poBisCO7qAELw/2p0snuthKvNmQIXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:71:02:62:f8:af:55:53:a7:4e:9b:c3:6d:9e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Validity Not Before: Jan 27 03:00:42 2026 GMT Not After : Jan 28 03:00:42 2026 GMT Subject: CN=6545a4b56c85024ea7e04aa85d49a37e0201b742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:cc:44:12:40:a6:b3:8c:b1:0e:93:81:01: 43:63:a6:1c:de:c9:12:cc:45:77:9c:63:1b:20:43: 73:33:36:0b:9d:d6:09:c8:e0:bd:c0:6d:fb:95:b4: 44:e3:57:4f:7c:cc:64:56:ed:dc:0e:ea:57:1c:55: cf:4c:d4:bf:6d:6d:f2:e6:5a:0b:e8:f2:92:9a:ef: f5:dd:e5:bd:35:2a:17:93:2d:bd:2b:7b:40:1e:33: af:c2:c2:5a:44:21:a1:a9:ed:0f:3d:85:c4:55:a1: a8:14:7b:85:61:e9:1f:fd:7c:d4:c5:95:3b:34:69: 93:68:36:82:ab:1a:80:b0:3a:11:31:e1:56:80:45: 6d:59:7b:a4:9e:42:f2:5c:93:d7:42:aa:35:ca:6c: 9d:75:f4:64:23:0d:e5:af:6b:3d:99:1b:ae:0d:1a: ae:1e:f1:5c:6b:4d:8c:b5:c1:0a:ea:de:48:36:71: ed:6c:21:3a:79:eb:2c:53:21:d0:6f:d3:ff:c6:54: 99:98:65:0f:fe:0b:07:94:13:40:2e:ec:77:e6:8c: c2:16:f4:b6:35:58:53:6b:36:e4:1b:c3:7c:fc:62: b0:d2:29:34:65:ee:32:1e:4b:fd:79:b7:58:fa:1d: 20:34:b9:ad:28:3a:2c:f4:7d:9f:76:87:ea:0e:c8: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:45:A4:B5:6C:85:02:4E:A7:E0:4A:A8:5D:49:A3:7E:02:01:B7:42 X509v3 Authority Key Identifier: keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2d:06:92:16:f4:40:68:59:d4:80:76:20:e9:1b:b5:77:18: 22:52:f5:ec:6e:43:db:be:76:19:de:ce:4b:e5:de:a8:ae:54: 99:b5:25:ba:bf:e9:20:e2:dc:d9:97:bb:71:9f:eb:5c:0a:88: 88:b5:23:8d:4a:8b:14:28:67:0d:8f:67:86:97:67:13:e1:ff: 8d:50:2e:3b:5b:18:8d:96:08:ae:5c:44:80:06:78:57:26:8b: bc:b6:53:39:27:ca:1b:d1:80:9e:de:49:c9:68:99:f0:da:b2: 88:c9:f4:e0:8c:67:45:60:e8:d8:c0:44:26:94:dc:4a:05:3c: 69:d1:99:ef:e4:e2:a6:47:23:85:cf:64:60:de:a8:ab:43:04: 2f:90:cf:f3:aa:ef:d1:68:0f:0f:ea:a7:c1:51:f0:ab:fb:d7: fe:b8:e9:ee:89:34:e4:54:cd:d3:8f:4f:54:b3:61:46:f0:b6: c2:b0:08:8f:47:8a:6e:7c:e8:7f:0c:2b:b1:c5:31:14:74:39: b4:b2:82:0a:b6:a2:10:d9:1f:f4:24:3b:be:72:b2:80:b7:85: a0:1d:53:26:cf:1f:a2:6d:71:cb:1f:a2:e9:f9:0b:2c:8f:cc: 72:4a:4a:fc:9a:45:03:79:70:e1:3f:89:e4:26:a8:b4:c4:98: 6c:21:36:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZXECYvivVVOnTpvDbZ7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0 YzdjZWUwHhcNMjYwMTI3MDMwMDQyWhcNMjYwMTI4MDMwMDQyWjAzMTEwLwYDVQQD Eyg2NTQ1YTRiNTZjODUwMjRlYTdlMDRhYTg1ZDQ5YTM3ZTAyMDFiNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjvMRBJAprOMsQ6TgQFDY6Yc3skS zEV3nGMbIENzMzYLndYJyOC9wG37lbRE41dPfMxkVu3cDupXHFXPTNS/bW3y5loL 6PKSmu/13eW9NSoXky29K3tAHjOvwsJaRCGhqe0PPYXEVaGoFHuFYekf/XzUxZU7 NGmTaDaCqxqAsDoRMeFWgEVtWXuknkLyXJPXQqo1ymyddfRkIw3lr2s9mRuuDRqu HvFca02MtcEK6t5INnHtbCE6eessUyHQb9P/xlSZmGUP/gsHlBNALux35ozCFvS2 NVhTazbkG8N8/GKw0ik0Ze4yHkv9ebdY+h0gNLmtKDos9H2fdofqDsjO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVFpLVshQJOp+BKqF1Jo34CAbdCMB8GA1UdIwQY MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2 LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmi0Gkhb0 QGhZ1IB2IOkbtXcYIlL17G5D2752Gd7OS+XeqK5UmbUlur/pIOLc2Ze7cZ/rXAqI iLUjjUqLFChnDY9nhpdnE+H/jVAuO1sYjZYIrlxEgAZ4VyaLvLZTOSfKG9GAnt5J yWiZ8NqyiMn04IxnRWDo2MBEJpTcSgU8adGZ7+Tipkcjhc9kYN6oq0MEL5DP86rv 0WgPD+qnwVHwq/vX/rjp7ok05FTN049PVLNhRvC2wrAIj0eKbnzofwwrscUxFHQ5 tLKCCraiENkf9CQ7vnKygLeFoB1TJs8fom1xyx+i6fkLLI/MckpK/JpFA3lw4T+J 5CaotMSYbCE2Kg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:01 2026 by rpki-client