This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft File: SLQGxUjn5BwW-InIkAdunlhv81Q.mft (raw, json) Hash identifier: 7pAZofaykf3257D3XTnTAQRYHftct+ZuDrp/4TcmQdU= Subject key identifier: 65:22:65:43:BE:FC:D3:9D:D6:C4:D0:7E:2F:1D:07:89:AB:BB:1C:1B Authority key identifier: 48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54 Certificate issuer: /CN=48b406c548e7e41c16f889c890076e9e586ff354 Certificate serial: 019C41A19E9067C201562ADEE905A6EE3157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft Manifest number: 0139 Signing time: Mon 09 Feb 2026 09:00:36 +0000 Manifest this update: Mon 09 Feb 2026 09:00:36 +0000 Manifest next update: Tue 10 Feb 2026 09:00:36 +0000 Files and hashes: 1: SLQGxUjn5BwW-InIkAdunlhv81Q.crl (hash: lxjiI5onehiU6QKNMh6shgzWOkbbUd9RK3OXCnLat0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:9e:90:67:c2:01:56:2a:de:e9:05:a6:ee:31:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b406c548e7e41c16f889c890076e9e586ff354 Validity Not Before: Feb 9 09:00:36 2026 GMT Not After : Feb 10 09:00:36 2026 GMT Subject: CN=65226543befcd39dd6c4d07e2f1d0789abbb1c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:bb:67:6b:d2:a5:aa:b8:80:03:56:d1:0c: 5c:ee:eb:73:02:4f:ea:ff:d3:da:84:64:95:04:f8: 3d:2f:16:e5:5f:92:08:90:49:d5:40:d8:53:bc:d8: 8d:3a:63:ff:74:b1:c2:1d:88:b4:dd:07:5f:0a:c3: f4:13:eb:95:bb:fa:ff:2b:fb:c9:dd:35:28:13:1a: 27:59:0d:90:cb:96:3a:58:33:aa:d8:dc:a7:53:5e: b5:98:2b:0f:0a:cb:6f:5d:fc:54:55:57:33:ca:bc: f5:89:d9:92:7f:9b:97:ca:7b:b9:2b:8e:9c:18:44: 3c:0e:02:60:7a:b0:27:f9:c2:79:23:9d:12:54:23: c6:da:1d:b4:1c:bf:d0:11:39:6c:ca:ee:2e:ec:84: 29:26:18:be:88:45:f5:86:2b:cc:af:d4:60:58:27: 6f:ad:02:90:aa:4b:0c:57:09:c4:2b:5a:a5:b7:90: 3c:a7:ae:51:3e:85:af:a1:d5:da:e9:5b:94:7a:5f: 53:8c:2b:b0:0e:a4:29:03:d7:64:e1:0e:f6:ed:bc: 56:99:b8:b4:a9:43:13:6c:d9:a8:a7:e0:af:aa:f8: 8e:a8:c9:06:8c:b3:cf:31:c4:80:e8:67:8e:ec:de: 0f:5d:bd:3c:89:08:89:32:a1:9f:70:c5:bf:fe:b5: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:22:65:43:BE:FC:D3:9D:D6:C4:D0:7E:2F:1D:07:89:AB:BB:1C:1B X509v3 Authority Key Identifier: keyid:48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e4:93:8e:3a:2a:2f:de:2b:cd:c5:58:8b:84:cd:6f:c3:01: c4:c3:67:83:6e:13:1e:d6:c6:c4:f8:bc:5e:a8:29:a4:ef:7b: e5:b5:53:b8:d8:1d:85:c5:87:fd:f5:29:46:b3:2d:21:74:dd: 42:41:cf:27:1c:86:fb:0d:f4:e5:8b:d0:2c:23:8a:29:fc:74: 0c:0a:2c:d6:c9:aa:ea:2b:d1:eb:f8:d5:ca:f8:c9:7f:ab:2a: af:ba:05:40:02:a2:11:63:58:25:97:67:a0:4a:46:a9:f0:58: b9:e5:06:1f:e3:6e:81:0f:6f:16:47:2c:26:37:77:b2:3a:34: 6e:8e:bf:aa:e7:2b:dc:57:de:75:14:e2:02:91:0a:17:1a:49: a3:1b:91:86:25:3a:3c:67:14:9f:ad:4b:33:af:8d:2f:2b:f7: dc:95:a3:be:bc:18:f1:fe:c0:a6:c3:2e:ff:92:a3:27:8a:3d: 92:53:a9:e6:96:44:2c:ec:71:73:3c:a4:83:68:a4:b4:09:09: 23:23:df:a0:45:f6:02:b6:a3:72:9c:e3:7c:9a:f2:a7:35:b5: b9:70:78:ed:20:aa:4a:2a:88:1b:53:cf:16:9c:93:ac:b2:74: 01:1c:0f:35:8d:97:26:dc:41:a5:3d:f5:e8:a9:ad:57:95:fa: 73:03:b6:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZ6QZ8IBVire6QWm7jFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YjQwNmM1NDhlN2U0MWMxNmY4ODljODkwMDc2ZTllNTg2 ZmYzNTQwHhcNMjYwMjA5MDkwMDM2WhcNMjYwMjEwMDkwMDM2WjAzMTEwLwYDVQQD Eyg2NTIyNjU0M2JlZmNkMzlkZDZjNGQwN2UyZjFkMDc4OWFiYmIxYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYm7Z2vSpaq4gANW0Qxc7utzAk/q /9PahGSVBPg9LxblX5IIkEnVQNhTvNiNOmP/dLHCHYi03QdfCsP0E+uVu/r/K/vJ 3TUoExonWQ2Qy5Y6WDOq2NynU161mCsPCstvXfxUVVczyrz1idmSf5uXynu5K46c GEQ8DgJgerAn+cJ5I50SVCPG2h20HL/QETlsyu4u7IQpJhi+iEX1hivMr9RgWCdv rQKQqksMVwnEK1qlt5A8p65RPoWvodXa6VuUel9TjCuwDqQpA9dk4Q727bxWmbi0 qUMTbNmop+CvqviOqMkGjLPPMcSA6GeO7N4PXb08iQiJMqGfcMW//rVqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUiZUO+/NOd1sTQfi8dB4mruxwbMB8GA1UdIwQY MBaAFEi0BsVI5+QcFviJyJAHbp5Yb/NUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZmM4Y2MtOWM5Yi00ZTg3LWJhZTUt OTBmMDEyOThiZjkzLzEvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZmM4Y2MtOWM5Yi00ZTg3LWJhZTUtOTBmMDEyOThiZjkz LzEvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOSTjjoq L94rzcVYi4TNb8MBxMNng24THtbGxPi8XqgppO975bVTuNgdhcWH/fUpRrMtIXTd QkHPJxyG+w305YvQLCOKKfx0DAos1smq6ivR6/jVyvjJf6sqr7oFQAKiEWNYJZdn oEpGqfBYueUGH+NugQ9vFkcsJjd3sjo0bo6/qucr3FfedRTiApEKFxpJoxuRhiU6 PGcUn61LM6+NLyv33JWjvrwY8f7ApsMu/5KjJ4o9klOp5pZELOxxczykg2iktAkJ IyPfoEX2ArajcpzjfJrypzW1uXB47SCqSiqIG1PPFpyTrLJ0ARwPNY2XJtxBpT31 6KmtV5X6cwO2XQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:58 2026 by rpki-client