This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json) Hash identifier: lEJk3xx53c90S7+mJANMgyjHXMOcFJg9PQvtWL1DW/Y= Subject key identifier: 5B:62:60:6A:82:4B:78:D7:4A:67:96:48:87:53:72:29:03:61:0F:06 Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Certificate serial: 019C427D314DD2CBA4BB9E4EAD7D1957DC2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 13:00:26 +0000 Manifest this update: Mon 09 Feb 2026 13:00:26 +0000 Manifest next update: Tue 10 Feb 2026 13:00:26 +0000 Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: zMD0aTWKua/jrz9RaCk3W4F0w7bBgH2+NtvBHa8qaig=) 2: lqVBKhe9BI1k73opGPRpRu7Tjm8.roa (hash: ANewMCPdr9EPXxV8b7rhqmy3E65gN7TANy2BLw8Q6mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:31:4d:d2:cb:a4:bb:9e:4e:ad:7d:19:57:dc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Validity Not Before: Feb 9 13:00:26 2026 GMT Not After : Feb 10 13:00:26 2026 GMT Subject: CN=5b62606a824b78d74a6796488753722903610f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:b7:d4:fa:c1:2c:73:4b:d7:b3:0a:96:1f: 9f:77:22:b7:e1:bd:e0:7d:af:e2:43:d2:58:68:c6: 96:1c:32:7a:7c:5f:94:7e:0b:af:0f:9a:fc:11:34: f1:ba:95:6b:6c:25:e2:3f:89:09:6d:bc:cd:50:23: a0:1d:b9:e5:2d:ad:21:6a:17:86:b9:f7:e5:3e:e3: a8:fe:b3:bc:c3:bf:ea:c5:9a:ec:9e:05:8e:85:47: 39:60:72:68:a2:c0:26:ee:99:90:71:94:f0:22:7d: 21:77:1f:de:80:ae:71:36:37:21:98:61:ea:91:96: 15:4b:24:b4:cd:19:83:9f:8c:c9:99:a5:5c:74:1f: d9:3d:90:36:ad:32:1c:e8:e0:ad:fe:a0:b6:cb:3d: f2:c2:83:4e:1a:48:99:a1:b7:ff:09:dc:39:74:25: d1:f9:4b:16:b4:82:02:b3:a2:ab:da:e7:ae:a3:08: 0a:02:dd:85:90:2c:4e:85:7d:a9:a1:02:68:6e:e3: 57:1f:8d:e7:57:6b:c3:16:f3:f9:2e:14:a6:0c:6f: 14:d1:c9:bc:90:cc:4e:83:aa:65:7b:cb:5c:4c:ee: e3:87:49:8c:28:c0:39:03:a5:d9:53:af:4f:28:22: 51:f7:ce:67:71:e0:af:ec:ff:51:68:f4:52:ee:81: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:60:6A:82:4B:78:D7:4A:67:96:48:87:53:72:29:03:61:0F:06 X509v3 Authority Key Identifier: keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:50:3f:f2:83:bd:d8:a7:8f:4c:ac:82:f7:4c:b9:1c:48:19: 5e:7b:f9:3a:e1:51:96:11:ef:84:7d:d6:35:23:bf:0f:e4:a5: 53:cc:cc:80:5a:50:92:11:4b:34:41:fd:38:fa:87:ce:03:10: 73:ee:57:58:24:65:33:05:a4:85:9f:de:63:2e:78:8b:2f:2a: 4f:8e:b5:b7:23:29:66:69:96:7c:ce:33:ae:d2:b0:bf:66:62: 98:ad:02:70:fc:dc:1c:36:d9:73:3f:71:3b:0f:35:4c:e2:2b: 17:de:89:2a:9a:ae:d7:2f:81:81:66:3c:99:ce:4c:e5:b8:e8: a8:52:85:7e:93:01:f7:91:dc:c8:65:89:bf:57:26:a8:a6:00: 04:91:e4:88:ad:f6:65:4c:43:d1:e8:12:5c:80:c9:4a:6c:92: 1a:93:95:bf:bc:6f:fd:d5:a4:d4:c4:16:bf:da:49:cf:d6:e4: 0c:89:00:7d:41:aa:db:1d:02:23:c1:94:90:73:f3:ae:98:b8: 0b:76:28:b8:31:90:b9:94:01:c8:f4:ae:0a:02:e3:d5:35:de: 68:19:4a:dd:90:0b:14:21:ef:97:bd:40:f8:7e:61:67:0f:a1: 53:89:1c:df:70:0e:ba:5f:3c:3f:72:34:b9:66:1c:e5:b8:eb: d3:e1:f6:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTFN0suku55OrX0ZV9wuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWZhMTE3NGIwZWVlYTI4ZTcwMzFmMDE3YTkzZWJlNWRl NDI4ZTQwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD Eyg1YjYyNjA2YTgyNGI3OGQ3NGE2Nzk2NDg4NzUzNzIyOTAzNjEwZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/a31PrBLHNL17MKlh+fdyK34b3g fa/iQ9JYaMaWHDJ6fF+UfguvD5r8ETTxupVrbCXiP4kJbbzNUCOgHbnlLa0haheG ufflPuOo/rO8w7/qxZrsngWOhUc5YHJoosAm7pmQcZTwIn0hdx/egK5xNjchmGHq kZYVSyS0zRmDn4zJmaVcdB/ZPZA2rTIc6OCt/qC2yz3ywoNOGkiZobf/Cdw5dCXR +UsWtIICs6Kr2ueuowgKAt2FkCxOhX2poQJobuNXH43nV2vDFvP5LhSmDG8U0cm8 kMxOg6ple8tcTO7jh0mMKMA5A6XZU69PKCJR985nceCv7P9RaPRS7oFnWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtiYGqCS3jXSmeWSIdTcikDYQ8GMB8GA1UdIwQY MBaAFEivoRdLDu6ijnAx8BepPr5d5CjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMt ZjJlMDU4OTU3YmM5LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMtZjJlMDU4OTU3YmM5 LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFA/8oO9 2KePTKyC90y5HEgZXnv5OuFRlhHvhH3WNSO/D+SlU8zMgFpQkhFLNEH9OPqHzgMQ c+5XWCRlMwWkhZ/eYy54iy8qT461tyMpZmmWfM4zrtKwv2ZimK0CcPzcHDbZcz9x Ow81TOIrF96JKpqu1y+BgWY8mc5M5bjoqFKFfpMB95HcyGWJv1cmqKYABJHkiK32 ZUxD0egSXIDJSmySGpOVv7xv/dWk1MQWv9pJz9bkDIkAfUGq2x0CI8GUkHPzrpi4 C3YouDGQuZQByPSuCgLj1TXeaBlK3ZALFCHvl71A+H5hZw+hU4kc33AOul88P3I0 uWYc5bjr0+H2Zw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:22 2026 by rpki-client