This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json) Hash identifier: 85vJCUW7ioB6zjHa7ioIBj1oN6XgDyH2gy01yBZyF3I= Subject key identifier: 79:1E:3B:6A:8F:8F:CE:55:58:88:1B:F2:23:38:56:6F:86:44:FC:03 Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd Certificate serial: 019C4390A056A6CC23B8DC16B2BEA497E90F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft Manifest number: 13D3 Signing time: Mon 09 Feb 2026 18:01:17 +0000 Manifest this update: Mon 09 Feb 2026 18:01:17 +0000 Manifest next update: Tue 10 Feb 2026 18:01:17 +0000 Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: w5yT0APaRu0ehGc0+XV1ImWF1S3D0wEEhookxqGY0OI=) 2: wOjdRDY4rMDU4XDk35HoLt7uT2M.roa (hash: 7YjJqmLdz1HfJE+GpOkltOPkNzD9vAKu54sBhDV3osE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a0:56:a6:cc:23:b8:dc:16:b2:be:a4:97:e9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd Validity Not Before: Feb 9 18:01:17 2026 GMT Not After : Feb 10 18:01:17 2026 GMT Subject: CN=791e3b6a8f8fce5558881bf22338566f8644fc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:86:d3:1f:91:18:a5:5c:e1:05:24:8c:bd: c7:0c:aa:3b:ab:24:1a:e9:49:06:26:d2:4d:45:e1: 69:f1:51:60:78:c5:67:3f:01:fd:44:16:f0:2b:54: 88:6f:cb:7c:18:02:76:cc:e2:5a:35:ec:e9:28:18: 97:a8:f3:97:24:98:9c:42:f9:7c:53:97:2b:31:8b: c1:8b:9e:61:77:7a:55:2f:f8:16:9d:eb:fe:63:34: 91:3b:2d:aa:88:3f:fc:d5:ee:a5:17:27:93:4e:f4: 2b:66:b1:57:97:d9:00:06:2c:cb:77:85:fd:03:7b: ed:b5:f9:02:38:8a:6c:31:b9:08:c9:c1:f4:df:6c: e3:05:04:92:a3:a3:2a:95:69:a3:95:e5:17:db:7a: 0f:1c:71:42:54:97:9d:c4:2b:a3:12:11:0d:32:6a: df:08:49:38:b6:69:24:b7:43:f4:a1:ca:8d:d7:d6: e1:3e:20:36:9c:24:d7:e8:32:21:fb:92:00:1e:25: e2:c9:05:e3:06:f8:49:1a:b7:f5:aa:f6:74:42:1f: ab:d9:a9:76:00:f9:03:dd:40:db:48:47:ee:75:83: 43:9d:e4:69:8f:ea:3c:22:ed:b8:4d:c8:a6:77:46: c1:dc:68:33:0e:50:21:89:2a:cb:e5:dd:36:3e:dd: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1E:3B:6A:8F:8F:CE:55:58:88:1B:F2:23:38:56:6F:86:44:FC:03 X509v3 Authority Key Identifier: keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:04:2d:25:b9:64:f4:7a:5b:5e:eb:e0:39:0d:8d:1e:bf:64: 65:a7:bc:5e:dc:64:f6:0d:67:3a:66:d9:65:f6:5b:0b:06:09: 54:a0:73:97:51:b2:58:14:16:8d:5d:9e:aa:51:58:c8:10:c3: af:67:b3:b7:df:40:2c:0a:8f:c7:16:22:1f:83:e5:4c:b8:50: 73:5b:88:0b:9e:e8:10:5f:ba:68:75:a6:01:8b:0e:36:7a:d9: 12:de:9e:4c:7d:65:ed:31:44:eb:93:00:c0:08:aa:38:06:45: f6:1e:98:04:4e:5a:67:9f:52:24:ea:3b:df:de:41:0b:af:74: 85:94:de:ae:88:ee:e9:0c:01:54:f3:71:a7:bb:77:ac:8f:bf: a4:bf:d4:b2:bd:6d:a9:f8:34:fa:2f:c8:df:71:96:ed:7b:ee: 6f:6f:50:ec:a3:a4:b4:a1:cf:6d:97:e3:cb:a7:18:71:89:ea: e3:5e:eb:e7:a7:a4:9a:2f:6a:94:20:1c:33:1e:03:0b:54:00: 7a:f5:ae:b5:0e:45:20:a3:58:5c:50:ca:e5:4e:bc:77:0f:c9: 79:46:d7:80:1c:74:6e:b2:44:c4:3c:37:1e:05:8d:b5:4b:5f: 4d:e4:ff:cd:4b:a3:dc:06:3f:04:d3:8e:cb:36:c2:83:bc:88: eb:0f:e9:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKBWpswjuNwWsr6kl+kPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj ZTU5ZmQwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD Eyg3OTFlM2I2YThmOGZjZTU1NTg4ODFiZjIyMzM4NTY2Zjg2NDRmYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGWG0x+RGKVc4QUkjL3HDKo7qyQa 6UkGJtJNReFp8VFgeMVnPwH9RBbwK1SIb8t8GAJ2zOJaNezpKBiXqPOXJJicQvl8 U5crMYvBi55hd3pVL/gWnev+YzSROy2qiD/81e6lFyeTTvQrZrFXl9kABizLd4X9 A3vttfkCOIpsMbkIycH032zjBQSSo6MqlWmjleUX23oPHHFCVJedxCujEhENMmrf CEk4tmkkt0P0ocqN19bhPiA2nCTX6DIh+5IAHiXiyQXjBvhJGrf1qvZ0Qh+r2al2 APkD3UDbSEfudYNDneRpj+o8Iu24Tcimd0bB3GgzDlAhiSrL5d02Pt2PaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkeO2qPj85VWIgb8iM4Vm+GRPwDMB8GA1UdIwQY MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt NjliYjI4MmNmNWFlLzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQQtJblk 9HpbXuvgOQ2NHr9kZae8Xtxk9g1nOmbZZfZbCwYJVKBzl1GyWBQWjV2eqlFYyBDD r2ezt99ALAqPxxYiH4PlTLhQc1uIC57oEF+6aHWmAYsONnrZEt6eTH1l7TFE65MA wAiqOAZF9h6YBE5aZ59SJOo7395BC690hZTeroju6QwBVPNxp7t3rI+/pL/Usr1t qfg0+i/I33GW7Xvub29Q7KOktKHPbZfjy6cYcYnq417r56ekmi9qlCAcMx4DC1QA evWutQ5FIKNYXFDK5U68dw/JeUbXgBx0brJExDw3HgWNtUtfTeT/zUuj3AY/BNOO yzbCg7yI6w/p7Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:10 2026 by rpki-client