This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json) Hash identifier: 5iQYMQ1eoUotgdC0SQym1jIfJzYbY4k3NfNlsHTizWo= Subject key identifier: 7B:6E:44:AC:A9:F7:6E:52:AC:0C:BA:BE:B9:74:D8:E9:69:5A:E2:D7 Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90 Certificate serial: 019C438FC3A6D82ED3E6D92F69524C4EDF70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 18:00:20 +0000 Manifest this update: Mon 09 Feb 2026 18:00:20 +0000 Manifest next update: Tue 10 Feb 2026 18:00:20 +0000 Files and hashes: 1: HpnTbfS7S6BAaVqaUfZX-c0MU08.roa (hash: W27m8UR8xxwgjtT+uRjFRwsVQNdm+D+G6MLGi6nWkCc=) 2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: bZPVygK9ViAoNteclvK3u05Ns0kGbcQvYaIJ2Jbf1aA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:c3:a6:d8:2e:d3:e6:d9:2f:69:52:4c:4e:df:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90 Validity Not Before: Feb 9 18:00:20 2026 GMT Not After : Feb 10 18:00:20 2026 GMT Subject: CN=7b6e44aca9f76e52ac0cbabeb974d8e9695ae2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:db:56:d0:54:2c:09:9d:86:ef:2a:e7:9c:71: e0:2d:15:97:c4:5e:e4:60:64:99:b3:37:80:6e:96: be:56:32:9c:51:86:43:0a:2c:3f:4c:e1:0b:d0:b2: 7d:8c:31:45:ef:59:f6:2f:5c:42:df:34:fa:5c:7f: e9:f3:62:a8:23:96:c8:fa:7a:a7:0d:79:9f:8c:2b: ce:da:13:7e:76:d0:18:4a:a2:b1:14:99:9f:e4:67: 55:9d:df:b8:7c:d6:a4:96:be:2c:74:5a:de:8b:1d: 87:46:c8:a0:fa:e5:c7:9c:2d:c8:a2:cd:0d:e3:ea: 67:ae:97:d0:b9:da:2b:69:89:3b:78:1a:46:07:51: 30:a9:91:f6:e3:03:5a:49:a5:55:df:be:7d:3c:19: 79:f6:7e:6a:2b:73:50:11:bf:77:aa:58:ba:10:18: c0:7b:df:36:57:58:eb:e2:ee:04:e1:38:72:03:eb: ee:b3:b4:0a:24:eb:47:e7:5c:58:1c:a6:27:24:db: 95:43:6a:af:65:5a:1a:e9:ac:31:2b:50:80:51:7a: 20:d2:33:41:d0:0a:eb:68:2b:3a:1a:25:9e:db:4d: ec:92:8f:3c:d8:0f:63:53:cd:3a:b1:41:5f:b8:f6: 7e:fc:76:96:22:27:48:36:33:86:01:84:59:a3:dd: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6E:44:AC:A9:F7:6E:52:AC:0C:BA:BE:B9:74:D8:E9:69:5A:E2:D7 X509v3 Authority Key Identifier: keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e9:eb:9b:3c:66:53:a1:f2:ef:d0:09:42:ff:75:9a:22:34: 81:d1:b5:f9:e4:8c:cb:79:31:1a:f8:6e:77:c1:f6:08:6e:3c: d1:40:e9:9a:54:65:ec:30:53:35:4f:63:53:e3:8f:d8:8b:63: 33:ef:4d:46:d2:8b:7a:4a:67:e8:20:d4:f3:ae:26:20:98:49: fa:42:00:e4:76:e7:8d:cb:a9:43:19:7f:a9:3c:d2:cf:d1:20: 0a:74:a1:55:f9:8a:47:4c:00:f4:e7:99:89:dd:e8:aa:c9:22: 8c:75:24:55:92:ad:f8:10:9c:ea:db:e9:92:70:a6:6f:58:32: d7:56:01:0e:00:ce:36:c6:a4:6f:7e:f3:21:11:d7:eb:b4:78: f5:f4:de:49:6f:eb:d6:e2:28:4a:1c:1c:b7:fe:18:dd:a4:74: fd:63:51:8c:a9:d1:74:2b:c5:eb:7b:31:7e:17:ed:5e:3b:3c: 06:b6:0e:c3:c6:9f:69:c6:cf:38:2b:04:f8:41:01:e1:01:48: fe:ba:c7:c5:f1:64:29:70:9d:98:4d:f2:d4:3d:fd:99:cd:f6: a0:f2:85:a5:e8:5f:2f:06:ee:8d:9e:75:66:5b:d0:c0:bc:27: fe:c1:d5:59:0a:42:59:6b:2a:67:4e:33:ec:a4:fd:6e:b4:d4: 16:99:7c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8Om2C7T5tkvaVJMTt9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw NzhiOTAwHhcNMjYwMjA5MTgwMDIwWhcNMjYwMjEwMTgwMDIwWjAzMTEwLwYDVQQD Eyg3YjZlNDRhY2E5Zjc2ZTUyYWMwY2JhYmViOTc0ZDhlOTY5NWFlMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjttW0FQsCZ2G7yrnnHHgLRWXxF7k YGSZszeAbpa+VjKcUYZDCiw/TOEL0LJ9jDFF71n2L1xC3zT6XH/p82KoI5bI+nqn DXmfjCvO2hN+dtAYSqKxFJmf5GdVnd+4fNaklr4sdFreix2HRsig+uXHnC3Ios0N 4+pnrpfQudoraYk7eBpGB1EwqZH24wNaSaVV3759PBl59n5qK3NQEb93qli6EBjA e982V1jr4u4E4ThyA+vus7QKJOtH51xYHKYnJNuVQ2qvZVoa6awxK1CAUXog0jNB 0ArraCs6GiWe203sko882A9jU806sUFfuPZ+/HaWIidINjOGAYRZo928cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtuRKyp925SrAy6vrl02OlpWuLXMB8GA1UdIwQY MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt Mjg0ZjdjOTYyMmI1LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1 LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlenrmzxm U6Hy79AJQv91miI0gdG1+eSMy3kxGvhud8H2CG480UDpmlRl7DBTNU9jU+OP2Itj M+9NRtKLekpn6CDU864mIJhJ+kIA5HbnjcupQxl/qTzSz9EgCnShVfmKR0wA9OeZ id3oqskijHUkVZKt+BCc6tvpknCmb1gy11YBDgDONsakb37zIRHX67R49fTeSW/r 1uIoShwct/4Y3aR0/WNRjKnRdCvF63sxfhftXjs8BrYOw8afacbPOCsE+EEB4QFI /rrHxfFkKXCdmE3y1D39mc32oPKFpehfLwbujZ51ZlvQwLwn/sHVWQpCWWsqZ04z 7KT9brTUFpl8yg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:14 2026 by rpki-client