This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json) Hash identifier: +fz6nkDi1pLKt3t4ELld/QC5Hn5s8g9P0ony7tNAwxU= Subject key identifier: 08:B2:98:B2:89:9B:3E:A8:EB:CC:A7:2E:51:18:FF:9B:75:E8:6B:73 Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Certificate serial: 019C451149124875FEEEC523C882231CDAA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft Manifest number: 0952 Signing time: Tue 10 Feb 2026 01:01:26 +0000 Manifest this update: Tue 10 Feb 2026 01:01:26 +0000 Manifest next update: Wed 11 Feb 2026 01:01:26 +0000 Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: pBzHkVBYb97kCKiOOL8b+odXshvbARRhNA9Of5aOxEA=) 2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:11:49:12:48:75:fe:ee:c5:23:c8:82:23:1c:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Validity Not Before: Feb 10 01:01:26 2026 GMT Not After : Feb 11 01:01:26 2026 GMT Subject: CN=08b298b2899b3ea8ebcca72e5118ff9b75e86b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:91:86:2a:1b:d4:87:1d:d5:63:cb:48:ed: 2f:a9:83:3e:ed:30:a5:e4:51:e7:fe:f1:2b:ca:86: 04:ad:de:59:ab:ef:55:04:26:be:e3:30:6d:6a:91: c7:02:ad:df:63:d1:cc:ea:cb:55:18:e1:6c:eb:ae: e9:c9:95:7b:a1:2f:04:46:e7:56:e5:cd:89:6a:3d: 33:5d:31:6e:56:f2:96:77:67:53:89:8d:02:cd:5c: c8:2a:28:70:29:f9:bd:1b:19:39:db:7b:7e:67:2c: d9:af:bb:9a:ce:0f:dd:43:02:61:9f:c5:cb:8e:d7: ea:8e:4d:e4:03:6b:eb:e7:2c:6c:f2:80:59:be:bd: 8b:dc:6b:08:00:7b:2c:2b:31:41:ce:56:1f:fc:d7: c3:9a:a9:8b:84:ec:2f:72:b7:91:29:29:e2:f4:e9: ec:44:9c:65:9d:87:4a:fb:f5:2b:f1:3b:41:3c:8c: 7f:94:70:da:55:06:38:15:4b:7d:29:09:44:17:54: 17:79:0e:db:c0:56:56:86:87:35:c5:14:45:6b:1f: 8c:40:fd:27:95:c1:fd:3b:49:c2:0e:3e:86:87:93: 3f:fc:ca:85:36:1f:31:10:ae:92:a9:1c:a5:82:0f: 44:db:88:78:28:01:db:98:19:d7:71:f7:9f:57:c4: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B2:98:B2:89:9B:3E:A8:EB:CC:A7:2E:51:18:FF:9B:75:E8:6B:73 X509v3 Authority Key Identifier: keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e5:fe:14:06:c6:60:6d:81:d3:75:66:bc:82:a4:5f:b6:61: 67:40:88:49:19:ac:45:27:a4:d1:c8:2d:48:43:e8:01:3c:59: 93:a6:27:55:fb:d5:a2:3b:6b:81:7e:a6:ea:14:1c:d3:e6:57: 4d:fd:7d:7c:fc:25:15:11:51:82:2e:3f:05:e5:d0:9d:97:6c: 33:29:02:32:9b:6e:40:af:ce:be:d7:fb:10:e4:44:e4:46:d2: f6:da:47:06:cf:3e:51:4c:5c:7c:17:88:94:e1:6d:84:45:fe: 91:70:a1:ae:9d:f7:10:9e:4f:f9:c3:91:fe:44:26:a4:64:c4: 90:d7:66:d5:64:dd:2d:1c:cf:ba:be:0e:45:1f:4d:68:d5:77: c8:53:38:5e:24:e3:08:09:b4:e2:14:e0:0e:b2:69:3f:27:98: 5a:60:bb:2c:1b:4f:c8:60:1a:78:0f:eb:bf:0a:ca:f5:ec:6b: 4f:b7:a9:9b:ab:75:37:9f:98:d5:14:8b:2f:0f:75:aa:c9:be: 0f:5b:bc:1d:5a:e7:47:a0:d2:7d:7c:82:a2:79:84:16:df:84: 79:11:96:11:07:2e:3c:34:3d:11:f6:d2:68:1b:42:bd:8b:04: 6c:aa:36:88:3c:e9:f2:42:26:83:c3:b5:e3:d2:55:aa:32:07: b3:2c:11:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEUkSSHX+7sUjyIIjHNqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ1ZTU4MjA2YTFiOWQ1OWVkZGZhOGY5ODhiMzI3MTdi ZjljNmIwHhcNMjYwMjEwMDEwMTI2WhcNMjYwMjExMDEwMTI2WjAzMTEwLwYDVQQD EygwOGIyOThiMjg5OWIzZWE4ZWJjY2E3MmU1MTE4ZmY5Yjc1ZTg2YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqORhiob1Icd1WPLSO0vqYM+7TCl 5FHn/vEryoYErd5Zq+9VBCa+4zBtapHHAq3fY9HM6stVGOFs667pyZV7oS8ERudW 5c2Jaj0zXTFuVvKWd2dTiY0CzVzIKihwKfm9Gxk523t+ZyzZr7uazg/dQwJhn8XL jtfqjk3kA2vr5yxs8oBZvr2L3GsIAHssKzFBzlYf/NfDmqmLhOwvcreRKSni9Ons RJxlnYdK+/Ur8TtBPIx/lHDaVQY4FUt9KQlEF1QXeQ7bwFZWhoc1xRRFax+MQP0n lcH9O0nCDj6Gh5M//MqFNh8xEK6SqRylgg9E24h4KAHbmBnXcfefV8SKhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiymLKJmz6o68ynLlEY/5t16GtzMB8GA1UdIwQY MBaAFEvUXlggahudWe3fqPmIsycXv5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQt MDc4NTEwY2VhYzBkLzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQtMDc4NTEwY2VhYzBk LzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+X+FAbG YG2B03VmvIKkX7ZhZ0CISRmsRSek0cgtSEPoATxZk6YnVfvVojtrgX6m6hQc0+ZX Tf19fPwlFRFRgi4/BeXQnZdsMykCMptuQK/Ovtf7EORE5EbS9tpHBs8+UUxcfBeI lOFthEX+kXChrp33EJ5P+cOR/kQmpGTEkNdm1WTdLRzPur4ORR9NaNV3yFM4XiTj CAm04hTgDrJpPyeYWmC7LBtPyGAaeA/rvwrK9exrT7epm6t1N5+Y1RSLLw91qsm+ D1u8HVrnR6DSfXyConmEFt+EeRGWEQcuPDQ9EfbSaBtCvYsEbKo2iDzp8kImg8O1 49JVqjIHsywRIg== -----END CERTIFICATE-----Generated at Tue Feb 10 10:13:29 2026 by rpki-client