This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json) Hash identifier: s8DCsNMjp6qbn9ZBUkiEBehy/DoKLA7W+uPywyeYjzM= Subject key identifier: 21:D2:11:01:EB:E1:46:1F:BF:02:32:45:CA:E0:98:36:EE:AE:09:A5 Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26 Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226 Certificate serial: 019C4246993C057B33F47D34D8B084755664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft Manifest number: 16E3 Signing time: Mon 09 Feb 2026 12:00:48 +0000 Manifest this update: Mon 09 Feb 2026 12:00:48 +0000 Manifest next update: Tue 10 Feb 2026 12:00:48 +0000 Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: phWBPtLtga0RxoOBNmk5pWB1sVsON5Jt55z+HVwDB/Q=) 2: jHBsMIq_X95A0zcUUfrUU1TqRyA.roa (hash: di3dTOJ0E+QggdsPKZ6fs3tupenGj8s6a2rjVQo/JqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:99:3c:05:7b:33:f4:7d:34:d8:b0:84:75:56:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226 Validity Not Before: Feb 9 12:00:48 2026 GMT Not After : Feb 10 12:00:48 2026 GMT Subject: CN=21d21101ebe1461fbf023245cae09836eeae09a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:04:dc:ed:ff:aa:07:78:11:a9:8e:b5:64: 36:59:b7:3e:9f:18:b4:e5:a0:65:4b:17:0b:b0:8b: d3:02:18:7c:1c:de:54:5f:98:b6:c2:74:aa:e0:c2: 40:e7:28:3d:36:50:c7:c3:4b:8e:b2:e2:70:89:c9: 46:c8:b3:e2:40:eb:93:42:6f:ec:4f:0b:fd:44:5c: ac:aa:06:75:6f:0a:e4:95:1b:a2:79:14:38:8a:33: c3:1a:1b:9d:d7:75:a3:4e:78:44:df:8a:18:16:d1: 4d:d8:6b:d3:12:3a:d9:fb:93:97:cb:64:17:e6:8c: 3c:34:36:d8:99:f9:41:9f:f4:77:0e:bf:99:8c:1f: 74:ac:eb:e5:35:54:16:5d:d0:4c:f4:74:6b:7c:53: 23:a1:f4:37:db:75:d9:b4:4a:e0:b3:2e:23:32:c8: ec:26:d3:0e:1f:cf:8f:01:d8:d8:98:41:22:6d:e1: 59:d6:37:c7:31:eb:ad:dc:e2:81:84:ae:43:e0:36: cb:4e:60:5c:7c:3a:41:06:e3:22:75:d4:f9:ee:fe: 98:0c:91:05:0c:74:fa:bf:27:23:dd:33:41:f3:81: f7:ed:3e:c7:3d:00:ad:c5:5d:82:fc:d3:17:d0:cc: 40:1c:89:e5:ce:e7:77:4e:e6:c7:50:88:af:25:d4: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:11:01:EB:E1:46:1F:BF:02:32:45:CA:E0:98:36:EE:AE:09:A5 X509v3 Authority Key Identifier: keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:66:dc:d4:06:c0:c1:13:2a:f2:bf:91:34:dc:54:a9:ec:6f: c4:19:bd:32:5b:ff:84:b0:53:2f:cb:a7:79:e5:ef:56:91:52: f5:e8:32:a4:5c:40:46:80:60:6c:e4:f4:a3:df:3d:cc:1e:22: 74:0c:ab:2b:6c:bd:1a:37:76:af:1b:11:b1:7f:c5:31:ac:ce: 3a:e8:27:60:08:dc:b7:d4:ec:e3:d2:32:ba:37:5b:21:48:aa: 1a:75:9f:04:60:5b:bc:5c:1b:de:aa:51:e9:15:bc:b7:69:e2: 12:35:08:05:0a:ba:a5:80:0b:f1:be:b0:22:ee:be:f7:98:7a: b2:45:a6:23:da:0b:7e:8e:2d:b2:e3:99:60:58:4c:b0:72:1e: 89:e6:59:e0:e8:86:8c:50:26:2f:1b:82:de:81:5d:bb:36:17: 34:65:6d:09:3e:31:40:d5:0d:53:fa:12:16:ae:7d:fb:36:17: 15:dc:07:cd:b8:5e:9e:b9:91:88:fc:e0:b7:18:c2:5c:cd:6f: 22:31:bd:9c:c7:99:31:d3:82:23:7e:59:7d:20:7d:0e:a8:bb: 94:bb:12:40:ad:57:c7:54:19:b1:93:2e:26:b0:22:83:9e:9b: a1:72:4a:08:b6:d1:a6:75:82:77:58:c1:db:74:f7:66:b1:26: 35:df:1e:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpk8BXsz9H002LCEdVZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTA5NTNhN2IzMDNkNmExZTlhMDI4NzE2MGMyZjQ2MGYw N2YyMjYwHhcNMjYwMjA5MTIwMDQ4WhcNMjYwMjEwMTIwMDQ4WjAzMTEwLwYDVQQD EygyMWQyMTEwMWViZTE0NjFmYmYwMjMyNDVjYWUwOTgzNmVlYWUwOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLAE3O3/qgd4EamOtWQ2Wbc+nxi0 5aBlSxcLsIvTAhh8HN5UX5i2wnSq4MJA5yg9NlDHw0uOsuJwiclGyLPiQOuTQm/s Twv9RFysqgZ1bwrklRuieRQ4ijPDGhud13WjTnhE34oYFtFN2GvTEjrZ+5OXy2QX 5ow8NDbYmflBn/R3Dr+ZjB90rOvlNVQWXdBM9HRrfFMjofQ323XZtErgsy4jMsjs JtMOH8+PAdjYmEEibeFZ1jfHMeut3OKBhK5D4DbLTmBcfDpBBuMiddT57v6YDJEF DHT6vycj3TNB84H37T7HPQCtxV2C/NMX0MxAHInlzud3TubHUIivJdTAlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHSEQHr4UYfvwIyRcrgmDburgmlMB8GA1UdIwQY MBaAFEvglTp7MD1qHpoChxYML0YPB/ImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgt ZWU5NmQwZGYwMDAzLzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgtZWU5NmQwZGYwMDAz LzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGbc1AbA wRMq8r+RNNxUqexvxBm9Mlv/hLBTL8uneeXvVpFS9egypFxARoBgbOT0o989zB4i dAyrK2y9Gjd2rxsRsX/FMazOOugnYAjct9Ts49IyujdbIUiqGnWfBGBbvFwb3qpR 6RW8t2niEjUIBQq6pYAL8b6wIu6+95h6skWmI9oLfo4tsuOZYFhMsHIeieZZ4OiG jFAmLxuC3oFduzYXNGVtCT4xQNUNU/oSFq59+zYXFdwHzbhenrmRiPzgtxjCXM1v IjG9nMeZMdOCI35ZfSB9Dqi7lLsSQK1Xx1QZsZMuJrAig56boXJKCLbRpnWCd1jB 23T3ZrEmNd8etQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:31 2026 by rpki-client