This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json) Hash identifier: fl4+DkOnzKkjSTuSqlsBb1pcOL15gTGgXKxavjRGQO0= Subject key identifier: 3B:C5:9F:6C:8D:FB:4A:25:17:67:B8:37:0B:07:3C:A6:B8:BC:BC:F4 Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Certificate serial: 019C43C76A72D0CEC9D6AF55BE9678792010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 19:01:08 +0000 Manifest this update: Mon 09 Feb 2026 19:01:08 +0000 Manifest next update: Tue 10 Feb 2026 19:01:08 +0000 Files and hashes: 1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=) 2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: KPkzd9jlEbIsEELpjoOR+P6lyCRKvRAZpVHgo+hPbYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:6a:72:d0:ce:c9:d6:af:55:be:96:78:79:20:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Validity Not Before: Feb 9 19:01:08 2026 GMT Not After : Feb 10 19:01:08 2026 GMT Subject: CN=3bc59f6c8dfb4a251767b8370b073ca6b8bcbcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:36:5d:f7:69:61:3d:98:7f:27:45:e1:0d: 32:02:7d:3d:c7:b9:af:19:90:49:5e:79:0f:8f:2a: 02:db:e3:a5:78:56:1a:02:73:68:55:77:8f:18:3c: dc:e2:e4:be:b7:f5:df:02:e5:cc:2f:e5:fb:a7:b1: 11:79:40:65:40:57:55:ef:e2:8a:92:64:a7:f5:79: 41:e0:d9:f0:ef:b8:d2:20:8d:e6:33:56:40:f4:2a: 5e:58:21:00:b2:b2:37:8f:eb:d7:22:dd:af:1a:fa: 35:d9:fa:d5:76:c9:04:19:5a:ce:48:d6:57:e2:de: c1:47:a5:71:50:2b:79:f7:91:bd:19:8b:f6:20:d4: 14:b2:4c:98:2a:97:fb:5a:f2:b9:b3:20:e0:3f:c8: df:a5:b4:75:d1:0b:7e:0f:2c:91:a7:11:57:ad:da: 99:11:55:33:ca:32:80:1c:54:fb:18:55:fa:d0:61: 57:62:60:7c:d4:15:68:d5:3b:b1:cc:07:1e:8f:c4: 49:70:01:ae:fc:42:ec:be:01:61:e7:0c:0b:85:8c: bf:f9:dc:5e:6b:ad:93:93:dc:6a:8a:18:0d:4c:a4: d2:d3:0a:87:7f:4a:c4:72:fd:c6:a2:96:1f:d0:8f: bf:2c:3f:58:a5:5e:50:8a:c8:17:68:f9:58:c1:78: 6a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C5:9F:6C:8D:FB:4A:25:17:67:B8:37:0B:07:3C:A6:B8:BC:BC:F4 X509v3 Authority Key Identifier: keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:78:54:7a:2f:a4:b4:65:df:21:93:f2:53:81:00:a5:ef:cd: 61:14:07:d5:1d:86:92:88:8c:ad:9d:f6:c3:ca:a4:ed:fc:ac: b8:d8:17:3c:aa:07:be:4c:47:fb:d1:4c:41:48:14:8c:59:49: 74:c7:a7:51:74:12:3e:8d:89:ce:60:94:db:50:a6:02:c7:02: d1:0d:0b:97:eb:a4:0f:30:e2:48:19:2d:4e:e9:07:b5:c6:f7: c4:e5:e3:61:c8:4a:32:e6:18:1f:b3:1c:56:bf:56:91:77:cc: c9:36:e5:d9:35:1c:a9:0d:56:0b:55:f5:f4:be:d5:7d:bb:b5: ae:f8:13:4a:cf:f1:a2:46:ff:5f:b1:58:8a:b6:f9:4f:43:0c: 5a:eb:3f:39:f7:6c:49:80:60:50:4d:47:f5:3b:4a:13:1a:c4: 41:c5:25:37:e6:14:c8:1c:f0:3b:a5:22:77:55:e2:fb:06:b0: 34:79:a1:35:09:89:05:93:8d:e5:b1:6f:94:0a:77:80:61:ce: 51:0a:f5:26:89:a1:e5:6e:64:8a:fc:1e:e2:4f:a0:97:80:5c: ac:73:b1:24:e2:e2:8f:d6:d1:6b:a7:c6:c7:4c:c1:ec:9e:bf: e2:3f:5e:90:71:b2:a0:d8:54:b0:1b:d4:5e:4a:8c:7c:cd:27: ea:3a:08:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx2py0M7J1q9VvpZ4eSAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz M2I3OGIwHhcNMjYwMjA5MTkwMTA4WhcNMjYwMjEwMTkwMTA4WjAzMTEwLwYDVQQD EygzYmM1OWY2YzhkZmI0YTI1MTc2N2I4MzcwYjA3M2NhNmI4YmNiY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ02XfdpYT2YfydF4Q0yAn09x7mv GZBJXnkPjyoC2+OleFYaAnNoVXePGDzc4uS+t/XfAuXML+X7p7EReUBlQFdV7+KK kmSn9XlB4Nnw77jSII3mM1ZA9CpeWCEAsrI3j+vXIt2vGvo12frVdskEGVrOSNZX 4t7BR6VxUCt595G9GYv2INQUskyYKpf7WvK5syDgP8jfpbR10Qt+DyyRpxFXrdqZ EVUzyjKAHFT7GFX60GFXYmB81BVo1TuxzAcej8RJcAGu/ELsvgFh5wwLhYy/+dxe a62Tk9xqihgNTKTS0wqHf0rEcv3GopYf0I+/LD9YpV5QisgXaPlYwXhqDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvFn2yN+0olF2e4NwsHPKa4vLz0MB8GA1UdIwQY MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5 LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXhUei+k tGXfIZPyU4EApe/NYRQH1R2GkoiMrZ32w8qk7fysuNgXPKoHvkxH+9FMQUgUjFlJ dMenUXQSPo2JzmCU21CmAscC0Q0Ll+ukDzDiSBktTukHtcb3xOXjYchKMuYYH7Mc Vr9WkXfMyTbl2TUcqQ1WC1X19L7Vfbu1rvgTSs/xokb/X7FYirb5T0MMWus/Ofds SYBgUE1H9TtKExrEQcUlN+YUyBzwO6Uid1Xi+wawNHmhNQmJBZON5bFvlAp3gGHO UQr1Jomh5W5kivwe4k+gl4BcrHOxJOLij9bRa6fGx0zB7J6/4j9ekHGyoNhUsBvU XkqMfM0n6joIxQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:41 2026 by rpki-client