This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/27db25-e236-4d36-8065-bbddcadc35f1/1/SfzpsG9Bta0pT7khZCD2n767RV4.mft File: SfzpsG9Bta0pT7khZCD2n767RV4.mft (raw, json) Hash identifier: kgE1BhvqYTq4a/VUedYYOtYaLtnXPpoBoKyb/9Wtx4g= Subject key identifier: 6F:02:DA:1E:69:10:4B:93:70:4D:B9:32:A1:3C:FB:DC:A1:AB:71:52 Authority key identifier: 49:FC:E9:B0:6F:41:B5:AD:29:4F:B9:21:64:20:F6:9F:BE:BB:45:5E Certificate issuer: /CN=49fce9b06f41b5ad294fb9216420f69fbebb455e Certificate serial: 019C424668E709948FD8F4D66333D2E4B2BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfzpsG9Bta0pT7khZCD2n767RV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/27db25-e236-4d36-8065-bbddcadc35f1/1/SfzpsG9Bta0pT7khZCD2n767RV4.mft Manifest number: 0B Signing time: Mon 09 Feb 2026 12:00:36 +0000 Manifest this update: Mon 09 Feb 2026 12:00:36 +0000 Manifest next update: Tue 10 Feb 2026 12:00:36 +0000 Files and hashes: 1: SfzpsG9Bta0pT7khZCD2n767RV4.crl (hash: KgzJHYObmzLKHsyCnX4d/DqLPXeO8jNcD2hWkvIrr1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/27db25-e236-4d36-8065-bbddcadc35f1/1/SfzpsG9Bta0pT7khZCD2n767RV4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/27db25-e236-4d36-8065-bbddcadc35f1/1/SfzpsG9Bta0pT7khZCD2n767RV4.mft rsync://rpki.ripe.net/repository/DEFAULT/SfzpsG9Bta0pT7khZCD2n767RV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:68:e7:09:94:8f:d8:f4:d6:63:33:d2:e4:b2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49fce9b06f41b5ad294fb9216420f69fbebb455e Validity Not Before: Feb 9 12:00:36 2026 GMT Not After : Feb 10 12:00:36 2026 GMT Subject: CN=6f02da1e69104b93704db932a13cfbdca1ab7152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:a6:dc:ce:6d:4c:a9:8e:14:0b:7b:43:80: ab:d6:e0:7b:e7:cc:da:a5:9b:bd:63:64:23:41:51: fe:48:15:56:b7:69:8f:d8:c0:b3:3f:be:f8:31:f6: ee:67:1e:bb:2d:48:bf:d1:1d:21:df:15:b0:4c:93: 20:ca:1b:91:8c:d0:23:e7:3a:99:b5:0a:75:07:8d: 77:8a:27:24:40:38:04:3f:7a:03:54:86:71:ab:5e: d1:76:b7:c5:f2:f2:8e:6c:e6:78:a5:e0:12:4b:c0: 28:e7:3d:7a:f2:ec:02:77:87:b8:14:a3:ec:35:ad: 1a:88:a8:b9:b6:fd:f6:d3:0a:39:f2:e7:ea:be:f6: a8:40:50:f5:44:77:e1:61:f9:b6:c9:4d:36:ef:1c: d9:c0:22:89:b9:fb:b2:97:33:db:a2:dd:26:37:c1: 79:43:bc:33:1c:fa:16:59:e4:7d:bd:fa:b7:fd:70: 8f:0f:36:d1:be:9d:04:62:6a:84:56:5b:21:ba:2a: 03:94:f1:79:80:14:f2:27:3b:2f:e2:2f:b6:8d:0a: 50:c7:07:b5:a9:a0:a4:e9:0f:d0:4e:05:f4:56:58: 80:d6:44:48:9a:d8:2c:78:63:f0:4a:57:86:85:29: 4a:cc:e9:c5:57:17:ff:ea:67:d0:f4:27:a0:4b:4a: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:02:DA:1E:69:10:4B:93:70:4D:B9:32:A1:3C:FB:DC:A1:AB:71:52 X509v3 Authority Key Identifier: keyid:49:FC:E9:B0:6F:41:B5:AD:29:4F:B9:21:64:20:F6:9F:BE:BB:45:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfzpsG9Bta0pT7khZCD2n767RV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/27db25-e236-4d36-8065-bbddcadc35f1/1/SfzpsG9Bta0pT7khZCD2n767RV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/27db25-e236-4d36-8065-bbddcadc35f1/1/SfzpsG9Bta0pT7khZCD2n767RV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:6c:42:ec:e4:70:5d:aa:a6:76:4e:12:10:43:ea:a3:6f:91: a7:2a:8a:f2:91:b7:fc:19:a5:c0:30:a1:8b:98:08:ea:1d:8b: 57:21:d4:21:5b:3b:9f:4f:7e:78:31:82:c2:9e:70:10:40:c2: ee:f8:b8:9f:9b:f8:f3:9b:45:47:d0:31:a2:69:cf:35:4b:f4: 64:ff:6e:4b:55:8c:cf:4d:1e:56:34:90:37:ff:ce:d1:ee:07: 86:47:87:38:11:83:93:45:4d:ae:3e:f2:d1:e8:c4:95:ee:4d: 57:2e:2a:d5:5f:f5:d0:5e:0e:96:8f:e7:02:75:f5:e3:05:d1: 5d:ce:fa:4b:a2:35:3f:3e:07:71:03:04:98:06:e3:6a:3f:a0: ab:cb:98:5f:18:f7:53:41:8e:15:bb:c9:d9:87:29:df:1b:78: 3d:d6:65:6b:bf:47:c4:c4:bb:ce:4a:21:00:4e:55:f7:4d:c7: d2:fd:be:37:55:68:b3:8f:c0:9b:76:23:de:99:b2:46:f2:30: 09:dd:41:c6:7e:7d:db:c8:37:18:dc:88:4f:dc:ba:8e:92:24: 48:df:9c:8b:cf:34:42:74:ba:1d:df:45:2b:07:1a:21:06:f6: 16:1a:e3:30:97:ba:1e:f4:94:18:29:3b:34:01:29:71:60:49: ba:9d:8d:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmjnCZSP2PTWYzPS5LK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZmNlOWIwNmY0MWI1YWQyOTRmYjkyMTY0MjBmNjlmYmVi YjQ1NWUwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD Eyg2ZjAyZGExZTY5MTA0YjkzNzA0ZGI5MzJhMTNjZmJkY2ExYWI3MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLym3M5tTKmOFAt7Q4Cr1uB758za pZu9Y2QjQVH+SBVWt2mP2MCzP774MfbuZx67LUi/0R0h3xWwTJMgyhuRjNAj5zqZ tQp1B413iickQDgEP3oDVIZxq17RdrfF8vKObOZ4peASS8Ao5z168uwCd4e4FKPs Na0aiKi5tv320wo58ufqvvaoQFD1RHfhYfm2yU027xzZwCKJufuylzPbot0mN8F5 Q7wzHPoWWeR9vfq3/XCPDzbRvp0EYmqEVlshuioDlPF5gBTyJzsv4i+2jQpQxwe1 qaCk6Q/QTgX0VliA1kRImtgseGPwSleGhSlKzOnFVxf/6mfQ9CegS0qkwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8C2h5pEEuTcE25MqE8+9yhq3FSMB8GA1UdIwQY MBaAFEn86bBvQbWtKU+5IWQg9p++u0VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Z6cHNHOUJ0YTBwVDdraFpDRDJuNzY3UlY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yN2RiMjUtZTIzNi00ZDM2LTgwNjUt YmJkZGNhZGMzNWYxLzEvU2Z6cHNHOUJ0YTBwVDdraFpDRDJuNzY3UlY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yN2RiMjUtZTIzNi00ZDM2LTgwNjUtYmJkZGNhZGMzNWYx LzEvU2Z6cHNHOUJ0YTBwVDdraFpDRDJuNzY3UlY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2xC7ORw Xaqmdk4SEEPqo2+RpyqK8pG3/BmlwDChi5gI6h2LVyHUIVs7n09+eDGCwp5wEEDC 7vi4n5v485tFR9AxomnPNUv0ZP9uS1WMz00eVjSQN//O0e4HhkeHOBGDk0VNrj7y 0ejEle5NVy4q1V/10F4Olo/nAnX14wXRXc76S6I1Pz4HcQMEmAbjaj+gq8uYXxj3 U0GOFbvJ2Ycp3xt4PdZla79HxMS7zkohAE5V903H0v2+N1Vos4/Am3Yj3pmyRvIw Cd1Bxn5928g3GNyIT9y6jpIkSN+ci880QnS6Hd9FKwcaIQb2FhrjMJe6HvSUGCk7 NAEpcWBJup2Nww== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:41 2026 by rpki-client