This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json) Hash identifier: gVMkjJF3EPr9c7y0LFcC6DU2PJsM0Qxm359HSJKdo+k= Subject key identifier: EE:44:7D:8A:17:35:5B:BD:D9:99:FC:D5:BF:B1:2E:C6:C6:FF:50:15 Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Certificate serial: 019C43FE8B02DB9E0ABC64670BF42D2516B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft Manifest number: 04F3 Signing time: Mon 09 Feb 2026 20:01:21 +0000 Manifest this update: Mon 09 Feb 2026 20:01:21 +0000 Manifest next update: Tue 10 Feb 2026 20:01:21 +0000 Files and hashes: 1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=) 2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: fjiageEYHSuyEcVuCc7HrvmwLQU6OJCHdx4MWME//vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:8b:02:db:9e:0a:bc:64:67:0b:f4:2d:25:16:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Validity Not Before: Feb 9 20:01:21 2026 GMT Not After : Feb 10 20:01:21 2026 GMT Subject: CN=ee447d8a17355bbdd999fcd5bfb12ec6c6ff5015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:3f:a4:87:84:2b:6a:0c:98:06:20:cb:e1: 59:a1:f6:02:1f:1f:a0:03:80:b9:be:19:25:e2:36: 01:1a:a5:16:09:37:47:09:e5:73:9a:0a:e6:df:c0: 0b:44:d4:75:b6:f5:04:35:c0:46:c7:4d:b2:1a:50: 95:16:28:4d:30:34:a9:f0:25:15:7b:5b:bc:06:af: 4c:f6:df:48:22:c1:56:ab:b2:3a:c6:69:4b:40:8a: c2:1d:87:34:6c:e2:36:e7:57:09:d2:bc:59:6f:ec: 12:60:79:99:b5:5d:82:9c:4c:37:7c:e1:3a:d5:31: 10:93:fd:90:38:b1:bf:ea:99:ce:5b:82:d5:f9:f6: 02:18:8f:16:f1:c7:25:08:1a:0f:6e:be:d3:18:5f: 3d:80:af:09:29:e1:0b:89:77:a7:72:fc:c9:bd:cf: ae:e7:98:ec:6e:cf:fc:db:43:8d:5d:80:d0:ef:78: 9c:c3:7c:c5:31:f7:ce:a8:78:71:2b:7c:6d:f4:47: ff:fa:cd:b8:99:84:d6:b6:dc:3d:49:72:8f:f5:8b: 2d:47:26:08:a6:9c:8c:4c:94:08:30:cf:db:cb:4b: 9c:89:d9:77:dc:51:44:99:66:2f:cf:21:3e:9a:06: 22:c3:43:8d:05:aa:85:dc:ce:66:d0:41:23:22:e0: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:44:7D:8A:17:35:5B:BD:D9:99:FC:D5:BF:B1:2E:C6:C6:FF:50:15 X509v3 Authority Key Identifier: keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:9f:6e:83:9a:b1:dc:de:73:b9:d6:36:34:da:86:87:1c:f5: 27:6c:6f:2a:8a:ac:f9:45:e0:ec:b7:87:71:5d:c4:e2:34:92: ff:01:fe:92:40:c6:d4:a9:db:23:7b:93:35:d8:af:8e:1e:1e: 00:70:bb:bf:eb:57:ff:00:aa:d6:87:02:0d:b1:a3:28:47:a6: 39:25:54:8d:19:3d:90:e5:20:b8:0d:5b:35:cf:09:1a:cd:85: 83:6d:35:12:cc:4f:4d:f0:e8:4b:0e:b0:ab:65:f0:d8:87:e0: 9d:3f:d6:5f:b8:b1:8d:5f:f1:54:d6:68:08:0f:03:37:84:d0: a3:15:3a:d8:c4:f8:ff:42:c9:8d:53:43:00:b1:a2:f8:c1:dd: 62:79:e4:d8:cc:2b:42:03:77:7c:4a:d5:f9:16:ea:be:9a:5a: 8d:f9:ac:35:ce:69:f1:c8:cd:80:c0:8e:7f:90:69:1f:92:00: 1c:42:dd:cc:8f:5d:90:81:1a:53:da:c0:f8:93:31:51:c2:6b: db:c6:52:bb:07:b2:f5:1d:01:4d:6a:90:34:9f:b1:54:c3:f1: 5c:96:55:98:ca:8a:70:39:8e:25:de:e4:f6:d1:0f:a4:99:e6: 4e:61:39:9e:a9:0c:02:b5:7c:f7:19:13:02:7c:97:4e:ad:17: 72:fb:06:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/osC254KvGRnC/QtJRawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0 MzAwNDYwHhcNMjYwMjA5MjAwMTIxWhcNMjYwMjEwMjAwMTIxWjAzMTEwLwYDVQQD EyhlZTQ0N2Q4YTE3MzU1YmJkZDk5OWZjZDViZmIxMmVjNmM2ZmY1MDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RY/pIeEK2oMmAYgy+FZofYCHx+g A4C5vhkl4jYBGqUWCTdHCeVzmgrm38ALRNR1tvUENcBGx02yGlCVFihNMDSp8CUV e1u8Bq9M9t9IIsFWq7I6xmlLQIrCHYc0bOI251cJ0rxZb+wSYHmZtV2CnEw3fOE6 1TEQk/2QOLG/6pnOW4LV+fYCGI8W8cclCBoPbr7TGF89gK8JKeELiXencvzJvc+u 55jsbs/820ONXYDQ73icw3zFMffOqHhxK3xt9Ef/+s24mYTWttw9SXKP9YstRyYI ppyMTJQIMM/by0ucidl33FFEmWYvzyE+mgYiw0ONBaqF3M5m0EEjIuBCxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5EfYoXNVu92Zn81b+xLsbG/1AVMB8GA1UdIwQY MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt YWYxYTBlMDBmODIzLzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ9ug5qx 3N5zudY2NNqGhxz1J2xvKoqs+UXg7LeHcV3E4jSS/wH+kkDG1KnbI3uTNdivjh4e AHC7v+tX/wCq1ocCDbGjKEemOSVUjRk9kOUguA1bNc8JGs2Fg201EsxPTfDoSw6w q2Xw2IfgnT/WX7ixjV/xVNZoCA8DN4TQoxU62MT4/0LJjVNDALGi+MHdYnnk2Mwr QgN3fErV+RbqvppajfmsNc5p8cjNgMCOf5BpH5IAHELdzI9dkIEaU9rA+JMxUcJr 28ZSuwey9R0BTWqQNJ+xVMPxXJZVmMqKcDmOJd7k9tEPpJnmTmE5nqkMArV89xkT AnyXTq0XcvsGSg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:31 2026 by rpki-client