This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft File: sqvUconMbNnByAJ0KiztUMY0vTs.mft (raw, json) Hash identifier: onwh9rpVR2e31GwwjdLAyiR84FGygy/IQhwSFG0J4D8= Subject key identifier: FC:1C:1F:AE:CD:FD:90:58:B1:C6:5D:BC:61:45:43:51:37:DD:56:98 Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B Certificate issuer: /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b Certificate serial: 019C43FE756B254D5862EF38F3AA2D4D50CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft Manifest number: 09E4 Signing time: Mon 09 Feb 2026 20:01:15 +0000 Manifest this update: Mon 09 Feb 2026 20:01:15 +0000 Manifest next update: Tue 10 Feb 2026 20:01:15 +0000 Files and hashes: 1: sqvUconMbNnByAJ0KiztUMY0vTs.crl (hash: PWx3ExcZgbZfwKEPCXI4A2F0uxC+gc3YtG8M1j7LYec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:75:6b:25:4d:58:62:ef:38:f3:aa:2d:4d:50:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b Validity Not Before: Feb 9 20:01:15 2026 GMT Not After : Feb 10 20:01:15 2026 GMT Subject: CN=fc1c1faecdfd9058b1c65dbc6145435137dd5698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:c2:4b:58:98:48:3a:13:14:25:32:d7:37: 5e:3d:ce:bc:04:c6:56:26:2a:bd:94:ed:03:ca:7f: a4:16:46:45:87:35:0c:b0:98:ea:b9:90:5e:47:39: 1c:ed:80:89:c8:ac:ab:af:01:98:d0:32:2d:d4:34: 85:f8:23:07:ae:e3:27:3a:27:d4:a5:95:92:65:a4: c9:b9:f0:76:d2:8d:7a:22:d9:69:45:4d:7e:e8:38: 32:64:69:06:aa:71:f2:b5:1d:c0:ac:87:ae:3d:90: 04:9e:b3:a7:47:2a:00:f5:27:08:65:d6:48:08:3d: 15:37:09:51:f4:49:6e:89:32:f9:21:4e:4e:fe:e5: 1e:61:f9:da:b9:12:54:97:e0:e0:0d:79:dc:cc:f5: a5:a0:67:5e:cf:6c:10:f3:11:38:95:17:b9:fc:f3: 67:ed:99:f8:ff:a6:93:51:10:03:64:52:45:96:a6: fb:19:35:c4:eb:d5:8e:ab:6c:3c:e9:01:b2:e2:ec: b3:72:1a:e8:76:f5:41:93:7c:47:06:b7:cb:59:bb: 65:39:d2:1a:88:7e:af:39:ba:c2:01:db:7b:42:cd: 07:0e:df:30:61:04:da:aa:2d:28:f0:da:03:80:1c: 7b:8b:f5:91:d3:b3:76:fa:95:fc:5e:0f:81:ca:18: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1C:1F:AE:CD:FD:90:58:B1:C6:5D:BC:61:45:43:51:37:DD:56:98 X509v3 Authority Key Identifier: keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e2:4f:67:fb:3f:96:af:b0:d1:98:31:60:14:b3:8a:74:df: c7:c2:eb:5d:e9:98:53:2b:0b:3a:61:2e:6a:1e:3a:2c:62:ac: 3b:4d:cf:33:6f:2a:75:c5:03:11:0b:fb:d0:bb:b6:fc:86:22: 62:fc:aa:05:07:6e:95:55:2d:98:6a:8c:c9:7c:23:e1:d3:a6: d6:68:27:a9:ef:29:b7:8d:75:8d:ae:6b:e7:8e:ab:dd:bc:f6: ea:55:93:57:40:11:77:a5:a5:28:aa:be:59:e5:cc:1f:ee:d3: 7a:cd:49:55:de:50:a5:a7:9e:2c:17:24:7c:ed:7e:fd:17:95: c9:7f:09:af:e8:bf:5f:6f:94:5d:4c:87:95:7e:d4:b6:d0:9f: b0:80:19:b9:9f:e5:b2:6d:f6:15:5a:ea:e3:0d:d2:f9:57:6d: 48:0b:3c:eb:20:5f:e7:05:22:ba:02:fe:6a:3e:96:87:3a:de: 74:17:5b:b6:8d:2c:eb:ed:a9:01:5a:9a:05:3e:57:7d:c7:de: 0a:16:ab:0d:27:2f:34:18:c0:58:af:f5:37:d1:f5:e0:51:e6: 3b:b9:1c:22:16:ab:6b:42:b3:45:a9:f6:a5:d9:34:e2:d9:d8: 95:ff:4c:bf:f9:c4:39:da:f7:be:39:98:2c:fc:ad:5d:72:d4: 5f:e5:96:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nVrJU1YYu8486otTVDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWJkNDcyODljYzZjZDljMWM4MDI3NDJhMmNlZDUwYzYz NGJkM2IwHhcNMjYwMjA5MjAwMTE1WhcNMjYwMjEwMjAwMTE1WjAzMTEwLwYDVQQD EyhmYzFjMWZhZWNkZmQ5MDU4YjFjNjVkYmM2MTQ1NDM1MTM3ZGQ1Njk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruHCS1iYSDoTFCUy1zdePc68BMZW Jiq9lO0Dyn+kFkZFhzUMsJjquZBeRzkc7YCJyKyrrwGY0DIt1DSF+CMHruMnOifU pZWSZaTJufB20o16ItlpRU1+6DgyZGkGqnHytR3ArIeuPZAEnrOnRyoA9ScIZdZI CD0VNwlR9EluiTL5IU5O/uUeYfnauRJUl+DgDXnczPWloGdez2wQ8xE4lRe5/PNn 7Zn4/6aTURADZFJFlqb7GTXE69WOq2w86QGy4uyzchrodvVBk3xHBrfLWbtlOdIa iH6vObrCAdt7Qs0HDt8wYQTaqi0o8NoDgBx7i/WR07N2+pX8Xg+ByhjlgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwcH67N/ZBYscZdvGFFQ1E33VaYMB8GA1UdIwQY MBaAFLKr1HKJzGzZwcgCdCos7VDGNL07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3F2VWNvbk1iTm5CeUFKMEtpenRVTVkwdlRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80YmY0YzUtMDJhYy00MzQ2LWFmYmMt ZTg3OWE2MDI3OTA3LzEvc3F2VWNvbk1iTm5CeUFKMEtpenRVTVkwdlRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80YmY0YzUtMDJhYy00MzQ2LWFmYmMtZTg3OWE2MDI3OTA3 LzEvc3F2VWNvbk1iTm5CeUFKMEtpenRVTVkwdlRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOJPZ/s/ lq+w0ZgxYBSzinTfx8LrXemYUysLOmEuah46LGKsO03PM28qdcUDEQv70Lu2/IYi YvyqBQdulVUtmGqMyXwj4dOm1mgnqe8pt411ja5r546r3bz26lWTV0ARd6WlKKq+ WeXMH+7Tes1JVd5QpaeeLBckfO1+/ReVyX8Jr+i/X2+UXUyHlX7UttCfsIAZuZ/l sm32FVrq4w3S+VdtSAs86yBf5wUiugL+aj6WhzredBdbto0s6+2pAVqaBT5Xfcfe CharDScvNBjAWK/1N9H14FHmO7kcIhara0KzRan2pdk04tnYlf9Mv/nEOdr3vjmY LPytXXLUX+WWOQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:33 2026 by rpki-client