This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json) Hash identifier: fNMtCQ0nHVNls1GfVhJLlIF16wEOPKkPSAwXBijEOpw= Subject key identifier: D0:94:7E:75:4C:14:D1:3A:2B:A3:E0:4D:66:30:56:54:A1:DE:C9:30 Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67 Certificate serial: 019C420FF1EA4595D1EA4DC8376EE42EA4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft Manifest number: 0B6D Signing time: Mon 09 Feb 2026 11:01:07 +0000 Manifest this update: Mon 09 Feb 2026 11:01:07 +0000 Manifest next update: Tue 10 Feb 2026 11:01:07 +0000 Files and hashes: 1: 2ZDYJtflCnBB_8qwON088KKU-a4.roa (hash: tEciLezX+dLS/ImbpFLCNZihGdAn391R3qBRLACKNXQ=) 2: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: 07Phr4gdHE6XFQ8MV4UvQNMJJ4oEW9KJ5ftfj9N8aPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f1:ea:45:95:d1:ea:4d:c8:37:6e:e4:2e:a4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67 Validity Not Before: Feb 9 11:01:07 2026 GMT Not After : Feb 10 11:01:07 2026 GMT Subject: CN=d0947e754c14d13a2ba3e04d66305654a1dec930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ea:58:0d:62:ef:91:8c:03:da:de:67:cd:c2: e9:6c:1a:25:5f:62:3d:65:f7:7c:b6:fd:55:b9:96: 63:58:fa:a7:db:c9:e8:11:b0:f5:fc:c9:32:0f:ea: d6:9b:8c:56:a9:63:b6:12:77:78:bd:bb:56:9b:38: 4c:4e:b1:e5:4b:22:24:5d:19:b5:41:4c:eb:95:e9: 63:5b:ba:60:0e:dd:2c:54:1b:78:a1:93:77:d6:cc: 07:9d:ec:27:b6:e8:66:44:f7:6d:a7:8b:c0:e3:ee: ce:01:a3:02:fb:68:8d:fd:bf:17:55:02:6b:31:b5: 36:ef:ad:3f:12:9c:fe:8b:3e:9d:9f:c7:f7:4d:9f: e4:46:a4:06:9a:09:cf:05:2b:37:64:bd:63:67:e9: e6:f6:8a:1f:97:48:f4:2c:ac:89:06:d7:01:0c:2c: d0:0d:b3:7d:b1:74:20:7a:b0:d2:64:db:ea:59:7f: 5d:c8:3f:f1:86:13:eb:65:3a:bc:43:06:75:5c:3f: de:aa:47:dc:66:21:73:70:9e:c7:9e:52:8a:93:ce: a0:3e:8b:45:06:8d:f0:b8:8d:6e:16:31:69:5f:4d: be:0f:58:c7:2a:d3:62:e9:9a:53:20:5c:f6:2f:cf: fd:29:c0:f2:5a:a4:5a:8b:83:b2:40:59:fd:81:af: ba:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:94:7E:75:4C:14:D1:3A:2B:A3:E0:4D:66:30:56:54:A1:DE:C9:30 X509v3 Authority Key Identifier: keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:f2:c4:41:e7:89:0d:93:db:1d:96:cf:95:5e:c2:f2:fe:8d: 3c:46:df:e1:cf:21:b2:aa:26:be:0b:ab:02:94:a6:7d:ce:11: 85:19:cb:c1:38:46:86:83:26:8f:e7:f3:e7:54:b2:58:5d:2b: ce:9e:31:a7:05:a2:92:f7:25:4f:90:2c:38:4c:01:9a:3c:cf: 8d:0b:7c:60:18:04:97:d2:62:5b:55:32:34:16:be:2b:c1:78: e1:a3:06:ae:79:f6:ab:19:cb:1e:bd:a0:1f:83:d8:bd:dc:89: 74:4e:26:7e:16:12:a6:2b:0d:85:6c:d0:bd:85:c0:dd:b2:51: 51:50:dc:1f:53:7e:24:3c:9c:32:2d:00:35:7a:4f:20:46:37: d8:af:15:ed:37:83:6f:4b:22:f9:fd:3e:38:ec:8d:dd:80:c4: 97:80:6b:9a:8d:00:34:ad:0e:1f:d7:bf:07:ee:2a:c2:ad:03: fe:74:cb:b3:aa:48:31:87:46:b2:30:c9:fa:8e:2a:bf:9f:cf: 5a:83:31:d3:7e:92:7a:e4:4d:a7:8b:fd:7f:09:a1:3a:51:04: da:01:0c:e2:64:7b:33:0f:47:f3:c3:2c:54:e4:11:f1:54:00: d0:03:bc:06:d6:f2:82:97:df:19:f9:8d:ae:17:49:17:74:7d: d0:7e:e9:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/HqRZXR6k3IN27kLqS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw ZTJhNjcwHhcNMjYwMjA5MTEwMTA3WhcNMjYwMjEwMTEwMTA3WjAzMTEwLwYDVQQD EyhkMDk0N2U3NTRjMTRkMTNhMmJhM2UwNGQ2NjMwNTY1NGExZGVjOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+pYDWLvkYwD2t5nzcLpbBolX2I9 Zfd8tv1VuZZjWPqn28noEbD1/MkyD+rWm4xWqWO2End4vbtWmzhMTrHlSyIkXRm1 QUzrleljW7pgDt0sVBt4oZN31swHnewntuhmRPdtp4vA4+7OAaMC+2iN/b8XVQJr MbU2760/Epz+iz6dn8f3TZ/kRqQGmgnPBSs3ZL1jZ+nm9oofl0j0LKyJBtcBDCzQ DbN9sXQgerDSZNvqWX9dyD/xhhPrZTq8QwZ1XD/eqkfcZiFzcJ7HnlKKk86gPotF Bo3wuI1uFjFpX02+D1jHKtNi6ZpTIFz2L8/9KcDyWqRai4OyQFn9ga+6jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCUfnVMFNE6K6PgTWYwVlSh3skwMB8GA1UdIwQY MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct MjgyOGM0OGUzNTk5LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5 LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPLEQeeJ DZPbHZbPlV7C8v6NPEbf4c8hsqomvgurApSmfc4RhRnLwThGhoMmj+fz51SyWF0r zp4xpwWikvclT5AsOEwBmjzPjQt8YBgEl9JiW1UyNBa+K8F44aMGrnn2qxnLHr2g H4PYvdyJdE4mfhYSpisNhWzQvYXA3bJRUVDcH1N+JDycMi0ANXpPIEY32K8V7TeD b0si+f0+OOyN3YDEl4Brmo0ANK0OH9e/B+4qwq0D/nTLs6pIMYdGsjDJ+o4qv5/P WoMx036SeuRNp4v9fwmhOlEE2gEM4mR7Mw9H88MsVOQR8VQA0AO8BtbygpffGfmN rhdJF3R90H7pxA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:43 2026 by rpki-client