This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json) Hash identifier: AinNLsfYvMbrfMD+ERViUjXtjqpqQRtIxWIgjoeojH8= Subject key identifier: CF:DC:89:0D:62:D4:63:D8:42:34:D5:A0:6E:26:11:82:4F:E4:D5:C8 Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Certificate serial: 019C427D9E29C2FC24CF64F977CB8EA59091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:00:54 +0000 Manifest this update: Mon 09 Feb 2026 13:00:54 +0000 Manifest next update: Tue 10 Feb 2026 13:00:54 +0000 Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=) 2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: q9a2WC4YC2XtPCISiAycpEQ8lSxbggQeNQdVfaUjLvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:9e:29:c2:fc:24:cf:64:f9:77:cb:8e:a5:90:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Validity Not Before: Feb 9 13:00:54 2026 GMT Not After : Feb 10 13:00:54 2026 GMT Subject: CN=cfdc890d62d463d84234d5a06e2611824fe4d5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:54:3d:4a:4e:b7:8d:a1:67:7c:0e:1d:18: 5d:2b:f1:c1:06:1d:d6:d0:6b:59:62:bf:c5:6b:d3: b8:7a:62:83:f9:4b:47:c3:21:8e:a7:6b:ee:4b:00: 69:e3:7b:0f:d7:38:15:82:6e:73:0a:c5:12:9a:04: 52:97:10:07:53:47:68:f8:0c:d5:a8:a4:cb:21:7b: 5b:84:20:26:11:00:5b:62:3b:a1:04:aa:a5:8b:64: 53:05:82:8b:64:f8:8c:c9:52:34:5e:ab:d8:70:31: 7c:e3:d5:35:d9:c5:93:de:36:dd:31:63:47:7f:35: d8:d3:68:98:d7:db:5b:8e:05:57:7c:d3:86:3b:80: 2c:92:ac:74:dc:b5:50:07:37:29:c7:db:31:7b:4d: be:b9:b5:8b:4d:fa:ee:dc:46:b2:7b:df:29:e1:52: a5:83:a9:86:7c:68:89:c3:5c:5f:09:b5:e2:ef:c6: 0c:50:54:11:03:37:29:1e:d0:94:db:32:67:1a:5c: 53:c2:c2:a8:04:d5:b7:50:96:81:66:24:b7:da:b8: a3:f1:0e:04:0a:94:c7:c9:81:30:62:3f:c9:48:51: f4:e8:2f:45:2d:db:5b:a5:67:7a:85:6e:1e:67:c8: 82:0d:ca:2f:52:d6:d1:92:a7:e7:04:a7:52:59:cd: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DC:89:0D:62:D4:63:D8:42:34:D5:A0:6E:26:11:82:4F:E4:D5:C8 X509v3 Authority Key Identifier: keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e0:83:92:69:89:d2:d2:32:ac:19:2f:49:fd:da:f2:4e:5a: ae:8e:15:c7:2c:64:86:05:49:9a:b3:a0:e8:b8:f9:b5:16:8f: 0f:b8:5b:c6:a1:a3:cc:0a:e6:10:71:e4:1c:46:89:7d:c5:a3: ee:5d:67:27:a8:ef:4b:a8:92:0f:3f:97:72:62:89:85:54:78: ea:93:bb:9e:a9:c9:52:e6:96:95:42:87:c1:cb:de:64:b5:d7: f1:f4:3e:43:54:c7:b4:0c:aa:53:cf:1f:12:b6:85:99:02:d6: 3a:37:8f:db:72:dc:e3:0b:68:0c:2c:61:af:5d:49:1e:a1:3b: 89:6c:b8:df:da:2f:4c:3e:2c:c3:2f:75:f5:a9:1e:74:60:e3: 17:98:04:ff:ee:18:9b:8d:5c:51:ba:ba:70:4a:b6:ca:a0:27: 9d:7c:22:ab:50:f0:32:d1:fc:c1:56:f2:d3:3a:e6:7e:36:64: 63:69:38:c5:a3:97:90:cb:80:8c:0e:db:ca:c1:b3:a2:0a:72: 8c:9f:b7:7a:9c:54:b8:e8:b7:d1:33:99:8c:16:f5:d5:da:22: 64:dd:e9:75:59:ac:29:47:3b:3d:80:72:38:80:03:2d:94:cb: d4:c6:3a:07:b1:96:b1:66:42:e4:39:07:f3:73:90:91:09:74: 35:2f:17:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZ4pwvwkz2T5d8uOpZCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1 MDQxZDYwHhcNMjYwMjA5MTMwMDU0WhcNMjYwMjEwMTMwMDU0WjAzMTEwLwYDVQQD EyhjZmRjODkwZDYyZDQ2M2Q4NDIzNGQ1YTA2ZTI2MTE4MjRmZTRkNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rVUPUpOt42hZ3wOHRhdK/HBBh3W 0GtZYr/Fa9O4emKD+UtHwyGOp2vuSwBp43sP1zgVgm5zCsUSmgRSlxAHU0do+AzV qKTLIXtbhCAmEQBbYjuhBKqli2RTBYKLZPiMyVI0XqvYcDF849U12cWT3jbdMWNH fzXY02iY19tbjgVXfNOGO4Askqx03LVQBzcpx9sxe02+ubWLTfru3Eaye98p4VKl g6mGfGiJw1xfCbXi78YMUFQRAzcpHtCU2zJnGlxTwsKoBNW3UJaBZiS32rij8Q4E CpTHyYEwYj/JSFH06C9FLdtbpWd6hW4eZ8iCDcovUtbRkqfnBKdSWc2BVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/ciQ1i1GPYQjTVoG4mEYJP5NXIMB8GA1UdIwQY MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt OGFkZjBkYTIyNTQ1LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1 LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+CDkmmJ 0tIyrBkvSf3a8k5aro4VxyxkhgVJmrOg6Lj5tRaPD7hbxqGjzArmEHHkHEaJfcWj 7l1nJ6jvS6iSDz+XcmKJhVR46pO7nqnJUuaWlUKHwcveZLXX8fQ+Q1THtAyqU88f EraFmQLWOjeP23Lc4wtoDCxhr11JHqE7iWy439ovTD4swy919akedGDjF5gE/+4Y m41cUbq6cEq2yqAnnXwiq1DwMtH8wVby0zrmfjZkY2k4xaOXkMuAjA7bysGzogpy jJ+3epxUuOi30TOZjBb11doiZN3pdVmsKUc7PYByOIADLZTL1MY6B7GWsWZC5DkH 83OQkQl0NS8XJg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:21 2026 by rpki-client