This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json) Hash identifier: 7x4cvQg+dfYhlclw5dYBiVZuJs8tOu7KYsSTlK3UvDY= Subject key identifier: 30:22:E6:50:8E:15:2B:5F:AF:5F:28:2A:B3:00:2E:81:EE:6A:1F:E5 Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb Certificate serial: 019C427E112572B880AF714E4D18469F6180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft Manifest number: 0F44 Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: rEkSIX4pzmGzxV6dlYYixWSsIoxx6kSV13zqrk4mDpo=) 2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:11:25:72:b8:80:af:71:4e:4d:18:46:9f:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=3022e6508e152b5faf5f282ab3002e81ee6a1fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:d9:38:a3:90:08:bb:9d:3e:d0:da:0d:9d: 37:4b:a7:7d:45:4e:28:1d:5c:93:12:7f:97:b6:d9: b4:3a:f6:ae:0f:8a:26:b1:dc:84:de:8b:e6:38:7d: bb:97:86:15:b5:45:f6:fd:5d:5b:63:13:58:d2:5c: a1:3d:e0:c0:38:25:2f:e7:7b:19:31:6c:65:41:65: 3d:97:3a:ee:03:b3:6c:22:60:65:00:31:53:78:33: 03:0b:da:ff:78:56:ea:41:96:12:1b:1f:ec:06:b7: 91:fb:da:4a:5a:8a:da:cc:8a:4c:d6:05:77:a8:0e: 3d:86:2a:f1:f2:7a:32:24:15:d5:78:5e:90:9e:88: 3e:6c:0c:29:3d:62:6a:68:87:dc:11:7a:5f:2a:b0: b1:7a:1b:b4:f1:94:dc:be:92:d1:fc:af:38:75:b7: 26:5f:5a:5a:27:e0:7f:1b:2b:28:d6:ce:23:e9:2d: 9f:8c:4e:0c:44:a8:16:ff:13:3a:75:75:84:ad:b3: 18:94:c9:ac:f0:6d:70:29:58:ca:5d:c0:d3:1b:72: 1e:95:b0:91:da:00:c1:18:d7:95:92:43:62:27:05: ac:63:76:82:29:ca:f6:7e:28:37:35:7c:e5:fb:c7: 8a:52:0b:fd:74:09:6f:71:bb:22:50:2b:c2:eb:80: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:22:E6:50:8E:15:2B:5F:AF:5F:28:2A:B3:00:2E:81:EE:6A:1F:E5 X509v3 Authority Key Identifier: keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:02:7a:2e:9a:90:af:78:2f:82:bc:fa:8f:ca:78:31:98:43: 56:d0:a1:a3:45:57:d1:2a:1e:57:cc:3d:f2:4b:51:09:8b:1d: 5f:13:19:a3:5e:fc:8c:24:7b:66:86:b6:1e:95:eb:89:9a:4b: 07:3e:f4:75:84:56:5c:1d:6e:b0:1d:29:f5:b7:92:b5:8e:19: aa:42:ee:73:57:7e:b5:d5:71:dc:17:cb:4a:f2:60:fb:f9:c0: 1c:f5:93:c4:ce:e0:86:4b:b2:65:af:0e:9b:0a:54:ce:f7:35: db:09:eb:63:e9:cb:a6:dc:c9:9f:da:89:59:5f:b0:f5:63:90: 05:d2:80:84:f5:8c:69:f5:8c:a5:e2:5c:a4:f0:1f:a3:bb:4c: 67:2e:6f:a1:38:f6:b6:a1:55:10:0e:7d:7c:53:38:23:6b:93: a8:90:a7:7c:d9:8a:d0:f8:ad:c5:3a:bb:83:05:04:ed:25:2d: 5d:44:32:fa:0d:c6:bc:08:1c:6c:e1:fc:cb:65:f1:1f:73:ce: 27:be:84:27:e8:f9:f7:ab:be:a6:c8:56:e9:ee:0b:a1:6c:8f: d2:84:52:fa:99:3e:09:dd:57:b1:1a:cd:c8:b2:fb:c0:0e:7d: 53:a8:7c:77:f7:2a:5d:2e:68:86:fe:d3:4c:40:84:9f:e6:fa: b2:1e:e9:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhElcriAr3FOTRhGn2GAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj NjYxZWIwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD EygzMDIyZTY1MDhlMTUyYjVmYWY1ZjI4MmFiMzAwMmU4MWVlNmExZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMXZOKOQCLudPtDaDZ03S6d9RU4o HVyTEn+Xttm0OvauD4omsdyE3ovmOH27l4YVtUX2/V1bYxNY0lyhPeDAOCUv53sZ MWxlQWU9lzruA7NsImBlADFTeDMDC9r/eFbqQZYSGx/sBreR+9pKWorazIpM1gV3 qA49hirx8noyJBXVeF6Qnog+bAwpPWJqaIfcEXpfKrCxehu08ZTcvpLR/K84dbcm X1paJ+B/Gyso1s4j6S2fjE4MRKgW/xM6dXWErbMYlMms8G1wKVjKXcDTG3IelbCR 2gDBGNeVkkNiJwWsY3aCKcr2fig3NXzl+8eKUgv9dAlvcbsiUCvC64AHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAi5lCOFStfr18oKrMALoHuah/lMB8GA1UdIwQY MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3 LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAJ6LpqQ r3gvgrz6j8p4MZhDVtCho0VX0SoeV8w98ktRCYsdXxMZo178jCR7Zoa2HpXriZpL Bz70dYRWXB1usB0p9beStY4ZqkLuc1d+tdVx3BfLSvJg+/nAHPWTxM7ghkuyZa8O mwpUzvc12wnrY+nLptzJn9qJWV+w9WOQBdKAhPWMafWMpeJcpPAfo7tMZy5voTj2 tqFVEA59fFM4I2uTqJCnfNmK0PitxTq7gwUE7SUtXUQy+g3GvAgcbOH8y2XxH3PO J76EJ+j596u+pshW6e4LoWyP0oRS+pk+Cd1XsRrNyLL7wA59U6h8d/cqXS5ohv7T TECEn+b6sh7pyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:36 2026 by rpki-client