This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json) Hash identifier: V3G4lbBEinh2S8jbRFha83tXO38xMrWI8ctW7e9k2jM= Subject key identifier: 2F:CA:D4:86:AA:9C:D8:65:AA:96:7D:63:59:4E:37:AE:DF:2F:82:43 Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6 Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6 Certificate serial: 019C43FDCE0777C85075E9E1BFAEF83F02C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft Manifest number: 13C3 Signing time: Mon 09 Feb 2026 20:00:32 +0000 Manifest this update: Mon 09 Feb 2026 20:00:32 +0000 Manifest next update: Tue 10 Feb 2026 20:00:32 +0000 Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: Kjz0tiRWk7sIP226BgUp9/lT4AFt9zdJS5l9NquFQnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:ce:07:77:c8:50:75:e9:e1:bf:ae:f8:3f:02:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6 Validity Not Before: Feb 9 20:00:32 2026 GMT Not After : Feb 10 20:00:32 2026 GMT Subject: CN=2fcad486aa9cd865aa967d63594e37aedf2f8243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:d9:0f:d3:81:19:38:44:84:38:95:68:43: 40:87:d2:ca:8c:f5:1e:a2:36:7b:51:88:90:dd:10: 25:72:75:eb:62:07:90:bb:41:d6:49:2d:df:8e:5b: 3a:18:56:d3:7d:c4:51:a6:77:e1:80:4e:6b:d0:cd: 63:da:b8:67:9a:6d:84:08:fb:c8:8a:b8:95:d4:48: 92:76:34:a8:50:e9:1e:62:88:8c:af:3d:10:88:82: bd:16:5d:67:90:b6:53:27:90:8e:6a:9b:cd:9c:b4: 6d:16:4d:d0:cb:2a:b3:75:5d:ec:3f:fd:66:ee:f6: ab:c4:0c:9b:d8:22:fc:1d:8c:3a:1a:69:24:db:28: 1b:37:ac:d7:0f:0c:39:ec:40:b2:7e:cc:c5:63:96: b6:e1:e2:96:a6:84:be:c7:32:88:89:c2:56:d8:56: 84:1b:7f:ca:be:dc:2f:6f:d5:1b:f8:5e:ba:2e:10: a4:ee:3f:ef:94:f0:4c:b4:54:83:ed:a2:7a:61:6f: b5:f4:27:9e:08:fa:32:49:0a:22:1a:48:ad:ea:92: 64:7e:1d:af:b5:7a:0c:4a:bc:52:47:b3:c9:3a:49: 3c:2e:01:f6:9d:b2:97:f5:28:8c:6c:6f:c5:ac:84: 17:48:34:22:8b:c9:64:d3:95:d9:10:5d:66:b1:75: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CA:D4:86:AA:9C:D8:65:AA:96:7D:63:59:4E:37:AE:DF:2F:82:43 X509v3 Authority Key Identifier: keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4a:bf:06:88:ff:4f:b4:6b:b1:2f:80:6e:65:4e:9d:a8:84: 66:da:e2:b5:1f:cb:ef:b6:35:a4:8f:64:09:83:03:f9:65:d2: b7:89:39:22:6c:25:be:37:d3:a4:30:7e:42:92:9b:ca:71:eb: 2f:1b:d7:a8:d9:a5:d3:22:08:27:8f:09:19:bd:e4:18:7d:9b: 01:00:2f:61:44:05:d2:c9:b0:21:45:e9:89:78:af:9d:47:68: 67:ef:a8:11:90:a5:40:79:79:7c:38:a4:20:30:c4:f4:a4:8a: df:56:f6:8b:be:29:a3:4e:1f:d2:ca:d7:18:a9:17:aa:f4:74: ec:7e:24:df:ea:90:7a:75:c3:f9:41:2c:65:6b:97:c5:6c:16: fc:b8:62:24:4b:96:e6:96:4a:d8:b2:59:88:b0:8b:21:38:9e: 67:21:3c:db:26:f5:d6:ec:3c:a8:49:85:81:69:a9:fe:8c:72: a5:0c:78:60:8a:12:98:03:25:f2:c1:a2:1a:f2:28:10:07:11: cc:cf:c3:ce:92:60:03:2b:f8:55:ca:48:c9:e5:e3:32:be:bf: 94:4a:a5:5f:b3:c5:63:85:1b:37:0a:32:f2:1b:db:de:62:93: 66:a4:14:e4:18:5c:15:cf:6a:73:3f:54:96:14:ee:8b:de:1a: ce:91:10:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/c4Hd8hQdenhv674PwLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZmRmODFmYmYzYWY0MzA2NzJhNGJmNjQyNzczYjk1OWM0 NTA4YTYwHhcNMjYwMjA5MjAwMDMyWhcNMjYwMjEwMjAwMDMyWjAzMTEwLwYDVQQD EygyZmNhZDQ4NmFhOWNkODY1YWE5NjdkNjM1OTRlMzdhZWRmMmY4MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GzZD9OBGThEhDiVaENAh9LKjPUe ojZ7UYiQ3RAlcnXrYgeQu0HWSS3fjls6GFbTfcRRpnfhgE5r0M1j2rhnmm2ECPvI iriV1EiSdjSoUOkeYoiMrz0QiIK9Fl1nkLZTJ5COapvNnLRtFk3QyyqzdV3sP/1m 7varxAyb2CL8HYw6Gmkk2ygbN6zXDww57ECyfszFY5a24eKWpoS+xzKIicJW2FaE G3/Kvtwvb9Ub+F66LhCk7j/vlPBMtFSD7aJ6YW+19CeeCPoySQoiGkit6pJkfh2v tXoMSrxSR7PJOkk8LgH2nbKX9SiMbG/FrIQXSDQii8lk05XZEF1msXUUhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/K1IaqnNhlqpZ9Y1lON67fL4JDMB8GA1UdIwQY MBaAFEj9+B+/OvQwZypL9kJ3O5WcRQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTIt MDgxZDEyMTQ2ZmEzLzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTItMDgxZDEyMTQ2ZmEz LzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0q/Boj/ T7RrsS+AbmVOnaiEZtritR/L77Y1pI9kCYMD+WXSt4k5ImwlvjfTpDB+QpKbynHr LxvXqNml0yIIJ48JGb3kGH2bAQAvYUQF0smwIUXpiXivnUdoZ++oEZClQHl5fDik IDDE9KSK31b2i74po04f0srXGKkXqvR07H4k3+qQenXD+UEsZWuXxWwW/LhiJEuW 5pZK2LJZiLCLITieZyE82yb11uw8qEmFgWmp/oxypQx4YIoSmAMl8sGiGvIoEAcR zM/DzpJgAyv4VcpIyeXjMr6/lEqlX7PFY4UbNwoy8hvb3mKTZqQU5BhcFc9qcz9U lhTui94azpEQjw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:48 2026 by rpki-client