This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft File: sLQvCUy6l0wfrsa97BVg9mOHiRE.mft (raw, json) Hash identifier: L5HLXiWf1SStlAuDeptmIecEyID6BGnCKt2RLA/VGtY= Subject key identifier: 3D:8D:8C:BD:E0:00:BC:68:F9:D2:EE:74:F7:8E:C3:F8:14:85:A2:1E Authority key identifier: B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11 Certificate issuer: /CN=b0b42f094cba974c1faec6bdec1560f663878911 Certificate serial: 019C413444B259471731359EE10C2759FFEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft Manifest number: 14A0 Signing time: Mon 09 Feb 2026 07:01:10 +0000 Manifest this update: Mon 09 Feb 2026 07:01:10 +0000 Manifest next update: Tue 10 Feb 2026 07:01:10 +0000 Files and hashes: 1: sLQvCUy6l0wfrsa97BVg9mOHiRE.crl (hash: 1V+eeb8SPbJ+JZ5SW4CRhPbxtgwugB2TRHNGfhaXa1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:44:b2:59:47:17:31:35:9e:e1:0c:27:59:ff:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b42f094cba974c1faec6bdec1560f663878911 Validity Not Before: Feb 9 07:01:10 2026 GMT Not After : Feb 10 07:01:10 2026 GMT Subject: CN=3d8d8cbde000bc68f9d2ee74f78ec3f81485a21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:c2:78:fc:f3:a0:54:ee:ea:45:d4:1a:44: 1b:26:7a:5b:01:56:a6:a4:85:dc:c3:10:b9:ae:8e: 8f:33:46:c1:bd:07:d3:71:06:fc:b1:cb:21:7e:1e: a0:33:44:c3:92:1a:d8:1c:d6:c1:af:02:7c:cb:d1: 6b:93:43:48:ec:09:bf:00:3e:21:35:54:68:7a:e2: c3:ee:4b:4e:d1:76:36:86:5a:20:fa:3e:9c:22:27: 66:0d:7e:48:99:43:a9:d3:b4:07:dd:60:7e:b2:db: 9a:e9:4e:31:22:b2:2a:24:42:af:3d:6f:3f:24:ae: e3:38:a2:e1:ef:fc:cf:2a:a3:f4:3c:78:9c:86:56: 36:4f:e7:79:70:41:13:8c:6b:38:ae:b5:4b:d8:8f: 4d:66:01:f1:53:8e:23:37:f9:35:26:48:6d:49:11: 76:f4:6e:09:90:0b:3b:86:9a:e3:4f:0d:ae:64:14: 67:5c:a4:67:60:4b:36:5a:ee:6e:96:61:26:39:07: 64:14:10:41:58:cb:de:4f:7c:ed:2c:33:a5:26:43: ad:31:59:14:25:e9:cc:8f:d5:ed:21:54:0c:0e:79: fd:7b:65:af:83:19:85:01:78:de:30:16:f7:af:cb: 25:dc:fe:70:c1:6d:87:df:ac:7f:ea:3a:fa:a2:7a: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8D:8C:BD:E0:00:BC:68:F9:D2:EE:74:F7:8E:C3:F8:14:85:A2:1E X509v3 Authority Key Identifier: keyid:B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ac:54:ff:12:95:f5:40:09:de:b4:f6:7c:d8:c2:79:82:62: d5:a3:ad:ef:25:4c:3c:be:9a:4c:e3:de:5c:2b:89:fd:e7:c4: c9:ac:e0:8b:3d:6d:fd:b7:fa:52:9f:1c:ce:2c:18:db:97:46: d0:5f:87:2b:44:6a:a0:b9:52:fc:19:31:e5:21:cf:29:8b:db: 12:9f:07:fc:a0:41:cb:ee:3f:f5:2c:6d:d1:25:c3:6d:ba:1e: 4f:5d:63:79:3c:b6:be:0a:91:57:12:5d:c6:d0:bf:cf:76:4e: 30:d8:19:8b:29:15:4c:e8:15:82:00:91:0a:dc:1f:79:70:96: 02:1b:58:77:d5:c8:71:f8:da:a7:56:30:f2:4d:ef:b2:b2:11: f9:08:35:d7:41:b6:f8:f1:87:31:9f:92:c5:f6:54:23:b3:9a: 70:27:cd:14:a1:34:b6:af:23:82:0d:01:5a:a0:d3:14:fc:ae: ea:7d:6f:ba:2b:d8:d7:36:80:18:65:37:78:3e:74:e6:b9:2c: 7f:86:7f:93:fa:0e:1e:03:f7:46:85:89:44:4a:11:64:b2:25: e9:73:22:9e:76:d6:7e:b6:f5:da:f9:23:a3:69:fe:79:71:94: 04:6d:e9:28:fc:fe:93:2e:0c:38:08:eb:77:4e:c1:3a:f7:75: 2c:fc:1a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNESyWUcXMTWe4QwnWf/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjQyZjA5NGNiYTk3NGMxZmFlYzZiZGVjMTU2MGY2NjM4 Nzg5MTEwHhcNMjYwMjA5MDcwMTEwWhcNMjYwMjEwMDcwMTEwWjAzMTEwLwYDVQQD EygzZDhkOGNiZGUwMDBiYzY4ZjlkMmVlNzRmNzhlYzNmODE0ODVhMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pHCePzzoFTu6kXUGkQbJnpbAVam pIXcwxC5ro6PM0bBvQfTcQb8scshfh6gM0TDkhrYHNbBrwJ8y9Frk0NI7Am/AD4h NVRoeuLD7ktO0XY2hlog+j6cIidmDX5ImUOp07QH3WB+stua6U4xIrIqJEKvPW8/ JK7jOKLh7/zPKqP0PHichlY2T+d5cEETjGs4rrVL2I9NZgHxU44jN/k1JkhtSRF2 9G4JkAs7hprjTw2uZBRnXKRnYEs2Wu5ulmEmOQdkFBBBWMveT3ztLDOlJkOtMVkU JenMj9XtIVQMDnn9e2WvgxmFAXjeMBb3r8sl3P5wwW2H36x/6jr6onrWoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2NjL3gALxo+dLudPeOw/gUhaIeMB8GA1UdIwQY MBaAFLC0LwlMupdMH67GvewVYPZjh4kRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xRdkNVeTZsMHdmcnNhOTdCVmc5bU9IaVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYTA3YjAtOTk3Ni00ZDU1LWI3MjIt YTJhMTFhMGE2ZDc0LzEvc0xRdkNVeTZsMHdmcnNhOTdCVmc5bU9IaVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYTA3YjAtOTk3Ni00ZDU1LWI3MjItYTJhMTFhMGE2ZDc0 LzEvc0xRdkNVeTZsMHdmcnNhOTdCVmc5bU9IaVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6xU/xKV 9UAJ3rT2fNjCeYJi1aOt7yVMPL6aTOPeXCuJ/efEyazgiz1t/bf6Up8cziwY25dG 0F+HK0RqoLlS/Bkx5SHPKYvbEp8H/KBBy+4/9Sxt0SXDbboeT11jeTy2vgqRVxJd xtC/z3ZOMNgZiykVTOgVggCRCtwfeXCWAhtYd9XIcfjap1Yw8k3vsrIR+Qg110G2 +PGHMZ+SxfZUI7OacCfNFKE0tq8jgg0BWqDTFPyu6n1vuivY1zaAGGU3eD505rks f4Z/k/oOHgP3RoWJREoRZLIl6XMinnbWfrb12vkjo2n+eXGUBG3pKPz+ky4MOAjr d07BOvd1LPwaAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:30 2026 by rpki-client