This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json) Hash identifier: 0WroIGSq+6LP/zfwQLjVZskwFrCpogv7UG6HjDLATyo= Subject key identifier: 6E:C1:64:8F:99:EB:83:92:8A:C3:8F:3A:67:84:F1:DA:50:6F:D9:B2 Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Certificate serial: 019C427DCAFF770F867881250FA8D4578257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft Manifest number: 0B38 Signing time: Mon 09 Feb 2026 13:01:06 +0000 Manifest this update: Mon 09 Feb 2026 13:01:06 +0000 Manifest next update: Tue 10 Feb 2026 13:01:06 +0000 Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: r+22pOZ4IpjDKo2CcLtno/IqTOg2LWyvwrOSSXWOMbM=) 2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ca:ff:77:0f:86:78:81:25:0f:a8:d4:57:82:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Validity Not Before: Feb 9 13:01:06 2026 GMT Not After : Feb 10 13:01:06 2026 GMT Subject: CN=6ec1648f99eb83928ac38f3a6784f1da506fd9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:9f:e6:ed:da:31:c1:86:e9:bb:33:a0:1b: e8:bf:d1:5b:45:58:b6:5c:40:aa:42:d3:90:dd:da: a0:68:e9:61:45:b1:cf:16:dc:4b:26:3b:f7:9f:ae: 51:91:a8:1d:62:94:12:85:bc:d2:ed:be:3d:3c:e8: 68:ee:1a:35:c4:0e:77:ea:cb:7e:fb:73:2d:e8:fc: 0c:10:48:c5:43:18:10:3e:89:d1:d2:22:ea:c7:90: ee:b5:c3:ed:6e:e3:ba:c8:15:9f:2f:ca:03:98:c2: 33:4c:af:08:d3:1a:27:cf:3f:5c:c0:fe:a8:16:25: e0:a9:03:76:09:28:bf:15:4c:f9:91:ea:1e:2e:02: b5:24:ac:14:7b:84:4a:d6:c3:60:18:df:9f:3b:cd: f4:38:bd:5f:a3:8a:dd:b0:6c:08:19:a7:69:29:a9: 8d:18:9a:3d:d6:d4:ff:97:c1:9a:0e:d2:8d:a6:fd: 69:e6:b9:fe:aa:01:06:1a:94:6a:3f:97:a8:49:4e: 8d:60:e2:c6:2c:61:4b:94:f1:da:28:2e:37:1d:5b: 4c:ed:8e:b6:7a:55:24:71:1f:ac:90:f6:eb:10:b9: 29:27:4a:bd:00:35:e5:4d:08:36:9f:5b:60:b6:91: 04:50:80:45:bb:cc:43:a8:4f:60:7b:a6:4e:41:be: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C1:64:8F:99:EB:83:92:8A:C3:8F:3A:67:84:F1:DA:50:6F:D9:B2 X509v3 Authority Key Identifier: keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c4:04:ea:db:ac:f8:ea:50:c1:51:0b:69:c5:96:5b:8e:cf: 2d:62:26:42:5c:c9:76:a1:17:fe:67:86:7f:39:85:e6:e7:e1: fe:e3:ce:92:43:10:ae:19:d7:e9:f5:b4:a6:3a:62:68:42:3c: 5e:73:e2:00:e2:33:37:3c:4c:93:54:c5:c4:8a:b1:ba:bd:57: fb:41:91:58:c9:fc:bd:d2:93:7a:2d:fe:b7:b8:38:ac:4e:d9: ee:05:2e:d3:80:49:dc:d8:82:19:34:73:42:95:df:b4:b2:ae: 62:c7:e0:c8:71:77:26:ec:ad:34:a5:6b:4c:47:54:0c:6a:ef: dc:02:89:d0:40:9d:b6:1f:77:65:70:04:e4:9c:5a:f1:df:9b: 8f:13:03:c7:c8:37:71:e7:ae:b0:a2:62:d7:99:d6:92:30:9a: 18:2b:29:c8:6c:5a:b3:df:c5:b4:12:11:78:fc:d8:b9:86:27: 98:9e:05:8a:21:61:cf:7e:13:2b:0e:49:15:2a:57:5f:f5:96: 87:54:41:73:50:88:f6:0e:d8:ff:5a:e5:87:a5:25:b5:a5:6e: 10:5c:0e:d3:aa:87:d9:f2:24:2a:e8:96:38:81:29:a8:ef:31: 31:f0:fe:a0:2c:c7:d7:30:12:6a:d4:8e:3c:da:46:e7:7b:58: cd:9c:9d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcr/dw+GeIElD6jUV4JXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw NTA4YjcwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD Eyg2ZWMxNjQ4Zjk5ZWI4MzkyOGFjMzhmM2E2Nzg0ZjFkYTUwNmZkOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxyf5u3aMcGG6bszoBvov9FbRVi2 XECqQtOQ3dqgaOlhRbHPFtxLJjv3n65RkagdYpQShbzS7b49POho7ho1xA536st+ +3Mt6PwMEEjFQxgQPonR0iLqx5DutcPtbuO6yBWfL8oDmMIzTK8I0xonzz9cwP6o FiXgqQN2CSi/FUz5keoeLgK1JKwUe4RK1sNgGN+fO830OL1fo4rdsGwIGadpKamN GJo91tT/l8GaDtKNpv1p5rn+qgEGGpRqP5eoSU6NYOLGLGFLlPHaKC43HVtM7Y62 elUkcR+skPbrELkpJ0q9ADXlTQg2n1tgtpEEUIBFu8xDqE9ge6ZOQb7ZqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7BZI+Z64OSisOPOmeE8dpQb9myMB8GA1UdIwQY MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMQE6tus +OpQwVELacWWW47PLWImQlzJdqEX/meGfzmF5ufh/uPOkkMQrhnX6fW0pjpiaEI8 XnPiAOIzNzxMk1TFxIqxur1X+0GRWMn8vdKTei3+t7g4rE7Z7gUu04BJ3NiCGTRz QpXftLKuYsfgyHF3JuytNKVrTEdUDGrv3AKJ0ECdth93ZXAE5Jxa8d+bjxMDx8g3 ceeusKJi15nWkjCaGCspyGxas9/FtBIRePzYuYYnmJ4FiiFhz34TKw5JFSpXX/WW h1RBc1CI9g7Y/1rlh6UltaVuEFwO06qH2fIkKuiWOIEpqO8xMfD+oCzH1zASatSO PNpG53tYzZydgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:32 2026 by rpki-client