This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json) Hash identifier: Yanxcr3vnJGEOEW6+85PQmSqeZbZwDqD2QYckCMQ9j0= Subject key identifier: A9:83:47:13:EF:E2:1D:7A:9D:F6:78:2B:35:C0:5D:C0:F2:92:36:5D Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Certificate serial: 019C42B3F9FE078FC9B220A5B8AA15A91D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft Manifest number: 0849 Signing time: Mon 09 Feb 2026 14:00:16 +0000 Manifest this update: Mon 09 Feb 2026 14:00:16 +0000 Manifest next update: Tue 10 Feb 2026 14:00:16 +0000 Files and hashes: 1: LYSUx4SMBcbGx0lrMelOBoIjRXY.roa (hash: iufH3SnKKEFM6xvywdqZRBnEAvhiQJCFx10ZIhfElHs=) 2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: j461lLW8sAVgpRbG/3roy+nBkWj2bIdc0UYjjZFwa2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f9:fe:07:8f:c9:b2:20:a5:b8:aa:15:a9:1d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Validity Not Before: Feb 9 14:00:16 2026 GMT Not After : Feb 10 14:00:16 2026 GMT Subject: CN=a9834713efe21d7a9df6782b35c05dc0f292365d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:84:ae:4b:dd:9f:60:bb:c8:cd:55:f4:4c: c7:e4:4f:f5:d8:58:0c:0a:2b:47:18:d5:70:ff:3e: c0:6d:d9:0b:2a:0b:b8:3e:ea:3d:14:99:bb:5a:52: 94:0e:86:be:43:13:0a:b6:1a:f5:76:0a:c9:6b:a6: 5c:30:b7:3c:fc:7e:b4:3d:6e:12:ee:f1:f3:8b:ac: ee:ee:c5:21:80:28:51:d4:2d:75:b6:e2:ad:67:49: 53:ce:c3:95:63:ef:64:74:7d:bc:f2:4a:0b:76:1c: ae:99:64:5d:0f:61:f8:aa:22:bd:83:1e:ef:28:2c: 7d:cd:98:3b:c9:0a:d6:e5:b8:2e:ae:9e:f9:0d:30: 70:26:ad:9e:cd:4e:b5:3b:f8:9d:09:61:0e:bc:38: 38:91:a0:e3:1c:7f:21:bb:ac:95:aa:a9:40:d6:cc: 6c:6e:5b:c4:eb:8d:c2:36:e1:26:09:30:94:4f:3e: a8:b8:ef:58:14:1e:66:e5:2b:2f:c5:5e:44:a7:b0: a6:ed:ef:42:d6:57:7e:e2:1e:e7:23:d1:d0:66:ed: 12:8d:4e:b2:1e:01:47:4e:ca:b1:78:45:9f:ab:df: 23:30:bc:1b:9e:c7:20:a5:5f:53:e0:80:86:79:5d: cc:77:10:55:38:d4:b0:d9:68:2c:fa:20:90:f1:ab: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:83:47:13:EF:E2:1D:7A:9D:F6:78:2B:35:C0:5D:C0:F2:92:36:5D X509v3 Authority Key Identifier: keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:e4:a6:59:c6:d5:3e:3d:91:5f:ce:9d:e4:eb:50:9d:72: 53:64:0e:40:cc:61:fb:8f:8c:cf:4a:cf:eb:69:55:9b:42:d9: 26:6a:77:23:48:c0:d0:ed:8e:00:ad:c4:cf:45:2c:9f:76:25: cc:de:3f:63:5e:01:0d:75:f6:db:d5:d6:3d:67:81:6b:8f:a5: da:eb:2e:08:0d:ff:21:01:43:66:35:80:d8:d1:62:7a:d4:88: 1a:e6:a5:38:95:2a:a1:2c:1e:06:98:1e:bd:17:9f:85:1a:f1: 72:62:0f:dd:a0:b7:1e:7a:41:7e:6f:6a:02:45:19:b4:82:a5: 1a:1d:8a:d1:ab:c2:da:47:9c:cf:9d:9c:74:65:a3:49:94:17: 42:d8:25:14:c0:b7:60:a6:d5:62:69:5d:54:61:f9:c3:3a:fe: 92:10:14:9f:d9:00:b4:1d:94:58:b0:c0:25:9b:4e:8e:77:e4: ca:ff:eb:f4:06:61:16:20:7c:29:67:57:eb:b2:f3:33:fd:74: 71:e2:e8:77:85:7d:0d:d9:ac:14:ea:32:77:0e:d7:fd:67:07: a1:76:8a:b9:fe:89:4f:73:ce:ca:1c:f2:a9:02:96:4f:67:f2: d2:3c:33:59:1d:e9:17:20:21:b9:15:e5:94:0c:42:45:65:a8: 76:10:bf:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/n+B4/JsiCluKoVqR1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw YThkMTEwHhcNMjYwMjA5MTQwMDE2WhcNMjYwMjEwMTQwMDE2WjAzMTEwLwYDVQQD EyhhOTgzNDcxM2VmZTIxZDdhOWRmNjc4MmIzNWMwNWRjMGYyOTIzNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA126Erkvdn2C7yM1V9EzH5E/12FgM CitHGNVw/z7AbdkLKgu4Puo9FJm7WlKUDoa+QxMKthr1dgrJa6ZcMLc8/H60PW4S 7vHzi6zu7sUhgChR1C11tuKtZ0lTzsOVY+9kdH288koLdhyumWRdD2H4qiK9gx7v KCx9zZg7yQrW5bgurp75DTBwJq2ezU61O/idCWEOvDg4kaDjHH8hu6yVqqlA1sxs blvE643CNuEmCTCUTz6ouO9YFB5m5SsvxV5Ep7Cm7e9C1ld+4h7nI9HQZu0SjU6y HgFHTsqxeEWfq98jMLwbnscgpV9T4ICGeV3MdxBVONSw2Wgs+iCQ8atZewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmDRxPv4h16nfZ4KzXAXcDykjZdMB8GA1UdIwQY MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt Y2JlYzQzZmQ5MmExLzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkTkplnG 1T49kV/OneTrUJ1yU2QOQMxh+4+Mz0rP62lVm0LZJmp3I0jA0O2OAK3Ez0Usn3Yl zN4/Y14BDXX229XWPWeBa4+l2usuCA3/IQFDZjWA2NFietSIGualOJUqoSweBpge vRefhRrxcmIP3aC3HnpBfm9qAkUZtIKlGh2K0avC2kecz52cdGWjSZQXQtglFMC3 YKbVYmldVGH5wzr+khAUn9kAtB2UWLDAJZtOjnfkyv/r9AZhFiB8KWdX67LzM/10 ceLod4V9DdmsFOoydw7X/WcHoXaKuf6JT3POyhzyqQKWT2fy0jwzWR3pFyAhuRXl lAxCRWWodhC/AQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:52 2026 by rpki-client