This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft File: SpR3QFKci4QPf4kzCXmshyyj-rg.mft (raw, json) Hash identifier: cqff/dr9O1QKQ5HbmDe4G4XnbB/it0UT2WA+bHmYXKw= Subject key identifier: 75:82:B6:B6:C6:FF:5A:51:BC:B7:8A:94:04:C3:A5:CF:9D:08:9F:F0 Authority key identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8 Certificate issuer: /CN=4a947740529c8b840f7f89330979ac872ca3fab8 Certificate serial: 019C432222E87DCECB67FF4A6F50214E9444 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft Manifest number: 03BA Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: SpR3QFKci4QPf4kzCXmshyyj-rg.crl (hash: 8o5TWVkPPaQw6D+xrhjYrTyffwIelIiQ3cZye7gA6N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:22:e8:7d:ce:cb:67:ff:4a:6f:50:21:4e:94:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a947740529c8b840f7f89330979ac872ca3fab8 Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=7582b6b6c6ff5a51bcb78a9404c3a5cf9d089ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:73:cd:82:d9:3f:85:7c:6b:b8:9a:62:f0:4e: f2:34:e4:3f:4f:e2:1d:c5:37:3f:3f:6d:74:e4:82: 31:1b:0e:4f:3d:61:73:e0:4f:fc:28:2f:d9:d9:0d: bb:2a:ee:2c:cd:13:e8:aa:ea:db:56:d5:a4:3e:78: 22:38:b5:49:d9:a5:29:02:c4:98:2e:20:1e:c2:05: b7:08:3f:93:0f:dd:b1:4a:06:fb:7b:cc:80:a3:49: 16:49:48:61:e0:f5:7e:8c:57:56:77:fd:19:cb:a6: 0d:7c:56:9f:d4:e6:fa:bb:11:4d:bd:00:15:18:e9: e8:bd:07:0b:10:b3:18:6e:f0:e6:09:80:21:ea:bf: 4f:db:2a:9c:0a:22:5e:51:33:98:9c:08:06:33:24: 51:3b:f6:03:d5:b4:1d:49:08:5d:53:72:25:ae:73: 33:f8:43:b9:a9:e0:a3:1c:d5:fe:d4:2b:29:d5:bf: c4:e4:e3:64:2c:d6:58:f5:ea:af:91:4e:5b:12:60: ba:d1:e7:dc:f0:30:da:02:b4:73:39:f0:09:72:cd: cf:9b:88:38:65:9b:0e:af:4b:74:13:bd:8d:d8:ee: 7a:6b:6b:55:e7:51:99:68:69:8d:b3:5c:26:0c:34: f6:4d:40:4f:49:cf:c5:6f:20:77:2c:74:b3:6d:6c: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:82:B6:B6:C6:FF:5A:51:BC:B7:8A:94:04:C3:A5:CF:9D:08:9F:F0 X509v3 Authority Key Identifier: keyid:4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:26:8c:a2:c9:a8:7a:21:ad:89:d7:28:53:c9:8b:fe:fd: 6b:66:1c:43:65:d5:02:80:bd:f1:21:25:52:4d:25:d6:77:cd: bd:92:d0:96:44:ad:93:38:ac:6e:a0:71:96:ff:f1:70:9a:10: 87:a2:62:6b:6f:8f:c8:4f:ae:09:55:9a:a0:d7:59:80:04:63: 0e:61:ef:c7:20:ac:1e:84:f9:99:07:e1:0e:19:01:3f:f6:fc: 17:1b:07:86:82:e5:28:a8:c6:36:42:6f:af:ff:20:77:dd:7b: 30:8d:e1:a0:fe:db:cb:01:45:88:3b:ad:ad:6a:ec:6c:1a:6a: e3:8b:ea:e8:fa:42:8d:54:48:1e:3e:60:c3:49:38:ba:8d:14: 5d:f0:7c:e3:18:2d:74:3a:2d:c9:b1:96:83:8a:05:9d:dc:29: ab:ea:8e:46:40:2f:7f:37:86:22:3b:75:0d:2b:0a:32:af:ef: 29:81:d2:85:88:ae:d9:d0:10:dd:f3:0b:89:6f:39:63:a1:8c: c3:65:ff:d7:4a:dc:12:0f:f7:32:73:32:29:7c:46:c1:6c:15: 40:c9:04:bb:88:97:f8:ca:e4:20:16:e0:ea:04:58:b4:64:3c: c8:aa:1f:23:74:4b:bd:e9:60:14:f9:e3:b5:b1:31:c4:70:c9: eb:ee:e7:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiLofc7LZ/9Kb1AhTpREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOTQ3NzQwNTI5YzhiODQwZjdmODkzMzA5NzlhYzg3MmNh M2ZhYjgwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD Eyg3NTgyYjZiNmM2ZmY1YTUxYmNiNzhhOTQwNGMzYTVjZjlkMDg5ZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHPNgtk/hXxruJpi8E7yNOQ/T+Id xTc/P2105IIxGw5PPWFz4E/8KC/Z2Q27Ku4szRPoqurbVtWkPngiOLVJ2aUpAsSY LiAewgW3CD+TD92xSgb7e8yAo0kWSUhh4PV+jFdWd/0Zy6YNfFaf1Ob6uxFNvQAV GOnovQcLELMYbvDmCYAh6r9P2yqcCiJeUTOYnAgGMyRRO/YD1bQdSQhdU3IlrnMz +EO5qeCjHNX+1Csp1b/E5ONkLNZY9eqvkU5bEmC60efc8DDaArRzOfAJcs3Pm4g4 ZZsOr0t0E72N2O56a2tV51GZaGmNs1wmDDT2TUBPSc/FbyB3LHSzbWz8PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWCtrbG/1pRvLeKlATDpc+dCJ/wMB8GA1UdIwQY MBaAFEqUd0BSnIuED3+JMwl5rIcso/q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3BSM1FGS2NpNFFQZjRrekNYbXNoeXlqLXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOTBkNmItNTJlMC00MTk1LTg4YWYt N2RiMjVhZDdjZDRjLzEvU3BSM1FGS2NpNFFQZjRrekNYbXNoeXlqLXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lOTBkNmItNTJlMC00MTk1LTg4YWYtN2RiMjVhZDdjZDRj LzEvU3BSM1FGS2NpNFFQZjRrekNYbXNoeXlqLXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvomjKLJ qHohrYnXKFPJi/79a2YcQ2XVAoC98SElUk0l1nfNvZLQlkStkzisbqBxlv/xcJoQ h6Jia2+PyE+uCVWaoNdZgARjDmHvxyCsHoT5mQfhDhkBP/b8FxsHhoLlKKjGNkJv r/8gd917MI3hoP7bywFFiDutrWrsbBpq44vq6PpCjVRIHj5gw0k4uo0UXfB84xgt dDotybGWg4oFndwpq+qORkAvfzeGIjt1DSsKMq/vKYHShYiu2dAQ3fMLiW85Y6GM w2X/10rcEg/3MnMyKXxGwWwVQMkEu4iX+MrkIBbg6gRYtGQ8yKofI3RLvelgFPnj tbExxHDJ6+7nrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:18 2026 by rpki-client