This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json) Hash identifier: 5V4pqmiuKw4qcG9vm6/OvisQYyRicQz1ff/+c2jzUj8= Subject key identifier: 40:32:D5:50:5E:D8:D3:56:B2:8A:C9:1C:C6:2A:B8:6F:C1:54:13:47 Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e Certificate serial: 019C41A2138ED5D3F95ED32F223569068253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft Manifest number: 0A8B Signing time: Mon 09 Feb 2026 09:01:06 +0000 Manifest this update: Mon 09 Feb 2026 09:01:06 +0000 Manifest next update: Tue 10 Feb 2026 09:01:06 +0000 Files and hashes: 1: BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa (hash: BpAZQxUpOARnv01FH0kV+NBxmmSBpk1Oz9AcYOSnpdI=) 2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: r6GIcZU3Cw+DfyejzDP8wZLm8ZFtuWJGv/eH+YIlKjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:13:8e:d5:d3:f9:5e:d3:2f:22:35:69:06:82:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e Validity Not Before: Feb 9 09:01:06 2026 GMT Not After : Feb 10 09:01:06 2026 GMT Subject: CN=4032d5505ed8d356b28ac91cc62ab86fc1541347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:83:33:0e:dd:18:8a:47:60:8a:e2:32:34:1a: b2:bb:41:f6:04:54:a3:a2:2e:fd:bf:9d:2d:2a:09: e1:15:11:96:50:4d:df:90:87:b6:1a:a7:98:4b:d2: b7:4d:d0:15:8a:70:d6:8c:fa:e8:93:01:b1:90:ae: 77:26:a0:36:7d:14:06:3a:cc:58:cc:ab:44:4b:c2: f1:dd:62:ba:cb:f2:f6:80:24:9a:88:ff:60:0f:4f: ab:44:7a:e2:b8:12:73:04:53:42:2f:61:e7:ef:cd: ae:71:06:63:5c:54:59:b3:b8:2d:7f:73:7e:b0:9b: fe:d0:7e:0c:ce:24:e7:f9:d8:77:b6:d1:9c:a5:8f: 32:c4:1c:d7:d9:98:10:d1:2e:6c:87:64:75:64:99: e5:fe:4d:6a:8d:c2:b8:d0:d8:6b:6e:a1:54:e8:38: 5d:ba:67:0a:8c:b4:88:db:1f:0c:15:ee:b2:19:8d: 77:88:18:43:58:08:12:34:ca:d7:df:a8:98:0b:0c: b4:f0:f1:ed:fd:4d:a1:41:0d:5c:47:d6:e5:09:0f: 13:27:4e:4b:3d:ae:64:ea:91:36:7a:03:7f:4d:81: 68:db:f9:34:13:15:e1:5f:c9:9a:10:9c:61:49:78: cd:93:3b:9c:5b:2e:99:4e:5f:6d:66:21:6e:19:ba: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:32:D5:50:5E:D8:D3:56:B2:8A:C9:1C:C6:2A:B8:6F:C1:54:13:47 X509v3 Authority Key Identifier: keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c9:5c:df:d5:57:90:36:7a:c8:00:20:23:f6:ff:43:40:aa: 8b:9f:61:2b:fa:a8:a1:67:ce:67:75:a4:7e:bf:83:6a:b0:e6: 26:62:8a:28:7c:ac:12:6b:0c:07:d9:4b:d8:2f:3f:bd:8f:4b: 76:92:73:4c:06:96:d6:df:3d:67:cd:72:2c:f1:2c:0a:04:89: 53:82:d4:a6:02:c0:3c:17:92:5f:ca:d2:f5:0a:05:14:ba:c8: 5d:be:26:d4:55:94:d3:8a:d6:0c:03:0b:16:76:85:f4:c2:70: 62:fb:c1:a6:69:48:47:e2:c7:94:4a:5e:53:3a:2b:fc:c6:75: c3:ab:09:35:d0:50:5d:b2:d7:b4:cc:50:37:20:d1:1a:11:98: ab:82:67:83:40:fe:23:f7:84:51:8a:ce:11:d0:6c:de:d7:9b: 02:92:e4:49:5d:55:51:f9:ff:43:eb:09:99:28:c8:63:f3:43: e8:1e:6e:8e:45:30:3e:d3:72:b6:8c:3a:f2:b8:af:69:38:a2: db:cc:a3:1d:b3:1a:fc:f2:33:07:06:76:9f:e0:d8:2e:44:7a: 78:63:c0:2e:3b:91:23:78:63:f5:d3:60:3d:3e:4f:f7:24:da: ae:06:68:db:af:16:ae:c4:64:db:45:af:d0:8d:6e:11:e7:47: db:8f:40:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohOO1dP5XtMvIjVpBoJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y3ODc2ZDRjNTU1NGI3NzJhNTdlN2YxYzRjZWQzN2Zi NWUxOWUwHhcNMjYwMjA5MDkwMTA2WhcNMjYwMjEwMDkwMTA2WjAzMTEwLwYDVQQD Eyg0MDMyZDU1MDVlZDhkMzU2YjI4YWM5MWNjNjJhYjg2ZmMxNTQxMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YMzDt0YikdgiuIyNBqyu0H2BFSj oi79v50tKgnhFRGWUE3fkIe2GqeYS9K3TdAVinDWjProkwGxkK53JqA2fRQGOsxY zKtES8Lx3WK6y/L2gCSaiP9gD0+rRHriuBJzBFNCL2Hn782ucQZjXFRZs7gtf3N+ sJv+0H4MziTn+dh3ttGcpY8yxBzX2ZgQ0S5sh2R1ZJnl/k1qjcK40NhrbqFU6Dhd umcKjLSI2x8MFe6yGY13iBhDWAgSNMrX36iYCwy08PHt/U2hQQ1cR9blCQ8TJ05L Pa5k6pE2egN/TYFo2/k0ExXhX8maEJxhSXjNkzucWy6ZTl9tZiFuGboO4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAy1VBe2NNWsorJHMYquG/BVBNHMB8GA1UdIwQY MBaAFEp/eHbUxVVLdypX5/HEztN/teGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQt YWIxZWE0MzUzYjdmLzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQtYWIxZWE0MzUzYjdm LzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8lc39VX kDZ6yAAgI/b/Q0Cqi59hK/qooWfOZ3Wkfr+DarDmJmKKKHysEmsMB9lL2C8/vY9L dpJzTAaW1t89Z81yLPEsCgSJU4LUpgLAPBeSX8rS9QoFFLrIXb4m1FWU04rWDAML FnaF9MJwYvvBpmlIR+LHlEpeUzor/MZ1w6sJNdBQXbLXtMxQNyDRGhGYq4Jng0D+ I/eEUYrOEdBs3tebApLkSV1VUfn/Q+sJmSjIY/ND6B5ujkUwPtNytow68rivaTii 28yjHbMa/PIzBwZ2n+DYLkR6eGPALjuRI3hj9dNgPT5P9yTargZo268WrsRk20Wv 0I1uEedH249AsA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:48 2026 by rpki-client