This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json) Hash identifier: yoLRfkXNc2UTrl9F2tetZ5RRzB2MUXNZcIM+fVsQ/Dc= Subject key identifier: FB:3B:CA:C7:78:01:ED:4F:36:7C:AA:5B:13:FF:39:02:F9:EF:F2:6C Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Certificate serial: 019C446C54E3E99C8758071F57091BDE7CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft Manifest number: 143F Signing time: Mon 09 Feb 2026 22:01:16 +0000 Manifest this update: Mon 09 Feb 2026 22:01:16 +0000 Manifest next update: Tue 10 Feb 2026 22:01:16 +0000 Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=) 2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: SyYjj9ehbWsbXxAur6YJmjjjN8CYTyGBU1+w3CsGQWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:54:e3:e9:9c:87:58:07:1f:57:09:1b:de:7c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Validity Not Before: Feb 9 22:01:16 2026 GMT Not After : Feb 10 22:01:16 2026 GMT Subject: CN=fb3bcac77801ed4f367caa5b13ff3902f9eff26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:26:20:2b:36:f4:74:be:2a:a4:db:e7:58: a3:fc:c5:b6:76:bf:c6:fd:e4:aa:e8:d4:9a:63:b5: 23:af:9b:45:26:38:ab:94:de:45:42:a7:60:42:ea: 78:13:9e:27:16:e9:ae:92:be:c1:05:01:70:0f:dc: 09:68:35:c4:fc:56:ef:f0:90:7f:0c:01:07:f4:1d: 34:45:a4:5e:1c:22:91:6c:ce:bd:78:a9:5b:bc:6b: 47:74:f0:0b:52:91:ea:84:3f:a4:f9:d7:98:8a:a4: 5f:b1:c1:02:e8:d1:70:79:d8:bf:4a:e8:65:bd:22: 23:26:63:0a:df:48:ad:84:83:fd:85:3f:48:1d:6d: d7:f1:d7:75:7c:2f:fc:54:11:b0:84:71:27:55:10: bb:59:f7:df:d6:71:a3:fe:e9:04:fd:55:ce:aa:85: db:cb:3d:83:87:92:47:24:19:66:bc:90:17:ae:5a: 3f:e5:85:67:23:79:05:ec:1e:11:0e:50:df:3c:73: c4:6f:47:b8:1e:94:3b:2e:3f:a6:57:ea:80:a7:f1: e3:86:60:ea:99:58:7a:f4:6c:a7:e2:b3:61:40:aa: e1:34:fe:10:ca:44:22:4f:2f:31:60:d1:cd:5f:05: 18:be:96:fc:17:39:15:4f:7b:be:31:96:0c:40:a5: 79:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3B:CA:C7:78:01:ED:4F:36:7C:AA:5B:13:FF:39:02:F9:EF:F2:6C X509v3 Authority Key Identifier: keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4c:ef:18:80:75:60:68:91:cf:03:db:0e:a0:82:59:01:75: 54:d9:c8:f7:e5:b0:a2:fd:bf:4d:55:f3:ab:24:87:41:f1:14: fe:5d:af:85:b7:a8:96:fd:65:22:2d:a0:4d:55:eb:a5:30:4a: 56:67:cb:d3:53:ce:ce:c5:94:e5:5c:17:7a:04:6f:04:23:60: a9:30:6c:c9:d2:79:fb:c0:33:bd:dd:44:c6:44:68:b9:c0:41: 0d:49:be:84:b5:5c:ac:0c:2c:89:5b:44:27:89:a6:1b:8a:de: 90:95:6d:62:e9:5c:4d:35:9b:40:13:0e:64:bd:07:53:94:26: 77:27:2d:f9:e2:13:bb:ef:e5:af:b2:b0:ba:1a:c0:ca:01:78: 7f:35:51:62:f5:03:0a:fc:db:79:30:ae:02:25:9c:9c:a6:74: 0d:5d:15:ac:d4:99:95:8b:89:92:2a:a0:91:f1:a5:3d:11:9c: cc:1f:5a:71:2a:83:11:21:13:6f:5b:96:69:26:46:bb:b1:46: e4:b8:39:33:66:6c:5d:db:8b:0d:ee:85:9e:b0:de:28:6e:b2: 74:f3:f7:00:d7:63:63:90:bf:e9:68:ee:e5:09:70:ac:11:d2: 05:21:47:80:71:1b:2f:36:9c:ab:cc:bb:9a:68:2b:f5:c9:9f: dc:c8:e2:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbFTj6ZyHWAcfVwkb3nyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5 MDFkNTcwHhcNMjYwMjA5MjIwMTE2WhcNMjYwMjEwMjIwMTE2WjAzMTEwLwYDVQQD EyhmYjNiY2FjNzc4MDFlZDRmMzY3Y2FhNWIxM2ZmMzkwMmY5ZWZmMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw4mICs29HS+KqTb51ij/MW2dr/G /eSq6NSaY7Ujr5tFJjirlN5FQqdgQup4E54nFumukr7BBQFwD9wJaDXE/Fbv8JB/ DAEH9B00RaReHCKRbM69eKlbvGtHdPALUpHqhD+k+deYiqRfscEC6NFwedi/Suhl vSIjJmMK30ithIP9hT9IHW3X8dd1fC/8VBGwhHEnVRC7Wfff1nGj/ukE/VXOqoXb yz2Dh5JHJBlmvJAXrlo/5YVnI3kF7B4RDlDfPHPEb0e4HpQ7Lj+mV+qAp/HjhmDq mVh69Gyn4rNhQKrhNP4QykQiTy8xYNHNXwUYvpb8FzkVT3u+MZYMQKV51wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPs7ysd4Ae1PNnyqWxP/OQL57/JsMB8GA1UdIwQY MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5 LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkzvGIB1 YGiRzwPbDqCCWQF1VNnI9+Wwov2/TVXzqySHQfEU/l2vhbeolv1lIi2gTVXrpTBK VmfL01POzsWU5VwXegRvBCNgqTBsydJ5+8Azvd1ExkRoucBBDUm+hLVcrAwsiVtE J4mmG4rekJVtYulcTTWbQBMOZL0HU5Qmdyct+eITu+/lr7KwuhrAygF4fzVRYvUD CvzbeTCuAiWcnKZ0DV0VrNSZlYuJkiqgkfGlPRGczB9acSqDESETb1uWaSZGu7FG 5Lg5M2ZsXduLDe6FnrDeKG6ydPP3ANdjY5C/6Wju5QlwrBHSBSFHgHEbLzacq8y7 mmgr9cmf3MjiAw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:40 2026 by rpki-client