This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json) Hash identifier: QnliGYsTM5dcCNueGA8eo4LrATJ6ESSjH9h+bP9/VX4= Subject key identifier: 29:8D:CE:29:34:AE:7D:AC:0F:4B:56:50:32:6B:3B:34:B0:FA:48:33 Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Certificate serial: 019C4358C85840887894E656A0FDC3E70A4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft Manifest number: 0BA2 Signing time: Mon 09 Feb 2026 17:00:17 +0000 Manifest this update: Mon 09 Feb 2026 17:00:17 +0000 Manifest next update: Tue 10 Feb 2026 17:00:17 +0000 Files and hashes: 1: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (hash: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo=) 2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: yRx2CqxWUJB7CBtnrmrQJmkUd6nA6Qv+7cL+loSyFWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c8:58:40:88:78:94:e6:56:a0:fd:c3:e7:0a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Validity Not Before: Feb 9 17:00:17 2026 GMT Not After : Feb 10 17:00:17 2026 GMT Subject: CN=298dce2934ae7dac0f4b5650326b3b34b0fa4833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:08:50:33:a6:16:a3:64:dd:d2:a3:9d:3e: c1:72:1e:fd:94:dd:21:24:6e:9f:74:57:3e:9d:8e: 4e:ef:6a:41:05:02:57:e6:6f:af:74:ca:0c:9a:31: 0d:22:36:f4:aa:56:9b:c5:23:12:9e:c0:1e:d3:d4: 91:36:df:b2:32:38:9c:c7:be:5a:c4:32:63:eb:c9: 65:31:dc:c3:4b:b9:f2:0c:13:f7:68:1d:4f:26:fe: a2:7c:ad:6f:bc:94:14:f9:5f:40:4a:2f:7a:99:56: 8e:cc:1f:93:6c:a4:5a:45:83:b5:1d:b5:1b:e3:8d: 9e:41:7f:43:df:8a:68:d1:13:73:bb:39:e9:6a:0a: ab:07:84:2e:b0:2e:22:6d:da:91:7f:11:57:a5:89: 94:97:9b:61:86:90:87:11:88:de:3c:7a:a7:d0:d5: 93:09:2d:9e:66:21:d0:8c:69:9a:73:ce:91:a9:dd: 7a:b1:85:c3:4a:7c:76:9f:26:4a:15:cb:eb:81:f5: dc:24:01:06:e5:aa:82:14:f3:10:61:a5:a6:d0:01: d0:b6:f3:92:54:50:5f:bb:e7:fb:ef:38:f0:1c:18: aa:89:25:cd:9d:26:73:98:61:47:d6:07:cf:48:4b: 21:b3:45:16:95:bd:80:77:03:33:28:1c:18:58:c5: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8D:CE:29:34:AE:7D:AC:0F:4B:56:50:32:6B:3B:34:B0:FA:48:33 X509v3 Authority Key Identifier: keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:48:0f:ac:2d:21:fc:af:86:10:a0:c8:9c:ce:43:b0:d1: e1:ab:c1:e1:b1:25:ad:dd:cf:fb:37:7e:77:7f:5c:01:b9:1a: 80:b6:53:15:33:55:e8:15:3f:48:26:c1:91:a9:da:7c:4d:2d: 32:25:df:1a:43:1f:8c:6e:14:62:b9:f9:19:52:cc:eb:2d:d8: 10:3f:bd:5a:56:4b:d0:af:ae:b3:73:96:37:94:df:38:6f:7b: df:47:1f:d4:db:27:a4:dd:7a:5a:04:dc:02:94:59:04:f4:a2: e7:7f:3f:3b:34:b9:22:aa:23:09:e8:15:87:e9:07:d0:cd:da: 85:84:05:3c:36:a9:67:0b:48:a3:6d:94:43:35:e2:0f:4a:d3: 56:6d:d4:2b:c5:2f:21:67:4c:53:9b:00:55:a4:b3:cd:84:e4: 97:5b:92:a9:52:5c:61:76:5e:f7:c3:07:55:9c:1e:9c:54:dd: 37:50:21:bb:43:9b:83:63:69:28:9a:55:dd:da:b2:e0:7f:45: 35:0e:35:70:b1:e6:57:e2:d6:91:b8:4b:93:56:d4:ec:d4:46: 6c:29:55:9a:eb:e7:36:8d:3b:f3:c1:fe:4c:bf:8e:6b:13:86: 53:7c:eb:de:e1:5d:a2:e8:fe:6d:92:11:a6:6d:98:a1:19:88: ae:19:b1:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMhYQIh4lOZWoP3D5wpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl NDQ4NTcwHhcNMjYwMjA5MTcwMDE3WhcNMjYwMjEwMTcwMDE3WjAzMTEwLwYDVQQD EygyOThkY2UyOTM0YWU3ZGFjMGY0YjU2NTAzMjZiM2IzNGIwZmE0ODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquIIUDOmFqNk3dKjnT7Bch79lN0h JG6fdFc+nY5O72pBBQJX5m+vdMoMmjENIjb0qlabxSMSnsAe09SRNt+yMjicx75a xDJj68llMdzDS7nyDBP3aB1PJv6ifK1vvJQU+V9ASi96mVaOzB+TbKRaRYO1HbUb 442eQX9D34po0RNzuznpagqrB4QusC4ibdqRfxFXpYmUl5thhpCHEYjePHqn0NWT CS2eZiHQjGmac86Rqd16sYXDSnx2nyZKFcvrgfXcJAEG5aqCFPMQYaWm0AHQtvOS VFBfu+f77zjwHBiqiSXNnSZzmGFH1gfPSEshs0UWlb2AdwMzKBwYWMXuywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmNzik0rn2sD0tWUDJrOzSw+kgzMB8GA1UdIwQY MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh09ID6wt IfyvhhCgyJzOQ7DR4avB4bElrd3P+zd+d39cAbkagLZTFTNV6BU/SCbBkanafE0t MiXfGkMfjG4UYrn5GVLM6y3YED+9WlZL0K+us3OWN5TfOG9730cf1NsnpN16WgTc ApRZBPSi538/OzS5IqojCegVh+kH0M3ahYQFPDapZwtIo22UQzXiD0rTVm3UK8Uv IWdMU5sAVaSzzYTkl1uSqVJcYXZe98MHVZwenFTdN1Ahu0Obg2NpKJpV3dqy4H9F NQ41cLHmV+LWkbhLk1bU7NRGbClVmuvnNo0788H+TL+OaxOGU3zr3uFdouj+bZIR pm2YoRmIrhmxEA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:19:25 2026 by rpki-client