This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json) Hash identifier: EZTZYXZImIQ/WU6i3HONVKmXAqyo3D6PkBdue4vAdrY= Subject key identifier: A1:99:75:8A:10:97:1B:3A:DA:EA:D0:67:99:F1:EF:17:6B:64:93:AF Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73 Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73 Certificate serial: 019C42469433AF87CE36B2369FDCD9C56DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft Manifest number: 03EE Signing time: Mon 09 Feb 2026 12:00:47 +0000 Manifest this update: Mon 09 Feb 2026 12:00:47 +0000 Manifest next update: Tue 10 Feb 2026 12:00:47 +0000 Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: iUVGMngOGJ22mkrjML8EADuVHVzMkfnjJGGbpmVAFAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:94:33:af:87:ce:36:b2:36:9f:dc:d9:c5:6d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73 Validity Not Before: Feb 9 12:00:47 2026 GMT Not After : Feb 10 12:00:47 2026 GMT Subject: CN=a199758a10971b3adaead06799f1ef176b6493af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:43:d9:05:4b:63:45:18:74:27:3b:69:c7: 0d:14:37:18:10:bd:d2:cd:aa:9e:d8:78:c6:03:83: 64:db:15:e4:8c:e3:19:c9:9b:29:18:86:47:40:64: 35:c8:9a:a5:37:d5:bf:0d:cd:fa:60:d0:6a:db:35: 52:94:a5:1b:09:64:c5:dd:18:2a:cb:6b:ab:03:21: ae:0e:ba:68:5a:bf:b9:64:e0:ea:58:b5:ac:11:d0: 77:d5:9d:85:85:95:f1:6f:5c:c3:80:c0:7c:98:74: 60:c3:a0:eb:7c:1a:2c:0e:f9:74:3e:fb:ff:af:75: a1:80:7b:39:35:fe:5e:36:74:85:00:30:14:c9:32: 92:b6:61:bd:4d:3f:5f:0f:b8:53:31:af:cb:42:b5: 2e:24:4d:a2:72:e4:c9:b0:ae:63:9f:bd:69:09:72: 27:18:77:9a:be:a1:27:2f:c7:a8:d2:e4:e7:9a:67: 1b:49:17:c3:43:de:89:a6:cf:f7:38:23:c4:79:dd: 47:66:b0:2f:35:12:72:e2:a7:c0:95:c4:f3:d0:a0: 8c:03:43:c1:da:97:3b:fa:37:ca:ec:8e:76:da:cb: f6:a3:36:9e:bb:9d:af:65:2b:59:01:1c:ed:08:83: 49:cf:44:3d:d3:c9:e6:80:a4:da:0c:08:29:1a:12: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:99:75:8A:10:97:1B:3A:DA:EA:D0:67:99:F1:EF:17:6B:64:93:AF X509v3 Authority Key Identifier: keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9b:06:68:1a:21:2f:ef:d6:b4:c9:fd:25:98:82:ce:67:e7: ff:6d:22:e0:7e:90:9a:ce:c2:39:e7:17:0f:0e:21:9b:68:fe: ed:58:07:2b:b6:44:45:00:90:d4:56:bf:b6:5b:b5:41:9a:45: 0e:e7:cd:dc:ea:e6:a1:b4:ba:1a:48:70:33:9b:2d:bb:7d:ad: de:a8:ef:73:7d:f2:74:ec:2a:73:0f:30:d2:27:d2:01:0e:25: 75:02:d1:08:83:66:67:e6:be:e1:48:1c:0a:1a:68:cc:ea:f7: c6:64:62:da:8c:1d:cb:bd:d1:df:cc:c9:43:61:86:2c:6a:68: fc:99:fe:2d:af:b1:e1:8a:c2:6d:52:cb:e0:db:01:17:8c:8b: bf:2a:dc:e6:de:f8:f0:3a:85:d7:7f:57:f0:3f:ba:d0:b6:ff: ff:fe:3e:e5:f6:08:63:c0:5e:0f:6c:1b:7a:46:af:57:22:25: c1:47:b5:ed:c7:78:b3:ec:a3:f7:a8:91:bf:10:be:f4:c3:c7: b4:47:cc:e5:36:72:9a:18:42:71:f3:45:f0:97:1d:01:ba:93: 49:f6:96:a6:3f:7d:2a:bd:9a:e6:fe:e7:5d:1e:03:d7:4b:b9: 8b:91:66:fd:08:ff:99:d4:f8:ed:0c:ae:7a:bb:57:ed:c6:d3: 44:8c:5c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpQzr4fONrI2n9zZxW3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYTJmYTZmNjc3MGY3MmQ4MDg0YmM2YzE4MzA1OGI4MGU4 MzhkNzMwHhcNMjYwMjA5MTIwMDQ3WhcNMjYwMjEwMTIwMDQ3WjAzMTEwLwYDVQQD EyhhMTk5NzU4YTEwOTcxYjNhZGFlYWQwNjc5OWYxZWYxNzZiNjQ5M2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznBD2QVLY0UYdCc7accNFDcYEL3S zaqe2HjGA4Nk2xXkjOMZyZspGIZHQGQ1yJqlN9W/Dc36YNBq2zVSlKUbCWTF3Rgq y2urAyGuDrpoWr+5ZODqWLWsEdB31Z2FhZXxb1zDgMB8mHRgw6DrfBosDvl0Pvv/ r3WhgHs5Nf5eNnSFADAUyTKStmG9TT9fD7hTMa/LQrUuJE2icuTJsK5jn71pCXIn GHeavqEnL8eo0uTnmmcbSRfDQ96Jps/3OCPEed1HZrAvNRJy4qfAlcTz0KCMA0PB 2pc7+jfK7I522sv2ozaeu52vZStZARztCINJz0Q908nmgKTaDAgpGhLzkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGZdYoQlxs62urQZ5nx7xdrZJOvMB8GA1UdIwQY MBaAFEqi+m9ncPctgIS8bBgwWLgOg41zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAt NzQ3NGY5MTZkYjQ3LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAtNzQ3NGY5MTZkYjQ3 LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5sGaBoh L+/WtMn9JZiCzmfn/20i4H6Qms7COecXDw4hm2j+7VgHK7ZERQCQ1Fa/tlu1QZpF DufN3OrmobS6GkhwM5stu32t3qjvc33ydOwqcw8w0ifSAQ4ldQLRCINmZ+a+4Ugc ChpozOr3xmRi2owdy73R38zJQ2GGLGpo/Jn+La+x4YrCbVLL4NsBF4yLvyrc5t74 8DqF139X8D+60Lb///4+5fYIY8BeD2wbekavVyIlwUe17cd4s+yj96iRvxC+9MPH tEfM5TZymhhCcfNF8JcdAbqTSfaWpj99Kr2a5v7nXR4D10u5i5Fm/Qj/mdT47Qyu ertX7cbTRIxcjg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:56 2026 by rpki-client