This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json) Hash identifier: U8fXU03LhZfBrdXxoc+NkzHTz1ug2AsDVIk8Bg6bWsE= Subject key identifier: 28:FF:91:ED:53:59:90:C4:94:45:C9:DC:8C:A1:99:D7:7A:F1:E4:5F Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48 Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48 Certificate serial: 019C420F4CA278ACE053302930A05DB862D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft Manifest number: 0432 Signing time: Mon 09 Feb 2026 11:00:24 +0000 Manifest this update: Mon 09 Feb 2026 11:00:24 +0000 Manifest next update: Tue 10 Feb 2026 11:00:24 +0000 Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: oCkQwBVPxxZ2iPdMzunkP77ghnz2BUJ/mJ2laBj3uSQ=) 2: irsd6se3UI4Vehs4kcliozefsFU.roa (hash: fTkE3KDW/GsXrLu5wWzp0YdBO44h0Y6GslfTVrGJEkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4c:a2:78:ac:e0:53:30:29:30:a0:5d:b8:62:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48 Validity Not Before: Feb 9 11:00:24 2026 GMT Not After : Feb 10 11:00:24 2026 GMT Subject: CN=28ff91ed535990c49445c9dc8ca199d77af1e45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:c3:ac:c0:38:27:d7:8c:bd:ab:f2:ff:a6: e2:dd:e6:6c:2f:23:82:1e:73:4a:18:e3:1b:e5:8e: 06:b5:05:51:ef:54:31:8c:1e:a5:c3:e5:0c:20:60: f1:24:0f:a6:c6:2c:64:84:36:15:be:d6:b2:29:32: b2:78:b2:63:11:51:a1:fc:71:c0:44:4a:ab:fe:50: a1:58:88:0a:e5:7c:7b:32:b0:9f:87:62:29:73:1d: c2:8c:b3:31:67:b2:ff:82:83:85:6a:ba:4e:41:6b: 4e:27:03:8b:29:9f:2f:4a:7c:68:c2:6a:c6:51:c3: ac:b4:01:cc:ba:60:62:d9:28:00:05:b3:7e:78:fa: d6:2f:41:c8:14:ca:a2:ee:3d:b4:f3:dd:cf:98:cf: 20:71:c8:10:9b:b5:fb:06:8c:8c:66:7e:c6:70:1a: d7:06:d7:f8:65:3c:6d:8c:5c:0d:60:6f:cb:0c:72: 14:f8:6c:da:c9:8d:a7:d7:e1:48:ab:55:69:9b:f2: 65:41:62:52:99:1e:f3:f4:04:9f:67:2f:78:84:f7: 5c:ce:9f:c2:d0:18:99:aa:30:0a:d2:a0:27:09:29: 09:3c:f0:0b:02:73:fd:80:dd:78:61:27:fd:99:65: 44:2f:1a:ca:f3:a7:f4:d0:75:54:10:54:18:aa:52: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:91:ED:53:59:90:C4:94:45:C9:DC:8C:A1:99:D7:7A:F1:E4:5F X509v3 Authority Key Identifier: keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:12:7f:76:d3:35:59:b0:9c:33:94:5a:09:da:ac:e2:71:5e: 46:a4:e3:0e:18:8d:28:e5:b0:f1:8d:02:52:2c:c6:34:dc:d2: 4a:5a:bd:8d:12:ee:7d:64:f4:d4:e1:c9:25:84:10:aa:83:ae: 1a:93:74:c4:54:3e:17:08:c9:a2:14:3a:c5:e9:89:ee:52:e5: 79:bf:e7:12:e6:de:29:2b:84:e6:b6:57:bb:56:92:66:9e:0f: bb:f6:9f:a1:8e:16:33:07:e1:e0:97:18:81:81:85:17:67:bc: 04:68:89:e0:93:e1:ff:9b:c2:94:a5:34:ea:16:a3:9b:ba:ab: e8:d6:e6:c1:26:6d:af:b1:05:70:43:75:a1:1a:9f:a3:f2:76: cc:bb:38:d4:a5:dd:b6:f0:ec:61:0e:d0:7e:2c:4a:1f:ff:21: f1:2c:f6:1b:cb:5b:a3:95:a7:da:ec:f1:6d:76:ab:f9:4e:7b: 5a:63:27:7b:0b:bd:a3:ca:68:04:37:76:f6:64:aa:0f:cd:4a: f8:33:d3:c0:d4:09:34:56:26:39:a8:bd:2a:04:f8:7c:d8:50: 13:1d:b9:3c:34:31:bf:b7:2f:c6:1a:52:40:1c:d9:43:77:68: 46:b3:ab:64:f3:3d:ee:a5:f6:0b:9d:ea:5d:0a:cb:77:36:e6: 3d:9b:cf:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0yieKzgUzApMKBduGLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MjE5MjgxM2QyMmVmYTA0YmNiYjI0ZTBiZjBmZTM0ZDhk ZmJhNDgwHhcNMjYwMjA5MTEwMDI0WhcNMjYwMjEwMTEwMDI0WjAzMTEwLwYDVQQD EygyOGZmOTFlZDUzNTk5MGM0OTQ0NWM5ZGM4Y2ExOTlkNzdhZjFlNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTXDrMA4J9eMvavy/6bi3eZsLyOC HnNKGOMb5Y4GtQVR71QxjB6lw+UMIGDxJA+mxixkhDYVvtayKTKyeLJjEVGh/HHA REqr/lChWIgK5Xx7MrCfh2Ipcx3CjLMxZ7L/goOFarpOQWtOJwOLKZ8vSnxowmrG UcOstAHMumBi2SgABbN+ePrWL0HIFMqi7j20893PmM8gccgQm7X7BoyMZn7GcBrX Btf4ZTxtjFwNYG/LDHIU+GzayY2n1+FIq1Vpm/JlQWJSmR7z9ASfZy94hPdczp/C 0BiZqjAK0qAnCSkJPPALAnP9gN14YSf9mWVELxrK86f00HVUEFQYqlJnQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj/ke1TWZDElEXJ3Iyhmdd68eRfMB8GA1UdIwQY MBaAFNUhkoE9Iu+gS8uyTgvw/jTY37pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDIt ZDhjNDRkNjA0YmMyLzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDItZDhjNDRkNjA0YmMy LzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBJ/dtM1 WbCcM5RaCdqs4nFeRqTjDhiNKOWw8Y0CUizGNNzSSlq9jRLufWT01OHJJYQQqoOu GpN0xFQ+FwjJohQ6xemJ7lLleb/nEubeKSuE5rZXu1aSZp4Pu/afoY4WMwfh4JcY gYGFF2e8BGiJ4JPh/5vClKU06hajm7qr6NbmwSZtr7EFcEN1oRqfo/J2zLs41KXd tvDsYQ7QfixKH/8h8Sz2G8tbo5Wn2uzxbXar+U57WmMnewu9o8poBDd29mSqD81K +DPTwNQJNFYmOai9KgT4fNhQEx25PDQxv7cvxhpSQBzZQ3doRrOrZPM97qX2C53q XQrLdzbmPZvPyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:40 2026 by rpki-client