This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json) Hash identifier: TB14+sp++EbCsy1WthpErkACCmLk6zeKejFkOZNCDo0= Subject key identifier: 98:E1:16:20:1C:AC:26:DF:F8:FA:DF:79:06:E9:0D:42:A7:CC:8E:2F Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79 Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79 Certificate serial: 019C4246C5E6FBD2594F00166A87872DCBCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft Manifest number: 0672 Signing time: Mon 09 Feb 2026 12:01:00 +0000 Manifest this update: Mon 09 Feb 2026 12:01:00 +0000 Manifest next update: Tue 10 Feb 2026 12:01:00 +0000 Files and hashes: 1: 3j6WlgdxqAXoRQPRjR6UJD1LhPw.roa (hash: T1exYoW+fjUwfB54PefmCuoIsw95ypDAm+V+z9pSMEQ=) 2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: gsLZgXB7QaRbuCgUgrwHV0s+zdxfeSI1mwms3CbPj7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c5:e6:fb:d2:59:4f:00:16:6a:87:87:2d:cb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79 Validity Not Before: Feb 9 12:01:00 2026 GMT Not After : Feb 10 12:01:00 2026 GMT Subject: CN=98e116201cac26dff8fadf7906e90d42a7cc8e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:23:8b:a3:99:62:8c:f2:7b:73:40:99:44: 12:7e:cf:a8:06:9a:31:a9:86:5b:bd:aa:9e:fb:70: 52:d6:5b:50:e2:f5:8f:e0:d9:3a:ae:da:90:6f:e5: b8:04:9c:f4:af:f5:0a:91:ad:f8:4a:95:20:6a:a0: 6f:02:d7:ba:e2:32:8e:53:18:37:5d:8b:d5:0d:95: 68:2f:e9:fe:73:37:bf:fc:e6:23:5d:50:bc:95:a2: c5:42:85:32:70:bc:f1:cc:80:a7:44:15:60:76:49: 64:d9:0c:cd:63:d3:99:92:d2:7e:f8:39:22:06:3b: 86:36:27:4d:7a:15:23:34:40:68:34:d6:a7:4e:05: ee:4c:87:84:dd:bd:a1:48:24:7f:25:e7:e4:a7:9c: 63:2e:60:1a:2c:11:cf:d7:f7:54:30:b3:df:e4:01: ea:d3:d1:8a:bc:1c:13:33:00:b7:0d:cd:e2:08:fc: 37:2f:61:2b:7e:d9:e1:7c:38:16:0c:82:37:96:d1: db:c9:a2:95:20:86:ee:1f:6e:fb:3f:60:e6:38:3e: dc:67:fb:05:d1:34:2a:cb:53:9b:10:29:ea:67:ad: 59:f9:58:ae:12:d1:81:13:e6:13:13:d4:43:0b:76: 67:62:82:e0:68:6f:e0:87:b3:2b:5d:52:a9:c8:00: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E1:16:20:1C:AC:26:DF:F8:FA:DF:79:06:E9:0D:42:A7:CC:8E:2F X509v3 Authority Key Identifier: keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a2:35:ac:91:51:c1:7c:67:6f:8e:8a:97:62:09:df:b0:49: 35:d0:1e:65:8e:e2:ce:58:a6:5a:f1:ce:fe:d0:97:12:d7:31: 20:24:63:ad:4e:ab:9a:14:72:00:af:6a:26:12:f7:8a:54:56: 06:fe:54:7a:a5:bc:4c:73:1e:51:ad:95:0b:17:cf:b2:fa:8e: b7:1b:d5:00:cb:18:04:80:db:d6:8d:ca:ec:c1:91:e5:d4:98: 60:a7:7e:18:71:37:9c:cf:e8:93:55:65:5b:6d:fa:7f:53:f5: da:79:f9:4c:e2:bc:87:b1:6a:92:a8:49:b4:26:43:a9:54:8c: e1:5e:ce:6a:18:96:cf:7f:cb:f5:d4:6a:fd:01:b1:ea:9c:d9: 71:24:b5:d4:42:ae:7b:a1:32:8e:e9:95:8d:c0:4b:0d:94:3b: b0:ad:c9:11:6f:ab:96:a5:ef:4b:c6:89:f4:72:33:ac:b0:74: 39:97:9e:5f:d4:a7:f0:7c:24:09:72:95:8c:8d:99:a7:84:30: 4c:2b:b6:39:cc:e3:b9:02:02:a4:99:2e:3f:2d:54:62:26:ce: 7f:d5:63:34:1c:af:c1:a3:35:f3:c7:6c:ae:4e:8b:ed:d8:86: 79:d8:60:28:09:ae:81:fb:03:7a:86:89:0e:bc:b8:ca:47:07: 37:49:ce:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsXm+9JZTwAWaoeHLcvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjA5M2JiOGU4YWQxMWM0YzgzNGVkZmQyZGY1NGQ0MWNi NDlmNzkwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD Eyg5OGUxMTYyMDFjYWMyNmRmZjhmYWRmNzkwNmU5MGQ0MmE3Y2M4ZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNwji6OZYozye3NAmUQSfs+oBpox qYZbvaqe+3BS1ltQ4vWP4Nk6rtqQb+W4BJz0r/UKka34SpUgaqBvAte64jKOUxg3 XYvVDZVoL+n+cze//OYjXVC8laLFQoUycLzxzICnRBVgdklk2QzNY9OZktJ++Dki BjuGNidNehUjNEBoNNanTgXuTIeE3b2hSCR/Jefkp5xjLmAaLBHP1/dUMLPf5AHq 09GKvBwTMwC3Dc3iCPw3L2ErftnhfDgWDII3ltHbyaKVIIbuH277P2DmOD7cZ/sF 0TQqy1ObECnqZ61Z+ViuEtGBE+YTE9RDC3ZnYoLgaG/gh7MrXVKpyABCRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjhFiAcrCbf+PrfeQbpDUKnzI4vMB8GA1UdIwQY MBaAFEnwk7uOitEcTINO39LfVNQctJ95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMt ZTk2MTdkNjZhNzRiLzEvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMtZTk2MTdkNjZhNzRi LzEvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqI1rJFR wXxnb46Kl2IJ37BJNdAeZY7izlimWvHO/tCXEtcxICRjrU6rmhRyAK9qJhL3ilRW Bv5UeqW8THMeUa2VCxfPsvqOtxvVAMsYBIDb1o3K7MGR5dSYYKd+GHE3nM/ok1Vl W236f1P12nn5TOK8h7FqkqhJtCZDqVSM4V7OahiWz3/L9dRq/QGx6pzZcSS11EKu e6EyjumVjcBLDZQ7sK3JEW+rlqXvS8aJ9HIzrLB0OZeeX9Sn8HwkCXKVjI2Zp4Qw TCu2OczjuQICpJkuPy1UYibOf9VjNByvwaM188dsrk6L7diGedhgKAmugfsDeoaJ Dry4ykcHN0nOdg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:19 2026 by rpki-client