This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json) Hash identifier: hZP0pDSLlU7xLa9Hvtp7sD4oMn1obYexxe9oS9+88as= Subject key identifier: 52:43:4C:DE:BF:F8:D6:21:B4:C2:E7:71:DA:9F:86:1F:83:B6:4D:7C Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6 Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6 Certificate serial: 019C41D8F7E6927E8A60FDB17B439FA77F3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft Manifest number: 0DED Signing time: Mon 09 Feb 2026 10:01:04 +0000 Manifest this update: Mon 09 Feb 2026 10:01:04 +0000 Manifest next update: Tue 10 Feb 2026 10:01:04 +0000 Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: C1SPn+Ct+smgHytlDDvTEgAQle5GbHfdiEPm3kO4mjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f7:e6:92:7e:8a:60:fd:b1:7b:43:9f:a7:7f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6 Validity Not Before: Feb 9 10:01:04 2026 GMT Not After : Feb 10 10:01:04 2026 GMT Subject: CN=52434cdebff8d621b4c2e771da9f861f83b64d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:5d:9a:74:52:07:54:a0:33:a0:fa:fb:bb: fd:ca:29:74:07:07:fa:8f:ab:2d:dc:e6:c5:5e:07: 88:ea:79:7c:83:cd:12:bd:76:f8:2c:c3:7c:e2:ee: 78:f5:87:77:e5:45:42:fa:6b:7c:b4:ad:44:ba:2e: b4:59:24:75:ae:04:29:dd:56:93:f5:28:c1:9d:dc: 72:ed:1a:5a:09:80:af:86:37:45:1c:c5:c3:14:a3: db:60:4f:3a:dd:19:53:59:07:2b:d6:7b:ee:ea:4c: 19:ad:0f:a6:73:57:0a:db:a7:b4:3f:ce:04:70:75: 56:0d:92:1a:ce:e2:81:75:a0:f3:35:5a:ef:a2:1a: e9:c7:81:d8:27:82:24:ed:5f:c4:68:5a:62:f2:52: 54:e4:02:d2:4e:d6:b9:51:27:68:71:e8:48:a2:b3: a2:6b:43:e4:ac:20:18:65:e9:b0:05:ef:26:4c:38: 1b:a9:5c:e3:29:f2:a1:36:2e:50:0b:f4:2e:e6:18: 80:23:f0:69:c5:46:df:1d:80:b5:4e:be:71:21:ae: f5:43:c7:12:11:24:9f:c3:11:ba:8f:90:c6:97:6b: f6:ba:2b:a7:73:de:78:64:d6:c9:df:ff:9a:7d:2b: 44:36:82:4a:7e:53:4a:18:0e:09:59:9f:ef:60:91: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:4C:DE:BF:F8:D6:21:B4:C2:E7:71:DA:9F:86:1F:83:B6:4D:7C X509v3 Authority Key Identifier: keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6a:95:99:a1:42:1a:5c:71:2c:a9:b8:50:c2:83:b0:4d:5c: ff:ec:8e:9b:55:d9:3d:a5:37:3a:4f:5d:73:6f:79:98:87:2e: ff:70:ad:bf:10:51:f2:b2:27:58:46:79:13:04:ae:e7:b1:4b: 80:26:9a:f2:68:e2:0e:a9:59:af:dd:47:d5:55:d6:2b:99:0a: 61:21:5e:09:1f:da:ec:f7:51:7d:0c:f8:8a:98:89:6c:56:98: f2:a1:10:a0:04:3b:ba:d7:b2:4e:f7:0a:67:b5:a4:a0:88:9c: d0:58:93:cb:4f:d7:be:3d:95:02:29:f7:0c:79:91:34:cd:7a: 17:ef:7d:43:e6:00:25:08:3d:92:2e:67:ab:c9:c5:a6:b9:8b: 2b:2f:d6:b5:3c:8e:b3:5f:dc:2a:6a:de:29:d4:c1:09:55:b8: e0:ce:74:b8:b2:67:0e:5c:7b:16:f4:cf:fc:55:08:59:2d:50: d4:82:8e:a5:b8:0d:4d:cf:d7:da:92:b0:16:3d:3c:69:18:e7: 47:bb:d4:11:28:46:e8:17:73:a7:12:20:24:91:f2:97:42:1b: 38:ac:ff:e8:e0:ca:32:8d:80:a6:73:1a:0d:61:ce:c6:c8:41: b3:b2:1a:e0:2a:63:e6:b8:20:2f:5b:04:8e:a8:e1:78:b8:d4: 06:7c:0e:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Pfmkn6KYP2xe0Ofp386MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhM2M0MjY4M2MwODkxMzVhNDllZjFmNTY1M2NiOWNlNWVi NzBiZTYwHhcNMjYwMjA5MTAwMTA0WhcNMjYwMjEwMTAwMTA0WjAzMTEwLwYDVQQD Eyg1MjQzNGNkZWJmZjhkNjIxYjRjMmU3NzFkYTlmODYxZjgzYjY0ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYNdmnRSB1SgM6D6+7v9yil0Bwf6 j6st3ObFXgeI6nl8g80SvXb4LMN84u549Yd35UVC+mt8tK1Eui60WSR1rgQp3VaT 9SjBndxy7RpaCYCvhjdFHMXDFKPbYE863RlTWQcr1nvu6kwZrQ+mc1cK26e0P84E cHVWDZIazuKBdaDzNVrvohrpx4HYJ4Ik7V/EaFpi8lJU5ALSTta5USdocehIorOi a0PkrCAYZemwBe8mTDgbqVzjKfKhNi5QC/Qu5hiAI/BpxUbfHYC1Tr5xIa71Q8cS ESSfwxG6j5DGl2v2uiunc954ZNbJ3/+afStENoJKflNKGA4JWZ/vYJEmlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJDTN6/+NYhtMLncdqfhh+Dtk18MB8GA1UdIwQY MBaAFEo8Qmg8CJE1pJ7x9WU8uc5etwvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83NTJkM2UtOTEyNi00MWQ0LWI0NWIt NDc5MDlkZDU3ODAwLzEvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83NTJkM2UtOTEyNi00MWQ0LWI0NWItNDc5MDlkZDU3ODAw LzEvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGqVmaFC GlxxLKm4UMKDsE1c/+yOm1XZPaU3Ok9dc295mIcu/3CtvxBR8rInWEZ5EwSu57FL gCaa8mjiDqlZr91H1VXWK5kKYSFeCR/a7PdRfQz4ipiJbFaY8qEQoAQ7uteyTvcK Z7WkoIic0FiTy0/Xvj2VAin3DHmRNM16F+99Q+YAJQg9ki5nq8nFprmLKy/WtTyO s1/cKmreKdTBCVW44M50uLJnDlx7FvTP/FUIWS1Q1IKOpbgNTc/X2pKwFj08aRjn R7vUEShG6BdzpxIgJJHyl0IbOKz/6ODKMo2ApnMaDWHOxshBs7Ia4Cpj5rggL1sE jqjheLjUBnwONQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:39 2026 by rpki-client