This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json) Hash identifier: JC4zSy3QNuBo1y8MPYifehr0eoJI6yMAVt/Y8N4l6AQ= Subject key identifier: 3A:28:0E:CA:9D:7E:7A:EF:1F:53:C7:FA:44:A0:2B:70:CD:4D:B3:AD Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09 Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709 Certificate serial: 019C4323034B2BE5CA992D5938E8EAA47954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft Manifest number: 1028 Signing time: Mon 09 Feb 2026 16:01:33 +0000 Manifest this update: Mon 09 Feb 2026 16:01:33 +0000 Manifest next update: Tue 10 Feb 2026 16:01:33 +0000 Files and hashes: 1: 8FRJmqKD4O9hicOCfimP2sZW9Bw.roa (hash: qsSQr7ZX2Tfzn8qTUOO+KjaxEWYNuzZCcjzvYa3m+dI=) 2: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: l1XYOBx4wHHWn4HyOWHlLFyckqI5AtuA2OoZcAs6Fwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:03:4b:2b:e5:ca:99:2d:59:38:e8:ea:a4:79:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709 Validity Not Before: Feb 9 16:01:33 2026 GMT Not After : Feb 10 16:01:33 2026 GMT Subject: CN=3a280eca9d7e7aef1f53c7fa44a02b70cd4db3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:61:fc:d2:4c:d6:3b:e2:b4:d1:6b:fd:fd: d9:6b:0e:80:0e:d7:75:61:a2:36:31:a0:ce:6b:28: 8b:ad:c8:b3:6a:8c:98:3c:6f:22:00:29:ba:21:2c: 52:86:8a:7e:3f:99:f9:e6:74:9d:c5:79:5e:1b:42: df:53:98:6e:6e:93:d4:4c:e7:e8:c5:2c:7b:f4:c9: f0:b9:45:a6:66:ef:d3:11:73:37:99:0f:81:c7:24: 90:e0:be:e5:18:fe:47:06:a3:00:07:f5:84:71:2c: dc:79:4c:8c:42:f8:52:af:9e:55:b1:30:4c:d4:3e: 4e:71:94:16:c4:ed:2e:dd:9b:52:7c:0a:00:c8:80: e5:27:da:f8:83:ab:64:07:ee:75:3b:b1:c6:e4:f8: 59:ee:00:0a:ab:6b:76:7c:ac:00:d8:8c:5a:57:c1: 60:9b:c5:5e:ed:8e:a9:4b:49:ee:07:5d:72:9e:b9: 7e:0e:87:d1:8f:d4:04:dd:2d:b6:de:33:6c:7c:80: d3:5e:03:13:a2:fb:11:e1:1d:42:17:85:fd:70:20: cc:b6:f8:7f:d2:0e:c9:92:1b:05:ae:10:88:97:77: d5:e4:0a:49:b3:4a:7c:29:c5:bd:71:45:b4:b0:59: 8e:85:4c:1e:2e:dd:b5:63:88:c1:dd:36:47:17:39: 6e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:0E:CA:9D:7E:7A:EF:1F:53:C7:FA:44:A0:2B:70:CD:4D:B3:AD X509v3 Authority Key Identifier: keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:de:63:d1:82:10:20:d9:48:24:96:3a:35:5d:b8:ad:02:66: 89:23:14:6f:0c:58:41:68:0e:75:00:17:74:27:7e:b3:ec:7e: 32:c4:61:6d:2e:f0:f6:ea:b5:85:e4:e1:38:5a:32:26:ca:82: 34:3b:b8:4e:7a:e6:ec:5b:38:1e:36:e3:d4:98:8e:01:20:d3: 0f:14:0e:4d:dc:7b:40:34:2a:0f:ec:d6:9e:40:03:a6:24:be: 61:07:af:f7:bf:c0:e4:07:16:8f:79:7e:c5:02:3b:75:ce:9d: 5f:b2:03:50:52:01:fa:45:f3:d7:b1:04:34:ee:92:f1:1c:fe: e9:b0:66:bf:d9:50:08:e3:d0:cc:88:a8:f4:e9:a7:ab:06:05: 7a:9d:d8:a0:3d:fa:25:aa:fb:a0:c3:a2:78:2e:a1:00:22:08: 1e:5d:69:5b:8d:b9:58:3c:7c:b6:2c:30:ba:9e:63:f9:2c:9b: 94:ab:70:31:ad:cf:cb:b3:b8:09:b0:a2:27:2f:6e:b0:66:6c: 49:de:be:0f:df:ea:45:55:a1:9f:e2:30:e1:c9:08:7d:15:9c: c9:1b:b8:06:21:2c:25:3f:26:23:f5:c1:e1:fe:b4:c2:63:76: 74:65:9b:ce:5d:92:c9:94:b7:11:a3:46:40:43:bf:aa:74:ca: 8c:ad:dd:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIwNLK+XKmS1ZOOjqpHlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWYxMzNkNGFjMzRiZGNmYjdiZGRjN2UxMWIyNzA1NDM2 MmY3MDkwHhcNMjYwMjA5MTYwMTMzWhcNMjYwMjEwMTYwMTMzWjAzMTEwLwYDVQQD EygzYTI4MGVjYTlkN2U3YWVmMWY1M2M3ZmE0NGEwMmI3MGNkNGRiM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtplh/NJM1jvitNFr/f3Zaw6ADtd1 YaI2MaDOayiLrcizaoyYPG8iACm6ISxShop+P5n55nSdxXleG0LfU5hubpPUTOfo xSx79MnwuUWmZu/TEXM3mQ+BxySQ4L7lGP5HBqMAB/WEcSzceUyMQvhSr55VsTBM 1D5OcZQWxO0u3ZtSfAoAyIDlJ9r4g6tkB+51O7HG5PhZ7gAKq2t2fKwA2IxaV8Fg m8Ve7Y6pS0nuB11ynrl+DofRj9QE3S223jNsfIDTXgMTovsR4R1CF4X9cCDMtvh/ 0g7JkhsFrhCIl3fV5ApJs0p8KcW9cUW0sFmOhUweLt21Y4jB3TZHFzluYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDooDsqdfnrvH1PH+kSgK3DNTbOtMB8GA1UdIwQY MBaAFLKvEz1Kw0vc+3vdx+EbJwVDYvcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEt ZjNlYWFlNjMzYTFlLzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEtZjNlYWFlNjMzYTFl LzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANt5j0YIQ INlIJJY6NV24rQJmiSMUbwxYQWgOdQAXdCd+s+x+MsRhbS7w9uq1heThOFoyJsqC NDu4Tnrm7Fs4Hjbj1JiOASDTDxQOTdx7QDQqD+zWnkADpiS+YQev97/A5AcWj3l+ xQI7dc6dX7IDUFIB+kXz17EENO6S8Rz+6bBmv9lQCOPQzIio9OmnqwYFep3YoD36 Jar7oMOieC6hACIIHl1pW425WDx8tiwwup5j+SyblKtwMa3Py7O4CbCiJy9usGZs Sd6+D9/qRVWhn+Iw4ckIfRWcyRu4BiEsJT8mI/XB4f60wmN2dGWbzl2SyZS3EaNG QEO/qnTKjK3dug== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:49 2026 by rpki-client