This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json) Hash identifier: tPQfyczkymSBKehj2ltemO4RRZGhAadavLB4NieZbb4= Subject key identifier: 06:0D:2B:44:43:97:1A:E5:3E:AB:F1:12:DA:AA:A7:70:8E:43:80:D1 Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41 Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941 Certificate serial: 019C424641C4426661FDF71A59175146D51B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft Manifest number: 1700 Signing time: Mon 09 Feb 2026 12:00:26 +0000 Manifest this update: Mon 09 Feb 2026 12:00:26 +0000 Manifest next update: Tue 10 Feb 2026 12:00:26 +0000 Files and hashes: 1: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (hash: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8=) 2: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: C2Pfbdjq8oWPx2NoWCg1AIyKDPFsXaE4tq5TPc79n64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:41:c4:42:66:61:fd:f7:1a:59:17:51:46:d5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941 Validity Not Before: Feb 9 12:00:26 2026 GMT Not After : Feb 10 12:00:26 2026 GMT Subject: CN=060d2b4443971ae53eabf112daaaa7708e4380d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:62:90:e5:e2:78:20:ab:3f:3f:0b:ab:52: fd:a9:65:eb:8a:ab:3e:f3:e7:cc:7e:9b:30:bf:7a: fe:76:76:1c:1e:0c:0a:9f:64:4b:4f:56:6d:70:36: 83:6f:cb:77:df:5a:d8:37:21:e6:c1:b9:4f:c3:3d: 31:30:15:ef:7d:53:53:0f:7c:20:15:ec:ff:3f:49: 23:9b:78:98:87:aa:04:6c:81:0c:01:4c:d4:00:68: c7:ac:2f:ea:1e:77:89:68:af:8c:83:ea:98:09:01: 30:2a:1d:7a:43:34:ef:f6:18:03:88:68:01:8a:ba: 95:0a:f4:85:de:ed:f0:4c:5e:34:f7:99:8c:c0:63: e8:41:04:e5:39:73:a2:8f:de:18:c6:ea:a7:69:2e: df:e9:f9:15:c2:8d:9c:8c:6f:2b:46:92:ca:60:1d: 93:db:ae:59:92:8d:bf:a1:65:c4:50:19:4b:30:31: 64:14:fc:5d:af:71:32:72:22:67:5b:0b:f8:df:fe: d8:33:9d:c9:97:06:28:0f:1a:53:46:6e:94:f9:89: 9e:b5:aa:c5:90:7b:83:89:ce:ed:19:2a:6c:a8:d6: ab:d7:88:00:b4:63:1f:05:38:4e:a6:79:16:bf:54: 74:b4:d3:4a:f8:bf:9a:9f:73:64:1a:97:c6:73:78: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0D:2B:44:43:97:1A:E5:3E:AB:F1:12:DA:AA:A7:70:8E:43:80:D1 X509v3 Authority Key Identifier: keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:85:99:47:51:19:6f:a0:3c:ac:92:8a:94:0c:71:f8:4a:4b: 72:b4:fb:76:2f:2c:a3:90:6e:b5:19:de:91:35:68:0c:1c:6a: 10:fc:22:10:c6:ff:4c:2e:7e:38:33:99:aa:8a:41:46:8c:26: 19:ae:87:9c:d8:84:a7:47:cb:fc:5a:87:62:41:16:e7:76:80: ea:3e:18:04:98:05:57:32:f1:73:65:84:4f:c6:ae:8c:c4:a5: 9f:3d:1b:c6:c9:13:dd:c3:bc:5b:f7:4d:42:66:83:eb:04:69: 88:9d:80:c9:f2:d4:17:5a:eb:61:67:10:c8:97:dc:f9:5d:4f: 28:7e:c7:1d:10:a9:7a:fa:65:fb:aa:2d:c0:8a:93:b0:71:c4: 32:b9:6d:28:bd:50:40:db:ee:41:0f:2c:9a:51:51:0a:97:2f: b0:8a:04:ed:51:2e:06:7d:3c:77:f5:05:83:e8:c3:70:bc:0f: 25:7e:1b:13:0a:3a:70:78:a3:9d:c4:c5:7f:9c:12:22:18:d0: cb:36:52:63:56:3b:a0:62:8d:7c:23:b3:71:fe:80:dd:7d:8c: a7:6f:b7:89:f1:77:40:2b:73:0f:b3:ce:52:cd:dc:09:73:8d: 0b:2e:fb:25:45:a0:90:8f:44:73:38:e8:dc:5d:7d:8e:13:3e: a3:54:f0:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkHEQmZh/fcaWRdRRtUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MzQ2OTU0NDIwMzA4MmQyYzNjMWRkZjBmMGJiZDkwYmRj NTY5NDEwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD EygwNjBkMmI0NDQzOTcxYWU1M2VhYmYxMTJkYWFhYTc3MDhlNDM4MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4hikOXieCCrPz8Lq1L9qWXriqs+ 8+fMfpswv3r+dnYcHgwKn2RLT1ZtcDaDb8t331rYNyHmwblPwz0xMBXvfVNTD3wg Fez/P0kjm3iYh6oEbIEMAUzUAGjHrC/qHneJaK+Mg+qYCQEwKh16QzTv9hgDiGgB irqVCvSF3u3wTF4095mMwGPoQQTlOXOij94YxuqnaS7f6fkVwo2cjG8rRpLKYB2T 265Zko2/oWXEUBlLMDFkFPxdr3EyciJnWwv43/7YM53JlwYoDxpTRm6U+YmetarF kHuDic7tGSpsqNar14gAtGMfBThOpnkWv1R0tNNK+L+an3NkGpfGc3ildQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYNK0RDlxrlPqvxEtqqp3COQ4DRMB8GA1UdIwQY MBaAFEk0aVRCAwgtLDwd3w8LvZC9xWlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUt ZTAzOGQ4MWIzZjk3LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUtZTAzOGQ4MWIzZjk3 LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYWZR1EZ b6A8rJKKlAxx+EpLcrT7di8so5ButRnekTVoDBxqEPwiEMb/TC5+ODOZqopBRowm Ga6HnNiEp0fL/FqHYkEW53aA6j4YBJgFVzLxc2WET8aujMSlnz0bxskT3cO8W/dN QmaD6wRpiJ2AyfLUF1rrYWcQyJfc+V1PKH7HHRCpevpl+6otwIqTsHHEMrltKL1Q QNvuQQ8smlFRCpcvsIoE7VEuBn08d/UFg+jDcLwPJX4bEwo6cHijncTFf5wSIhjQ yzZSY1Y7oGKNfCOzcf6A3X2Mp2+3ifF3QCtzD7POUs3cCXONCy77JUWgkI9Eczjo 3F19jhM+o1TwvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:39 2026 by rpki-client