This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft File: sh47KsUJcPsSbL3xnX-zFdzBxF0.mft (raw, json) Hash identifier: +JDzrFNapiapRIsPh1mWr8ItzUUy2OapJnXoWeqTtAU= Subject key identifier: F5:64:8A:A6:3D:8B:F4:3E:3C:7A:13:3D:C1:54:AC:49:1A:BC:77:1C Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d Certificate serial: 019C43229D48B3C2795AED04631FB91A4D07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft Manifest number: 029E Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: ExsHE4JND829crxsW7zedd1gI4E.roa (hash: PwF0kYYWy9VG4ZuDcqRgCgPtqUp4IvaWx84Jor85iVQ=) 2: sh47KsUJcPsSbL3xnX-zFdzBxF0.crl (hash: dT4hRdGXvuI2hjwGfO86gIC93wqKhIhMimZg2rBsJz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9d:48:b3:c2:79:5a:ed:04:63:1f:b9:1a:4d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=f5648aa63d8bf43e3c7a133dc154ac491abc771c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:27:f7:e5:95:84:f3:35:8c:26:fd:1b:67: 59:1f:37:fb:b3:09:9b:dd:53:e7:82:50:ce:e6:67: 29:d8:a6:c7:fd:aa:97:f9:4b:1f:be:29:90:4c:ce: 65:37:df:15:59:e5:0f:86:eb:88:22:a1:54:f6:86: 27:9e:2e:5c:be:35:f6:65:5c:03:14:65:a1:bb:f6: 1e:68:1e:c6:1e:d9:a9:86:20:f2:b7:e3:2e:31:42: 8d:b7:cc:b7:33:ce:d8:0c:ed:3d:d9:fe:48:e9:86: e3:fb:d8:c5:82:12:e7:8d:94:6b:d4:b5:f8:6e:d4: f2:3c:50:84:a3:59:b3:f5:a2:71:07:71:18:9a:4f: 86:95:f0:1d:0a:e4:6a:99:06:24:58:25:ae:2c:4f: ed:e5:ad:7a:17:80:3b:a5:83:67:5f:e8:e5:14:84: 21:44:a8:be:82:7f:41:00:fb:cf:e1:50:4e:4b:0f: c2:cd:e7:cd:85:03:3c:04:24:55:52:b2:5c:a8:14: e5:f0:01:a3:c8:23:14:1d:3a:e8:1a:d9:a6:15:1c: 45:9d:ad:c9:33:77:d4:23:da:e1:f1:2d:fa:d0:f6: b3:ed:e6:ff:a8:8f:c0:a8:a6:56:eb:6a:80:df:13: 5c:6a:eb:3e:91:c2:21:f2:3b:80:5a:4b:b7:56:73: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:64:8A:A6:3D:8B:F4:3E:3C:7A:13:3D:C1:54:AC:49:1A:BC:77:1C X509v3 Authority Key Identifier: keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:03:52:2f:18:f7:e9:12:12:f4:f1:17:3b:ab:89:34:f2:7f: 13:48:29:7f:35:93:92:7a:df:98:90:84:c2:a8:84:13:fc:56: a4:5f:6d:72:09:5c:ad:0d:04:bf:99:0f:40:e2:18:38:82:fd: a9:1f:00:08:61:37:5b:28:77:63:76:c2:fb:9f:6c:08:e0:14: 2e:94:28:62:0c:48:a1:8a:7b:dc:59:c9:2a:05:b8:c2:b7:21: c7:26:0b:a7:e7:38:35:91:08:2c:71:e0:96:ee:3d:36:db:03: 5d:1e:a8:22:d3:6d:ff:7c:73:33:80:4f:9f:7e:62:9c:4b:4b: ee:58:0d:de:1d:86:1e:55:2b:0c:e6:c4:cf:df:84:38:05:b0: 3a:2c:d2:01:f2:45:a0:d4:2a:5b:99:6d:ed:73:79:8b:97:d6: 61:dc:17:85:9c:a2:92:ce:5e:09:20:25:62:4d:ee:9b:fd:45: b7:9d:94:f4:2c:83:33:0b:5e:6a:b3:72:71:62:e5:ad:7c:f8: b9:5c:f1:e6:b7:fe:96:a1:06:f0:78:df:3e:ad:40:6b:8d:7e: c7:32:72:99:83:5e:54:c6:73:57:7a:22:df:88:7e:35:99:66: d4:f1:cc:44:12:75:ee:60:23:0a:c5:a6:9e:5f:f6:ed:3f:52: 0e:57:34:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIp1Is8J5Wu0EYx+5Gk0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMWUzYjJhYzUwOTcwZmIxMjZjYmRmMTlkN2ZiMzE1ZGNj MWM0NWQwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD EyhmNTY0OGFhNjNkOGJmNDNlM2M3YTEzM2RjMTU0YWM0OTFhYmM3NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIwn9+WVhPM1jCb9G2dZHzf7swmb 3VPnglDO5mcp2KbH/aqX+UsfvimQTM5lN98VWeUPhuuIIqFU9oYnni5cvjX2ZVwD FGWhu/YeaB7GHtmphiDyt+MuMUKNt8y3M87YDO092f5I6Ybj+9jFghLnjZRr1LX4 btTyPFCEo1mz9aJxB3EYmk+GlfAdCuRqmQYkWCWuLE/t5a16F4A7pYNnX+jlFIQh RKi+gn9BAPvP4VBOSw/CzefNhQM8BCRVUrJcqBTl8AGjyCMUHTroGtmmFRxFna3J M3fUI9rh8S360Paz7eb/qI/AqKZW62qA3xNcaus+kcIh8juAWku3VnNEiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVkiqY9i/Q+PHoTPcFUrEkavHccMB8GA1UdIwQY MBaAFLIeOyrFCXD7Emy98Z1/sxXcwcRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMt Y2IzZTI5YjZhZDMyLzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMtY2IzZTI5YjZhZDMy LzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgNSLxj3 6RIS9PEXO6uJNPJ/E0gpfzWTknrfmJCEwqiEE/xWpF9tcglcrQ0Ev5kPQOIYOIL9 qR8ACGE3Wyh3Y3bC+59sCOAULpQoYgxIoYp73FnJKgW4wrchxyYLp+c4NZEILHHg lu49NtsDXR6oItNt/3xzM4BPn35inEtL7lgN3h2GHlUrDObEz9+EOAWwOizSAfJF oNQqW5lt7XN5i5fWYdwXhZyiks5eCSAlYk3um/1Ft52U9CyDMwtearNycWLlrXz4 uVzx5rf+lqEG8HjfPq1Aa41+xzJymYNeVMZzV3oi34h+NZlm1PHMRBJ17mAjCsWm nl/27T9SDlc0Sg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:53 2026 by rpki-client