This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json) Hash identifier: edY5leUJdNXD+7SqZNqfKPt21CY9TUy0yvJo1rY4Wqk= Subject key identifier: B4:3D:57:C3:CA:7F:D1:DC:86:62:BD:D3:14:B3:CF:6D:91:92:E4:CB Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00 Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200 Certificate serial: 019C43FDA61BD1406A2414B7C9512893729B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft Manifest number: 0BD0 Signing time: Mon 09 Feb 2026 20:00:22 +0000 Manifest this update: Mon 09 Feb 2026 20:00:22 +0000 Manifest next update: Tue 10 Feb 2026 20:00:22 +0000 Files and hashes: 1: 51_BbgzWUWo6DTAu3ayMEep8mII.roa (hash: LlzlCU2PXzwgKPsniXuMY4kbQqRGH8YDiOPFJXAnqPI=) 2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: 5n9YXI1qTXxb2RN3CbqWYQLF2OfYuWjSIYjeCRtCCUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:a6:1b:d1:40:6a:24:14:b7:c9:51:28:93:72:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200 Validity Not Before: Feb 9 20:00:22 2026 GMT Not After : Feb 10 20:00:22 2026 GMT Subject: CN=b43d57c3ca7fd1dc8662bdd314b3cf6d9192e4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:39:2d:89:c6:0e:10:db:3b:0e:09:ec:78: d9:c9:0b:5d:ce:57:c3:6f:b9:01:83:f7:8a:46:77: 01:30:c3:14:4b:b6:6c:d7:8c:05:23:06:5a:78:b6: e9:3f:09:1b:7d:d2:4a:e3:21:47:ce:55:80:1c:bf: 79:10:09:3e:54:3e:b1:de:4b:71:2a:e7:fb:8e:63: 3f:ef:83:3f:23:4d:f6:07:3b:64:ba:6c:5e:13:28: 59:ba:77:e5:16:71:54:f4:c9:1f:12:25:f5:d4:e0: f2:b5:83:9e:b2:0b:fd:44:99:68:8e:16:57:53:a9: 9b:a5:6a:71:c1:d5:5e:ff:97:69:3b:93:c7:4c:54: 91:6b:cb:41:fa:1d:3d:23:7a:36:8e:46:1c:69:3a: 11:37:ec:49:95:6b:0b:ce:00:ef:3a:37:fe:5b:3e: 2f:fb:ce:06:31:6a:d2:ab:50:74:51:27:73:62:02: 51:d6:18:f2:3a:ff:e4:37:be:e5:8a:22:38:b9:bb: 33:c4:47:5a:7f:88:0b:00:be:d2:e4:2a:7c:16:d4: 9e:dd:ea:3b:1e:72:1a:f7:2e:c7:02:0e:d2:be:11: 02:76:35:d9:0b:03:c4:0a:b0:da:e0:d9:d0:a4:5f: 4f:30:c5:3e:60:8c:4d:37:28:c3:7e:5c:24:f9:73: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:57:C3:CA:7F:D1:DC:86:62:BD:D3:14:B3:CF:6D:91:92:E4:CB X509v3 Authority Key Identifier: keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7f:cc:02:81:64:5a:c6:39:c1:d8:15:22:40:f9:c8:f7:23: 7f:ce:f9:87:78:00:3d:23:57:4d:00:f8:a3:35:ae:0e:80:44: 0c:18:b7:68:43:9d:c6:79:99:1d:fb:30:0e:1c:11:fd:b9:ee: a0:d1:0f:5e:82:b1:12:cf:ca:e0:0e:f7:3f:25:20:d5:ea:9f: 58:2a:9b:83:90:e6:5c:83:ff:d9:28:3a:10:d5:6d:4f:45:bf: 63:6c:f5:53:39:24:ad:64:94:c6:f3:98:a4:3e:a2:a0:ce:4b: c5:f4:d9:33:35:57:a8:80:94:ab:ac:31:07:61:c2:cb:3a:60: 4e:4c:00:77:0c:a1:d5:31:81:de:10:bf:70:c9:f4:1e:5a:66: ff:c5:be:24:b3:74:94:1d:60:df:cb:91:d2:17:24:18:86:b3: 05:d0:1b:98:dc:ba:b3:00:a2:0e:fd:d6:56:3e:11:1b:d4:ed: ce:d0:1e:95:19:b9:d1:a3:f5:18:c0:81:46:77:ce:c8:8d:bd: 3d:ac:2d:f4:53:b7:f0:af:0e:29:ad:ad:a9:b9:3d:86:5c:0b: fd:37:ba:3b:c1:b4:45:ca:ce:21:d1:35:c0:78:4b:af:a7:d3: d8:a0:c1:9e:ff:68:ca:c8:cd:e7:4a:f7:83:99:70:e7:06:52: 85:b9:fc:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/aYb0UBqJBS3yVEok3KbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYjM0ZTAwNjc2NWIxNTRmMzdiNmQzNDg0NTg4MTg5NTEx ZmIyMDAwHhcNMjYwMjA5MjAwMDIyWhcNMjYwMjEwMjAwMDIyWjAzMTEwLwYDVQQD EyhiNDNkNTdjM2NhN2ZkMWRjODY2MmJkZDMxNGIzY2Y2ZDkxOTJlNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Y5LYnGDhDbOw4J7HjZyQtdzlfD b7kBg/eKRncBMMMUS7Zs14wFIwZaeLbpPwkbfdJK4yFHzlWAHL95EAk+VD6x3ktx Kuf7jmM/74M/I032BztkumxeEyhZunflFnFU9MkfEiX11ODytYOesgv9RJlojhZX U6mbpWpxwdVe/5dpO5PHTFSRa8tB+h09I3o2jkYcaToRN+xJlWsLzgDvOjf+Wz4v +84GMWrSq1B0USdzYgJR1hjyOv/kN77liiI4ubszxEdaf4gLAL7S5Cp8FtSe3eo7 HnIa9y7HAg7SvhECdjXZCwPECrDa4NnQpF9PMMU+YIxNNyjDflwk+XM2WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ9V8PKf9HchmK90xSzz22RkuTLMB8GA1UdIwQY MBaAFLGzTgBnZbFU83ttNIRYgYlRH7IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEt NjE4MjM4YjdiOTQyLzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEtNjE4MjM4YjdiOTQy LzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX/MAoFk WsY5wdgVIkD5yPcjf875h3gAPSNXTQD4ozWuDoBEDBi3aEOdxnmZHfswDhwR/bnu oNEPXoKxEs/K4A73PyUg1eqfWCqbg5DmXIP/2Sg6ENVtT0W/Y2z1UzkkrWSUxvOY pD6ioM5LxfTZMzVXqICUq6wxB2HCyzpgTkwAdwyh1TGB3hC/cMn0Hlpm/8W+JLN0 lB1g38uR0hckGIazBdAbmNy6swCiDv3WVj4RG9TtztAelRm50aP1GMCBRnfOyI29 Pawt9FO38K8OKa2tqbk9hlwL/Te6O8G0RcrOIdE1wHhLr6fT2KDBnv9oysjN50r3 g5lw5wZShbn8Og== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:42 2026 by rpki-client