This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json) Hash identifier: 3RXYzWYbR9lDegJf9NtDTQbgibLg0PKKfC/PHi8HzZ8= Subject key identifier: 40:D8:61:AA:0B:AF:AE:F6:E5:52:C3:C9:83:49:C6:6E:3F:08:02:1D Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3 Certificate serial: 019C1CF0E7E4D7630DB0BCB95B415F640129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft Manifest number: 1790 Signing time: Mon 02 Feb 2026 06:01:15 +0000 Manifest this update: Mon 02 Feb 2026 06:01:15 +0000 Manifest next update: Tue 03 Feb 2026 06:01:15 +0000 Files and hashes: 1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=) 2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: 03k7Oeju7YL1w8DXfYjcqVUCVna+aBtLtFOmJmFT/bM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:e7:e4:d7:63:0d:b0:bc:b9:5b:41:5f:64:01:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3 Validity Not Before: Feb 2 06:01:15 2026 GMT Not After : Feb 3 06:01:15 2026 GMT Subject: CN=40d861aa0bafaef6e552c3c98349c66e3f08021d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:e2:dc:9a:11:f8:18:2a:cc:9d:7e:e3:14: 4b:c0:8f:58:f0:18:60:2a:0d:ca:56:41:8b:33:d6: ef:3e:4f:99:9c:2a:62:5b:4a:e9:e1:13:f0:63:d6: 18:dd:d6:ea:13:e4:0a:99:8c:50:5d:f8:6c:b0:ab: ce:02:8f:59:db:2b:2a:e0:5c:2e:d2:4c:b8:75:8d: 7e:8a:31:c3:ea:72:3a:03:9c:75:c4:f0:27:19:3c: 44:55:da:42:b0:74:a4:89:26:9d:f6:bf:8c:4d:c5: 14:dd:48:ca:cd:5c:e0:6c:80:bc:61:9d:84:34:44: aa:ff:20:1b:a0:b8:a4:79:58:1f:9d:d4:93:aa:09: c1:36:4d:7f:69:de:8b:19:ca:48:50:e5:d1:c2:7e: db:91:d0:19:25:4b:2c:17:b3:67:78:da:d2:0e:15: 72:5c:53:97:db:99:bc:4c:a5:f5:4f:9e:f0:4c:94: 86:e4:02:4d:05:4d:40:03:90:34:b6:4e:61:19:d9: 6b:00:d9:0e:5c:3a:fe:ce:a5:95:ef:1c:2a:6c:24: 64:76:05:93:ab:7c:87:73:d4:d5:30:b5:dd:af:93: 2a:44:dd:b2:98:d7:6b:06:31:32:09:65:c8:e2:16: 4b:63:12:5f:ec:da:bf:35:c9:47:4e:fd:9a:3f:8e: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:61:AA:0B:AF:AE:F6:E5:52:C3:C9:83:49:C6:6E:3F:08:02:1D X509v3 Authority Key Identifier: keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:1a:fe:3d:15:e8:17:cc:40:17:1d:b2:f4:84:3e:f5:88:02: 66:8d:d4:68:a0:4c:85:4b:bc:b9:69:99:35:6d:63:ae:d0:36: 06:b9:8e:d2:0e:c8:80:ee:e1:39:84:62:16:b0:28:8d:e1:7c: b9:5e:60:55:52:54:92:91:38:2e:b7:de:d7:14:15:0f:17:6a: bf:6c:6d:fd:ab:9a:a9:a1:b6:3c:a8:36:ba:a1:53:04:a6:23: 0d:84:b7:03:1c:73:fc:5c:09:d7:7b:64:51:93:dc:e6:f0:6b: 0f:bc:d3:2c:f3:06:9b:10:c7:b0:0b:eb:52:59:f6:5d:6c:48: ae:c0:d0:c8:cb:89:00:dd:ac:0e:69:46:a7:3e:33:d2:ed:c2: 04:32:bf:75:32:b4:5d:23:72:ae:77:1b:2f:94:51:0e:73:bb: 7a:44:b2:7c:bf:52:11:d7:fa:e8:fe:1b:c9:48:dd:4b:05:6b: 6b:7b:3c:7e:2b:93:34:cd:d5:e4:0e:61:54:5c:56:02:f5:70: 0c:33:e8:d3:f1:1c:bd:a8:cf:5e:a2:d4:23:1e:58:a8:04:4c: 8a:4f:28:ef:18:c1:37:76:ad:45:88:4c:75:c7:3c:3a:31:be: bd:78:41:8e:e6:ff:74:4f:69:61:30:eb:79:42:aa:37:85:fc: 8a:e5:43:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8Ofk12MNsLy5W0FfZAEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWYwNjcxZjM5OWU0ZGEyMGE0OGJkMzI3YzQ3YWZhNGE0 MWZmYzMwHhcNMjYwMjAyMDYwMTE1WhcNMjYwMjAzMDYwMTE1WjAzMTEwLwYDVQQD Eyg0MGQ4NjFhYTBiYWZhZWY2ZTU1MmMzYzk4MzQ5YzY2ZTNmMDgwMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyzi3JoR+BgqzJ1+4xRLwI9Y8Bhg Kg3KVkGLM9bvPk+ZnCpiW0rp4RPwY9YY3dbqE+QKmYxQXfhssKvOAo9Z2ysq4Fwu 0ky4dY1+ijHD6nI6A5x1xPAnGTxEVdpCsHSkiSad9r+MTcUU3UjKzVzgbIC8YZ2E NESq/yAboLikeVgfndSTqgnBNk1/ad6LGcpIUOXRwn7bkdAZJUssF7NneNrSDhVy XFOX25m8TKX1T57wTJSG5AJNBU1AA5A0tk5hGdlrANkOXDr+zqWV7xwqbCRkdgWT q3yHc9TVMLXdr5MqRN2ymNdrBjEyCWXI4hZLYxJf7Nq/NclHTv2aP44EOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDYYaoLr6725VLDyYNJxm4/CAIdMB8GA1UdIwQY MBaAFLMfBnHzmeTaIKSL0yfEevpKQf/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAt MzNlNDQ2MjFkYjA3LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAtMzNlNDQ2MjFkYjA3 LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRr+PRXo F8xAFx2y9IQ+9YgCZo3UaKBMhUu8uWmZNW1jrtA2BrmO0g7IgO7hOYRiFrAojeF8 uV5gVVJUkpE4Lrfe1xQVDxdqv2xt/auaqaG2PKg2uqFTBKYjDYS3Axxz/FwJ13tk UZPc5vBrD7zTLPMGmxDHsAvrUln2XWxIrsDQyMuJAN2sDmlGpz4z0u3CBDK/dTK0 XSNyrncbL5RRDnO7ekSyfL9SEdf66P4byUjdSwVra3s8fiuTNM3V5A5hVFxWAvVw DDPo0/EcvajPXqLUIx5YqARMik8o7xjBN3atRYhMdcc8OjG+vXhBjub/dE9pYTDr eUKqN4X8iuVDZA== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:01 2026 by rpki-client