This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json) Hash identifier: eottISGFBzlO6dP5QW2Hl0yJTqEEQ16ZLh0LeFWB3aU= Subject key identifier: 98:A9:A3:66:8C:9F:ED:97:B5:3E:24:FC:8B:3A:CC:F3:A9:17:48:49 Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36 Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636 Certificate serial: 019C41A1A2770A89B543776354FFB9E595DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft Manifest number: 0260 Signing time: Mon 09 Feb 2026 09:00:37 +0000 Manifest this update: Mon 09 Feb 2026 09:00:37 +0000 Manifest next update: Tue 10 Feb 2026 09:00:37 +0000 Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: WrSog8VB9MeZtyA15gVZN3EOXop+BAChIomvan+wkp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:a2:77:0a:89:b5:43:77:63:54:ff:b9:e5:95:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911c4809872294be5817b159e59f29e50609636 Validity Not Before: Feb 9 09:00:37 2026 GMT Not After : Feb 10 09:00:37 2026 GMT Subject: CN=98a9a3668c9fed97b53e24fc8b3accf3a9174849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:7f:2a:fd:a8:3f:5c:4c:66:08:71:99:08: 5a:78:de:06:ba:13:b7:f4:3a:2a:ae:de:fc:e2:76: 63:a4:50:58:5e:bc:16:8c:26:d3:59:f5:63:b1:4b: c9:ba:f6:30:21:4c:58:6d:7d:97:9a:ac:2e:47:2a: da:68:6e:70:67:c0:3b:a4:fd:92:d3:90:71:d9:c4: e5:95:4f:92:25:d5:45:59:05:bc:0e:5d:8d:d1:a7: 78:7d:d5:1e:5c:14:44:02:c3:33:6d:0b:4c:ef:0f: c2:15:07:92:43:fa:16:9c:d3:86:da:65:64:7a:64: 72:81:90:9a:49:39:79:43:8d:78:8a:d0:d9:a2:f4: 7c:c6:a2:92:54:1e:8c:d0:ba:85:11:3a:67:2d:2c: e3:2d:c7:83:e2:e8:f7:f3:37:24:cf:21:54:02:6f: f1:90:85:54:f9:ca:e4:47:77:0f:8d:fa:c0:ca:d3: 43:de:85:37:2b:04:bd:5a:67:13:61:c3:d6:6d:44: 53:2f:bf:52:a6:d2:93:4a:1c:e1:d8:70:88:3f:06: b0:03:19:97:03:64:fa:20:43:8e:bc:db:c0:63:3f: 51:1c:5d:d7:6d:9d:75:fa:ee:17:3b:f6:e5:39:46: 5f:fc:6c:49:9f:bf:fa:64:a7:fa:56:d6:da:a7:58: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A9:A3:66:8C:9F:ED:97:B5:3E:24:FC:8B:3A:CC:F3:A9:17:48:49 X509v3 Authority Key Identifier: keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:24:35:a1:78:6e:a6:98:5d:53:43:a8:70:e8:7e:1f:31:0d: 2c:4b:8d:7c:7f:58:86:f8:d4:99:32:f6:19:48:53:db:e9:2c: 6c:c7:7f:88:dc:c4:45:7e:23:82:ae:b5:54:b4:93:0e:a9:d1: 03:f7:78:01:40:2c:3e:f5:e7:c3:57:21:b2:fb:cb:7c:d2:2a: 11:1d:00:87:a7:9e:ab:6a:13:de:c0:cb:cd:a5:e0:61:fc:fe: 50:b8:5b:5d:6a:c6:bb:b5:06:49:6f:41:86:8e:49:16:16:2f: 40:a2:df:7a:36:dc:d8:a5:0b:1e:0a:ea:15:29:bb:f4:3d:14: bb:ca:62:73:35:e9:85:f9:6e:92:4b:f5:65:0b:c2:70:18:2a: 5b:8e:60:55:6b:16:c9:60:2e:03:8d:cf:3e:26:f2:6b:24:ea: c4:4f:57:0e:11:a8:da:7c:aa:9b:b4:6f:99:b4:f2:75:c2:e0: 42:60:9b:05:fd:0c:ab:3c:ee:1f:d2:38:62:b7:3b:bd:60:49: ff:46:e5:83:de:f6:2d:36:3d:d6:78:33:e0:fb:8f:c6:6e:bc: 95:2f:d6:70:14:68:50:64:13:f8:c4:f2:d3:24:c5:4e:0d:a2: 8d:d4:37:1d:23:85:5e:46:06:39:9f:b4:74:8e:86:9b:a3:da: 2e:d2:b1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoaJ3Com1Q3djVP+55ZXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTFjNDgwOTg3MjI5NGJlNTgxN2IxNTllNTlmMjllNTA2 MDk2MzYwHhcNMjYwMjA5MDkwMDM3WhcNMjYwMjEwMDkwMDM3WjAzMTEwLwYDVQQD Eyg5OGE5YTM2NjhjOWZlZDk3YjUzZTI0ZmM4YjNhY2NmM2E5MTc0ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNN/Kv2oP1xMZghxmQhaeN4GuhO3 9Doqrt784nZjpFBYXrwWjCbTWfVjsUvJuvYwIUxYbX2XmqwuRyraaG5wZ8A7pP2S 05Bx2cTllU+SJdVFWQW8Dl2N0ad4fdUeXBREAsMzbQtM7w/CFQeSQ/oWnNOG2mVk emRygZCaSTl5Q414itDZovR8xqKSVB6M0LqFETpnLSzjLceD4uj38zckzyFUAm/x kIVU+crkR3cPjfrAytND3oU3KwS9WmcTYcPWbURTL79SptKTShzh2HCIPwawAxmX A2T6IEOOvNvAYz9RHF3XbZ11+u4XO/blOUZf/GxJn7/6ZKf6Vtbap1jJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJipo2aMn+2XtT4k/Is6zPOpF0hJMB8GA1UdIwQY MBaAFEkRxICYcilL5YF7FZ5Z8p5QYJY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83OWI3OTctMDkyMi00ZGY2LTgyN2Qt MzY4MWY1YjdmODZiLzEvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS83OWI3OTctMDkyMi00ZGY2LTgyN2QtMzY4MWY1YjdmODZi LzEvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyQ1oXhu pphdU0OocOh+HzENLEuNfH9YhvjUmTL2GUhT2+ksbMd/iNzERX4jgq61VLSTDqnR A/d4AUAsPvXnw1chsvvLfNIqER0Ah6eeq2oT3sDLzaXgYfz+ULhbXWrGu7UGSW9B ho5JFhYvQKLfejbc2KULHgrqFSm79D0Uu8piczXphflukkv1ZQvCcBgqW45gVWsW yWAuA43PPibyayTqxE9XDhGo2nyqm7RvmbTydcLgQmCbBf0MqzzuH9I4Yrc7vWBJ /0blg972LTY91ngz4PuPxm68lS/WcBRoUGQT+MTy0yTFTg2ijdQ3HSOFXkYGOZ+0 dI6Gm6PaLtKxdw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:14 2026 by rpki-client