This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json) Hash identifier: kXIHR4ylLfyeEuGCg9AgbsA5a0vjS/C2shixeMK2xng= Subject key identifier: 7C:4F:2F:B2:52:ED:F0:B9:44:52:29:3D:E1:82:9D:A9:97:BC:E7:C4 Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588 Certificate serial: 019C420F88DDB23469AC572638CC48B4A873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft Manifest number: 0525 Signing time: Mon 09 Feb 2026 11:00:40 +0000 Manifest this update: Mon 09 Feb 2026 11:00:40 +0000 Manifest next update: Tue 10 Feb 2026 11:00:40 +0000 Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: twYthBM4Z0TnKF0MhXhWcP/vbTKC5BcBT7+f5gpqbEo=) 2: r7-SCz1aeewC1b28_7aTBEERbc8.roa (hash: GlvMAyQ8rtSS7ofDdsa5bNcv30a7phC116f+dSElfio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:88:dd:b2:34:69:ac:57:26:38:cc:48:b4:a8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588 Validity Not Before: Feb 9 11:00:40 2026 GMT Not After : Feb 10 11:00:40 2026 GMT Subject: CN=7c4f2fb252edf0b94452293de1829da997bce7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:39:67:ea:23:4b:69:e3:93:27:31:4f:3d: 2e:ac:58:93:cc:f7:08:17:78:4c:44:4b:20:ff:e1: 5f:f3:1a:ec:45:eb:05:8a:a6:75:62:01:ed:cf:e5: 34:8e:c0:d5:2a:26:e5:38:df:eb:58:5e:f1:8f:94: 78:28:3b:95:8c:7d:b8:8d:37:cd:14:5a:4b:07:7b: 57:d7:50:4d:d8:e3:77:30:01:17:c8:f2:cf:51:52: 55:28:8b:a0:36:a3:18:d6:9b:5a:7c:f9:84:80:f3: 3c:5b:8f:1b:81:66:7b:c9:af:af:2e:5d:cf:2a:93: 0c:c5:90:3a:dd:33:37:e7:92:9f:5f:ef:d5:a0:3c: 40:c0:01:44:c6:ef:9b:01:19:42:9d:e4:86:b5:6d: 9d:b6:54:cd:53:c0:2a:ec:be:60:b9:bb:7e:4e:ca: 52:9a:f2:4f:fe:f3:f1:10:73:1f:15:99:c9:57:05: ca:01:87:e7:8a:08:7c:cc:b7:da:53:9a:e7:48:cc: 24:22:65:cd:68:cf:09:09:10:f7:9d:11:0c:3c:4e: 6f:3d:7c:0c:1f:8b:d8:56:20:4d:f7:49:c8:d6:50: be:46:40:a8:4a:4d:56:ad:9a:00:6a:9a:0d:12:85: 10:98:2d:e7:7e:6c:8c:c1:96:ec:51:15:98:da:ca: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:2F:B2:52:ED:F0:B9:44:52:29:3D:E1:82:9D:A9:97:BC:E7:C4 X509v3 Authority Key Identifier: keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:60:b9:9a:1d:e3:b5:4a:87:a7:59:43:e7:4e:d6:cf:0f:e5: 93:d8:f2:53:4c:27:71:f9:1a:e3:f7:91:ef:23:41:90:6c:da: 71:94:45:fa:e4:78:78:d0:08:be:30:19:11:8b:7c:4d:c5:59: 47:d8:06:1f:7b:e9:8d:c4:07:d3:b5:60:9a:59:9c:50:5b:00: 78:01:84:fa:f5:46:9b:18:9b:b2:4b:70:de:a3:b0:d1:42:a4: 39:36:f7:51:65:97:57:d5:22:e5:51:e1:13:5e:36:36:58:39: f0:9d:54:41:40:79:a6:71:2c:09:02:5e:1a:f5:9d:5c:63:85: d6:89:7b:c4:32:24:4d:10:63:86:15:a4:50:eb:fd:ec:04:03: 3b:dd:33:d6:a4:55:8a:87:88:63:f5:69:a4:df:db:58:4f:f3: e5:9a:21:92:f3:8b:7d:ca:69:a8:61:9a:21:13:d1:d5:51:fd: 70:e8:8f:87:ce:2a:a9:db:60:8d:0c:52:60:f5:59:19:35:aa: 49:c5:e8:22:22:ef:a8:d4:0b:cb:2f:62:d2:9d:ee:5e:49:33: 0a:03:b0:dd:40:e8:ac:74:81:43:4e:b5:9a:75:b8:86:7a:f9: 73:1c:b1:dd:71:df:0c:3f:bf:16:38:57:20:7d:44:77:c1:d9: a2:00:78:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4jdsjRprFcmOMxItKhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4 ZWY1ODgwHhcNMjYwMjA5MTEwMDQwWhcNMjYwMjEwMTEwMDQwWjAzMTEwLwYDVQQD Eyg3YzRmMmZiMjUyZWRmMGI5NDQ1MjI5M2RlMTgyOWRhOTk3YmNlN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPo5Z+ojS2njkycxTz0urFiTzPcI F3hMREsg/+Ff8xrsResFiqZ1YgHtz+U0jsDVKiblON/rWF7xj5R4KDuVjH24jTfN FFpLB3tX11BN2ON3MAEXyPLPUVJVKIugNqMY1ptafPmEgPM8W48bgWZ7ya+vLl3P KpMMxZA63TM355KfX+/VoDxAwAFExu+bARlCneSGtW2dtlTNU8Aq7L5gubt+TspS mvJP/vPxEHMfFZnJVwXKAYfnigh8zLfaU5rnSMwkImXNaM8JCRD3nREMPE5vPXwM H4vYViBN90nI1lC+RkCoSk1WrZoAapoNEoUQmC3nfmyMwZbsURWY2sq9cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxPL7JS7fC5RFIpPeGCnamXvOfEMB8GA1UdIwQY MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt OWVmMTI5ZWFkZTc4LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4 LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemC5mh3j tUqHp1lD507Wzw/lk9jyU0wncfka4/eR7yNBkGzacZRF+uR4eNAIvjAZEYt8TcVZ R9gGH3vpjcQH07VgmlmcUFsAeAGE+vVGmxibsktw3qOw0UKkOTb3UWWXV9Ui5VHh E142Nlg58J1UQUB5pnEsCQJeGvWdXGOF1ol7xDIkTRBjhhWkUOv97AQDO90z1qRV ioeIY/VppN/bWE/z5ZohkvOLfcppqGGaIRPR1VH9cOiPh84qqdtgjQxSYPVZGTWq ScXoIiLvqNQLyy9i0p3uXkkzCgOw3UDorHSBQ061mnW4hnr5cxyx3XHfDD+/FjhX IH1Ed8HZogB4KA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:22 2026 by rpki-client