This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json) Hash identifier: J+lXUTYyuz80WgS9DR2pKsHrRRYsG6rp8x2UEhJPtB4= Subject key identifier: CE:5D:9D:F2:72:9B:BC:5F:28:CE:A0:D3:AE:E3:FC:7A:5C:A4:EF:EB Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Certificate serial: 019C43FD867C856B25E21BABDFEC81945F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft Manifest number: 033A Signing time: Mon 09 Feb 2026 20:00:14 +0000 Manifest this update: Mon 09 Feb 2026 20:00:14 +0000 Manifest next update: Tue 10 Feb 2026 20:00:14 +0000 Files and hashes: 1: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: sA1urCI3UdyBQBF0TLLN6fkFnjXF5YWdKHDV5DjuoL8=) 2: tUzrF3nyBJ8jEfq7bWvPmVwsD-0.roa (hash: Haw+aRAR5U2cv2bj8US6YE3DJs1jpOG0OPl3Bgiz4Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:86:7c:85:6b:25:e2:1b:ab:df:ec:81:94:5f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Validity Not Before: Feb 9 20:00:14 2026 GMT Not After : Feb 10 20:00:14 2026 GMT Subject: CN=ce5d9df2729bbc5f28cea0d3aee3fc7a5ca4efeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:7c:8b:0f:79:79:95:07:6f:7d:dc:70:6c: c8:58:8a:be:3f:80:1f:d0:ee:01:11:26:64:52:14: 95:5d:7a:b8:00:c0:bc:83:0c:1f:4b:91:51:5a:0b: 04:29:0c:c7:44:b1:74:f5:e5:50:83:64:7c:3f:09: 02:cc:1a:59:40:a6:7c:28:cc:7b:5d:97:a8:c0:a6: 0b:9f:78:96:ce:df:6d:59:c4:30:b3:91:95:c1:c3: be:a3:34:97:03:ca:df:74:3e:9b:3a:e2:1b:bd:b3: 98:25:89:df:11:3c:9d:9b:d3:15:72:3a:00:cd:f6: 3b:76:2c:92:96:45:2d:e7:62:cf:d5:c1:02:93:aa: 2d:a9:40:1d:0f:23:38:47:87:4b:82:ff:17:74:20: 58:ad:60:18:7a:1d:40:ab:de:d6:bc:0f:71:51:a1: 2b:d6:25:35:37:c9:ff:53:4c:ca:ae:20:73:7a:4e: a1:01:3a:4d:3d:2b:b4:65:11:8c:8a:36:8b:58:4f: 00:15:79:fd:8b:29:75:c1:2f:68:6d:43:38:e1:34: b4:4d:fc:4e:3a:4d:5d:e6:3a:7c:52:1c:15:a4:91: c2:c9:bb:5c:ee:33:19:c6:47:c9:45:73:69:91:fd: 0c:d6:bc:05:12:90:f7:f1:36:56:3b:ec:38:e4:27: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5D:9D:F2:72:9B:BC:5F:28:CE:A0:D3:AE:E3:FC:7A:5C:A4:EF:EB X509v3 Authority Key Identifier: keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:01:0d:bd:6c:a7:59:a8:8e:b3:63:01:e8:5f:c6:bf:1b:dc: 3b:3c:29:d1:34:a5:ab:9c:2c:d9:33:f7:e3:b5:72:ce:70:fc: 8b:3e:b6:01:30:1a:bc:59:37:c2:c5:23:eb:f8:57:9a:b7:91: 3a:ed:72:37:34:ff:43:38:34:c6:ff:42:fb:e8:fe:78:0b:b8: c5:82:e6:a9:57:db:75:0b:7c:7a:c3:87:82:9c:b7:74:a7:0a: d0:30:3f:29:e3:82:d1:ad:b8:ad:01:3a:aa:dc:d1:a9:8d:8d: 3c:4e:04:0a:93:19:79:f3:0b:fa:29:09:8f:55:5d:cb:aa:7a: 27:e9:62:fc:df:6a:c8:5b:f7:84:94:1b:93:b4:01:ac:ac:40: ed:59:3e:46:6f:83:5b:19:17:89:7f:9b:3f:bb:13:45:77:b0: 31:fa:99:04:53:2b:cc:71:4f:fa:7a:7f:31:78:3f:b6:a9:bb: 78:48:de:71:09:b6:ae:91:fa:f3:be:0c:e8:40:fc:75:d4:15: 94:18:db:64:66:54:0a:24:f7:4b:48:43:de:ba:22:72:23:de: 3c:ff:7f:85:e0:b1:35:f1:e1:cf:b3:1f:82:d4:8a:53:e1:54: 15:98:fe:da:fb:79:d4:ba:2f:3b:04:11:91:b3:99:a8:de:b8: 2e:dc:4f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/YZ8hWsl4hur3+yBlF8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2U4YzYyMmM4NzUzMmY4YzQ0OWYzNDc0MzNkYWU1MmI3 NzM4ZjAwHhcNMjYwMjA5MjAwMDE0WhcNMjYwMjEwMjAwMDE0WjAzMTEwLwYDVQQD EyhjZTVkOWRmMjcyOWJiYzVmMjhjZWEwZDNhZWUzZmM3YTVjYTRlZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqp8iw95eZUHb33ccGzIWIq+P4Af 0O4BESZkUhSVXXq4AMC8gwwfS5FRWgsEKQzHRLF09eVQg2R8PwkCzBpZQKZ8KMx7 XZeowKYLn3iWzt9tWcQws5GVwcO+ozSXA8rfdD6bOuIbvbOYJYnfETydm9MVcjoA zfY7diySlkUt52LP1cECk6otqUAdDyM4R4dLgv8XdCBYrWAYeh1Aq97WvA9xUaEr 1iU1N8n/U0zKriBzek6hATpNPSu0ZRGMijaLWE8AFXn9iyl1wS9obUM44TS0TfxO Ok1d5jp8UhwVpJHCybtc7jMZxkfJRXNpkf0M1rwFEpD38TZWO+w45Cd6dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5dnfJym7xfKM6g067j/HpcpO/rMB8GA1UdIwQY MBaAFEp+jGIsh1MvjESfNHQz2uUrdzjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEt ZGFjMjViMjY2ZDhlLzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEtZGFjMjViMjY2ZDhl LzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQENvWyn WaiOs2MB6F/GvxvcOzwp0TSlq5ws2TP347VyznD8iz62ATAavFk3wsUj6/hXmreR Ou1yNzT/Qzg0xv9C++j+eAu4xYLmqVfbdQt8esOHgpy3dKcK0DA/KeOC0a24rQE6 qtzRqY2NPE4ECpMZefML+ikJj1Vdy6p6J+li/N9qyFv3hJQbk7QBrKxA7Vk+Rm+D WxkXiX+bP7sTRXewMfqZBFMrzHFP+np/MXg/tqm7eEjecQm2rpH6874M6ED8ddQV lBjbZGZUCiT3S0hD3roiciPePP9/heCxNfHhz7MfgtSKU+FUFZj+2vt51LovOwQR kbOZqN64LtxPxw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:32 2026 by rpki-client