This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft File: sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json) Hash identifier: ca5XPTPhyrGr1eLTzoTMV+6PEA1bAHQ3WB8d4WcG9xw= Subject key identifier: A8:F2:68:E6:9F:D2:C4:06:64:0D:70:70:84:6F:F2:2C:32:CD:E1:05 Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78 Certificate issuer: /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878 Certificate serial: 019C43222CD1FE57169E60BB1DB1F2176E75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:38 +0000 Manifest this update: Mon 09 Feb 2026 16:00:38 +0000 Manifest next update: Tue 10 Feb 2026 16:00:38 +0000 Files and hashes: 1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: Uk0Zmszm57fYFFAyyQo+8duq2RA9RrBF5hXoHiKNZQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:2c:d1:fe:57:16:9e:60:bb:1d:b1:f2:17:6e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878 Validity Not Before: Feb 9 16:00:38 2026 GMT Not After : Feb 10 16:00:38 2026 GMT Subject: CN=a8f268e69fd2c406640d7070846ff22c32cde105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:85:62:34:84:f8:45:6d:f8:e8:8e:4b:b9: 5b:c9:4b:5b:73:22:0e:f9:88:a1:e3:86:c3:ac:aa: 2e:9d:fa:57:c5:04:63:f2:78:0b:c8:04:b0:e3:c3: 2f:17:ce:c1:a2:c2:68:5f:b0:77:ca:57:1f:56:20: c3:55:8e:a8:a3:ef:17:6a:66:72:3f:3b:46:65:7c: ab:fc:56:03:dc:c9:03:86:d5:9d:3c:78:49:87:8e: e7:01:c8:de:34:22:f5:49:39:11:3b:f1:4a:9e:82: 14:84:c4:41:08:6b:24:9a:a6:ba:66:4f:b0:42:a5: 98:a9:7f:d7:ed:57:1e:be:aa:37:f5:16:c3:26:24: b6:63:b7:85:0d:bd:b7:cb:0c:44:d0:88:77:e9:5b: 41:23:37:91:04:c0:21:d6:97:f1:b0:7d:8e:fa:74: af:14:7c:fa:ed:92:e8:54:f2:65:2a:73:e1:55:b6: 76:6a:1b:a2:95:67:01:98:3f:65:64:3f:b6:df:cd: 63:8a:e3:03:2d:0e:cb:9e:b2:c7:94:ea:f1:36:f7: 88:df:db:26:51:5e:69:e9:3f:fe:9a:4c:00:50:f4: 18:bc:5f:0c:6a:c9:dd:85:0b:e6:a6:59:e3:b5:39: ed:d4:c7:bd:9c:c1:7a:4f:05:bf:5d:a7:49:65:f9: 83:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F2:68:E6:9F:D2:C4:06:64:0D:70:70:84:6F:F2:2C:32:CD:E1:05 X509v3 Authority Key Identifier: keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:36:4f:52:b1:36:df:52:0a:8f:b1:b0:21:bd:ed:c1:94:ab: 58:a1:09:c3:4e:0e:cf:68:fb:d1:d9:d4:74:e8:82:09:12:33: df:8f:e1:9c:71:60:a7:3a:32:a4:fe:11:ab:83:4f:86:c4:31: dd:83:11:df:00:d9:bc:a2:36:d4:30:83:4e:1d:12:14:90:ed: a8:0e:66:23:94:ad:7a:f8:8e:73:de:9c:75:6a:3b:e8:6d:84: 59:de:28:72:e9:26:d9:bf:41:2e:d6:fc:15:f1:43:20:66:0f: 80:b0:71:86:a9:af:92:20:66:9a:c0:41:37:15:7b:b7:ff:d9: 34:5d:06:21:ff:30:a3:2f:62:5c:35:a4:06:8f:7f:73:f0:4d: 51:7a:f0:b0:22:2b:84:33:7b:b0:44:92:99:18:12:c5:68:cc: a4:5e:4a:f2:06:19:33:64:a0:be:3c:4a:89:55:98:ee:6c:d1: d7:ff:e8:2e:2e:52:a4:8f:00:20:b2:29:2b:cc:83:5d:c6:bd: ed:5d:9d:63:b9:a0:1c:04:4e:d4:ba:c9:d4:ae:08:b2:cf:bf: 86:78:13:fc:3a:de:79:c3:16:4a:5d:da:4a:49:f8:6d:97:39: 2c:9f:e9:91:a4:21:b1:4c:21:29:e6:79:bf:fa:c0:c9:a6:a9: 96:f2:66:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIizR/lcWnmC7HbHyF251MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmI4N2QyMGNjNDIwZGY0MWUwOTBjMzNiNGM0MGVmY2Iw ZGQ4NzgwHhcNMjYwMjA5MTYwMDM4WhcNMjYwMjEwMTYwMDM4WjAzMTEwLwYDVQQD EyhhOGYyNjhlNjlmZDJjNDA2NjQwZDcwNzA4NDZmZjIyYzMyY2RlMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O6FYjSE+EVt+OiOS7lbyUtbcyIO +Yih44bDrKounfpXxQRj8ngLyASw48MvF87BosJoX7B3ylcfViDDVY6oo+8XamZy PztGZXyr/FYD3MkDhtWdPHhJh47nAcjeNCL1STkRO/FKnoIUhMRBCGskmqa6Zk+w QqWYqX/X7Vcevqo39RbDJiS2Y7eFDb23ywxE0Ih36VtBIzeRBMAh1pfxsH2O+nSv FHz67ZLoVPJlKnPhVbZ2ahuilWcBmD9lZD+2381jiuMDLQ7LnrLHlOrxNveI39sm UV5p6T/+mkwAUPQYvF8MasndhQvmplnjtTnt1Me9nMF6TwW/XadJZfmDqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjyaOaf0sQGZA1wcIRv8iwyzeEFMB8GA1UdIwQY MBaAFLC7h9IMxCDfQeCQwztMQO/LDdh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjIt MzdiYzhlNjU2ZWIxLzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjItMzdiYzhlNjU2ZWIx LzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDZPUrE2 31IKj7GwIb3twZSrWKEJw04Oz2j70dnUdOiCCRIz34/hnHFgpzoypP4Rq4NPhsQx 3YMR3wDZvKI21DCDTh0SFJDtqA5mI5SteviOc96cdWo76G2EWd4ocukm2b9BLtb8 FfFDIGYPgLBxhqmvkiBmmsBBNxV7t//ZNF0GIf8woy9iXDWkBo9/c/BNUXrwsCIr hDN7sESSmRgSxWjMpF5K8gYZM2SgvjxKiVWY7mzR1//oLi5SpI8AILIpK8yDXca9 7V2dY7mgHARO1LrJ1K4Iss+/hngT/DreecMWSl3aSkn4bZc5LJ/pkaQhsUwhKeZ5 v/rAyaaplvJmfg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:09 2026 by rpki-client