This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json) Hash identifier: Mep4IDdu0WU8UkIKXKQEocy3wb5/LHiFNTz2dksiQRc= Subject key identifier: 8E:19:21:75:60:78:62:5A:CA:58:98:D2:4B:53:87:D0:CA:96:F1:97 Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74 Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74 Certificate serial: 019C43C7609CDEE8358A0E3DD8A5556D96A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft Manifest number: 0D98 Signing time: Mon 09 Feb 2026 19:01:05 +0000 Manifest this update: Mon 09 Feb 2026 19:01:05 +0000 Manifest next update: Tue 10 Feb 2026 19:01:05 +0000 Files and hashes: 1: c0cTTJQDf36qVQCG96WRyKdM_Wc.roa (hash: aYsM49Xy0hnVUlbAWRXmCHPgWbkgOmuFrAd7Tian+Cg=) 2: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: CAwEfipUF5wYLskNvApDrWDtfeFflAVk8BGkQ+d4buU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:60:9c:de:e8:35:8a:0e:3d:d8:a5:55:6d:96:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74 Validity Not Before: Feb 9 19:01:05 2026 GMT Not After : Feb 10 19:01:05 2026 GMT Subject: CN=8e1921756078625aca5898d24b5387d0ca96f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:6a:67:b1:8d:81:b0:aa:28:6f:0d:66:cc: f5:a1:0a:44:11:c5:ef:0f:42:63:e9:e9:13:6b:48: 77:24:d9:e4:4a:8b:68:1c:c9:e3:03:44:51:f1:97: 01:69:78:c5:27:b5:87:06:71:4e:52:8c:bc:c6:7f: 66:ef:e5:4d:25:17:25:53:84:28:ee:54:f9:7b:b4: af:8f:d4:8d:29:d2:88:6b:39:c2:1f:fe:3c:76:80: 3f:49:f5:b8:45:f8:45:e1:e8:ca:55:7c:db:73:8e: 43:25:b9:10:53:4a:c6:aa:12:3b:67:c1:3e:59:df: c6:bc:29:21:8a:ed:15:3d:4a:80:84:ae:cf:eb:82: 60:f8:ce:71:35:1b:1e:05:14:25:ca:76:7f:51:f0: 49:fc:d1:40:a3:56:38:39:15:74:5f:74:52:e9:72: 4c:d1:79:be:8f:2f:63:07:ed:c6:41:00:9b:7c:24: 24:43:a0:a8:11:83:68:d6:03:73:cb:1f:de:15:fa: b6:05:80:cd:cc:33:20:33:ec:f8:7c:ae:dc:cf:ff: a9:02:68:cf:b2:79:c1:ea:03:65:86:b2:de:fe:7d: 72:12:60:63:e5:30:bb:71:37:99:9e:f0:7a:25:a0: 12:94:83:55:bc:1d:5d:95:e8:fe:dd:51:ee:83:19: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:19:21:75:60:78:62:5A:CA:58:98:D2:4B:53:87:D0:CA:96:F1:97 X509v3 Authority Key Identifier: keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:40:cc:75:67:bf:28:1c:fe:7d:95:a4:cd:17:6a:78:5d:86: 6e:78:4a:0a:35:9b:8a:3d:2c:f8:11:4a:57:44:14:f1:d8:b1: 73:fa:b9:36:a1:46:d8:19:01:cd:45:7d:68:c1:6e:1d:ce:be: 24:03:f9:09:d3:ac:69:13:98:3b:7c:e9:63:2d:6a:83:57:1d: b7:30:ca:dc:7b:46:79:dd:e3:9a:7a:9b:83:71:4b:63:5e:67: 2b:2c:da:3b:82:a4:68:9a:7d:21:c6:fe:1e:00:77:f1:be:af: 67:fb:be:db:12:ff:97:76:08:4e:3d:69:63:d5:e7:02:ef:ac: bd:d0:b1:45:e1:9a:1b:f2:64:d9:9a:70:5e:67:40:33:90:8a: ca:3e:ce:c0:e9:63:43:02:2d:62:24:de:f5:b6:4c:60:67:43: 56:a2:3c:97:e8:d9:63:a2:42:52:6a:6b:97:1d:2b:4c:13:59: 9d:aa:b3:c5:61:1a:c9:06:07:46:09:92:0b:c9:4a:a3:ef:0a: 61:fd:94:48:db:17:34:58:8d:d6:9d:8e:0c:54:fa:ae:24:ad: 4f:e2:59:4b:39:2b:8d:24:63:f4:e6:3d:bc:21:35:3e:ba:f2: dd:88:24:ad:85:f2:c6:db:ae:3f:45:50:5b:36:51:30:b6:51: a8:b9:d5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx2Cc3ug1ig492KVVbZahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjdkMDA5NGFkYzk4ZDliMDMyNzIwZTgxZTNkYjVhYTc1 ODFjNzQwHhcNMjYwMjA5MTkwMTA1WhcNMjYwMjEwMTkwMTA1WjAzMTEwLwYDVQQD Eyg4ZTE5MjE3NTYwNzg2MjVhY2E1ODk4ZDI0YjUzODdkMGNhOTZmMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCNqZ7GNgbCqKG8NZsz1oQpEEcXv D0Jj6ekTa0h3JNnkSotoHMnjA0RR8ZcBaXjFJ7WHBnFOUoy8xn9m7+VNJRclU4Qo 7lT5e7Svj9SNKdKIaznCH/48doA/SfW4RfhF4ejKVXzbc45DJbkQU0rGqhI7Z8E+ Wd/GvCkhiu0VPUqAhK7P64Jg+M5xNRseBRQlynZ/UfBJ/NFAo1Y4ORV0X3RS6XJM 0Xm+jy9jB+3GQQCbfCQkQ6CoEYNo1gNzyx/eFfq2BYDNzDMgM+z4fK7cz/+pAmjP snnB6gNlhrLe/n1yEmBj5TC7cTeZnvB6JaASlINVvB1dlej+3VHugxlnGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4ZIXVgeGJayliY0ktTh9DKlvGXMB8GA1UdIwQY MBaAFLH30AlK3JjZsDJyDoHj21qnWBx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMt YTU0Yjg2OWRjZDI3LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMtYTU0Yjg2OWRjZDI3 LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0DMdWe/ KBz+fZWkzRdqeF2GbnhKCjWbij0s+BFKV0QU8dixc/q5NqFG2BkBzUV9aMFuHc6+ JAP5CdOsaROYO3zpYy1qg1cdtzDK3HtGed3jmnqbg3FLY15nKyzaO4KkaJp9Icb+ HgB38b6vZ/u+2xL/l3YITj1pY9XnAu+svdCxReGaG/Jk2ZpwXmdAM5CKyj7OwOlj QwItYiTe9bZMYGdDVqI8l+jZY6JCUmprlx0rTBNZnaqzxWEayQYHRgmSC8lKo+8K Yf2USNsXNFiN1p2ODFT6riStT+JZSzkrjSRj9OY9vCE1Prry3YgkrYXyxtuuP0VQ WzZRMLZRqLnVpA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:46 2026 by rpki-client