This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: 3UPkB0VfySivD0PgEYdYsEAVvZN3Iwxkuq7/P5S6llU= Subject key identifier: E3:F5:7A:A1:E3:7C:02:0A:1F:C8:92:EC:14:4F:47:31:8E:3C:DB:E7 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019C2EF69A79FAA09AF91D1661DA50DAB715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1408 Signing time: Thu 05 Feb 2026 18:00:39 +0000 Manifest this update: Thu 05 Feb 2026 18:00:39 +0000 Manifest next update: Fri 06 Feb 2026 18:00:39 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: yHaZVWru0s76TmoYsBZQ96R4fkjwOK7mh8FDgjJURus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:f6:9a:79:fa:a0:9a:f9:1d:16:61:da:50:da:b7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Feb 5 18:00:39 2026 GMT Not After : Feb 6 18:00:39 2026 GMT Subject: CN=e3f57aa1e37c020a1fc892ec144f47318e3cdbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:07:8a:48:b1:25:35:9b:d2:3d:0f:99:3a: 17:9e:f0:0b:4a:1a:c6:df:0f:5f:78:36:a8:4d:9f: ce:9b:6b:5c:98:75:86:2f:2e:7c:04:d7:1f:85:fe: bb:9f:ad:f6:fe:73:61:25:39:00:c8:2f:e2:73:b2: c3:56:26:26:10:1c:c6:53:ef:44:20:5d:f4:c9:3f: 7d:fe:1f:a9:0e:5b:09:16:f5:04:98:ae:a8:a6:25: 3c:26:3d:f1:db:12:31:14:cb:01:8f:73:65:de:a1: a1:e5:e6:e9:fd:73:1b:cb:8b:65:91:21:7f:ab:5c: 80:d2:ee:95:a2:ba:e2:25:c7:e6:ac:f3:83:db:91: 99:b6:d9:f9:63:1e:f3:a8:f4:00:24:36:d1:6d:c7: cf:3f:64:28:9b:db:c8:ca:11:e1:f0:26:46:f3:9a: c7:d5:4a:77:27:71:cf:cb:01:e5:b4:32:f0:70:12: 57:b2:60:09:71:70:e9:24:9a:ca:38:c2:40:a8:6f: d9:7b:47:41:64:8a:b3:19:c1:db:37:5c:e2:3f:7c: ae:ce:e4:c4:bd:2d:1d:9a:ee:52:54:87:b6:17:85: 7a:e8:fc:86:ce:16:f3:32:87:a6:fd:e3:c1:59:a3: d2:b0:40:44:dc:27:28:6e:fe:80:a8:ad:21:19:9d: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F5:7A:A1:E3:7C:02:0A:1F:C8:92:EC:14:4F:47:31:8E:3C:DB:E7 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:29:a6:d4:43:50:c0:aa:a4:24:96:7f:40:62:ef:09:97:3a: 9c:3a:35:32:f0:a4:0c:2f:66:fc:31:45:51:c1:72:0e:5b:47: b7:2e:fc:99:37:b4:3b:fd:17:8d:31:ac:7e:40:ac:c2:84:ba: 3b:09:5a:e5:ca:56:21:49:f8:86:bd:f5:14:f0:5c:aa:24:9b: a8:e6:95:4b:de:e2:73:1a:55:90:51:70:73:bf:94:55:10:ab: 02:ee:fa:6c:13:af:f9:ff:bd:73:1c:e4:8e:51:48:b9:c0:0a: 3a:84:de:2f:ce:6d:bf:94:56:a8:6d:b2:06:cf:4e:d6:fb:b9: 9e:8d:6b:94:3a:c2:d1:43:9f:0b:f0:f9:20:4d:5e:d1:ad:6a: d0:0b:52:b9:61:83:fd:3e:79:3b:74:7f:10:a0:48:62:cf:59: 83:53:9a:c4:81:5f:be:c6:2c:cb:7e:1c:86:b2:c0:e1:82:8c: 6c:bd:5c:d4:4c:1e:a2:25:69:9b:79:c1:00:fa:44:31:26:15: f6:66:e9:e4:df:59:bf:12:c0:f1:a3:ca:91:53:b5:1e:12:0f: c8:79:2b:20:9f:b2:df:d4:dd:2f:a3:bc:b3:e0:5f:32:2b:cc: c1:a5:43:22:a8:ef:22:c9:73:a2:71:92:ef:e0:6e:56:6c:d5: 0f:46:21:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwu9pp5+qCa+R0WYdpQ2rcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMjA1MTgwMDM5WhcNMjYwMjA2MTgwMDM5WjAzMTEwLwYDVQQD EyhlM2Y1N2FhMWUzN2MwMjBhMWZjODkyZWMxNDRmNDczMThlM2NkYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugIHikixJTWb0j0PmToXnvALShrG 3w9feDaoTZ/Om2tcmHWGLy58BNcfhf67n632/nNhJTkAyC/ic7LDViYmEBzGU+9E IF30yT99/h+pDlsJFvUEmK6opiU8Jj3x2xIxFMsBj3Nl3qGh5ebp/XMby4tlkSF/ q1yA0u6VorriJcfmrPOD25GZttn5Yx7zqPQAJDbRbcfPP2Qom9vIyhHh8CZG85rH 1Up3J3HPywHltDLwcBJXsmAJcXDpJJrKOMJAqG/Ze0dBZIqzGcHbN1ziP3yuzuTE vS0dmu5SVIe2F4V66PyGzhbzMoem/ePBWaPSsEBE3Ccobv6AqK0hGZ3kvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP1eqHjfAIKH8iS7BRPRzGOPNvnMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUimm1ENQ wKqkJJZ/QGLvCZc6nDo1MvCkDC9m/DFFUcFyDltHty78mTe0O/0XjTGsfkCswoS6 Owla5cpWIUn4hr31FPBcqiSbqOaVS97icxpVkFFwc7+UVRCrAu76bBOv+f+9cxzk jlFIucAKOoTeL85tv5RWqG2yBs9O1vu5no1rlDrC0UOfC/D5IE1e0a1q0AtSuWGD /T55O3R/EKBIYs9Zg1OaxIFfvsYsy34chrLA4YKMbL1c1EweoiVpm3nBAPpEMSYV 9mbp5N9ZvxLA8aPKkVO1HhIPyHkrIJ+y39TdL6O8s+BfMivMwaVDIqjvIslzonGS 7+BuVmzVD0Yh0g== -----END CERTIFICATE-----Generated at Thu Feb 5 21:12:18 2026 by rpki-client