This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json) Hash identifier: drR+EDWPkJD9/34uA8YtAjCi/58eySs35ASTjGeWxUk= Subject key identifier: 16:71:BB:32:8F:8D:47:6B:44:48:FA:06:76:4F:32:21:7D:04:A3:69 Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b Certificate serial: 019C420F5BCA90A218464849C2DD24C88DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:28 +0000 Manifest this update: Mon 09 Feb 2026 11:00:28 +0000 Manifest next update: Tue 10 Feb 2026 11:00:28 +0000 Files and hashes: 1: lep9djwdRRu1s5OqW7QhYt3e1T4.roa (hash: 678VmtvJF0332iEsfIN5ZpinwDwIbKnUYiVrKvGUM/Q=) 2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: RnnYBl3NknfrQNxabWH6aOEhEf8ZCVm0OMhXC3n498E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:5b:ca:90:a2:18:46:48:49:c2:dd:24:c8:8d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b Validity Not Before: Feb 9 11:00:28 2026 GMT Not After : Feb 10 11:00:28 2026 GMT Subject: CN=1671bb328f8d476b4448fa06764f32217d04a369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d5:f5:f4:b6:42:11:b7:01:be:f3:86:6d:ab: 96:ea:56:e8:48:9f:00:18:e5:41:37:36:29:5a:2d: de:25:6a:2f:61:6b:a2:2d:87:7a:42:45:6a:fb:14: ca:a8:71:20:d4:d9:55:af:1f:9c:4a:4e:3b:65:b4: ea:9c:2c:8e:31:f0:cc:4c:8e:dd:f9:3b:ca:09:e8: 6c:91:75:20:29:16:69:b7:6b:f1:4c:24:f6:99:a0: f5:db:5c:ee:b3:23:c0:88:86:66:e9:bf:cb:94:82: a6:5e:cb:af:2a:80:bf:13:2f:00:17:e6:d0:60:63: 37:2b:91:45:8d:c1:cd:6c:fd:87:db:35:07:7d:0f: 49:9d:cf:ef:45:9e:c7:a0:c0:26:28:d7:32:9f:a7: d6:04:6c:73:a0:eb:2b:d7:69:ef:98:c6:3c:72:ec: 9e:2b:9b:0a:61:c6:eb:ff:e7:f0:9f:42:b5:6c:b3: 41:03:cc:7d:85:07:7f:39:f8:a9:55:7b:a9:3c:3d: e3:36:a9:a7:5d:3c:91:07:c9:d5:db:3a:a7:dc:f1: 2e:a2:71:19:61:6c:89:02:89:87:3b:09:71:69:83: 00:77:c0:b5:6e:c8:69:c3:0f:0d:89:76:47:27:57: 06:95:92:65:ad:de:e6:8f:84:b1:14:07:3e:b5:68: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:71:BB:32:8F:8D:47:6B:44:48:FA:06:76:4F:32:21:7D:04:A3:69 X509v3 Authority Key Identifier: keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:04:8b:63:92:86:a0:45:b9:62:6b:2d:8d:9a:5b:56:64:fb: 30:a8:5e:df:df:cf:83:b7:51:07:a8:5e:4a:ec:56:80:7f:95: c0:84:3c:ba:14:e0:dc:53:be:e1:3a:08:2c:86:2a:42:cd:00: 7b:68:b1:20:bf:b8:08:b6:4a:47:23:b5:bf:c3:ee:e0:ab:7b: 12:1d:34:a1:21:c8:11:46:64:ce:f5:85:38:0a:3c:fa:c4:91: 52:c2:6d:f7:c5:9b:c7:b3:f8:53:12:a3:96:bd:40:60:5d:d7: cf:fd:16:72:3d:6c:43:b8:77:ea:94:b0:8e:af:c1:f4:fa:90: 06:9f:55:b4:aa:df:0e:49:ae:98:4b:b5:ab:69:0f:08:67:6e: 78:0b:6d:7a:8f:44:c3:da:7a:79:b0:d6:41:52:ec:95:53:5e: f5:5a:0c:0a:30:37:9a:91:df:82:cb:05:91:8b:35:4f:4e:95: 41:f1:4c:89:98:f2:31:ea:f4:38:a6:cd:40:24:b5:97:4d:99: c1:0e:7f:8d:b7:fe:12:87:32:c9:0b:83:4e:ec:18:09:00:0e: 48:07:ce:31:ec:f3:c8:36:72:1a:bf:0c:9c:f5:8e:7b:b4:b4: c8:64:0a:ed:dc:68:1d:6a:a3:eb:a4:66:54:3b:4c:d0:e3:b0: 98:d7:4d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1vKkKIYRkhJwt0kyI3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzVlNmFlNTk4NzEwMDY2NGIyMzAzNGNlZmM3MmQ0N2Y4 ZjRiOWIwHhcNMjYwMjA5MTEwMDI4WhcNMjYwMjEwMTEwMDI4WjAzMTEwLwYDVQQD EygxNjcxYmIzMjhmOGQ0NzZiNDQ0OGZhMDY3NjRmMzIyMTdkMDRhMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitX19LZCEbcBvvOGbauW6lboSJ8A GOVBNzYpWi3eJWovYWuiLYd6QkVq+xTKqHEg1NlVrx+cSk47ZbTqnCyOMfDMTI7d +TvKCehskXUgKRZpt2vxTCT2maD121zusyPAiIZm6b/LlIKmXsuvKoC/Ey8AF+bQ YGM3K5FFjcHNbP2H2zUHfQ9Jnc/vRZ7HoMAmKNcyn6fWBGxzoOsr12nvmMY8cuye K5sKYcbr/+fwn0K1bLNBA8x9hQd/OfipVXupPD3jNqmnXTyRB8nV2zqn3PEuonEZ YWyJAomHOwlxaYMAd8C1bshpww8NiXZHJ1cGlZJlrd7mj4SxFAc+tWiBrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZxuzKPjUdrREj6BnZPMiF9BKNpMB8GA1UdIwQY MBaAFLDF5q5ZhxAGZLIwNM78ctR/j0ubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUt ZDU5ZTI2NGVlODNiLzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUtZDU5ZTI2NGVlODNi LzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQSLY5KG oEW5YmstjZpbVmT7MKhe39/Pg7dRB6heSuxWgH+VwIQ8uhTg3FO+4ToILIYqQs0A e2ixIL+4CLZKRyO1v8Pu4Kt7Eh00oSHIEUZkzvWFOAo8+sSRUsJt98Wbx7P4UxKj lr1AYF3Xz/0Wcj1sQ7h36pSwjq/B9PqQBp9VtKrfDkmumEu1q2kPCGdueAtteo9E w9p6ebDWQVLslVNe9VoMCjA3mpHfgssFkYs1T06VQfFMiZjyMer0OKbNQCS1l02Z wQ5/jbf+EocyyQuDTuwYCQAOSAfOMezzyDZyGr8MnPWOe7S0yGQK7dxoHWqj66Rm VDtM0OOwmNdNiA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:48 2026 by rpki-client