This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: z0BSch2YYUTPNHOeipo8NCiOxOxqQ+c3xxBW++E2fMU=
Subject key identifier: 36:2B:56:67:A7:42:8A:FA:CE:75:37:9A:68:36:E9:1C:F0:C1:DA:37
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 019C42469806AE1F3239DC10EE4000AF791A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 038D
Signing time: Mon 09 Feb 2026 12:00:48 +0000
Manifest this update: Mon 09 Feb 2026 12:00:48 +0000
Manifest next update: Tue 10 Feb 2026 12:00:48 +0000
Files and hashes: 1: 9Szxj7ksKuCXA-mU4WJw6FwBa-8.roa (hash: dbreI6iiuCYJc1Zi2XdOuKeWZjsIDBcTLiyZ8rQ+QKg=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: VxTsrbjq8TVSrtaR6MRHLNZPzkRUsjrd26xI0w9ZFnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:98:06:ae:1f:32:39:dc:10:ee:40:00:af:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Feb 9 12:00:48 2026 GMT
Not After : Feb 10 12:00:48 2026 GMT
Subject: CN=362b5667a7428aface75379a6836e91cf0c1da37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:00:87:20:97:b0:a6:f1:94:64:04:42:ca:
92:64:db:04:fc:00:ae:91:85:cc:3b:00:86:79:94:
a0:ee:4b:38:c9:06:57:87:ab:33:69:ff:95:47:32:
4b:d5:c6:ee:bd:87:78:28:f9:8c:3b:14:e4:3e:d0:
40:8c:02:43:d4:7b:97:59:ed:02:fd:9c:39:66:5a:
f0:ae:2d:c2:b1:ca:18:ce:ed:28:30:95:66:75:ce:
04:f8:80:4c:6c:ae:c6:09:fe:54:75:0a:9b:4d:a2:
97:73:10:8d:6b:c3:ae:69:4e:a1:a3:c9:1c:53:17:
e3:c1:41:6a:46:8c:0a:c7:1b:34:ed:5e:a8:e7:87:
dc:29:4c:41:37:22:00:2d:6a:3b:2f:63:42:c0:83:
de:1e:bd:83:e3:06:6d:db:8e:5a:f6:d8:09:df:5b:
32:bc:15:5e:8e:63:0f:88:dc:1b:c3:d9:7c:15:23:
31:d0:d7:a1:f9:2a:de:a3:b4:f3:33:8d:79:3b:42:
98:75:32:9f:42:a5:03:c5:88:62:15:db:21:aa:cf:
8c:9b:35:be:70:ab:b1:0c:6d:ca:63:df:1e:fc:e0:
ce:fc:73:f1:9e:65:91:38:f0:8c:e6:84:04:3a:da:
76:ee:35:03:42:0b:6a:cc:22:1b:04:e1:f7:b7:da:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:56:67:A7:42:8A:FA:CE:75:37:9A:68:36:E9:1C:F0:C1:DA:37
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e4:4e:14:d2:19:f2:93:a0:04:fd:6d:c2:e5:9a:ea:0e:0e:
f7:90:93:ff:e2:f1:a4:d8:9a:e8:fa:87:29:45:9c:47:0f:6c:
3a:0e:a7:16:90:ea:c1:8b:dd:45:bf:8c:8b:81:5f:31:49:c1:
ff:ca:46:d6:aa:c2:84:a4:e7:26:62:2a:a5:72:8c:4e:40:85:
b3:93:1c:55:3c:16:b0:16:2e:9d:7e:48:fc:27:f4:79:99:93:
a4:e9:0a:3f:7b:e5:0e:fa:68:b7:9d:76:39:38:d7:a4:e6:6c:
54:b3:92:81:dd:0c:57:14:96:14:5b:17:b6:0c:34:1a:16:35:
ab:33:30:c9:5e:4a:42:71:be:90:71:b0:4d:40:41:ea:d5:50:
91:fb:8f:35:94:ff:e7:ab:1b:72:d7:00:97:01:a3:29:ee:78:
d9:e4:22:57:bf:2d:2e:d6:41:cb:ed:d5:42:e5:14:9d:b8:bd:
c7:54:d5:a3:ec:81:66:d2:78:02:a8:6b:d2:07:be:10:fa:e4:
8e:1d:c9:ff:34:bc:52:37:66:ba:bd:a2:ef:67:ac:f6:1f:79:
51:0a:d1:df:db:6f:80:be:17:b7:b4:47:93:8e:28:43:26:2d:
28:4c:6b:ac:8f:0b:a0:13:05:26:1a:99:51:c7:0e:95:92:0b:
d3:01:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:27:13 2026 by rpki-client