This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json) Hash identifier: 8T/ahkVALCjMzOsnzUSXtGNRI8ik2cuV1XcTV+ON0OI= Subject key identifier: 54:7D:A2:AA:FA:50:D1:94:7C:06:CD:A6:8A:6A:33:31:D4:59:B3:AB Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337 Certificate serial: 019C416AC8F2D92F05D88F23E743FB71D0D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft Manifest number: 0BB8 Signing time: Mon 09 Feb 2026 08:00:43 +0000 Manifest this update: Mon 09 Feb 2026 08:00:43 +0000 Manifest next update: Tue 10 Feb 2026 08:00:43 +0000 Files and hashes: 1: 80aZm-LOIfOj4b0pErlGBGKAQkw.roa (hash: eeqWFn0rrMt+3uQyEjN0WfmfLfKkgvr7/Sm+KMOotdU=) 2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: vaZK257d+HZOKbJb0qGGrPasi40Tm//Q+rTqurH6R2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:c8:f2:d9:2f:05:d8:8f:23:e7:43:fb:71:d0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337 Validity Not Before: Feb 9 08:00:43 2026 GMT Not After : Feb 10 08:00:43 2026 GMT Subject: CN=547da2aafa50d1947c06cda68a6a3331d459b3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:62:19:93:c3:65:c4:3e:1f:78:4a:80:9a: ed:fe:83:d3:d7:71:7e:b8:84:d0:7c:db:c0:bd:f6: d5:a2:db:e5:2d:51:1c:6c:1f:1a:61:4f:6a:d5:20: 0d:91:66:d5:59:6d:85:04:4f:6b:85:04:4a:90:d9: b4:02:03:ce:f8:2c:90:d5:33:97:ff:05:95:6f:0e: 12:52:7d:52:1e:a2:bd:b5:50:c6:a4:db:21:25:66: 61:9e:71:55:8d:5e:6f:6f:a9:0d:54:88:94:12:7a: 6e:26:d8:69:87:1c:68:b0:c6:87:5a:bd:22:f0:38: 5f:97:a4:36:12:e2:5a:6f:3a:80:7f:8a:c9:ac:de: 1f:67:e1:b7:8b:0a:44:92:25:f4:86:5a:4d:34:de: 59:a3:81:07:aa:9e:03:0b:2e:cf:c5:73:c8:34:26: 12:f5:60:e0:f7:cd:a1:67:55:40:91:6b:ea:2f:48: 85:78:89:18:b8:39:88:00:52:af:9e:1a:23:2f:68: 12:a8:f8:4c:81:73:89:9f:c0:e9:4f:c7:84:60:ab: 18:18:b1:07:fb:31:16:3d:54:d4:a7:58:c4:60:2b: cc:ff:d7:83:9c:3b:70:5b:f5:93:fa:b0:04:bb:57: a7:8b:93:18:0e:e7:91:6a:34:96:7c:39:c9:5b:9c: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7D:A2:AA:FA:50:D1:94:7C:06:CD:A6:8A:6A:33:31:D4:59:B3:AB X509v3 Authority Key Identifier: keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f3:3f:6b:5e:9c:0f:56:42:d7:65:41:48:06:cb:f0:aa:45: 59:f0:67:d5:56:20:6b:38:58:44:6a:0c:c0:aa:59:55:61:ef: a7:52:c9:c8:f1:c2:e7:2f:3e:0e:fa:69:11:6c:3a:51:ee:ce: 33:22:86:1b:d0:7a:f2:6d:77:14:bd:66:d9:df:90:a1:4f:06: 98:cb:ad:a3:eb:fb:dd:46:cd:f0:3a:cf:ad:3a:30:dd:20:e5: 44:eb:1e:50:0f:6f:78:fb:ae:23:ea:1c:99:6b:2e:2e:c5:d4: 53:52:de:03:ec:ce:8f:8d:f6:22:b8:ef:df:93:e6:4f:60:4c: 65:e8:c4:f6:78:f0:52:a0:69:d0:d7:83:e2:06:2e:f0:0f:fa: 70:de:cf:9a:1b:9a:ba:2d:13:7b:fb:3f:db:b3:dd:42:17:10: 98:8c:76:17:98:ad:b3:8a:1d:de:cd:15:63:0d:ae:c0:25:a6: 64:71:0f:96:a2:ba:d7:fe:91:a8:a6:82:19:80:43:64:a8:5c: b8:b5:9c:9d:21:38:7e:63:e4:f5:b5:cb:99:20:a5:de:da:8a: 1a:32:b8:b1:9f:20:69:67:d6:e4:2b:d3:a0:b2:91:61:ea:03: 3b:b8:1d:4c:ea:a7:8e:d5:67:bf:35:43:30:7a:fd:ca:c5:5f: 15:43:5d:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBasjy2S8F2I8j50P7cdDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMTdiNWFjNDY3NDEyZTI0OWM0NGUyNzM5YzI4OWViYjA0 Y2QzMzcwHhcNMjYwMjA5MDgwMDQzWhcNMjYwMjEwMDgwMDQzWjAzMTEwLwYDVQQD Eyg1NDdkYTJhYWZhNTBkMTk0N2MwNmNkYTY4YTZhMzMzMWQ0NTliM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxFiGZPDZcQ+H3hKgJrt/oPT13F+ uITQfNvAvfbVotvlLVEcbB8aYU9q1SANkWbVWW2FBE9rhQRKkNm0AgPO+CyQ1TOX /wWVbw4SUn1SHqK9tVDGpNshJWZhnnFVjV5vb6kNVIiUEnpuJthphxxosMaHWr0i 8Dhfl6Q2EuJabzqAf4rJrN4fZ+G3iwpEkiX0hlpNNN5Zo4EHqp4DCy7PxXPINCYS 9WDg982hZ1VAkWvqL0iFeIkYuDmIAFKvnhojL2gSqPhMgXOJn8DpT8eEYKsYGLEH +zEWPVTUp1jEYCvM/9eDnDtwW/WT+rAEu1eni5MYDueRajSWfDnJW5wX1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFR9oqr6UNGUfAbNpopqMzHUWbOrMB8GA1UdIwQY MBaAFLIXtaxGdBLiScROJznCieuwTNM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjct M2RiZDMyZDY5OTJlLzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjctM2RiZDMyZDY5OTJl LzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/M/a16c D1ZC12VBSAbL8KpFWfBn1VYgazhYRGoMwKpZVWHvp1LJyPHC5y8+DvppEWw6Ue7O MyKGG9B68m13FL1m2d+QoU8GmMuto+v73UbN8DrPrTow3SDlROseUA9vePuuI+oc mWsuLsXUU1LeA+zOj432Irjv35PmT2BMZejE9njwUqBp0NeD4gYu8A/6cN7Pmhua ui0Te/s/27PdQhcQmIx2F5its4od3s0VYw2uwCWmZHEPlqK61/6RqKaCGYBDZKhc uLWcnSE4fmPk9bXLmSCl3tqKGjK4sZ8gaWfW5CvToLKRYeoDO7gdTOqnjtVnvzVD MHr9ysVfFUNdjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:10 2026 by rpki-client