This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft File: siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json) Hash identifier: R/AWNR/0woBJnqWGqe3ggt6JAe/ZKopS+8xo5ICu4ns= Subject key identifier: 75:43:62:90:F9:62:97:9C:4A:F0:F9:2A:B8:C0:47:F5:C6:29:E7:50 Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade Certificate serial: 019C43593C990C9B3F4D8F54234293311A3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 17:00:47 +0000 Manifest this update: Mon 09 Feb 2026 17:00:47 +0000 Manifest next update: Tue 10 Feb 2026 17:00:47 +0000 Files and hashes: 1: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: V/bmfwK3bNyBz25MaSHBm8tqNhYU0iTgpvj2coB94qI=) 2: z1U74n3Bwqh9cLzRjWZYerB5n54.roa (hash: Odhjr9FDFuG6FvTw4sLHqZZzcsc3KTFEM336lZkm7Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:3c:99:0c:9b:3f:4d:8f:54:23:42:93:31:1a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade Validity Not Before: Feb 9 17:00:47 2026 GMT Not After : Feb 10 17:00:47 2026 GMT Subject: CN=75436290f962979c4af0f92ab8c047f5c629e750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:e7:6c:7a:b8:fe:70:c9:bb:82:5a:71:1d: c1:2d:14:0d:00:00:45:33:29:a8:0b:df:0e:69:24: 74:d1:4a:a3:5f:ea:dc:7b:2b:31:12:42:69:d9:65: 60:63:4a:eb:c3:b6:25:86:50:9a:eb:f2:06:e2:4c: c0:7b:c7:6f:f4:d6:34:13:8d:90:c1:7b:84:cd:d8: e9:98:4b:7b:5a:23:d5:11:03:31:aa:7d:35:a3:68: 86:de:ea:c6:12:ae:ce:99:fe:03:f4:96:60:5f:dd: 73:43:96:17:7f:a1:22:7c:24:5d:38:09:64:4a:ef: 9c:d9:79:cd:41:ac:2a:d9:15:46:51:21:5e:98:bf: 28:66:94:68:84:4f:2b:45:0e:80:da:1e:4a:39:dc: 31:d3:dc:57:09:10:2c:77:54:6d:8a:a3:b9:34:33: 88:5d:9f:f5:d3:8b:8b:32:a4:46:ae:a7:ee:ce:01: c6:37:06:dc:d4:e4:af:88:92:ab:b7:5a:54:2c:27: a2:3a:25:6e:7e:98:45:ac:a8:c8:15:a0:f9:32:7f: 57:3c:e5:2d:4e:93:31:de:76:7d:b8:7a:1c:4a:fa: 62:b8:5c:ef:9b:a4:b3:af:17:3e:13:b5:db:9a:ae: 8d:bd:9f:71:84:ca:df:3e:aa:6b:ac:7d:7b:c0:12: 33:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:62:90:F9:62:97:9C:4A:F0:F9:2A:B8:C0:47:F5:C6:29:E7:50 X509v3 Authority Key Identifier: keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:db:bd:e0:b8:2a:ad:e9:a2:eb:28:79:36:f9:4c:ad:da:08: 52:f2:b1:6d:ef:af:f6:4b:6d:16:41:44:35:49:37:8d:72:a1: fd:f4:ad:49:9e:ec:da:e4:28:b8:37:1b:0c:6d:bd:34:26:7e: 4b:86:57:48:9a:46:49:b8:38:3d:d8:83:5b:8b:04:95:b7:98: e4:ac:f6:cb:e8:7f:e8:d8:ea:a2:bf:f2:fd:33:32:43:72:ff: 23:59:e9:1b:12:a5:1e:2a:9b:f1:28:65:ef:a7:c4:fb:08:8f: ce:23:3b:5f:bf:7a:fc:99:c3:47:87:ac:6c:e6:dd:ec:35:1b: 47:18:b6:95:32:30:91:bb:56:b3:c6:44:0c:ea:7c:1f:64:da: dd:36:98:47:f1:ee:c9:17:c4:31:be:52:29:df:55:35:d9:b1: f1:b4:03:4f:38:6e:d6:0f:85:c1:52:dc:ae:d6:1e:a8:d1:d2: 8d:e3:90:0f:dc:3a:ce:b7:e0:fa:63:65:79:b9:e4:9f:f1:7d: 80:dd:53:9b:22:fb:a1:8f:15:86:76:80:c2:ca:25:26:95:be: d2:f1:53:09:7f:a8:c8:6e:11:73:84:77:27:f8:4f:0b:64:0a: e2:e9:83:f6:78:65:fa:f8:a5:89:64:14:03:fa:f2:0f:bc:84: a2:ad:f3:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTyZDJs/TY9UI0KTMRo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMjBkOTFiNGU5ZDcwZjAzNGZhMTZhMTZhODg3ZDQyNTU3 OTJhZGUwHhcNMjYwMjA5MTcwMDQ3WhcNMjYwMjEwMTcwMDQ3WjAzMTEwLwYDVQQD Eyg3NTQzNjI5MGY5NjI5NzljNGFmMGY5MmFiOGMwNDdmNWM2MjllNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjLnbHq4/nDJu4JacR3BLRQNAABF MymoC98OaSR00UqjX+rceysxEkJp2WVgY0rrw7YlhlCa6/IG4kzAe8dv9NY0E42Q wXuEzdjpmEt7WiPVEQMxqn01o2iG3urGEq7Omf4D9JZgX91zQ5YXf6EifCRdOAlk Su+c2XnNQawq2RVGUSFemL8oZpRohE8rRQ6A2h5KOdwx09xXCRAsd1RtiqO5NDOI XZ/104uLMqRGrqfuzgHGNwbc1OSviJKrt1pULCeiOiVufphFrKjIFaD5Mn9XPOUt TpMx3nZ9uHocSvpiuFzvm6Szrxc+E7Xbmq6NvZ9xhMrfPqprrH17wBIzawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVDYpD5YpecSvD5KrjAR/XGKedQMB8GA1UdIwQY MBaAFLIg2RtOnXDwNPoWoWqIfUJVeSreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2lEWkcwNmRjUEEwLWhhaGFvaDlRbFY1S3Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NDMyMjEtZjI2Ny00NzMxLWE3YWQt OTg3MTczYjllOTg3LzEvc2lEWkcwNmRjUEEwLWhhaGFvaDlRbFY1S3Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NDMyMjEtZjI2Ny00NzMxLWE3YWQtOTg3MTczYjllOTg3 LzEvc2lEWkcwNmRjUEEwLWhhaGFvaDlRbFY1S3Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtu94Lgq remi6yh5NvlMrdoIUvKxbe+v9kttFkFENUk3jXKh/fStSZ7s2uQouDcbDG29NCZ+ S4ZXSJpGSbg4PdiDW4sElbeY5Kz2y+h/6Njqor/y/TMyQ3L/I1npGxKlHiqb8Shl 76fE+wiPziM7X796/JnDR4esbObd7DUbRxi2lTIwkbtWs8ZEDOp8H2Ta3TaYR/Hu yRfEMb5SKd9VNdmx8bQDTzhu1g+FwVLcrtYeqNHSjeOQD9w6zrfg+mNlebnkn/F9 gN1TmyL7oY8VhnaAwsolJpW+0vFTCX+oyG4Rc4R3J/hPC2QK4umD9nhl+viliWQU A/ryD7yEoq3zcw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:23 2026 by rpki-client