This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json) Hash identifier: XH50xyHrBOVpsIffYzr3Nj+iFgb2J4iNjQ/BGReXsI0= Subject key identifier: 23:A7:57:41:52:2A:D9:7B:25:D9:4A:8D:FA:8F:E9:B7:CD:F2:73:1B Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Certificate serial: 019C4246236CA28A03E75920153CAD93B8DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:00:18 +0000 Manifest this update: Mon 09 Feb 2026 12:00:18 +0000 Manifest next update: Tue 10 Feb 2026 12:00:18 +0000 Files and hashes: 1: HpEQ35wYcpdgu7Xx3TWMgnDMgr4.roa (hash: R5O1iCublXAekieUKPQ0Y89Zyi72MgQUUVwuCgdlYZM=) 2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: 9EGmCS1je1BhF5CazyjyOQwricWSb75lL0LNVCdyq8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:23:6c:a2:8a:03:e7:59:20:15:3c:ad:93:b8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Validity Not Before: Feb 9 12:00:18 2026 GMT Not After : Feb 10 12:00:18 2026 GMT Subject: CN=23a75741522ad97b25d94a8dfa8fe9b7cdf2731b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:9e:69:2b:28:9e:a0:51:49:04:e8:76:fe: c1:17:87:04:b4:01:d7:e2:f1:95:89:89:e8:63:07: 8c:cb:f5:f7:c7:d2:19:6d:f6:3c:5d:83:06:86:40: 6b:da:60:87:0f:83:4f:d4:9e:99:f8:0f:fa:ea:f2: 7e:90:ef:e1:97:86:f6:b1:b0:b6:7a:47:92:fa:c2: 11:64:54:34:69:12:53:9d:92:df:46:24:3c:de:34: db:94:35:aa:a6:34:a9:a3:63:fe:df:39:e6:6e:d4: 5e:b1:80:a0:7b:c2:32:38:61:1c:34:c8:81:35:11: 56:0b:58:7c:9e:1d:b9:c1:53:6f:18:25:b0:0e:26: 30:65:90:47:af:ca:41:21:0a:31:b8:7a:fa:4c:42: fe:62:48:38:01:a5:8b:c5:6a:96:87:93:c3:34:db: b7:2c:e1:23:35:b6:ed:f8:39:ff:d4:d8:39:1d:3c: dd:4e:60:81:c9:a3:a8:f2:fd:43:1d:e5:18:d4:37: 6e:0c:15:cf:00:b2:7d:22:2a:a4:79:c2:08:b4:34: bd:b8:af:1e:b1:34:65:54:d9:1e:58:b0:f3:f9:47: ac:06:e8:78:03:f2:ad:bb:41:77:71:c0:a0:18:60: 05:7e:a9:2d:42:29:aa:7b:97:0a:e7:17:dc:9a:21: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A7:57:41:52:2A:D9:7B:25:D9:4A:8D:FA:8F:E9:B7:CD:F2:73:1B X509v3 Authority Key Identifier: keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:20:c9:ea:e2:49:dc:12:a4:26:85:46:4e:9e:f9:ac:c7:bf: a5:23:7f:74:b8:35:03:68:3e:ef:91:c2:d8:d4:d6:b4:ae:36: 29:60:73:1d:15:00:00:63:25:1b:cd:94:12:14:39:81:4e:d0: 62:6c:2b:ba:c2:92:29:9e:ab:cc:51:78:a6:e3:c9:4f:0f:61: da:b7:8d:9d:25:f6:74:df:96:52:46:eb:0d:de:eb:5f:7a:99: 0c:21:3d:88:41:73:ef:dc:cb:8a:a9:20:64:b0:6d:2b:da:60: 61:59:8d:10:ec:92:a9:bd:63:50:bb:ce:07:5f:cd:58:aa:81: f7:12:4a:32:94:6c:73:6b:54:23:5e:b3:1d:5a:b8:d9:de:34: 76:60:04:b0:1a:88:9a:67:57:56:32:e7:b1:9a:d9:0d:ac:9e: 0b:10:24:3e:97:b4:26:da:9b:41:12:76:0c:d7:a1:ae:9e:ba: 33:ee:0f:8a:6e:63:63:95:d3:69:30:02:78:fa:0f:fd:4e:1d: b2:87:88:78:45:5c:b8:ed:19:a1:37:99:24:fa:8a:64:34:b8: a8:c1:f4:ee:79:e2:db:b2:c1:78:25:cf:6d:60:a2:b4:5a:d1: 7d:b1:b3:56:51:4f:63:30:77:0c:dc:cb:1f:db:17:4c:47:40: 7a:d0:de:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiNsoooD51kgFTytk7jfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjFjYzhhMzY1Y2M0MDM4MmEzMWRhZDU0ZjZjYjcyM2Y1 ODc1OGEwHhcNMjYwMjA5MTIwMDE4WhcNMjYwMjEwMTIwMDE4WjAzMTEwLwYDVQQD EygyM2E3NTc0MTUyMmFkOTdiMjVkOTRhOGRmYThmZTliN2NkZjI3MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq6eaSsonqBRSQTodv7BF4cEtAHX 4vGViYnoYweMy/X3x9IZbfY8XYMGhkBr2mCHD4NP1J6Z+A/66vJ+kO/hl4b2sbC2 ekeS+sIRZFQ0aRJTnZLfRiQ83jTblDWqpjSpo2P+3znmbtResYCge8IyOGEcNMiB NRFWC1h8nh25wVNvGCWwDiYwZZBHr8pBIQoxuHr6TEL+Ykg4AaWLxWqWh5PDNNu3 LOEjNbbt+Dn/1Ng5HTzdTmCByaOo8v1DHeUY1DduDBXPALJ9IiqkecIItDS9uK8e sTRlVNkeWLDz+UesBuh4A/Ktu0F3ccCgGGAFfqktQimqe5cK5xfcmiEdgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOnV0FSKtl7JdlKjfqP6bfN8nMbMB8GA1UdIwQY MBaAFEthzIo2XMQDgqMdrVT2y3I/WHWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYt YzRmZDUzZWJlYjY3LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYtYzRmZDUzZWJlYjY3 LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSDJ6uJJ 3BKkJoVGTp75rMe/pSN/dLg1A2g+75HC2NTWtK42KWBzHRUAAGMlG82UEhQ5gU7Q YmwrusKSKZ6rzFF4puPJTw9h2reNnSX2dN+WUkbrDd7rX3qZDCE9iEFz79zLiqkg ZLBtK9pgYVmNEOySqb1jULvOB1/NWKqB9xJKMpRsc2tUI16zHVq42d40dmAEsBqI mmdXVjLnsZrZDayeCxAkPpe0JtqbQRJ2DNehrp66M+4Pim5jY5XTaTACePoP/U4d soeIeEVcuO0ZoTeZJPqKZDS4qMH07nni27LBeCXPbWCitFrRfbGzVlFPYzB3DNzL H9sXTEdAetDeSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:00 2026 by rpki-client