This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json) Hash identifier: 23d127oFKrzVzLvpu0+SqYkfX/P4gIW5BS1naVd3ELQ= Subject key identifier: 28:45:E9:F7:B2:9C:AF:C0:20:01:D2:68:D3:F2:28:08:1F:AE:95:9B Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd Certificate serial: 019C4321DE8F37A3D5D354329D62B089FC6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 16:00:18 +0000 Manifest this update: Mon 09 Feb 2026 16:00:18 +0000 Manifest next update: Tue 10 Feb 2026 16:00:18 +0000 Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: 6dCRG23RLMvKX25n5R/puKqIbWrZeouI+U7sCvNQTLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:de:8f:37:a3:d5:d3:54:32:9d:62:b0:89:fc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd Validity Not Before: Feb 9 16:00:18 2026 GMT Not After : Feb 10 16:00:18 2026 GMT Subject: CN=2845e9f7b29cafc02001d268d3f228081fae959b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:92:5b:a8:c2:f5:f8:a5:6e:e0:a2:22:67: 09:07:78:4b:d4:db:73:62:7c:99:b5:bf:a7:e6:da: be:52:61:59:69:06:62:02:d2:25:d2:d1:f0:71:d7: 35:88:0a:28:0a:37:64:da:17:90:dc:47:d9:36:60: 71:f0:f5:6b:ba:38:41:1a:a0:96:d9:e5:fe:d8:74: 36:d2:18:99:1b:54:c2:81:2f:05:5c:ff:a4:a9:79: 39:04:9a:06:96:fb:3d:da:80:37:6a:8d:94:84:78: 8e:cd:6f:a9:4c:cd:0c:74:57:54:fb:b7:59:2e:f3: 3d:ee:ca:61:43:93:fb:fa:a3:92:4f:bd:62:e0:32: 8f:88:0f:75:f3:ba:1e:7d:bb:53:2e:28:44:81:a6: 2a:43:63:f0:9d:b6:a7:e1:51:31:f4:6c:42:49:c6: d0:fb:72:8e:3c:80:a9:3d:0e:7f:96:30:3f:bf:83: 97:3c:75:74:40:7c:9c:96:ca:d8:fa:04:da:0e:e5: 7f:e3:bf:d6:26:13:49:19:65:33:8a:bf:30:8a:71: 14:36:35:ed:a1:d3:25:92:3b:e8:bf:46:ce:f7:09: 33:12:28:9a:5f:02:a3:d3:a6:af:9c:e8:78:05:54: 34:78:75:ee:1f:79:58:96:6c:f8:f8:f7:46:8e:93: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:45:E9:F7:B2:9C:AF:C0:20:01:D2:68:D3:F2:28:08:1F:AE:95:9B X509v3 Authority Key Identifier: keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8c:9c:d8:84:98:3c:ba:72:4c:95:10:19:e2:98:dc:00:4b: 3b:f9:e9:26:9b:19:98:e7:40:2c:08:65:58:b9:d1:86:cd:02: c0:a4:55:79:63:a6:cb:b0:a8:ef:b7:f9:21:5a:a7:fb:8e:7b: ce:da:03:95:df:2f:d8:3f:cc:c5:e0:c9:86:44:48:58:d7:3f: 09:3e:7c:47:a8:ca:cb:ef:86:ea:bb:84:73:14:08:6b:97:29: e5:6e:96:5e:71:2a:32:fb:b7:fb:16:bf:22:59:d7:ed:eb:c8: 77:26:7d:7b:40:03:88:3a:14:3b:88:d3:82:21:13:85:67:47: 96:3d:04:67:73:35:ec:37:b9:b8:9e:4e:61:24:57:c2:76:ad: 79:2d:74:00:4c:bd:09:c7:7c:73:03:8e:6e:df:3b:64:23:19: 35:16:02:b5:7a:05:7a:76:52:20:01:52:e2:2a:c2:bd:6d:37: 69:37:e8:30:04:6f:60:da:97:91:0c:b5:93:a9:08:af:93:09: f3:8b:a4:50:71:91:28:80:38:ea:ea:88:fa:9f:96:3d:28:01: 96:87:a6:a3:76:8b:42:d5:89:07:3c:1c:1b:8e:87:af:6d:b4: 21:7e:81:2d:f7:dd:88:b8:d9:f7:0c:35:21:92:ce:5d:1f:7e: 36:a3:ab:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDId6PN6PV01QynWKwifxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ODkxOGNhNjYxODBkZWUwNzliYWY0NTA1M2U0Y2ViNTc2 MjkyYmQwHhcNMjYwMjA5MTYwMDE4WhcNMjYwMjEwMTYwMDE4WjAzMTEwLwYDVQQD EygyODQ1ZTlmN2IyOWNhZmMwMjAwMWQyNjhkM2YyMjgwODFmYWU5NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY2SW6jC9filbuCiImcJB3hL1Ntz YnyZtb+n5tq+UmFZaQZiAtIl0tHwcdc1iAooCjdk2heQ3EfZNmBx8PVrujhBGqCW 2eX+2HQ20hiZG1TCgS8FXP+kqXk5BJoGlvs92oA3ao2UhHiOzW+pTM0MdFdU+7dZ LvM97sphQ5P7+qOST71i4DKPiA9187oefbtTLihEgaYqQ2Pwnban4VEx9GxCScbQ +3KOPICpPQ5/ljA/v4OXPHV0QHyclsrY+gTaDuV/47/WJhNJGWUzir8winEUNjXt odMlkjvov0bO9wkzEiiaXwKj06avnOh4BVQ0eHXuH3lYlmz4+PdGjpPRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChF6feynK/AIAHSaNPyKAgfrpWbMB8GA1UdIwQY MBaAFEiJGMpmGA3uB5uvRQU+TOtXYpK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQt ZDJjZmQ1ZjIyZTdhLzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQtZDJjZmQ1ZjIyZTdh LzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4yc2ISY PLpyTJUQGeKY3ABLO/npJpsZmOdALAhlWLnRhs0CwKRVeWOmy7Co77f5IVqn+457 ztoDld8v2D/MxeDJhkRIWNc/CT58R6jKy++G6ruEcxQIa5cp5W6WXnEqMvu3+xa/ IlnX7evIdyZ9e0ADiDoUO4jTgiEThWdHlj0EZ3M17De5uJ5OYSRXwnateS10AEy9 Ccd8cwOObt87ZCMZNRYCtXoFenZSIAFS4irCvW03aTfoMARvYNqXkQy1k6kIr5MJ 84ukUHGRKIA46uqI+p+WPSgBloemo3aLQtWJBzwcG46Hr220IX6BLffdiLjZ9ww1 IZLOXR9+NqOrcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:53 2026 by rpki-client