This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json) Hash identifier: cz24c4ONOYy3vWMz75QTlyIpIYCy8TEoDbuKyjvGkSQ= Subject key identifier: 8A:BC:9E:D4:E0:A4:32:5A:8F:29:D8:CC:07:5F:B3:D1:75:7F:19:97 Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86 Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186 Certificate serial: 019C42EAFFE4E2C6E6C1C7A78BED7CD655E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft Manifest number: 0BCC Signing time: Mon 09 Feb 2026 15:00:22 +0000 Manifest this update: Mon 09 Feb 2026 15:00:22 +0000 Manifest next update: Tue 10 Feb 2026 15:00:22 +0000 Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: 8/DtFujjW4pVhvmTtLHSVT0algGuDU8lxnF8ZLlRJio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:ff:e4:e2:c6:e6:c1:c7:a7:8b:ed:7c:d6:55:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186 Validity Not Before: Feb 9 15:00:22 2026 GMT Not After : Feb 10 15:00:22 2026 GMT Subject: CN=8abc9ed4e0a4325a8f29d8cc075fb3d1757f1997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:54:c7:79:96:f2:92:ac:45:f4:52:d6:d2: a9:33:05:6c:41:c5:53:0d:7a:4e:c3:b3:80:dc:89: 8b:0d:bd:74:8f:64:b7:14:2e:0a:7e:d7:d3:73:ca: b9:ad:85:5c:b9:e8:ab:5b:ee:b4:08:89:7a:df:41: 1e:e7:66:4f:0d:25:38:9f:88:1c:af:74:9a:59:77: c6:72:41:20:9e:f3:dc:87:b9:14:c2:c6:a0:79:31: dc:ef:5a:2f:c7:91:0a:cb:66:49:17:d1:e8:a4:e4: 7e:18:0c:2d:2b:49:33:50:a7:2f:a2:72:8e:2f:c0: 81:5e:74:24:b3:5b:ea:f8:d0:cc:bb:fa:7c:5c:d8: 98:cb:b3:63:94:ed:c8:1a:0c:9e:75:f9:b4:85:b1: 87:64:21:3b:5d:f8:58:16:e8:aa:47:15:53:30:18: 93:76:8c:8b:75:65:1c:2f:f9:9f:39:ef:c4:1a:29: 23:46:c1:60:ba:25:af:00:55:c7:53:1a:43:ef:8e: 73:e0:30:01:c7:74:e6:46:70:4c:22:2d:fd:9d:6c: a5:45:29:26:08:a6:bd:32:c7:10:b1:8c:03:c9:d0: 92:fa:a0:66:ea:20:71:8b:63:2d:01:17:ae:01:fb: 3c:da:45:45:29:23:09:51:99:72:b0:06:4a:1c:7c: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:9E:D4:E0:A4:32:5A:8F:29:D8:CC:07:5F:B3:D1:75:7F:19:97 X509v3 Authority Key Identifier: keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:da:b4:85:fa:4e:85:c3:52:3a:c3:ee:dd:c1:91:2e:d7:d7: 59:90:bb:28:5a:75:29:84:b0:b2:37:46:41:40:de:9f:f6:58: 7c:66:9f:d3:21:01:01:de:3b:78:e0:47:a8:53:12:08:11:d1: 5d:f5:60:da:14:b7:2e:7f:83:3f:66:a9:2c:18:9a:3d:e6:eb: f5:a5:28:b6:87:4f:54:b0:8e:57:08:b6:a5:92:3a:6e:77:78: c9:29:9f:9c:9e:29:6d:cf:51:02:20:56:e6:50:81:f2:23:d5: cb:d7:a8:22:3e:7c:4f:89:32:ba:56:63:ac:0b:e6:14:b9:52: cb:44:f1:af:1f:9a:ef:4f:56:f1:94:a0:ec:cb:17:43:5b:71: a7:d0:1d:c9:d2:48:3e:8b:24:e0:17:5a:b4:64:3b:49:7d:5e: 18:ed:8c:da:66:59:51:bf:92:ad:7c:df:10:a2:c3:97:9b:79: ee:65:34:98:9f:4d:5f:3e:17:da:15:22:e7:a7:65:cd:70:54: 62:1c:fa:05:64:b8:b7:6e:0d:01:cd:83:04:c1:a6:2b:2b:42: 3d:6c:75:ac:68:cc:b1:24:62:27:28:1b:1b:1a:9f:40:14:19: ba:a5:ec:3e:0a:c5:31:86:9f:aa:fd:63:4c:43:ac:b7:a8:12: 4f:04:32:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6v/k4sbmwceni+181lXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzYyNjYzYjQ5M2YwZWE1OWZhZmRmODQ3YTAxOGJiMzhh OWExODYwHhcNMjYwMjA5MTUwMDIyWhcNMjYwMjEwMTUwMDIyWjAzMTEwLwYDVQQD Eyg4YWJjOWVkNGUwYTQzMjVhOGYyOWQ4Y2MwNzVmYjNkMTc1N2YxOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO9Ux3mW8pKsRfRS1tKpMwVsQcVT DXpOw7OA3ImLDb10j2S3FC4KftfTc8q5rYVcueirW+60CIl630Ee52ZPDSU4n4gc r3SaWXfGckEgnvPch7kUwsageTHc71ovx5EKy2ZJF9HopOR+GAwtK0kzUKcvonKO L8CBXnQks1vq+NDMu/p8XNiYy7NjlO3IGgyedfm0hbGHZCE7XfhYFuiqRxVTMBiT doyLdWUcL/mfOe/EGikjRsFguiWvAFXHUxpD745z4DABx3TmRnBMIi39nWylRSkm CKa9MscQsYwDydCS+qBm6iBxi2MtAReuAfs82kVFKSMJUZlysAZKHHz7UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq8ntTgpDJajynYzAdfs9F1fxmXMB8GA1UdIwQY MBaAFEh2JmO0k/DqWfr9+EegGLs4qaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hZbVk3U1Q4T3BaLXYzNFI2QVl1emlwb1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMjE4ODMtMTc3ZC00MDgzLWJmYjct NmI5ODA1Mjg2MTAwLzEvU0hZbVk3U1Q4T3BaLXYzNFI2QVl1emlwb1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mMjE4ODMtMTc3ZC00MDgzLWJmYjctNmI5ODA1Mjg2MTAw LzEvU0hZbVk3U1Q4T3BaLXYzNFI2QVl1emlwb1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNq0hfpO hcNSOsPu3cGRLtfXWZC7KFp1KYSwsjdGQUDen/ZYfGaf0yEBAd47eOBHqFMSCBHR XfVg2hS3Ln+DP2apLBiaPebr9aUotodPVLCOVwi2pZI6bnd4ySmfnJ4pbc9RAiBW 5lCB8iPVy9eoIj58T4kyulZjrAvmFLlSy0Txrx+a709W8ZSg7MsXQ1txp9AdydJI Posk4BdatGQ7SX1eGO2M2mZZUb+SrXzfEKLDl5t57mU0mJ9NXz4X2hUi56dlzXBU Yhz6BWS4t24NAc2DBMGmKytCPWx1rGjMsSRiJygbGxqfQBQZuqXsPgrFMYafqv1j TEOst6gSTwQyMg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:57 2026 by rpki-client