This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json) Hash identifier: 8ctIIP8fSL1zI+mrq6ZyL6J2wwGr6SFwtmHvTPPix8E= Subject key identifier: A8:77:22:8E:66:18:E1:C0:02:F2:B2:AF:05:62:B0:08:B0:99:21:09 Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d Certificate serial: 019C44D9C5283D0C8FE1A19E7CA404B7047D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft Manifest number: 0DD9 Signing time: Tue 10 Feb 2026 00:00:48 +0000 Manifest this update: Tue 10 Feb 2026 00:00:48 +0000 Manifest next update: Wed 11 Feb 2026 00:00:48 +0000 Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: 5EO+an4uzPSJ5t8b8fL9kVLe2lcNmkv+FL7bhHASmnU=) 2: tHyycM5QCv8W9vwXc_sS0QuTCdY.roa (hash: /5xLYAkh1elAbGPbQgHDZyios7R0OiSG4E8AdgZhCYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:c5:28:3d:0c:8f:e1:a1:9e:7c:a4:04:b7:04:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d Validity Not Before: Feb 10 00:00:48 2026 GMT Not After : Feb 11 00:00:48 2026 GMT Subject: CN=a877228e6618e1c002f2b2af0562b008b0992109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:2c:12:23:b1:03:0b:de:98:5a:77:e0:40: f0:9e:8d:74:a7:0f:60:22:0f:be:37:06:ea:17:a4: 16:c0:1c:b1:2b:db:49:11:6a:a4:83:cf:97:a7:c0: bc:fd:8c:85:cf:80:de:8c:19:8e:88:4b:67:9c:a7: 61:2c:3b:c8:df:3a:e9:7c:1d:03:55:b5:12:c4:37: 73:63:4a:4f:98:ea:47:48:74:30:e4:cf:10:ff:c6: 7c:29:aa:dd:88:62:b5:f4:8c:b1:79:88:9f:a9:d4: 8f:07:5e:c8:34:73:e4:a6:ba:a0:dc:f8:8f:40:32: 14:64:ab:41:bb:5e:4b:3b:cc:e6:de:3f:bd:3a:29: f1:25:ff:c8:97:82:ea:18:74:7f:62:49:6f:9a:59: e3:5d:cc:4b:08:e8:1e:4f:88:f8:1d:59:31:8f:b9: ab:f3:5b:58:02:35:3e:6b:5a:60:2d:d6:0d:1c:8c: 0b:c9:92:32:44:44:3c:73:a7:61:cf:6b:2e:a2:03: fc:da:d9:3e:d8:78:dd:2d:4f:e6:5e:2d:27:80:29: c9:6e:22:87:a8:a7:3c:99:5a:8a:f5:b5:2e:02:08: a7:1a:d7:b7:e5:f7:ba:2c:a0:a1:98:4c:5b:33:8d: dc:69:7f:fa:0f:0f:71:c4:d8:d0:67:7d:c0:53:69: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:77:22:8E:66:18:E1:C0:02:F2:B2:AF:05:62:B0:08:B0:99:21:09 X509v3 Authority Key Identifier: keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:42:b5:a9:04:eb:05:2c:b2:a6:e1:49:95:e3:8e:0b:a2:35: 86:b2:98:97:85:aa:eb:4f:26:e4:1b:00:b7:5d:3c:66:e8:5f: f9:e2:13:97:80:e6:8e:46:c4:2b:27:41:8d:fa:61:c9:6d:6a: f0:62:22:98:55:8e:91:40:d1:dc:e6:a7:02:83:6b:e6:6c:ab: 17:be:a0:54:62:43:fa:56:4c:1f:5d:af:c0:aa:5a:5a:74:e4: 55:49:37:0d:22:b9:54:72:50:74:ff:a9:90:b7:0a:8e:c2:1f: d2:10:c6:87:1a:0a:51:6b:36:ab:41:07:65:b1:26:0a:49:ba: 95:75:b0:61:b2:0a:50:66:ad:90:f7:90:94:8d:1f:d1:a6:aa: 21:58:1a:5d:bf:04:c5:7b:65:be:60:ba:e2:61:7d:5d:f0:ef: e1:43:f9:b8:91:ac:8b:a1:a3:71:58:f9:fa:da:1e:fa:0f:c2: 95:6a:2e:e5:4c:c4:fd:0b:c4:a8:f7:8f:d7:ab:77:25:8b:6e: 97:1b:e9:9a:dd:83:cb:60:0f:d9:4c:e5:3f:79:bc:fc:e6:cb: e7:b1:8e:a5:3f:0f:b6:91:6d:7a:93:ad:f0:b8:23:bd:36:78: cd:7b:98:76:e9:bf:39:58:d5:7c:10:43:96:0d:2a:ba:4a:77: 15:34:a4:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2cUoPQyP4aGefKQEtwR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTNiOWM1ZmU4MzE1ODA3ZDc4NTZjZDIzMDAwM2FhMTY3 NDFjMGQwHhcNMjYwMjEwMDAwMDQ4WhcNMjYwMjExMDAwMDQ4WjAzMTEwLwYDVQQD EyhhODc3MjI4ZTY2MThlMWMwMDJmMmIyYWYwNTYyYjAwOGIwOTkyMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7EsEiOxAwvemFp34EDwno10pw9g Ig++NwbqF6QWwByxK9tJEWqkg8+Xp8C8/YyFz4DejBmOiEtnnKdhLDvI3zrpfB0D VbUSxDdzY0pPmOpHSHQw5M8Q/8Z8KardiGK19IyxeYifqdSPB17INHPkprqg3PiP QDIUZKtBu15LO8zm3j+9OinxJf/Il4LqGHR/YklvmlnjXcxLCOgeT4j4HVkxj7mr 81tYAjU+a1pgLdYNHIwLyZIyREQ8c6dhz2suogP82tk+2HjdLU/mXi0ngCnJbiKH qKc8mVqK9bUuAginGte35fe6LKChmExbM43caX/6Dw9xxNjQZ33AU2lORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh3Io5mGOHAAvKyrwVisAiwmSEJMB8GA1UdIwQY MBaAFEgTucX+gxWAfXhWzSMAA6oWdBwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYt MjgxNzBhYzAyYjMyLzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYtMjgxNzBhYzAyYjMy LzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkK1qQTr BSyypuFJleOOC6I1hrKYl4Wq608m5BsAt108Zuhf+eITl4DmjkbEKydBjfphyW1q 8GIimFWOkUDR3OanAoNr5myrF76gVGJD+lZMH12vwKpaWnTkVUk3DSK5VHJQdP+p kLcKjsIf0hDGhxoKUWs2q0EHZbEmCkm6lXWwYbIKUGatkPeQlI0f0aaqIVgaXb8E xXtlvmC64mF9XfDv4UP5uJGsi6GjcVj5+toe+g/ClWou5UzE/QvEqPeP16t3JYtu lxvpmt2Dy2AP2UzlP3m8/ObL57GOpT8PtpFtepOt8LgjvTZ4zXuYdum/OVjVfBBD lg0qukp3FTSklA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:33 2026 by rpki-client