This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft File: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json) Hash identifier: Rn31/AEUBQmpYYKcORPXgJeIg9/kgKM/vZ0yrTzMZ3M= Subject key identifier: EA:43:C9:8B:C4:E5:84:88:5D:4C:45:89:D8:79:02:95:D0:1F:4F:CD Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7 Certificate issuer: /CN=492999fd50a69fd0412065490f5acc75a159deb7 Certificate serial: 019C427DE9D9FB87B1C92D46CF4BA08D4EBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft Manifest number: 176A Signing time: Mon 09 Feb 2026 13:01:13 +0000 Manifest this update: Mon 09 Feb 2026 13:01:13 +0000 Manifest next update: Tue 10 Feb 2026 13:01:13 +0000 Files and hashes: 1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: Vy6EAxgreUFxcJ8nzMBSbEaRUBYKlRNYe133fv3VTeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e9:d9:fb:87:b1:c9:2d:46:cf:4b:a0:8d:4e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7 Validity Not Before: Feb 9 13:01:13 2026 GMT Not After : Feb 10 13:01:13 2026 GMT Subject: CN=ea43c98bc4e584885d4c4589d8790295d01f4fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:4d:5d:92:fc:b9:c9:0e:94:ca:af:8d:7a: 1b:5a:17:5f:05:f1:4b:f1:31:e6:4d:99:84:d5:bc: 13:24:75:65:7d:d6:2d:4a:91:60:55:be:ff:b6:7c: 12:c2:74:ae:76:a6:04:61:68:e8:9e:de:58:c8:cb: 31:0c:64:5e:d8:ab:a4:32:bb:2c:c8:1d:14:0a:36: 71:ab:4d:76:f7:b7:8d:9a:a1:9a:dc:d3:7e:42:85: 16:95:31:10:1b:bd:e3:4d:63:44:60:5e:fa:c3:46: b8:72:62:8b:5f:dc:b2:2c:d0:73:86:26:d3:a8:df: 85:c8:33:1f:79:e2:2f:c1:95:b7:c8:88:a5:70:b0: 3c:03:2c:21:5e:d1:0a:6c:7a:e1:5a:99:43:c6:56: fa:f5:b1:1c:d6:c0:db:be:aa:7a:0a:70:d8:f9:f7: 01:a6:e8:f7:55:37:ae:f2:b9:a0:8f:21:5c:1e:d8: 2f:03:98:f4:90:cc:25:8e:a8:48:7d:9c:39:fa:4c: 79:a3:ce:8f:33:f0:10:0a:9a:bd:5a:39:3c:9a:8f: 2b:6f:ba:c2:3c:eb:75:39:e7:8b:79:a7:19:6a:77: 45:59:14:b7:12:86:a1:f3:85:50:1f:a6:1f:9f:7a: 00:ce:c7:03:8d:2d:eb:69:60:58:96:4f:1a:38:77: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:43:C9:8B:C4:E5:84:88:5D:4C:45:89:D8:79:02:95:D0:1F:4F:CD X509v3 Authority Key Identifier: keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9d:98:5b:70:23:60:c9:a9:68:5d:03:86:d6:a0:1b:ce:6f: 42:57:eb:f0:ee:c2:65:95:8e:23:14:71:64:6f:2e:d9:61:72: 5e:d9:dd:4a:c0:9d:66:69:28:53:5e:7b:d4:b4:78:93:4f:db: c6:77:b8:da:44:19:30:ca:d6:06:bf:3e:be:3d:4e:60:fe:2b: 9f:80:13:01:aa:13:59:ee:5b:1b:d3:ab:c9:a7:08:bd:9d:23: 2c:16:da:9f:7a:45:ca:24:13:4c:be:8e:69:1e:92:a7:03:9a: 62:4b:ef:b1:62:f9:3a:c8:f3:d1:b6:a2:a2:7b:a3:59:48:f3: ee:89:30:42:2a:54:1f:9e:1c:bb:75:42:b7:6a:3c:38:f3:ee: 97:88:be:95:18:f7:f3:11:ec:04:77:9f:4c:83:a3:6c:e5:f4: dd:79:af:3f:70:d3:c6:c3:c4:22:af:98:05:5d:3f:fa:85:f0: 83:9d:3b:87:6f:97:ba:e1:84:42:fa:31:d9:3d:a6:6b:a9:48: c2:a1:e7:11:af:76:5a:db:e0:0b:69:27:fd:df:7b:c3:ae:a7: a6:4e:f4:bc:f1:76:8a:10:52:33:15:6d:0c:3d:56:5c:cc:ed: c2:61:be:95:c0:fc:a0:2d:b8:7b:33:e6:cc:7a:c5:56:b3:56: cb:89:b3:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfenZ+4exyS1Gz0ugjU66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Mjk5OWZkNTBhNjlmZDA0MTIwNjU0OTBmNWFjYzc1YTE1 OWRlYjcwHhcNMjYwMjA5MTMwMTEzWhcNMjYwMjEwMTMwMTEzWjAzMTEwLwYDVQQD EyhlYTQzYzk4YmM0ZTU4NDg4NWQ0YzQ1ODlkODc5MDI5NWQwMWY0ZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx49NXZL8uckOlMqvjXobWhdfBfFL 8THmTZmE1bwTJHVlfdYtSpFgVb7/tnwSwnSudqYEYWjont5YyMsxDGRe2KukMrss yB0UCjZxq01297eNmqGa3NN+QoUWlTEQG73jTWNEYF76w0a4cmKLX9yyLNBzhibT qN+FyDMfeeIvwZW3yIilcLA8AywhXtEKbHrhWplDxlb69bEc1sDbvqp6CnDY+fcB puj3VTeu8rmgjyFcHtgvA5j0kMwljqhIfZw5+kx5o86PM/AQCpq9Wjk8mo8rb7rC POt1OeeLeacZandFWRS3Eoah84VQH6Yfn3oAzscDjS3raWBYlk8aOHfqiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpDyYvE5YSIXUxFidh5ApXQH0/NMB8GA1UdIwQY MBaAFEkpmf1Qpp/QQSBlSQ9azHWhWd63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgt NDhmNjc3ZmUyNTVkLzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgtNDhmNjc3ZmUyNTVk LzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM52YW3Aj YMmpaF0DhtagG85vQlfr8O7CZZWOIxRxZG8u2WFyXtndSsCdZmkoU1571LR4k0/b xne42kQZMMrWBr8+vj1OYP4rn4ATAaoTWe5bG9OryacIvZ0jLBban3pFyiQTTL6O aR6SpwOaYkvvsWL5Osjz0baionujWUjz7okwQipUH54cu3VCt2o8OPPul4i+lRj3 8xHsBHefTIOjbOX03XmvP3DTxsPEIq+YBV0/+oXwg507h2+XuuGEQvox2T2ma6lI wqHnEa92WtvgC2kn/d97w66npk70vPF2ihBSMxVtDD1WXMztwmG+lcD8oC24ezPm zHrFVrNWy4mzkg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:02 2026 by rpki-client