This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json) Hash identifier: eApGgFDk84BoH8obP0WO9mpk336YWyqb3OdMp2EH0H0= Subject key identifier: F1:A8:D1:0E:D2:0D:FC:4D:4E:E2:FD:5A:EE:F1:02:9C:00:79:1F:43 Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Certificate serial: 019C421026FDF02065660B26E494F23CA8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft Manifest number: 0726 Signing time: Mon 09 Feb 2026 11:01:20 +0000 Manifest this update: Mon 09 Feb 2026 11:01:20 +0000 Manifest next update: Tue 10 Feb 2026 11:01:20 +0000 Files and hashes: 1: kPH-8Zc1kxZQMwbBGjp_GqisqV0.roa (hash: d06nVSlv366yU56PgOO4NAbOUg53x7byASD8YLEXL7Y=) 2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: +KLtZb5EHF56vjnX5MUfMKnk6z1biaZSnftc4u0dTag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:26:fd:f0:20:65:66:0b:26:e4:94:f2:3c:a8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Validity Not Before: Feb 9 11:01:20 2026 GMT Not After : Feb 10 11:01:20 2026 GMT Subject: CN=f1a8d10ed20dfc4d4ee2fd5aeef1029c00791f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:4e:c6:1e:a8:e3:c2:ac:a7:4f:59:4c:ec: 24:96:4c:e4:60:dd:fb:08:1b:aa:79:12:19:4a:16: 23:d7:18:ef:1b:c3:b3:15:36:56:d0:03:ea:d9:8c: b2:0f:0e:32:9c:fa:18:0d:8d:03:e8:e7:b0:51:d0: 38:2b:21:ad:8a:72:c2:7b:12:7e:c5:3e:6e:db:07: 6f:9d:00:52:5f:ad:c8:f4:0e:d8:70:7f:4e:f4:4b: df:a2:b3:b6:41:1e:4f:d8:10:59:83:8a:4c:46:08: 19:75:49:60:17:1b:98:1b:1b:64:b7:f8:c5:d7:52: 5f:bc:dc:fe:d4:12:10:ed:c5:82:61:43:10:f5:4a: 09:71:36:3f:5f:e2:f1:1b:81:e5:6a:45:94:6b:b1: d1:31:d7:fb:7a:c3:e0:f2:3f:ab:91:28:73:29:44: 91:43:32:2e:1e:89:87:ce:1a:58:d6:d6:79:c1:8b: 9a:bd:85:49:dc:b8:31:7a:7b:3e:10:a8:1c:3c:9d: cf:09:ec:af:74:ad:b2:25:b0:59:84:fb:ac:4d:80: 32:33:69:ee:ee:7a:e0:6a:30:63:fc:e6:2c:ef:3a: cf:27:a8:42:ff:e1:52:e6:ae:ee:31:32:41:47:35: fb:2a:91:1a:e6:72:10:ea:73:cd:20:3d:35:56:81: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A8:D1:0E:D2:0D:FC:4D:4E:E2:FD:5A:EE:F1:02:9C:00:79:1F:43 X509v3 Authority Key Identifier: keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:5c:e2:c6:c4:16:7a:b8:de:74:7a:9e:e9:46:97:82:c8: 9d:43:e2:99:e2:76:0d:38:a5:20:a0:ea:cf:82:ec:94:5e:02: e2:cd:ea:c0:44:86:f2:41:78:71:2c:62:fa:c4:9f:9b:3d:81: 32:89:e4:8d:db:81:94:56:12:38:e0:11:6c:4c:0e:ec:4f:d7: 4f:df:80:e2:f3:5c:ae:c4:f7:bc:66:c3:02:a2:10:bb:38:55: 00:d9:c2:8e:71:45:8d:27:8e:68:bf:35:77:83:13:1a:a1:f2: 33:7f:18:25:1b:bc:b6:0f:7a:2d:03:f4:95:7a:56:18:c9:46: 3a:0a:e5:65:04:31:84:89:ca:f5:75:e5:30:67:ec:13:71:37: 33:03:6b:28:0f:d1:a1:22:a6:bf:ac:7f:2f:9f:83:9f:1f:92: f4:c7:80:ff:cb:e1:25:bc:78:67:ab:0a:13:f3:48:2c:d6:ff: bb:b2:25:c1:2c:71:86:ed:e8:8c:11:23:4e:9e:99:84:78:13: 68:0e:d2:a7:38:62:fd:f8:e3:92:ef:3b:62:42:14:d6:4a:0c: 5b:7a:87:d6:fe:0f:e9:5e:64:bd:df:f4:76:6b:de:1d:22:44: 3d:02:06:c9:4f:87:45:67:5c:9a:d0:6d:03:26:4f:a8:2b:c2: 6c:a3:b8:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECb98CBlZgsm5JTyPKjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMDRmNTg2OWY1Njc1ZjY1ZjliMTBjZmY0YjY1Zjc0Zjc2 YmVkMTcwHhcNMjYwMjA5MTEwMTIwWhcNMjYwMjEwMTEwMTIwWjAzMTEwLwYDVQQD EyhmMWE4ZDEwZWQyMGRmYzRkNGVlMmZkNWFlZWYxMDI5YzAwNzkxZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUpOxh6o48Ksp09ZTOwklkzkYN37 CBuqeRIZShYj1xjvG8OzFTZW0APq2YyyDw4ynPoYDY0D6OewUdA4KyGtinLCexJ+ xT5u2wdvnQBSX63I9A7YcH9O9EvforO2QR5P2BBZg4pMRggZdUlgFxuYGxtkt/jF 11JfvNz+1BIQ7cWCYUMQ9UoJcTY/X+LxG4HlakWUa7HRMdf7esPg8j+rkShzKUSR QzIuHomHzhpY1tZ5wYuavYVJ3Lgxens+EKgcPJ3PCeyvdK2yJbBZhPusTYAyM2nu 7nrgajBj/OYs7zrPJ6hC/+FS5q7uMTJBRzX7KpEa5nIQ6nPNID01VoEMMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGo0Q7SDfxNTuL9Wu7xApwAeR9DMB8GA1UdIwQY MBaAFLAE9YafVnX2X5sQz/S2X3T3a+0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUt MmZlY2RkODhlNTc1LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUtMmZlY2RkODhlNTc1 LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7dc4sbE Fnq43nR6nulGl4LInUPimeJ2DTilIKDqz4LslF4C4s3qwESG8kF4cSxi+sSfmz2B MonkjduBlFYSOOARbEwO7E/XT9+A4vNcrsT3vGbDAqIQuzhVANnCjnFFjSeOaL81 d4MTGqHyM38YJRu8tg96LQP0lXpWGMlGOgrlZQQxhInK9XXlMGfsE3E3MwNrKA/R oSKmv6x/L5+Dnx+S9MeA/8vhJbx4Z6sKE/NILNb/u7IlwSxxhu3ojBEjTp6ZhHgT aA7Spzhi/fjjku87YkIU1koMW3qH1v4P6V5kvd/0dmveHSJEPQIGyU+HRWdcmtBt AyZPqCvCbKO4Mw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:15 2026 by rpki-client