This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json) Hash identifier: LTWFVjpyeYPwvaPqgd6DrwbLOTXnAHmBv6uuJh82tto= Subject key identifier: 3F:60:28:35:9D:D8:9F:50:7D:5B:74:92:8E:B3:37:BD:C3:F3:EA:B0 Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5 Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5 Certificate serial: 019C4322DCE5699008F98ABE9508EBD15C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft Manifest number: 1003 Signing time: Mon 09 Feb 2026 16:01:24 +0000 Manifest this update: Mon 09 Feb 2026 16:01:24 +0000 Manifest next update: Tue 10 Feb 2026 16:01:24 +0000 Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: K+H9N2VDEIFfrZngfpAYApP23dynbKEUGEyazx91wMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:dc:e5:69:90:08:f9:8a:be:95:08:eb:d1:5c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5 Validity Not Before: Feb 9 16:01:24 2026 GMT Not After : Feb 10 16:01:24 2026 GMT Subject: CN=3f6028359dd89f507d5b74928eb337bdc3f3eab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:1b:82:76:96:f9:9a:d4:e1:fa:c8:25:37: 08:ba:0b:17:2d:59:35:99:6a:f0:5f:1d:1f:d3:3d: 0a:45:18:f7:81:ef:16:54:e7:45:1a:fc:09:38:27: 4d:66:d1:c8:4a:d8:c4:f9:6b:bb:56:64:35:83:f2: 9f:07:2f:84:ee:9d:88:32:30:d4:f8:a3:d9:4a:c5: 0d:3b:1e:a6:10:b4:05:ef:21:ac:5a:85:73:76:0c: 0c:75:f0:07:ae:30:40:c0:7a:0b:71:48:7c:19:bc: 2a:68:fd:1d:f9:5f:4b:f1:43:30:0d:ec:61:2f:d0: cd:90:bd:05:b4:6b:be:9e:8f:f1:af:fd:88:60:1b: 0f:66:bf:0f:b0:5d:9a:61:5c:82:e4:6f:95:be:0d: e1:aa:fb:0e:41:45:c5:09:26:2b:a3:c5:55:11:ed: 79:5b:fa:44:1b:27:71:5d:54:6b:f8:78:0c:ec:cd: 25:6f:a2:f9:a0:80:45:ef:00:de:23:bf:d4:db:c7: 1a:8a:ec:f7:54:f8:bf:70:7d:8b:b7:e0:c1:a3:e9: 38:81:fb:55:cc:c9:d0:1f:fc:17:13:74:af:f0:4c: 2f:00:48:3b:d9:b8:b0:30:25:02:da:42:8e:c8:bb: 60:07:b7:26:7a:0a:17:92:db:63:72:ff:73:6e:ab: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:60:28:35:9D:D8:9F:50:7D:5B:74:92:8E:B3:37:BD:C3:F3:EA:B0 X509v3 Authority Key Identifier: keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ee:52:ff:06:13:8b:2a:8d:23:af:57:4c:2c:54:0a:a8:f3: 14:4a:7d:43:44:21:a7:ce:00:83:48:4e:2c:24:61:db:ba:93: 87:c9:07:eb:76:d4:e4:86:ed:1a:d5:98:a1:54:55:5b:57:d2: 30:11:ca:e7:43:f4:48:10:91:63:ec:31:c6:02:18:53:05:40: dd:65:01:37:a8:a8:f4:c7:03:24:02:9d:e8:46:ae:39:ab:e3: 14:fb:c6:bf:5f:61:c9:40:66:da:b5:87:e3:75:03:87:ed:88: 75:14:ec:df:31:64:e6:3e:b2:d1:90:c9:fc:28:9f:0d:af:d6: b2:08:b5:2e:b7:7b:c7:84:9c:4b:ce:cb:38:4d:44:8f:f8:e6: 6c:03:09:b5:ef:a3:90:98:16:1c:a7:66:d7:a2:47:99:d8:80: 02:f6:7a:a5:c5:c1:81:fc:7b:13:fd:2f:7d:98:29:62:61:ca: b6:d7:a9:ed:bf:2b:0c:e7:a8:ba:d9:2c:c4:57:33:9a:ba:03: ce:e1:fd:3d:96:d7:ec:1e:2b:7b:08:35:db:8f:f3:a7:80:29: 52:fe:00:4b:e4:a3:06:13:b9:4e:a6:ff:0f:51:90:e3:39:12: a1:d6:5e:33:06:6d:87:22:dc:a1:fc:e8:ff:20:a5:81:35:a1: bb:da:25:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItzlaZAI+Yq+lQjr0VwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjBmMzhjZjM2ZmNjOWJjNTEzMjkzNTEyYjQ2YjkxMWVk ZjVhYzUwHhcNMjYwMjA5MTYwMTI0WhcNMjYwMjEwMTYwMTI0WjAzMTEwLwYDVQQD EygzZjYwMjgzNTlkZDg5ZjUwN2Q1Yjc0OTI4ZWIzMzdiZGMzZjNlYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMobgnaW+ZrU4frIJTcIugsXLVk1 mWrwXx0f0z0KRRj3ge8WVOdFGvwJOCdNZtHIStjE+Wu7VmQ1g/KfBy+E7p2IMjDU +KPZSsUNOx6mELQF7yGsWoVzdgwMdfAHrjBAwHoLcUh8GbwqaP0d+V9L8UMwDexh L9DNkL0FtGu+no/xr/2IYBsPZr8PsF2aYVyC5G+Vvg3hqvsOQUXFCSYro8VVEe15 W/pEGydxXVRr+HgM7M0lb6L5oIBF7wDeI7/U28caiuz3VPi/cH2Lt+DBo+k4gftV zMnQH/wXE3Sv8EwvAEg72biwMCUC2kKOyLtgB7cmegoXkttjcv9zbqtEdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9gKDWd2J9QfVt0ko6zN73D8+qwMB8GA1UdIwQY MBaAFEpg84zzb8ybxRMpNRK0a5Ee31rFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2It ZWEyOWMxYTI4YzVkLzEvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2ItZWEyOWMxYTI4YzVk LzEvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe5S/wYT iyqNI69XTCxUCqjzFEp9Q0Qhp84Ag0hOLCRh27qTh8kH63bU5IbtGtWYoVRVW1fS MBHK50P0SBCRY+wxxgIYUwVA3WUBN6io9McDJAKd6EauOavjFPvGv19hyUBm2rWH 43UDh+2IdRTs3zFk5j6y0ZDJ/CifDa/Wsgi1Lrd7x4ScS87LOE1Ej/jmbAMJte+j kJgWHKdm16JHmdiAAvZ6pcXBgfx7E/0vfZgpYmHKttep7b8rDOeoutksxFczmroD zuH9PZbX7B4rewg124/zp4ApUv4AS+SjBhO5Tqb/D1GQ4zkSodZeMwZthyLcofzo /yClgTWhu9olHg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:26 2026 by rpki-client