This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json) Hash identifier: U35WE1dCVW2QKEtaOB+RsFpzzkKuEeAnbiJOJAsLtKw= Subject key identifier: 0D:2C:A0:FD:36:36:76:C5:FA:35:F7:37:DB:D1:06:6F:1B:96:0F:B6 Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b Certificate serial: 019C42EAE25B4C88414D3D1273E94E8566BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft Manifest number: 16DA Signing time: Mon 09 Feb 2026 15:00:15 +0000 Manifest this update: Mon 09 Feb 2026 15:00:15 +0000 Manifest next update: Tue 10 Feb 2026 15:00:15 +0000 Files and hashes: 1: MGecWndx1rC8r0_cF__XvWTIdhY.roa (hash: xMJtrWi1rZ3GmoFWTN/zEzHLjFTmPRigqDi25vDVZzk=) 2: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: R1YiAszeXsAlFvjUtCyR1kqSdN39lCRGTesB4GJczPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:e2:5b:4c:88:41:4d:3d:12:73:e9:4e:85:66:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b Validity Not Before: Feb 9 15:00:15 2026 GMT Not After : Feb 10 15:00:15 2026 GMT Subject: CN=0d2ca0fd363676c5fa35f737dbd1066f1b960fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:41:db:65:d7:12:43:7f:65:44:e5:fe:74:59: 8f:d3:a8:fc:eb:b9:8f:61:ce:03:bc:11:de:82:9f: 35:22:af:3a:33:7e:e1:63:04:c4:b3:d2:b4:60:cc: 03:15:6b:99:95:df:a5:fa:78:fe:4d:b9:46:95:7e: 65:44:e9:c3:07:82:cf:9a:ff:8f:82:36:03:ed:95: 19:09:e5:24:a9:e5:48:89:34:c7:3d:3f:ad:21:f4: 40:39:be:b4:45:7a:b8:dc:d5:69:92:3b:02:e1:00: cf:cd:f3:28:36:56:33:aa:46:9c:d4:f3:fb:48:a7: ff:27:3a:6a:28:45:22:e3:89:e4:5d:26:ab:4e:8a: 42:e5:d9:77:9e:e9:92:42:ef:da:6e:e8:57:3b:a4: b9:dd:cd:0d:54:04:9b:17:d1:f7:f9:66:00:79:1e: 3a:ed:5c:dd:b8:cd:b4:56:f1:af:6c:da:b2:df:2b: 44:8e:e2:eb:43:4a:b6:34:e0:9c:7a:3e:6d:d7:b8: cf:0e:b7:a1:2c:ea:5c:88:e4:f5:36:69:4b:e5:06: 3f:99:5d:95:4e:bd:66:85:1e:87:a4:a4:77:ec:53: eb:2c:e8:56:d5:c7:7d:53:51:c4:a4:f3:96:21:e0: 8f:ac:14:2c:be:08:0a:41:ea:d9:17:df:df:4f:33: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2C:A0:FD:36:36:76:C5:FA:35:F7:37:DB:D1:06:6F:1B:96:0F:B6 X509v3 Authority Key Identifier: keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:44:fe:52:23:09:fa:28:7f:b9:9b:9d:cb:a9:19:a0:b0:c3: 64:e6:df:f7:54:55:8a:cb:2c:85:ad:0b:74:00:65:7b:59:1e: 30:dc:64:e1:5c:8d:cc:8e:90:e2:a9:8b:ae:b8:28:fe:c7:f3: 43:b7:94:f4:55:07:ce:6e:42:d2:f9:54:89:f8:e5:45:ef:47: 8d:b7:88:ce:90:9a:c1:0a:d0:40:c5:03:37:8c:4f:9e:30:80: 11:9f:f5:d3:36:4a:bf:6f:cd:f3:69:9e:28:9e:21:9e:db:2d: d7:1a:0f:53:eb:0a:58:2c:5a:78:7d:21:a3:ab:50:d8:fe:a5: c7:2f:fe:b1:af:4f:05:d8:29:7a:2b:05:fd:c1:22:51:b9:07: b0:26:3f:ee:46:37:cf:b5:4b:9a:ab:0f:4d:23:88:63:57:57: 48:0b:84:d2:b8:8b:95:ab:21:dc:92:37:58:01:7b:53:7a:3c: 60:ca:be:3f:78:e9:05:e4:fa:54:d6:aa:e3:ed:66:83:93:31: e3:1c:a1:5c:87:ca:3d:2c:e3:d3:72:c3:c6:cb:d9:05:2d:e5: 7e:5c:0c:e1:c6:9c:4a:6a:c2:f3:30:ba:00:45:27:4b:0a:97: 36:c7:81:ed:eb:54:df:da:b8:4d:53:19:1c:77:3e:df:22:06: 8e:f1:98:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uJbTIhBTT0Sc+lOhWa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNWQ0NWEyYWJiOTYwZDJiY2U3NThlY2U3MzNiMTI2ZGNh N2U3MWIwHhcNMjYwMjA5MTUwMDE1WhcNMjYwMjEwMTUwMDE1WjAzMTEwLwYDVQQD EygwZDJjYTBmZDM2MzY3NmM1ZmEzNWY3MzdkYmQxMDY2ZjFiOTYwZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0HbZdcSQ39lROX+dFmP06j867mP Yc4DvBHegp81Iq86M37hYwTEs9K0YMwDFWuZld+l+nj+TblGlX5lROnDB4LPmv+P gjYD7ZUZCeUkqeVIiTTHPT+tIfRAOb60RXq43NVpkjsC4QDPzfMoNlYzqkac1PP7 SKf/JzpqKEUi44nkXSarTopC5dl3numSQu/abuhXO6S53c0NVASbF9H3+WYAeR46 7VzduM20VvGvbNqy3ytEjuLrQ0q2NOCcej5t17jPDrehLOpciOT1NmlL5QY/mV2V Tr1mhR6HpKR37FPrLOhW1cd9U1HEpPOWIeCPrBQsvggKQerZF9/fTzMI6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0soP02NnbF+jX3N9vRBm8blg+2MB8GA1UdIwQY MBaAFEtdRaKruWDSvOdY7OczsSbcp+cbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgt ODEwYjlmNWNjNDE1LzEvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgtODEwYjlmNWNjNDE1 LzEvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0T+UiMJ +ih/uZudy6kZoLDDZObf91RVisssha0LdABle1keMNxk4VyNzI6Q4qmLrrgo/sfz Q7eU9FUHzm5C0vlUifjlRe9HjbeIzpCawQrQQMUDN4xPnjCAEZ/10zZKv2/N82me KJ4hntst1xoPU+sKWCxaeH0ho6tQ2P6lxy/+sa9PBdgpeisF/cEiUbkHsCY/7kY3 z7VLmqsPTSOIY1dXSAuE0riLlash3JI3WAF7U3o8YMq+P3jpBeT6VNaq4+1mg5Mx 4xyhXIfKPSzj03LDxsvZBS3lflwM4cacSmrC8zC6AEUnSwqXNseB7etU39q4TVMZ HHc+3yIGjvGYHg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:28 2026 by rpki-client