This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json) Hash identifier: Bbdx00h7z44GW/LhuNTBNNUFoK4kT2LpfdlNdZ3quWk= Subject key identifier: 08:89:CF:71:E0:9A:5E:AB:A8:31:D8:B1:B9:4E:95:B4:C8:62:16:11 Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c Certificate serial: 019C451084F8CE867221ED4D844DB7D320A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft Manifest number: 0EF4 Signing time: Tue 10 Feb 2026 01:00:36 +0000 Manifest this update: Tue 10 Feb 2026 01:00:36 +0000 Manifest next update: Wed 11 Feb 2026 01:00:36 +0000 Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: zoM4YfaxZ/o6IBD/+CI5ouC/SbhjY0IIuX4uc/0H3MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:84:f8:ce:86:72:21:ed:4d:84:4d:b7:d3:20:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c Validity Not Before: Feb 10 01:00:36 2026 GMT Not After : Feb 11 01:00:36 2026 GMT Subject: CN=0889cf71e09a5eaba831d8b1b94e95b4c8621611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:16:20:e2:ee:d0:7f:bf:4a:78:0d:4d:2f: 03:af:09:70:7d:0a:77:1b:cd:cd:ee:fd:d0:a3:74: 21:b9:81:3a:1c:13:c8:fc:15:47:d1:5a:94:a2:5c: 80:68:63:74:e9:f3:64:bc:0d:b7:a5:a0:36:97:ac: 4f:36:de:5a:b8:44:3c:6d:28:d6:50:24:a4:3b:36: 8c:85:68:fa:50:3f:3b:c5:18:6e:fb:71:89:d2:36: a2:b9:09:df:47:f4:e4:54:86:51:0c:1d:68:68:af: ab:43:83:be:e9:36:65:0d:33:d2:f4:b4:66:47:a7: 19:b6:86:31:75:63:e0:4b:3e:07:39:e1:a0:fa:2d: 2c:8e:b0:21:12:c1:54:40:e9:60:01:f4:01:a2:83: c1:ba:da:48:3e:40:0a:94:6c:0f:30:fc:72:75:ac: f3:d1:ce:74:d3:9d:88:f2:d1:f4:e2:85:89:62:3b: bc:d1:74:1a:b9:07:41:15:2e:da:8b:78:dc:10:48: 2d:47:c3:29:83:96:9c:27:d9:66:6d:a9:fc:b5:71: bb:3e:ba:11:db:36:86:d1:d5:44:60:7f:f9:d3:32: eb:4a:f9:6e:a0:57:71:dc:4b:4d:11:4d:c2:6a:45: 0d:5a:a2:8e:ee:c2:79:75:13:5c:0e:5a:c2:b4:22: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:89:CF:71:E0:9A:5E:AB:A8:31:D8:B1:B9:4E:95:B4:C8:62:16:11 X509v3 Authority Key Identifier: keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:20:40:d9:ef:c5:34:2d:41:d2:3b:72:6e:f1:99:5f:9d:64: d2:91:65:15:ee:77:b8:d3:f9:df:6a:ab:67:c2:2c:5c:bc:03: b3:8e:18:82:5c:27:c6:f6:27:60:38:2e:b2:34:22:71:6f:e6: 91:57:42:7b:70:c8:bd:4b:05:75:33:22:2d:61:38:7a:f3:28: 7c:8a:69:11:31:56:09:f3:6e:01:93:88:fb:58:41:de:19:e5: b5:43:85:7d:03:38:95:79:5c:d8:c5:dc:b8:ab:96:ff:0c:5e: a9:a6:02:c1:53:36:ad:62:d3:2a:75:71:88:2d:57:77:5a:55: 2a:29:9c:33:cc:ee:7f:11:0c:b6:e4:a3:00:39:01:01:d7:d6: cc:05:8b:e1:b0:4b:10:d0:8d:c9:26:a8:8e:74:5e:24:c4:5f: 45:e3:d6:02:b1:08:c1:f1:fe:d3:29:af:fd:51:ec:b4:44:b3: 5e:77:6c:f5:f4:70:bc:66:fc:5e:99:10:4d:7c:5c:ab:77:46: a9:96:9b:58:e2:9d:66:03:60:61:b6:b6:27:3a:0e:8d:ff:d0: 3e:e3:03:6b:a3:c0:ad:f2:4e:68:bb:3b:d8:bf:d8:6d:dd:31: 6a:46:53:50:12:bb:8c:19:6d:5d:31:22:04:7c:38:7a:e1:14: 10:b8:30:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEIT4zoZyIe1NhE230yCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MDk1N2Y3OWU2YzI4MTQ2NjQzZjQ5ZDlmZTE3ZmM0ZjE2 Mzc3NmMwHhcNMjYwMjEwMDEwMDM2WhcNMjYwMjExMDEwMDM2WjAzMTEwLwYDVQQD EygwODg5Y2Y3MWUwOWE1ZWFiYTgzMWQ4YjFiOTRlOTViNGM4NjIxNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u8WIOLu0H+/SngNTS8DrwlwfQp3 G83N7v3Qo3QhuYE6HBPI/BVH0VqUolyAaGN06fNkvA23paA2l6xPNt5auEQ8bSjW UCSkOzaMhWj6UD87xRhu+3GJ0jaiuQnfR/TkVIZRDB1oaK+rQ4O+6TZlDTPS9LRm R6cZtoYxdWPgSz4HOeGg+i0sjrAhEsFUQOlgAfQBooPButpIPkAKlGwPMPxydazz 0c50052I8tH04oWJYju80XQauQdBFS7ai3jcEEgtR8Mpg5acJ9lmban8tXG7ProR 2zaG0dVEYH/50zLrSvluoFdx3EtNEU3CakUNWqKO7sJ5dRNcDlrCtCJeDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiJz3Hgml6rqDHYsblOlbTIYhYRMB8GA1UdIwQY MBaAFEkJV/eebCgUZkP0nZ/hf8TxY3dsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1FsWDk1NXNLQlJtUV9TZG4tRl94UEZqZDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81OGZjMzctNTczOC00NGYzLWJkZDUt Njc0M2U1MDI2MjQwLzEvU1FsWDk1NXNLQlJtUV9TZG4tRl94UEZqZDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81OGZjMzctNTczOC00NGYzLWJkZDUtNjc0M2U1MDI2MjQw LzEvU1FsWDk1NXNLQlJtUV9TZG4tRl94UEZqZDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiBA2e/F NC1B0jtybvGZX51k0pFlFe53uNP532qrZ8IsXLwDs44YglwnxvYnYDgusjQicW/m kVdCe3DIvUsFdTMiLWE4evMofIppETFWCfNuAZOI+1hB3hnltUOFfQM4lXlc2MXc uKuW/wxeqaYCwVM2rWLTKnVxiC1Xd1pVKimcM8zufxEMtuSjADkBAdfWzAWL4bBL ENCNySaojnReJMRfRePWArEIwfH+0ymv/VHstESzXnds9fRwvGb8XpkQTXxcq3dG qZabWOKdZgNgYba2JzoOjf/QPuMDa6PArfJOaLs72L/Ybd0xakZTUBK7jBltXTEi BHw4euEUELgwjQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:22:27 2026 by rpki-client