This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json) Hash identifier: v4Ul+JP0+QS/D6ElUMfIYSanpS/uMCpaRc4kKTqlUaA= Subject key identifier: 11:C7:95:87:22:5C:78:C9:59:5D:E9:2A:1A:3E:C4:27:2C:1F:DD:ED Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e Certificate serial: 019C41A15465CD6C19313D4141B3953C0E5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft Manifest number: 1097 Signing time: Mon 09 Feb 2026 09:00:17 +0000 Manifest this update: Mon 09 Feb 2026 09:00:17 +0000 Manifest next update: Tue 10 Feb 2026 09:00:17 +0000 Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: NnNMjsSW6gJkAV1TRQP5a0E8Kf/fhnn2EcrbZXlICUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:54:65:cd:6c:19:31:3d:41:41:b3:95:3c:0e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e Validity Not Before: Feb 9 09:00:17 2026 GMT Not After : Feb 10 09:00:17 2026 GMT Subject: CN=11c79587225c78c9595de92a1a3ec4272c1fdded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:17:bb:28:5d:8f:9e:65:0c:ea:c1:27:73: 92:f8:73:4b:76:33:ad:a8:56:f8:9c:82:64:f6:72: 42:5b:d7:63:b3:00:b5:ec:aa:1c:4a:fb:84:09:a3: d5:06:58:ed:c6:fb:ee:f0:d1:c6:08:bc:ef:94:7d: ad:c6:66:bd:bc:46:3e:7c:86:60:3a:50:79:e6:23: e4:d1:46:ca:aa:63:1f:90:05:a8:ee:89:82:fe:28: a5:94:d6:93:8a:da:28:00:f0:43:56:68:b2:ac:78: b3:94:03:84:37:02:ff:e9:20:d4:14:88:3f:90:66: 12:89:41:13:f8:7f:fd:7d:17:f3:76:47:5c:57:cf: 75:53:47:88:c8:e3:b3:9f:82:49:8d:ec:f4:8f:47: a3:b4:65:86:f5:5f:91:e2:1a:e0:02:b6:d4:2a:9f: 87:53:02:37:97:b3:de:c0:2b:8b:1c:d0:d1:5c:80: a6:61:05:29:b1:01:12:18:d0:ab:d4:60:f2:c3:73: 71:90:9d:7f:9f:95:76:ae:ad:1f:e6:5b:27:f6:5d: 97:11:eb:72:9b:d9:28:5f:00:67:28:67:4e:4f:12: 52:4c:8b:3d:53:30:bd:4e:a3:1c:92:65:bc:94:b2: 0f:82:45:e9:9f:3f:6e:ef:3c:06:bf:05:30:29:d6: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C7:95:87:22:5C:78:C9:59:5D:E9:2A:1A:3E:C4:27:2C:1F:DD:ED X509v3 Authority Key Identifier: keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a4:85:c8:0a:b3:c4:22:6d:2f:18:6c:3d:6b:6e:88:0b:65: 97:21:ff:f2:3a:17:3d:27:22:73:38:a4:3b:25:13:7e:b1:91: 8d:51:e8:dd:6a:ec:17:df:1c:1d:32:cd:08:a6:f6:31:fd:f5: c4:2c:bf:c5:c1:4f:aa:29:53:3e:15:4d:5e:d9:9c:1b:31:6b: 83:d6:1c:ca:6e:39:e0:ab:8a:96:2b:c6:42:90:62:1e:2e:9d: df:28:3f:17:67:4d:88:b7:d3:9a:44:75:1d:d7:a0:3c:d3:66: 44:75:88:a4:0c:b1:7c:d9:13:33:bb:1a:5b:6c:0d:ec:7b:c9: f1:97:ed:ed:46:93:eb:ce:b1:bd:e3:6f:40:c7:a4:58:ff:b5: d0:0b:ba:60:3c:71:e5:56:16:4c:71:0a:56:a6:dd:68:de:4b: a7:07:fa:6b:f2:c2:91:ba:6c:a9:f6:3d:d7:61:55:0b:9a:ad: b5:53:87:37:36:8f:a1:e2:f6:ab:e7:06:ce:97:f3:75:72:e6: 40:55:ae:bb:4a:8a:d6:0b:5f:f3:81:c2:5f:83:99:55:29:5d: 70:15:ef:e9:82:97:7f:19:19:ad:a9:71:42:62:c3:e6:a3:48: 4e:a3:06:2f:17:5c:66:b8:f8:39:2e:5e:d3:f4:fe:51:63:0d: 00:69:63:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVRlzWwZMT1BQbOVPA5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMzgxYmFhMGEwYWRkMzJhOWY5NDE0ZjliMmM5YTVhMzIy NTM0MmUwHhcNMjYwMjA5MDkwMDE3WhcNMjYwMjEwMDkwMDE3WjAzMTEwLwYDVQQD EygxMWM3OTU4NzIyNWM3OGM5NTk1ZGU5MmExYTNlYzQyNzJjMWZkZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcsXuyhdj55lDOrBJ3OS+HNLdjOt qFb4nIJk9nJCW9djswC17KocSvuECaPVBljtxvvu8NHGCLzvlH2txma9vEY+fIZg OlB55iPk0UbKqmMfkAWo7omC/iillNaTitooAPBDVmiyrHizlAOENwL/6SDUFIg/ kGYSiUET+H/9fRfzdkdcV891U0eIyOOzn4JJjez0j0ejtGWG9V+R4hrgArbUKp+H UwI3l7PewCuLHNDRXICmYQUpsQESGNCr1GDyw3NxkJ1/n5V2rq0f5lsn9l2XEety m9koXwBnKGdOTxJSTIs9UzC9TqMckmW8lLIPgkXpnz9u7zwGvwUwKdb2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHHlYciXHjJWV3pKho+xCcsH93tMB8GA1UdIwQY MBaAFEs4G6oKCt0yqflBT5ssmloyJTQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2Yt NjJmOWY0NDZhZDAxLzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2YtNjJmOWY0NDZhZDAx LzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6SFyAqz xCJtLxhsPWtuiAtllyH/8joXPSciczikOyUTfrGRjVHo3WrsF98cHTLNCKb2Mf31 xCy/xcFPqilTPhVNXtmcGzFrg9Ycym454KuKlivGQpBiHi6d3yg/F2dNiLfTmkR1 HdegPNNmRHWIpAyxfNkTM7saW2wN7HvJ8Zft7UaT686xveNvQMekWP+10Au6YDxx 5VYWTHEKVqbdaN5Lpwf6a/LCkbpsqfY912FVC5qttVOHNzaPoeL2q+cGzpfzdXLm QFWuu0qK1gtf84HCX4OZVSldcBXv6YKXfxkZralxQmLD5qNITqMGLxdcZrj4OS5e 0/T+UWMNAGljZA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:32 2026 by rpki-client