This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft File: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json) Hash identifier: rvRwrk5SIGwZ5RomBpAYinwrc1M49ZQPDAmMkgwXz8Q= Subject key identifier: FD:9C:6B:45:85:37:46:EA:CD:B7:BE:5E:27:39:C8:38:49:17:17:3C Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46 Certificate issuer: /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546 Certificate serial: 019C4321D4CB0F3D04635CF666000FBEA329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft Manifest number: 029C Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: 6izTQHYsibp8aQH82C60RBzPktX4BlsmMiFH39YSfkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d4:cb:0f:3d:04:63:5c:f6:66:00:0f:be:a3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546 Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=fd9c6b45853746eacdb7be5e2739c8384917173c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:ac:70:6b:da:1c:96:78:b8:98:fe:81:e4: 34:61:07:64:32:7c:68:b8:bf:5b:5f:c9:7e:a9:3f: 3c:bf:da:35:5b:a4:28:bd:83:70:1b:8e:77:6b:2a: fa:cd:42:5a:bd:12:05:df:eb:71:bc:4d:d2:44:d3: bd:8d:4c:06:9d:37:15:37:b6:5a:16:92:2d:18:ac: cf:01:9d:59:f2:34:27:f1:e9:1b:0a:3d:da:74:50: 7e:a9:84:fc:7f:19:9a:7c:d7:30:48:9f:96:ca:06: 9e:62:de:8e:94:bf:76:ac:91:32:9a:39:6d:72:21: 23:5b:8b:68:9a:1d:68:6c:e8:94:31:12:0e:3a:99: 65:5d:21:6f:f9:13:de:62:fa:b5:1d:08:2e:aa:81: 42:40:91:3e:2e:18:b2:d3:ce:d6:8b:06:86:dc:6f: da:0b:dd:cc:3e:4f:a6:9e:4a:46:69:00:42:56:3f: b1:46:cc:28:ac:08:f4:96:f9:73:03:77:b0:c5:9d: a3:9b:83:d4:4b:10:f5:a7:03:69:70:04:9a:e6:07: 01:2f:42:ab:bb:c7:d0:3c:60:3e:7a:39:be:40:5e: 7f:c4:4d:60:e8:63:a1:2e:cc:6b:cd:14:7d:37:d0: a0:83:e2:43:4b:f9:6c:63:7e:44:45:e6:b9:bb:75: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9C:6B:45:85:37:46:EA:CD:B7:BE:5E:27:39:C8:38:49:17:17:3C X509v3 Authority Key Identifier: keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2a:d2:3f:d9:11:39:31:bb:3e:b9:40:c7:44:54:ee:fd:7b: 4d:4d:b0:b7:7b:98:73:06:c5:66:d4:e4:f4:04:2d:85:4f:90: 3e:da:ce:a7:4d:2c:ee:fd:67:02:04:6a:e7:4a:5b:ae:d3:09: d0:d7:e1:4b:61:6c:f0:d0:ed:33:7c:d5:86:dc:0e:2a:06:a8: 55:b5:3f:e5:f6:60:2c:be:95:60:0b:54:b8:f0:36:3b:d4:be: 01:4d:e3:7c:0f:c5:ce:7b:5a:c0:59:a9:1a:26:a7:56:96:b4: ef:42:6c:d5:12:a3:9b:bb:d0:a1:64:a5:23:99:78:c4:2e:f7: c1:9d:c9:0e:27:54:b1:dd:22:d1:16:7a:45:41:2e:83:f5:97: 79:b2:fa:8c:5f:50:c8:96:bf:7d:97:5b:c1:92:f4:f5:b5:36: 6b:75:22:cf:a5:5d:d8:f2:a8:56:e4:af:46:67:1b:f0:02:76: 5a:cb:f8:2a:b5:aa:58:da:5e:f0:bc:dc:dd:66:74:27:7d:c7: b7:ea:1c:17:0d:93:cc:a4:54:f1:43:75:9d:d7:2a:ff:4f:8b: 1b:9a:92:36:b0:51:23:2d:e7:94:3c:cc:b7:1d:b4:ea:66:ab: 8b:74:e5:d0:1f:89:fd:80:38:9c:ef:76:af:04:80:4d:ba:ee: 72:6f:9b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdTLDz0EY1z2ZgAPvqMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZmY0YzRlMjM4MTA2ZGM1ZjI5NmUyNmE5Y2VjZjNjNGE0 MzU1NDYwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD EyhmZDljNmI0NTg1Mzc0NmVhY2RiN2JlNWUyNzM5YzgzODQ5MTcxNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrascGvaHJZ4uJj+geQ0YQdkMnxo uL9bX8l+qT88v9o1W6QovYNwG453ayr6zUJavRIF3+txvE3SRNO9jUwGnTcVN7Za FpItGKzPAZ1Z8jQn8ekbCj3adFB+qYT8fxmafNcwSJ+WygaeYt6OlL92rJEymjlt ciEjW4tomh1obOiUMRIOOpllXSFv+RPeYvq1HQguqoFCQJE+Lhiy087WiwaG3G/a C93MPk+mnkpGaQBCVj+xRsworAj0lvlzA3ewxZ2jm4PUSxD1pwNpcASa5gcBL0Kr u8fQPGA+ejm+QF5/xE1g6GOhLsxrzRR9N9Cgg+JDS/lsY35ERea5u3XRoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2ca0WFN0bqzbe+Xic5yDhJFxc8MB8GA1UdIwQY MBaAFOL/TE4jgQbcXyluJqnOzzxKQ1VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3Yzkt MjNlZjZjZWU1ZWRmLzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3YzktMjNlZjZjZWU1ZWRm LzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESrSP9kR OTG7PrlAx0RU7v17TU2wt3uYcwbFZtTk9AQthU+QPtrOp00s7v1nAgRq50pbrtMJ 0NfhS2Fs8NDtM3zVhtwOKgaoVbU/5fZgLL6VYAtUuPA2O9S+AU3jfA/FzntawFmp GianVpa070Js1RKjm7vQoWSlI5l4xC73wZ3JDidUsd0i0RZ6RUEug/WXebL6jF9Q yJa/fZdbwZL09bU2a3Uiz6Vd2PKoVuSvRmcb8AJ2Wsv4KrWqWNpe8Lzc3WZ0J33H t+ocFw2TzKRU8UN1ndcq/0+LG5qSNrBRIy3nlDzMtx206mari3Tl0B+J/YA4nO92 rwSATbrucm+bIA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:07 2026 by rpki-client