This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json) Hash identifier: Xx957PLx2pCkKk8CzP32AgAEY1A4poG0czpkH9IXdXk= Subject key identifier: 23:58:76:B8:50:6B:10:22:2E:D3:90:24:14:27:BE:F0:A3:73:C7:E8 Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Certificate serial: 019C43229D62098550C319632E454B0E90B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft Manifest number: 15CC Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: S3KX6OlVhBqyKvOKGAagGRN4BhmSATyRIjg4SFCgc6M=) 2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9d:62:09:85:50:c3:19:63:2e:45:4b:0e:90:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=235876b8506b10222ed390241427bef0a373c7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:be:43:91:32:c4:bf:4d:9d:70:9f:9d:c6: 3f:62:0a:8c:7d:e5:1f:5a:2d:81:ec:e4:9a:b7:63: 9b:0b:f0:ce:d7:f7:0a:f6:2d:1b:ba:ad:aa:0b:c5: f3:7e:35:5d:e2:7d:7e:10:f5:23:49:21:6b:f2:e2: dd:60:56:6e:a4:85:96:05:a9:8d:71:0c:48:b8:9a: 19:54:e4:32:e0:00:db:8a:29:4d:48:b9:d0:1e:d5: c5:56:5a:0a:60:f8:46:14:11:7b:2c:0d:f0:62:0a: 3e:7d:a5:39:c9:2e:3c:26:97:dd:cb:bc:7e:c3:ef: 11:46:1c:8c:78:a3:86:2e:55:bc:b9:9b:e7:2d:44: b4:56:4d:cd:b2:a1:6f:d9:c8:1e:e5:cb:25:bd:5a: 49:5b:1f:fa:ce:d7:76:86:5f:5d:f7:f0:88:aa:9e: 26:59:16:7c:f2:d8:73:7f:8f:89:e3:e3:ae:ae:ea: 9c:7a:14:29:b2:54:44:f7:d4:2d:eb:f0:33:5a:71: 92:ac:24:9b:ce:58:af:17:24:bb:44:92:20:65:de: 87:83:ff:08:5a:bd:a9:ef:d3:31:34:83:ad:5d:4d: 2b:38:cd:e4:30:f9:15:9a:52:1e:85:f9:0a:7a:da: 42:64:92:68:07:d3:2a:e8:7c:17:70:cb:1c:db:3e: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:76:B8:50:6B:10:22:2E:D3:90:24:14:27:BE:F0:A3:73:C7:E8 X509v3 Authority Key Identifier: keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:14:09:f4:8f:70:d5:7d:4d:26:7f:be:35:9c:72:47:9b:35: 96:d2:e1:2c:49:28:fa:a5:9b:58:ef:f0:5d:e7:17:95:5b:c3: 82:ab:70:5b:f6:b6:f3:96:0f:87:a5:64:0a:29:4d:ce:e4:90: ca:f9:40:12:a3:ec:b4:d2:99:4f:bf:54:c3:6a:2d:8f:a1:c6: 0c:e8:9e:da:37:73:d8:a2:0a:ac:0a:7b:71:87:24:1e:a3:55: bb:16:83:1c:32:2d:30:cb:2c:74:dc:99:79:1d:06:23:69:bf: d4:2d:32:73:a4:6d:21:de:93:ba:c9:51:da:8d:ae:cd:b5:82: 1e:3a:1b:6e:f1:f3:f5:ce:1d:e3:16:c9:4f:34:e4:14:d3:16: 7d:cc:d5:f1:fb:68:fb:05:c5:9f:40:bf:a7:a1:22:f3:5f:94: 7c:2c:e2:47:4b:32:f3:94:63:d1:41:cf:78:05:d4:60:46:17: f6:ce:b3:7f:79:47:02:e1:c3:a5:b0:7b:71:8c:4f:6d:4f:09: d8:22:97:3e:63:b5:39:45:7d:c5:f4:95:ab:5d:1f:8b:34:e2: ec:a8:59:e4:f7:7b:ec:84:14:1d:fd:32:a1:e1:57:13:0b:8e: 29:0b:4f:9b:03:4f:c8:7d:c2:b2:71:46:2d:43:8f:8c:5a:e9: 1f:40:a8:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIp1iCYVQwxljLkVLDpC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw OWVkMjcwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD EygyMzU4NzZiODUwNmIxMDIyMmVkMzkwMjQxNDI3YmVmMGEzNzNjN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEu+Q5EyxL9NnXCfncY/YgqMfeUf Wi2B7OSat2ObC/DO1/cK9i0buq2qC8XzfjVd4n1+EPUjSSFr8uLdYFZupIWWBamN cQxIuJoZVOQy4ADbiilNSLnQHtXFVloKYPhGFBF7LA3wYgo+faU5yS48Jpfdy7x+ w+8RRhyMeKOGLlW8uZvnLUS0Vk3NsqFv2cge5cslvVpJWx/6ztd2hl9d9/CIqp4m WRZ88thzf4+J4+OuruqcehQpslRE99Qt6/AzWnGSrCSbzlivFyS7RJIgZd6Hg/8I Wr2p79MxNIOtXU0rOM3kMPkVmlIehfkKetpCZJJoB9Mq6HwXcMsc2z5H4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNYdrhQaxAiLtOQJBQnvvCjc8foMB8GA1UdIwQY MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRQJ9I9w 1X1NJn++NZxyR5s1ltLhLEko+qWbWO/wXecXlVvDgqtwW/a285YPh6VkCilNzuSQ yvlAEqPstNKZT79Uw2otj6HGDOie2jdz2KIKrAp7cYckHqNVuxaDHDItMMssdNyZ eR0GI2m/1C0yc6RtId6TuslR2o2uzbWCHjobbvHz9c4d4xbJTzTkFNMWfczV8fto +wXFn0C/p6Ei81+UfCziR0sy85Rj0UHPeAXUYEYX9s6zf3lHAuHDpbB7cYxPbU8J 2CKXPmO1OUV9xfSVq10fizTi7KhZ5Pd77IQUHf0yoeFXEwuOKQtPmwNPyH3CsnFG LUOPjFrpH0CoXg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:56 2026 by rpki-client