This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json) Hash identifier: Uqv97X2ts3vTJrc29d69rC5K25EVeBC1pbgGmA40KXg= Subject key identifier: 64:CA:F6:36:D3:F4:4D:00:02:BB:BC:4C:0C:D0:98:B5:3D:29:0D:47 Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f Certificate serial: 019C427D6BE146FA33479006A1A8225C6613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft Manifest number: 0A4E Signing time: Mon 09 Feb 2026 13:00:41 +0000 Manifest this update: Mon 09 Feb 2026 13:00:41 +0000 Manifest next update: Tue 10 Feb 2026 13:00:41 +0000 Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: X4TSSIHIZPHIa8U8t2dNYvML+DM8OpnMhxciWePteLk=) 2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:6b:e1:46:fa:33:47:90:06:a1:a8:22:5c:66:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f Validity Not Before: Feb 9 13:00:41 2026 GMT Not After : Feb 10 13:00:41 2026 GMT Subject: CN=64caf636d3f44d0002bbbc4c0cd098b53d290d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:21:59:b9:63:76:c3:69:fd:8f:6b:8e:43: cf:08:2e:dd:86:c0:6d:c0:7d:56:cc:6b:c7:79:5d: fe:db:ee:f0:d0:99:74:fc:81:ac:a9:91:36:ce:8f: cc:2e:b1:06:df:bc:ef:4a:d3:57:dd:91:53:ba:2e: d5:5c:29:18:b5:16:0e:73:82:4a:30:68:74:a9:79: bb:aa:44:7e:a0:ae:f4:05:85:72:cc:33:a4:76:7e: 88:c2:b8:0f:f2:42:d0:a6:a5:bf:52:b4:50:b6:ad: e4:09:83:b1:1e:71:e5:2e:72:32:8e:e7:5c:b4:d4: fc:6b:11:8b:7a:ff:de:46:53:f8:05:68:ab:b1:25: 04:d0:39:1b:26:07:98:28:23:02:0e:8e:c5:bd:0a: be:6e:23:29:df:a2:f7:1f:0e:f9:03:8e:cf:08:fa: 66:9c:75:c6:4a:66:f8:4a:21:4c:ab:b8:f5:1e:4c: 24:ca:33:22:2b:ce:1b:04:cf:a0:e4:af:e1:58:02: 55:df:b8:5c:31:ea:fb:d2:ba:c2:4c:7c:17:43:85: 31:73:63:58:8e:5b:5c:aa:80:64:3e:3a:9c:28:c7: a5:64:fd:21:52:ee:de:f7:1a:1c:32:34:63:8a:60: d1:e5:19:0a:f7:23:55:0e:ec:af:7b:da:40:db:2d: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CA:F6:36:D3:F4:4D:00:02:BB:BC:4C:0C:D0:98:B5:3D:29:0D:47 X509v3 Authority Key Identifier: keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fa:78:55:bd:6c:8e:e0:ad:e3:89:a9:80:76:58:11:0e:27: a0:04:27:c1:5e:ab:aa:dd:f6:c1:db:2c:fb:04:f4:44:08:c8: d2:e2:97:ef:7c:b3:b4:87:c8:cc:3c:fd:6e:6e:05:bb:5f:37: b5:ab:c9:00:31:c5:53:95:80:75:d5:02:75:f8:7a:64:81:a0: 71:05:e5:96:5e:ef:97:d3:4e:7b:e0:80:b1:d6:02:c9:13:f3: 35:08:8c:fd:27:50:1a:6e:c8:17:0a:09:28:0c:48:55:00:b5: bd:2f:55:74:e1:14:61:80:bc:0c:a5:5d:b8:9d:f5:9a:23:ec: f2:c5:1d:75:6d:d6:d7:c8:4c:d7:39:90:34:ea:b0:7b:bc:65: e2:8f:38:a9:bb:c4:42:48:53:28:51:ff:7c:5f:a4:75:0f:27: 60:73:bb:f6:52:de:31:69:d1:99:c8:ec:16:05:c1:3d:b9:59: b8:67:10:de:85:5e:73:8c:1b:2b:8e:a5:a8:49:55:5c:1e:7b: 86:cc:40:ac:3e:10:8e:bc:2a:f1:c4:6c:df:5c:05:10:31:b0: 14:8d:c8:64:40:0c:60:dd:80:8b:33:bd:ca:1f:80:d1:84:37: 62:fe:72:28:c1:1e:a5:4b:4a:9b:9a:cf:77:c6:fb:a8:c7:08: f4:e8:ee:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWvhRvozR5AGoagiXGYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx NzkxMmYwHhcNMjYwMjA5MTMwMDQxWhcNMjYwMjEwMTMwMDQxWjAzMTEwLwYDVQQD Eyg2NGNhZjYzNmQzZjQ0ZDAwMDJiYmJjNGMwY2QwOThiNTNkMjkwZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAIhWbljdsNp/Y9rjkPPCC7dhsBt wH1WzGvHeV3+2+7w0Jl0/IGsqZE2zo/MLrEG37zvStNX3ZFTui7VXCkYtRYOc4JK MGh0qXm7qkR+oK70BYVyzDOkdn6IwrgP8kLQpqW/UrRQtq3kCYOxHnHlLnIyjudc tNT8axGLev/eRlP4BWirsSUE0DkbJgeYKCMCDo7FvQq+biMp36L3Hw75A47PCPpm nHXGSmb4SiFMq7j1HkwkyjMiK84bBM+g5K/hWAJV37hcMer70rrCTHwXQ4Uxc2NY jltcqoBkPjqcKMelZP0hUu7e9xocMjRjimDR5RkK9yNVDuyve9pA2y2QCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTK9jbT9E0AAru8TAzQmLU9KQ1HMB8GA1UdIwQY MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvp4Vb1s juCt44mpgHZYEQ4noAQnwV6rqt32wdss+wT0RAjI0uKX73yztIfIzDz9bm4Fu183 tavJADHFU5WAddUCdfh6ZIGgcQXlll7vl9NOe+CAsdYCyRPzNQiM/SdQGm7IFwoJ KAxIVQC1vS9VdOEUYYC8DKVduJ31miPs8sUddW3W18hM1zmQNOqwe7xl4o84qbvE QkhTKFH/fF+kdQ8nYHO79lLeMWnRmcjsFgXBPblZuGcQ3oVec4wbK46lqElVXB57 hsxArD4Qjrwq8cRs31wFEDGwFI3IZEAMYN2AizO9yh+A0YQ3Yv5yKMEepUtKm5rP d8b7qMcI9OjusQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:20 2026 by rpki-client