This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json) Hash identifier: B6xPRlLyqI4Yytjn9t3INCYDM9fEsG7sQsx3HJkTCi8= Subject key identifier: 82:64:68:86:36:91:6E:D1:F0:EF:F7:5D:22:AE:07:0A:30:96:D9:F9 Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057 Certificate serial: 019C41A184CA295FDDAB6EC51E77953CC94F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 09:00:30 +0000 Manifest this update: Mon 09 Feb 2026 09:00:30 +0000 Manifest next update: Tue 10 Feb 2026 09:00:30 +0000 Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: 0HlJ3dYgRPjbAWxGhPAwrSZ3HgJIVMP6CmMn5wnr4eU=) 2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:84:ca:29:5f:dd:ab:6e:c5:1e:77:95:3c:c9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2ea593464858e293952345cf4e97792c8811057 Validity Not Before: Feb 9 09:00:30 2026 GMT Not After : Feb 10 09:00:30 2026 GMT Subject: CN=8264688636916ed1f0eff75d22ae070a3096d9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:36:58:e5:93:e8:db:12:e8:06:44:ad:0f: 26:72:92:0b:01:9e:d5:aa:fc:9b:57:9b:a7:d5:53: cd:99:cf:1b:c9:6e:07:fd:9e:ce:6f:cd:f8:e8:8a: 9c:40:8e:f0:a9:28:5d:68:8a:69:ff:34:45:ca:b8: a2:93:d5:d4:f6:98:1f:f8:38:ef:7b:c0:35:bd:77: b7:34:30:c1:22:17:36:4f:88:77:70:d3:50:d1:53: f5:c2:e9:ca:d3:50:74:64:60:d5:bb:3e:cf:24:45: 62:da:ad:4b:66:69:9c:4c:8d:a7:45:cb:74:0b:ae: 2f:0b:3b:4b:af:0c:d0:7f:55:e5:2d:f3:0c:90:fb: 36:8c:b1:f9:34:aa:3d:f9:66:63:a0:e5:79:7c:0e: 45:ed:a4:32:da:0d:b7:c3:2d:7f:69:1d:a9:00:68: e5:f6:6d:6d:ae:e8:d7:e6:bf:88:e1:38:d8:76:4e: db:97:61:6a:21:43:fd:68:02:af:51:62:b7:d3:c9: 38:fd:71:34:a6:c9:19:7a:a5:94:93:44:97:37:fb: 2b:31:d4:d7:b3:90:28:e6:43:7a:ea:44:74:30:45: 42:b3:17:65:4a:6f:17:51:48:d1:a8:8e:7c:5c:c2: 20:63:05:e2:b1:a4:cf:9d:9e:6a:aa:87:b2:9f:c0: 28:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:68:86:36:91:6E:D1:F0:EF:F7:5D:22:AE:07:0A:30:96:D9:F9 X509v3 Authority Key Identifier: keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5d:16:8a:ea:70:b9:8d:c9:e0:a0:ff:8d:a8:02:cc:fa:91: 03:92:d8:ec:d8:b6:e7:44:48:f4:87:65:7d:ee:da:8a:04:88: a6:9a:02:0d:46:2f:fa:04:3b:ea:19:ee:e6:41:64:73:09:8a: cc:21:13:fb:39:a0:83:35:da:4f:8d:22:c6:43:ea:b0:2e:01: 21:9c:c3:75:78:13:41:71:91:a0:44:f1:e0:e5:17:b6:5c:0a: 16:4e:90:3b:b2:2a:f1:5e:14:4d:02:13:f5:77:e9:38:84:1d: 50:5e:f3:ec:88:a5:53:c0:3e:d5:25:ec:7f:9b:ae:44:f5:b4: 42:53:a5:de:bf:55:3d:ba:42:5b:ef:15:27:87:49:e0:96:f6: 54:f7:d9:36:e8:a9:40:f6:ec:40:18:d2:b9:de:38:d3:a4:86: 13:27:7c:b9:38:0b:c1:f3:67:8e:21:9e:cc:7d:d1:4c:08:67: ec:31:64:71:75:37:b3:5b:32:64:7a:e9:c1:08:de:23:7d:20: e9:b3:ee:d2:8f:94:8a:ba:1d:d1:cc:1d:c2:ac:22:9e:54:d9: 2e:93:b4:18:98:2b:c8:e1:dd:40:35:a3:d3:35:31:61:58:9f: 0f:59:32:b4:a8:e7:75:8a:1f:55:08:7f:4d:57:80:d5:56:39: 0a:c3:0d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYTKKV/dq27FHneVPMlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4 MTEwNTcwHhcNMjYwMjA5MDkwMDMwWhcNMjYwMjEwMDkwMDMwWjAzMTEwLwYDVQQD Eyg4MjY0Njg4NjM2OTE2ZWQxZjBlZmY3NWQyMmFlMDcwYTMwOTZkOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXM2WOWT6NsS6AZErQ8mcpILAZ7V qvybV5un1VPNmc8byW4H/Z7Ob8346IqcQI7wqShdaIpp/zRFyriik9XU9pgf+Djv e8A1vXe3NDDBIhc2T4h3cNNQ0VP1wunK01B0ZGDVuz7PJEVi2q1LZmmcTI2nRct0 C64vCztLrwzQf1XlLfMMkPs2jLH5NKo9+WZjoOV5fA5F7aQy2g23wy1/aR2pAGjl 9m1trujX5r+I4TjYdk7bl2FqIUP9aAKvUWK308k4/XE0pskZeqWUk0SXN/srMdTX s5Ao5kN66kR0MEVCsxdlSm8XUUjRqI58XMIgYwXisaTPnZ5qqoeyn8AoXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJkaIY2kW7R8O/3XSKuBwowltn5MB8GA1UdIwQY MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1 LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV0Wiupw uY3J4KD/jagCzPqRA5LY7Ni250RI9Idlfe7aigSIppoCDUYv+gQ76hnu5kFkcwmK zCET+zmggzXaT40ixkPqsC4BIZzDdXgTQXGRoETx4OUXtlwKFk6QO7Iq8V4UTQIT 9XfpOIQdUF7z7IilU8A+1SXsf5uuRPW0QlOl3r9VPbpCW+8VJ4dJ4Jb2VPfZNuip QPbsQBjSud4406SGEyd8uTgLwfNnjiGezH3RTAhn7DFkcXU3s1syZHrpwQjeI30g 6bPu0o+Uirod0cwdwqwinlTZLpO0GJgryOHdQDWj0zUxYVifD1kytKjndYofVQh/ TVeA1VY5CsMNaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:50 2026 by rpki-client