This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json) Hash identifier: X9dL1OTgea08EWAIWmBjrTMkPaOevxv3i7tFbAFAwr8= Subject key identifier: 33:28:50:B2:FF:A7:8E:6A:76:4F:72:50:22:E7:AD:B2:A2:EA:4F:B2 Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e Certificate serial: 019C420FEF37885876096D2D8E0D02AD8D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft Manifest number: 1080 Signing time: Mon 09 Feb 2026 11:01:06 +0000 Manifest this update: Mon 09 Feb 2026 11:01:06 +0000 Manifest next update: Tue 10 Feb 2026 11:01:06 +0000 Files and hashes: 1: KaaC6M28k9adFlDm0sQNkvGUIIw.roa (hash: 2H0fCcqXWjgAUaS5LPxTPaJ+kJQB9vSGvCYiGO5pfEU=) 2: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: OQkJKocAyGmBZycIsS56OpFnhJkDZRzg4c1VfnX4bvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ef:37:88:58:76:09:6d:2d:8e:0d:02:ad:8d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e Validity Not Before: Feb 9 11:01:06 2026 GMT Not After : Feb 10 11:01:06 2026 GMT Subject: CN=332850b2ffa78e6a764f725022e7adb2a2ea4fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:33:f1:5c:da:39:59:bb:b7:d9:95:c5:61:c9: 63:fe:84:33:d9:c0:5a:95:09:29:55:a9:89:51:67: d0:35:56:5a:b1:0b:28:22:f1:af:b5:e5:2e:5f:e8: 08:96:0a:6b:c4:ff:3a:b4:12:3a:61:49:c7:33:88: c1:3c:37:fb:4c:d6:18:15:4a:cb:27:53:c0:1c:d8: 8c:ca:e8:ba:ec:b4:c6:29:32:dd:92:97:91:8d:ec: 58:85:aa:39:1f:29:20:ce:f4:72:39:6a:5b:e7:3b: f8:ff:de:ed:f9:73:49:39:78:bd:f3:36:b8:58:91: e2:6e:c3:f0:2a:68:3d:f2:64:f8:08:c3:6d:f8:2d: 76:d9:88:3f:f9:cf:ed:ef:f0:a2:a5:45:a4:e2:04: 46:7e:51:bd:98:53:9e:0c:bc:af:52:af:89:bd:89: 61:6a:15:3b:26:92:4f:70:77:ed:b8:97:f1:28:d9: 83:47:10:c8:34:66:11:9b:81:10:39:81:23:01:cf: 81:b2:61:6f:b3:6e:fd:c2:6e:bd:a0:6e:c6:87:1f: 66:51:27:65:e6:bf:20:cd:86:a3:c8:a1:e1:d3:7a: 33:75:97:4a:18:73:97:1d:8c:66:a4:16:46:3d:df: c4:80:18:f2:17:da:56:c2:94:7b:2c:8d:93:a4:a1: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:50:B2:FF:A7:8E:6A:76:4F:72:50:22:E7:AD:B2:A2:EA:4F:B2 X509v3 Authority Key Identifier: keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:76:d4:dc:5b:21:4a:89:57:6b:b4:5d:a9:1c:ff:78:5d:65: 8e:90:12:0c:53:74:01:79:32:7c:a5:d5:36:e5:70:3c:58:22: b8:67:2e:da:53:c0:5e:27:23:6e:ba:8b:3e:89:5f:e9:47:3f: b4:c5:3a:10:a9:99:2e:92:f4:70:31:e8:2b:d7:09:6c:f1:a2: 2f:7c:d2:6d:f9:d6:bb:d9:2f:64:74:fb:e1:71:3b:cf:c9:fe: c5:b8:1a:33:34:f2:36:33:9f:9c:60:6d:5a:2c:e3:cc:2b:5a: 9a:b8:41:e8:0f:a4:4f:6c:c7:1b:76:bb:0d:98:88:8d:c0:d1: 2a:1a:40:78:a3:eb:88:1d:07:bd:21:af:3d:4b:e3:65:53:91: 80:4f:43:a2:fd:eb:2f:32:41:83:4f:51:02:dd:d4:6e:07:6e: 79:18:7a:f2:4f:51:d6:c6:6a:4f:e9:79:51:a6:15:6e:15:d2: 84:96:1c:f3:81:88:7a:82:1a:be:84:44:f9:a6:8c:7d:c2:e7: 83:59:9c:62:59:7a:93:4a:e3:c1:19:a5:e1:09:49:61:f0:e5: ee:33:51:6f:66:30:bc:c4:eb:14:5c:87:1a:bf:8c:14:b8:bc: 54:b9:e9:c5:27:34:d0:3b:77:44:40:ce:e0:42:9f:2b:62:c2: 7d:4d:04:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+83iFh2CW0tjg0CrY1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiODlkODdmOGU0MWI1MDgyZDM4OTE2MDE1ZTA1OWU1NmRk MDExNGUwHhcNMjYwMjA5MTEwMTA2WhcNMjYwMjEwMTEwMTA2WjAzMTEwLwYDVQQD EygzMzI4NTBiMmZmYTc4ZTZhNzY0ZjcyNTAyMmU3YWRiMmEyZWE0ZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zPxXNo5Wbu32ZXFYclj/oQz2cBa lQkpVamJUWfQNVZasQsoIvGvteUuX+gIlgprxP86tBI6YUnHM4jBPDf7TNYYFUrL J1PAHNiMyui67LTGKTLdkpeRjexYhao5HykgzvRyOWpb5zv4/97t+XNJOXi98za4 WJHibsPwKmg98mT4CMNt+C122Yg/+c/t7/CipUWk4gRGflG9mFOeDLyvUq+JvYlh ahU7JpJPcHftuJfxKNmDRxDINGYRm4EQOYEjAc+BsmFvs279wm69oG7Ghx9mUSdl 5r8gzYajyKHh03ozdZdKGHOXHYxmpBZGPd/EgBjyF9pWwpR7LI2TpKHKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMoULL/p45qdk9yUCLnrbKi6k+yMB8GA1UdIwQY MBaAFEuJ2H+OQbUILTiRYBXgWeVt0BFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4Mzgt NjQyZGM5MTI3NjgwLzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3Njgw LzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnbU3Fsh SolXa7RdqRz/eF1ljpASDFN0AXkyfKXVNuVwPFgiuGcu2lPAXicjbrqLPolf6Uc/ tMU6EKmZLpL0cDHoK9cJbPGiL3zSbfnWu9kvZHT74XE7z8n+xbgaMzTyNjOfnGBt WizjzCtamrhB6A+kT2zHG3a7DZiIjcDRKhpAeKPriB0HvSGvPUvjZVORgE9Dov3r LzJBg09RAt3UbgdueRh68k9R1sZqT+l5UaYVbhXShJYc84GIeoIavoRE+aaMfcLn g1mcYll6k0rjwRml4QlJYfDl7jNRb2YwvMTrFFyHGr+MFLi8VLnpxSc00Dt3REDO 4EKfK2LCfU0EZg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:56 2026 by rpki-client