This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json) Hash identifier: 3O34U68UD8KlHI6wUEdCDO0/rLnYKThpRUEiJ4VoNj4= Subject key identifier: EA:9E:CB:66:9A:47:2E:53:0B:88:14:B5:65:BA:93:50:5B:19:A7:8C Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Certificate serial: 019C427D125AAA4D0775E600877331760455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft Manifest number: 08A1 Signing time: Mon 09 Feb 2026 13:00:18 +0000 Manifest this update: Mon 09 Feb 2026 13:00:18 +0000 Manifest next update: Tue 10 Feb 2026 13:00:18 +0000 Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: QJlaMTC0Odj/EPpiLE6+Uow2osdL1JkQXnzlQi/nBIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:12:5a:aa:4d:07:75:e6:00:87:73:31:76:04:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Validity Not Before: Feb 9 13:00:18 2026 GMT Not After : Feb 10 13:00:18 2026 GMT Subject: CN=ea9ecb669a472e530b8814b565ba93505b19a78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:f0:c3:e1:05:61:9c:c1:f7:09:59:aa:0b: 30:70:1f:cc:f8:9f:83:6c:4d:2d:01:e5:17:0d:fe: 19:5b:e5:a3:eb:02:37:4a:5c:f2:ef:20:a5:82:7a: e0:bc:fc:de:64:11:13:26:0e:ae:46:bf:ee:bf:a1: 02:ff:7c:fd:20:7d:f5:7d:30:89:2d:f2:90:a5:2e: 2e:7b:2a:3e:3e:f3:ea:4d:79:e7:90:1b:ec:8d:4e: 47:1f:07:05:3a:c5:45:20:a1:39:17:a4:f2:b9:86: fd:73:a7:ba:7c:55:d6:31:80:ce:38:c4:41:b4:05: c5:57:58:67:d8:2a:30:15:e0:35:1a:8a:0e:53:44: 53:2c:bd:d7:b2:31:ca:be:08:fd:8e:36:16:c1:0b: 1b:d5:20:9c:04:a8:74:0c:2f:5b:18:7c:a2:c9:f2: b2:8e:9b:c3:45:00:52:64:7a:f6:3e:e8:62:92:07: 28:3d:20:e9:63:89:8f:4a:5c:0c:91:d7:03:fb:d5: 4a:29:4e:88:b7:fd:28:b7:73:2e:20:ba:09:ba:d0: 31:b3:eb:bd:09:0b:05:18:b8:21:71:f8:5d:f7:c4: 31:2a:79:d7:6f:3a:1e:d2:7c:3a:86:46:4c:03:16: f2:60:26:f7:f0:e8:41:2d:2b:0e:78:83:44:9e:52: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:CB:66:9A:47:2E:53:0B:88:14:B5:65:BA:93:50:5B:19:A7:8C X509v3 Authority Key Identifier: keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6b:71:b0:de:27:57:bf:13:c1:9d:49:5a:be:ac:7b:b8:55: 08:70:4c:7d:e8:c7:f6:ae:de:8d:c9:22:b0:47:dc:4e:27:ed: 51:3d:24:2a:06:ec:73:99:4f:09:cf:4a:70:71:b8:e1:bb:28: a6:30:02:e1:03:87:73:42:63:b1:fd:40:75:50:9b:9b:33:9a: ea:c4:a4:3d:4f:a2:c8:b3:b5:0d:cc:7b:c9:a1:22:6b:58:a5: cf:f5:78:ea:0b:60:c0:49:57:e4:b4:fa:c2:66:fd:54:7c:c1: 75:fc:88:bf:d4:24:35:c1:15:1f:9d:82:d6:36:e3:8a:7a:88: 5c:c5:45:ca:2f:a5:a1:2f:50:85:20:46:e9:46:8d:b4:4c:09: 62:ee:7a:52:b4:57:73:ed:2d:e2:75:65:fa:ed:98:9f:dc:9f: b8:25:d3:9b:bd:59:19:14:66:4e:98:2d:46:ee:ae:49:49:57: bd:77:91:ee:df:d8:6b:a1:94:07:67:8e:e3:46:97:a6:e7:b2: 5e:3b:01:08:3e:37:48:16:c4:f2:42:77:85:e6:f4:a6:48:ba: fe:ea:e3:9b:05:3c:7a:ba:a3:cb:cb:5f:e1:e1:8a:3a:81:37: f2:e8:09:3d:62:d8:51:fc:ff:54:fc:0c:58:cf:ec:af:eb:45: 2b:a6:a7:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfRJaqk0HdeYAh3MxdgRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYWUxNGU4NjNjMWIxNWExZWEyZTQ5YTJlYjUwNDg1M2Y3 NWI2YmQwHhcNMjYwMjA5MTMwMDE4WhcNMjYwMjEwMTMwMDE4WjAzMTEwLwYDVQQD EyhlYTllY2I2NjlhNDcyZTUzMGI4ODE0YjU2NWJhOTM1MDViMTlhNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU7ww+EFYZzB9wlZqgswcB/M+J+D bE0tAeUXDf4ZW+Wj6wI3Slzy7yClgnrgvPzeZBETJg6uRr/uv6EC/3z9IH31fTCJ LfKQpS4ueyo+PvPqTXnnkBvsjU5HHwcFOsVFIKE5F6TyuYb9c6e6fFXWMYDOOMRB tAXFV1hn2CowFeA1GooOU0RTLL3XsjHKvgj9jjYWwQsb1SCcBKh0DC9bGHyiyfKy jpvDRQBSZHr2PuhikgcoPSDpY4mPSlwMkdcD+9VKKU6It/0ot3MuILoJutAxs+u9 CQsFGLghcfhd98QxKnnXbzoe0nw6hkZMAxbyYCb38OhBLSsOeINEnlLE2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqey2aaRy5TC4gUtWW6k1BbGaeMMB8GA1UdIwQY MBaAFOCuFOhjwbFaHqLkmi61BIU/dba9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYt Yzc5MDVmYjM4NmE3LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYtYzc5MDVmYjM4NmE3 LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWtxsN4n V78TwZ1JWr6se7hVCHBMfejH9q7ejckisEfcTiftUT0kKgbsc5lPCc9KcHG44bso pjAC4QOHc0Jjsf1AdVCbmzOa6sSkPU+iyLO1Dcx7yaEia1ilz/V46gtgwElX5LT6 wmb9VHzBdfyIv9QkNcEVH52C1jbjinqIXMVFyi+loS9QhSBG6UaNtEwJYu56UrRX c+0t4nVl+u2Yn9yfuCXTm71ZGRRmTpgtRu6uSUlXvXeR7t/Ya6GUB2eO40aXpuey XjsBCD43SBbE8kJ3heb0pki6/urjmwU8erqjy8tf4eGKOoE38ugJPWLYUfz/VPwM WM/sr+tFK6an/A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:51 2026 by rpki-client