This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json) Hash identifier: zrbU9+wjqXUAg+tv/r50bE5gOdEEJY/ngYiqwPFWvlA= Subject key identifier: 34:33:57:13:56:F3:08:CD:64:B0:6D:8B:97:D3:2E:05:D1:46:54:AF Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6 Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6 Certificate serial: 019C42EBB784F3D81A4BB06A2E0CBB6EF698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 15:01:10 +0000 Manifest this update: Mon 09 Feb 2026 15:01:10 +0000 Manifest next update: Tue 10 Feb 2026 15:01:10 +0000 Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: Bq205e9Hx0zgpnemrzPYYhmQ6Vahw12cXYIvm+Ea51Q=) 2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b7:84:f3:d8:1a:4b:b0:6a:2e:0c:bb:6e:f6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6 Validity Not Before: Feb 9 15:01:10 2026 GMT Not After : Feb 10 15:01:10 2026 GMT Subject: CN=3433571356f308cd64b06d8b97d32e05d14654af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:77:95:86:ea:a3:89:2e:0a:bc:e7:1d:6f: f7:e6:e9:ea:1e:dc:9d:99:5a:82:87:a4:eb:b9:ac: 78:80:1a:5f:83:82:86:1f:de:8d:ae:32:05:33:23: c0:79:8f:56:19:8a:b7:8c:1d:ef:45:6d:27:c7:00: b2:ae:a9:dc:b6:15:82:59:96:31:4d:ce:3d:bc:a2: 1b:27:72:33:49:55:30:1e:2b:bc:3e:7f:46:ae:c4: aa:9d:00:5a:06:32:9d:e0:da:9c:4c:60:65:cb:c6: f5:2e:09:5e:23:fd:50:5e:dc:a7:68:13:bd:15:cd: 7d:93:ef:9f:f4:09:c8:00:42:bd:7b:f3:01:cd:0f: 86:fc:85:fc:63:49:b7:4b:68:23:6f:ae:fd:60:4a: e1:0c:66:1b:30:40:92:36:04:e2:c8:e6:19:b0:d4: 2a:33:a3:53:83:50:cb:f0:61:4d:3a:1f:3f:98:14: fc:69:0e:ec:1e:6a:21:16:4d:aa:1f:9c:4d:52:89: 99:b3:78:74:cb:2b:ba:4f:e2:93:1c:aa:b9:75:e2: 84:4d:c4:1d:38:74:14:57:0d:86:18:ad:ab:68:d3: 47:02:cf:67:09:0f:84:98:20:bc:ca:65:62:89:6f: 12:3b:20:0d:65:2d:8b:5a:ba:e9:b6:0a:19:ba:23: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:57:13:56:F3:08:CD:64:B0:6D:8B:97:D3:2E:05:D1:46:54:AF X509v3 Authority Key Identifier: keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:55:db:a3:b8:c7:90:6a:2e:c0:7e:6b:13:cc:d0:fe:69:df: d1:0d:6f:e2:c0:e4:52:f6:f3:e1:4f:49:47:1d:2c:f2:4b:01: 24:e5:38:f5:67:c1:fa:84:15:b3:a8:7f:de:74:9b:57:b7:48: 9a:97:ab:80:2f:0e:00:20:cc:5b:f7:8e:a3:8b:2c:3b:d9:9d: ea:2c:5b:86:4e:e7:ea:0d:8e:06:2e:14:eb:b5:41:e5:a7:eb: 3f:86:35:43:96:81:2a:00:d9:be:34:3a:55:50:71:0b:20:b4: 9b:70:2e:80:84:39:70:9a:23:e3:b8:cd:16:5d:c7:01:5f:7b: c4:fb:8f:cc:5e:b3:56:58:ab:0b:2a:b9:3d:7a:6a:1c:4b:b1: 74:22:80:b0:60:8e:14:bc:9a:55:f4:17:64:53:1f:45:03:a4: fe:5e:58:24:a0:23:32:2d:d9:16:60:71:b2:a9:99:11:92:7f: 94:09:97:51:83:2b:35:c2:5f:23:14:63:ea:7e:29:6b:db:d8: 16:dc:43:f7:75:81:72:5b:af:c8:b2:9e:80:60:a1:23:c6:c3: f1:69:ea:55:67:0a:23:bd:17:d9:be:6d:26:50:e5:91:3a:56: 1e:b6:9f:f1:a2:d6:9b:37:c7:d0:1e:91:20:ec:a7:42:21:9b: 93:74:81:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67eE89gaS7BqLgy7bvaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTkyYTc4OGE0MTA1N2QyNzc2NGYxNmYzYjFkMmEzZWY2 MzQ1ZDYwHhcNMjYwMjA5MTUwMTEwWhcNMjYwMjEwMTUwMTEwWjAzMTEwLwYDVQQD EygzNDMzNTcxMzU2ZjMwOGNkNjRiMDZkOGI5N2QzMmUwNWQxNDY1NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6F3lYbqo4kuCrznHW/35unqHtyd mVqCh6Truax4gBpfg4KGH96NrjIFMyPAeY9WGYq3jB3vRW0nxwCyrqncthWCWZYx Tc49vKIbJ3IzSVUwHiu8Pn9GrsSqnQBaBjKd4NqcTGBly8b1LgleI/1QXtynaBO9 Fc19k++f9AnIAEK9e/MBzQ+G/IX8Y0m3S2gjb679YErhDGYbMECSNgTiyOYZsNQq M6NTg1DL8GFNOh8/mBT8aQ7sHmohFk2qH5xNUomZs3h0yyu6T+KTHKq5deKETcQd OHQUVw2GGK2raNNHAs9nCQ+EmCC8ymViiW8SOyANZS2LWrrptgoZuiNiuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQzVxNW8wjNZLBti5fTLgXRRlSvMB8GA1UdIwQY MBaAFODpKniKQQV9J3ZPFvOx0qPvY0XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgt YmE1OWZiMmM0NjEwLzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgtYmE1OWZiMmM0NjEw LzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1Xbo7jH kGouwH5rE8zQ/mnf0Q1v4sDkUvbz4U9JRx0s8ksBJOU49WfB+oQVs6h/3nSbV7dI mpergC8OACDMW/eOo4ssO9md6ixbhk7n6g2OBi4U67VB5afrP4Y1Q5aBKgDZvjQ6 VVBxCyC0m3AugIQ5cJoj47jNFl3HAV97xPuPzF6zVlirCyq5PXpqHEuxdCKAsGCO FLyaVfQXZFMfRQOk/l5YJKAjMi3ZFmBxsqmZEZJ/lAmXUYMrNcJfIxRj6n4pa9vY FtxD93WBcluvyLKegGChI8bD8WnqVWcKI70X2b5tJlDlkTpWHraf8aLWmzfH0B6R IOynQiGbk3SBYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:57 2026 by rpki-client