This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json) Hash identifier: hGINIHqQC1MNJf6NeM6WRi50mupUmRtF777Anf7KdwA= Subject key identifier: F9:DC:1E:AA:2A:94:CA:D0:02:F2:44:F5:39:19:9E:21:3F:7F:80:63 Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Certificate serial: 019C42EB62A58CD8AB295B7761CE0B447617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft Manifest number: 0612 Signing time: Mon 09 Feb 2026 15:00:48 +0000 Manifest this update: Mon 09 Feb 2026 15:00:48 +0000 Manifest next update: Tue 10 Feb 2026 15:00:48 +0000 Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: 5UVfPChPrHpQNv/kwNysbrmONhOPil5n2KNK8AXJZ+8=) 2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=) 3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:62:a5:8c:d8:ab:29:5b:77:61:ce:0b:44:76:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Validity Not Before: Feb 9 15:00:48 2026 GMT Not After : Feb 10 15:00:48 2026 GMT Subject: CN=f9dc1eaa2a94cad002f244f539199e213f7f8063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:e3:55:2c:48:ec:94:f2:42:1f:ec:9d:29: 2d:1e:85:9e:4f:f1:ac:2a:f7:3e:53:8f:ca:13:40: 86:b0:d5:a5:c7:03:86:ad:da:9c:7e:f6:4b:70:9b: fe:4f:fb:d7:18:7b:98:11:7c:11:2c:9c:73:a6:2e: d3:72:e5:93:60:f6:7f:b6:7a:af:7a:89:34:f1:ab: b5:f9:87:60:6d:f1:ca:f4:2e:af:74:13:3a:54:97: 94:5a:42:b4:7f:fe:7c:7e:b8:ec:93:53:79:81:60: 43:28:f0:23:03:76:49:9b:01:28:b8:e5:1d:fb:a9: eb:a9:35:7a:3d:b5:6c:bb:c4:81:01:5b:88:d4:74: dc:e6:e3:80:dd:54:3d:0d:12:a9:44:68:07:cb:59: 73:c7:f2:ba:0e:89:c3:c7:fd:87:bc:29:5a:07:e9: d0:18:5f:90:9c:01:f1:d2:1b:da:65:ff:b3:01:32: de:c8:f2:d3:81:89:48:fb:ba:2a:8c:42:6e:84:2e: 75:15:11:1b:f0:66:bf:c5:b7:34:13:13:9b:80:c6: 10:0b:be:30:11:bf:7f:e4:81:f2:e1:6f:89:38:2d: a3:e6:bc:0f:6c:e2:e5:6e:25:b5:74:17:24:24:6a: ec:a6:b5:4b:da:8c:d3:f8:09:6f:08:93:8f:44:bb: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DC:1E:AA:2A:94:CA:D0:02:F2:44:F5:39:19:9E:21:3F:7F:80:63 X509v3 Authority Key Identifier: keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:08:8e:7d:c7:42:d8:2e:9f:52:67:39:25:a6:b0:98:63:1b: 45:ec:53:5d:d4:bd:8d:19:6e:e5:fc:0d:21:f0:5d:48:50:15: b5:68:d9:40:6b:55:57:23:a7:99:4f:a8:e9:ce:87:bb:2b:96: a6:59:c0:62:99:30:2e:a2:37:19:0a:42:76:64:c2:45:f8:70: 9c:e3:e4:1e:1a:db:9e:e3:63:78:90:b8:76:42:94:54:4f:86: e0:6c:b0:ce:71:2b:09:f1:87:8d:fb:5f:e5:d1:a4:f2:8b:f8: ee:b4:f1:a0:61:52:a8:07:76:83:88:9c:c2:6e:19:96:7a:a5: 7c:56:38:80:a7:08:f6:79:ee:ab:bb:22:e0:e7:bc:65:ab:da: cc:33:c3:64:d2:b2:d2:34:d0:5a:9a:39:4d:3f:88:d3:0d:da: a7:1b:16:84:c9:09:c4:22:45:ca:38:55:98:e7:b7:c4:a8:0d: bd:9c:fc:49:22:45:79:1c:97:cc:a5:1e:9a:77:2c:55:6e:c5: a3:e6:91:60:cd:88:60:5f:e6:e2:e3:6d:39:df:45:52:33:2b: 7c:00:37:24:ba:3f:0e:0e:6e:e0:f7:ff:5f:22:c5:70:ca:c8: 42:b7:51:cd:7c:95:65:a8:cf:82:db:79:b5:aa:49:f3:40:42: 72:cf:0f:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62KljNirKVt3Yc4LRHYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi NmFkZjAwHhcNMjYwMjA5MTUwMDQ4WhcNMjYwMjEwMTUwMDQ4WjAzMTEwLwYDVQQD EyhmOWRjMWVhYTJhOTRjYWQwMDJmMjQ0ZjUzOTE5OWUyMTNmN2Y4MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzfjVSxI7JTyQh/snSktHoWeT/Gs Kvc+U4/KE0CGsNWlxwOGrdqcfvZLcJv+T/vXGHuYEXwRLJxzpi7TcuWTYPZ/tnqv eok08au1+YdgbfHK9C6vdBM6VJeUWkK0f/58frjsk1N5gWBDKPAjA3ZJmwEouOUd +6nrqTV6PbVsu8SBAVuI1HTc5uOA3VQ9DRKpRGgHy1lzx/K6DonDx/2HvClaB+nQ GF+QnAHx0hvaZf+zATLeyPLTgYlI+7oqjEJuhC51FREb8Ga/xbc0ExObgMYQC74w Eb9/5IHy4W+JOC2j5rwPbOLlbiW1dBckJGrsprVL2ozT+AlvCJOPRLvSBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPncHqoqlMrQAvJE9TkZniE/f4BjMB8GA1UdIwQY MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It MjkxYjdhZDA5M2JmLzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwiOfcdC 2C6fUmc5JaawmGMbRexTXdS9jRlu5fwNIfBdSFAVtWjZQGtVVyOnmU+o6c6HuyuW plnAYpkwLqI3GQpCdmTCRfhwnOPkHhrbnuNjeJC4dkKUVE+G4GywznErCfGHjftf 5dGk8ov47rTxoGFSqAd2g4icwm4ZlnqlfFY4gKcI9nnuq7si4Oe8ZavazDPDZNKy 0jTQWpo5TT+I0w3apxsWhMkJxCJFyjhVmOe3xKgNvZz8SSJFeRyXzKUemncsVW7F o+aRYM2IYF/m4uNtOd9FUjMrfAA3JLo/Dg5u4Pf/XyLFcMrIQrdRzXyVZajPgtt5 tapJ80BCcs8PYA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:51 2026 by rpki-client