This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json) Hash identifier: ufS2LCxxM25puZ2I8MDu1J/KSFwo2ey81RybLWxdWDk= Subject key identifier: 89:C4:05:7F:DE:A3:89:C4:B6:D7:7A:DD:8D:E0:E1:7F:AD:48:B0:D9 Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Certificate serial: 019C438FF1AC3F837D73A843FC773C0AB76B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft Manifest number: 0677 Signing time: Mon 09 Feb 2026 18:00:32 +0000 Manifest this update: Mon 09 Feb 2026 18:00:32 +0000 Manifest next update: Tue 10 Feb 2026 18:00:32 +0000 Files and hashes: 1: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: dBtQ1HCzfdD+QWR/Qp+QpfCVd5QOscyUiLFEqbTSdHs=) 2: SnZyrIF6RABx6JSbJPFXyEaoM4o.roa (hash: 5p3rhTPu7aykKsYkOURaS1avQK2tbYJAoNaTXCxX5Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f1:ac:3f:83:7d:73:a8:43:fc:77:3c:0a:b7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Validity Not Before: Feb 9 18:00:32 2026 GMT Not After : Feb 10 18:00:32 2026 GMT Subject: CN=89c4057fdea389c4b6d77add8de0e17fad48b0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:24:92:95:38:35:98:4d:02:31:da:8b:a4: 68:53:7e:12:b6:4f:2d:a9:8a:79:1f:23:16:fa:74: 25:a1:31:5a:1e:91:89:43:b8:86:96:f1:8b:95:24: a4:80:39:4c:cf:f9:a0:2e:7e:03:ef:5f:55:8a:ba: 2d:14:95:36:c9:24:a6:03:92:1b:0f:00:5c:2e:82: 8b:c6:a0:79:38:cb:cd:94:66:fa:1e:ee:08:d4:5d: 3f:2a:2f:2d:1f:58:2d:4c:43:2b:e1:3a:86:3e:2d: 10:f2:23:50:8f:36:75:e5:40:1b:fc:af:c5:75:b1: f4:ee:b9:d6:ae:f7:4d:28:3f:de:03:4b:87:e8:84: d2:91:96:5b:b2:c0:68:37:12:77:b5:0f:f5:80:59: 9f:98:1f:e0:66:d5:3d:16:a1:a3:3d:62:49:7b:b5: 14:83:75:b2:7a:c8:16:f2:b0:08:57:8a:99:de:2f: 89:b1:74:ca:cc:be:f8:4c:c1:2d:20:10:ee:4b:78: f8:3a:8b:45:a0:0f:00:b1:85:b8:39:3d:a0:40:20: 88:d3:33:65:ad:6b:52:71:a3:1d:c7:a6:d4:1b:27: f7:03:65:d0:dd:cf:02:c0:69:5d:05:9a:c4:4d:b1: 3d:6e:18:c1:e5:33:ba:cf:74:36:07:41:a9:b6:49: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C4:05:7F:DE:A3:89:C4:B6:D7:7A:DD:8D:E0:E1:7F:AD:48:B0:D9 X509v3 Authority Key Identifier: keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:78:44:56:1a:5b:a8:5b:95:27:b2:cd:3f:7b:02:6a:a4:6a: 46:eb:0e:de:67:65:ef:e5:7b:39:97:94:ad:eb:66:8f:a4:59: 32:db:16:9e:4e:ab:e8:83:2f:79:ab:c5:c1:a1:24:50:0a:11: b2:b0:d8:3f:6c:e5:73:62:c9:fd:c0:d0:a4:41:dc:d1:b1:b4: a9:d5:84:dd:ac:c4:0c:51:e9:8d:05:2a:dd:11:e0:69:ca:04: df:15:15:c1:21:b3:85:48:d3:92:64:3b:7e:cc:55:a2:05:d9: fd:f0:20:7a:fc:90:ec:7e:a2:56:96:93:31:6b:8c:55:57:07: 54:c0:ec:18:e4:26:bc:84:56:6e:51:89:c4:c5:67:0c:16:ae: 82:56:42:62:7c:04:91:19:c5:72:44:a4:c6:d1:35:3f:0f:5e: 5d:55:65:4f:34:1b:26:0e:65:ca:c1:dd:36:4c:4b:5c:87:af: ab:2b:0e:11:88:ea:b6:98:ed:99:55:5b:e7:47:8d:9c:51:f8: 19:69:2f:be:7b:07:04:e7:aa:1d:f1:32:9a:3f:1c:a2:bc:86: a7:03:05:5d:14:39:0d:32:82:4f:a4:35:d6:71:78:9f:73:6a: d6:a0:ae:10:02:46:4e:94:54:69:e1:ac:62:5d:fd:14:80:e5: c6:d5:fc:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/GsP4N9c6hD/Hc8CrdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj ZjZjZWQwHhcNMjYwMjA5MTgwMDMyWhcNMjYwMjEwMTgwMDMyWjAzMTEwLwYDVQQD Eyg4OWM0MDU3ZmRlYTM4OWM0YjZkNzdhZGQ4ZGUwZTE3ZmFkNDhiMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqskkpU4NZhNAjHai6RoU34Stk8t qYp5HyMW+nQloTFaHpGJQ7iGlvGLlSSkgDlMz/mgLn4D719VirotFJU2ySSmA5Ib DwBcLoKLxqB5OMvNlGb6Hu4I1F0/Ki8tH1gtTEMr4TqGPi0Q8iNQjzZ15UAb/K/F dbH07rnWrvdNKD/eA0uH6ITSkZZbssBoNxJ3tQ/1gFmfmB/gZtU9FqGjPWJJe7UU g3WyesgW8rAIV4qZ3i+JsXTKzL74TMEtIBDuS3j4OotFoA8AsYW4OT2gQCCI0zNl rWtScaMdx6bUGyf3A2XQ3c8CwGldBZrETbE9bhjB5TO6z3Q2B0Gptknt5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInEBX/eo4nEttd63Y3g4X+tSLDZMB8GA1UdIwQY MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt MDE5YTA1Y2U1ZTdhLzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3hEVhpb qFuVJ7LNP3sCaqRqRusO3mdl7+V7OZeUretmj6RZMtsWnk6r6IMveavFwaEkUAoR srDYP2zlc2LJ/cDQpEHc0bG0qdWE3azEDFHpjQUq3RHgacoE3xUVwSGzhUjTkmQ7 fsxVogXZ/fAgevyQ7H6iVpaTMWuMVVcHVMDsGOQmvIRWblGJxMVnDBauglZCYnwE kRnFckSkxtE1Pw9eXVVlTzQbJg5lysHdNkxLXIevqysOEYjqtpjtmVVb50eNnFH4 GWkvvnsHBOeqHfEymj8coryGpwMFXRQ5DTKCT6Q11nF4n3Nq1qCuEAJGTpRUaeGs Yl39FIDlxtX8iA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:57 2026 by rpki-client