This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json) Hash identifier: rcNLzUIpGKhmrLwzpj7fvJRr83tO8ugkOy4x/zOEIi0= Subject key identifier: 5C:38:26:16:2B:0F:34:D4:2F:71:A0:C4:E9:00:31:10:A4:F7:57:CA Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b Certificate serial: 019C43901528F4DE0DB4D88D68DA23559897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft Manifest number: 0A6C Signing time: Mon 09 Feb 2026 18:00:41 +0000 Manifest this update: Mon 09 Feb 2026 18:00:41 +0000 Manifest next update: Tue 10 Feb 2026 18:00:41 +0000 Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: gnW73nxJn+8tzzPgO9Gb/jc+7rpaNZ8eXsiz+tvF3Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:15:28:f4:de:0d:b4:d8:8d:68:da:23:55:98:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b Validity Not Before: Feb 9 18:00:41 2026 GMT Not After : Feb 10 18:00:41 2026 GMT Subject: CN=5c3826162b0f34d42f71a0c4e9003110a4f757ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:bc:d8:cb:5d:b6:74:4e:45:f1:79:b5:0d: 9f:7f:94:e5:1a:97:d5:ea:5e:76:30:34:17:12:ec: e5:fc:f4:33:d1:2c:ed:67:67:7c:6d:61:54:77:5b: 55:ba:39:5f:7c:19:d7:4e:2c:d2:56:2c:fa:19:72: a8:ae:24:7f:6a:99:4e:90:f1:a1:8f:92:f9:48:7e: 1b:b5:fa:ba:4b:b6:a5:15:f5:d6:b3:8c:9b:e4:53: a1:fc:3d:58:ea:df:bc:7b:5d:7c:95:0b:22:bc:1b: 85:18:c5:82:f7:5d:c0:df:ec:4f:a1:17:97:15:89: 57:14:d2:c3:64:be:f9:bc:35:05:42:28:d6:49:f4: 50:17:cb:33:8a:25:3d:52:47:50:5c:70:6e:7e:d1: 19:f4:44:96:d4:21:b0:5a:6e:f3:d3:53:f6:f6:30: 1a:c6:53:ca:58:a8:00:0d:1d:c0:04:23:dc:6d:53: d7:cd:c9:02:72:ae:99:04:80:8f:d0:ae:7e:d4:67: 05:42:1e:a4:1f:37:24:f9:3b:fd:13:24:c7:0a:42: cd:3e:67:f7:63:b5:ae:56:5c:b3:c8:2d:ee:07:dc: 3b:7f:ed:91:d6:bc:ea:41:b3:99:88:0b:9f:b9:0f: 7b:58:ba:f8:32:2d:9b:a3:6a:9c:c4:db:8b:f7:f0: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:26:16:2B:0F:34:D4:2F:71:A0:C4:E9:00:31:10:A4:F7:57:CA X509v3 Authority Key Identifier: keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cc:c7:c0:52:71:01:ac:ac:4d:13:5c:79:a9:24:6c:0d:e4: 08:ad:e7:8c:19:84:e6:89:68:cb:2a:ad:83:18:f5:fc:6c:c3: c6:c0:ae:9c:be:d4:a8:8d:7e:30:20:9a:c2:02:63:e6:da:d3: 57:e3:bb:a8:e1:d6:54:aa:f0:e2:6c:50:c3:b2:cc:06:1c:60: ca:5a:2f:49:4e:b1:b5:c6:a8:c0:54:e9:94:84:4c:9b:68:38: 63:b2:0e:66:1f:bc:38:0a:fc:d6:41:ba:5f:39:a6:a5:2c:f0: 75:b4:9d:c8:00:41:f8:71:c3:65:29:25:d0:11:14:3c:10:18: fc:f4:d5:d5:b3:9e:7e:e8:53:3b:6f:74:15:cb:63:ac:21:fa: fa:c3:f3:29:bd:62:3f:a0:bd:42:f3:c1:bb:5d:0b:3e:4f:c3: 39:1d:fa:28:d0:7f:03:80:39:ff:45:a2:cb:1e:aa:3a:f2:3a: 9d:23:57:79:fb:8d:55:51:0c:cf:49:b6:46:dd:ad:21:49:a4: de:35:36:d3:4c:0e:a3:4d:52:3d:ec:56:01:34:87:5e:7a:3a: e4:e7:52:84:d4:b0:f8:87:4b:ab:c0:b1:2a:21:51:d8:40:2c: cd:00:bd:86:14:e5:a0:73:e0:d0:3b:5d:d2:4a:63:99:8b:97: f4:37:3f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBUo9N4NtNiNaNojVZiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZmUzZjdiODMzYzMwNjAyZWI3OTg1OGU3ZWFmYWVkNTU0 ZjRjNWIwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD Eyg1YzM4MjYxNjJiMGYzNGQ0MmY3MWEwYzRlOTAwMzExMGE0Zjc1N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8u82MtdtnRORfF5tQ2ff5TlGpfV 6l52MDQXEuzl/PQz0SztZ2d8bWFUd1tVujlffBnXTizSViz6GXKoriR/aplOkPGh j5L5SH4btfq6S7alFfXWs4yb5FOh/D1Y6t+8e118lQsivBuFGMWC913A3+xPoReX FYlXFNLDZL75vDUFQijWSfRQF8sziiU9UkdQXHBuftEZ9ESW1CGwWm7z01P29jAa xlPKWKgADR3ABCPcbVPXzckCcq6ZBICP0K5+1GcFQh6kHzck+Tv9EyTHCkLNPmf3 Y7WuVlyzyC3uB9w7f+2R1rzqQbOZiAufuQ97WLr4Mi2bo2qcxNuL9/CRKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw4JhYrDzTUL3GgxOkAMRCk91fKMB8GA1UdIwQY MBaAFIn+P3uDPDBgLreYWOfq+u1VT0xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNjg5ZmQtYjEzZS00MzMyLTllYjct NjVjYjYzYWZjZTVlLzEvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9iNjg5ZmQtYjEzZS00MzMyLTllYjctNjVjYjYzYWZjZTVl LzEvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACszHwFJx AaysTRNceakkbA3kCK3njBmE5oloyyqtgxj1/GzDxsCunL7UqI1+MCCawgJj5trT V+O7qOHWVKrw4mxQw7LMBhxgylovSU6xtcaowFTplIRMm2g4Y7IOZh+8OAr81kG6 XzmmpSzwdbSdyABB+HHDZSkl0BEUPBAY/PTV1bOefuhTO290FctjrCH6+sPzKb1i P6C9QvPBu10LPk/DOR36KNB/A4A5/0Wiyx6qOvI6nSNXefuNVVEMz0m2Rt2tIUmk 3jU200wOo01SPexWATSHXno65OdShNSw+IdLq8CxKiFR2EAszQC9hhTloHPg0Dtd 0kpjmYuX9Dc/GA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:47 2026 by rpki-client