This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json) Hash identifier: gwpqrXc36OHtsbDuib4q4TuEsuzX6lBwW8dYRhgk0Ac= Subject key identifier: E7:B7:FC:56:EF:03:89:CD:E2:67:C9:B9:11:E4:1C:EB:AB:02:CA:54 Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41 Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241 Certificate serial: 019C438FDF3678A3F21676B6FE8B1B4CC9A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 18:00:28 +0000 Manifest this update: Mon 09 Feb 2026 18:00:28 +0000 Manifest next update: Tue 10 Feb 2026 18:00:28 +0000 Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: HpqkPa3iAO2f38MJ8a21RVQBU0fc1lZl/WQYt5uxxHY=) 2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:df:36:78:a3:f2:16:76:b6:fe:8b:1b:4c:c9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241 Validity Not Before: Feb 9 18:00:28 2026 GMT Not After : Feb 10 18:00:28 2026 GMT Subject: CN=e7b7fc56ef0389cde267c9b911e41cebab02ca54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:e3:e7:00:f4:1f:d2:8d:3d:51:6a:da:24: 58:c1:9c:14:c0:f2:8a:36:08:df:6d:8a:53:32:90: 59:42:65:e0:c1:a0:4b:4d:d0:86:46:37:fc:0a:0a: e1:9a:88:2a:1b:19:c5:68:6f:e7:d8:bb:00:63:52: 10:2e:1d:6b:df:56:07:a4:9c:d4:04:5e:c8:fc:c3: bb:9e:64:2e:f8:58:b7:7b:dd:48:bd:63:1e:f0:ee: f6:b6:2e:b7:2a:ae:e5:73:ed:3d:14:18:fe:76:94: a0:68:27:37:04:52:ef:23:4a:3e:f1:43:d1:41:4c: 4d:43:c6:09:3e:3f:51:71:4a:b4:5c:ec:63:33:1c: f2:4a:c0:be:3b:a6:30:4c:79:69:be:69:23:2d:ab: 9f:36:6a:89:43:c1:b3:b8:8d:d0:94:af:ec:18:0a: 36:99:da:be:08:fc:70:5f:87:19:49:df:eb:80:84: 42:db:eb:ee:fc:22:33:43:96:46:03:c4:e9:be:53: 92:71:c1:a3:db:a4:86:bd:ce:09:26:37:e2:81:e3: 97:db:97:3a:ae:f2:46:aa:44:ee:e1:cc:c3:03:6f: 03:c1:48:a0:8a:7c:88:69:a8:de:c7:ec:5a:52:5a: e5:2a:f0:c9:d9:c5:79:0a:db:e1:e4:d6:5d:83:f0: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:FC:56:EF:03:89:CD:E2:67:C9:B9:11:E4:1C:EB:AB:02:CA:54 X509v3 Authority Key Identifier: keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7a:ca:03:fc:c7:c7:64:12:de:01:a6:21:10:5d:e4:21:99: f5:f5:db:8a:d8:a3:2d:1b:67:83:bc:67:42:fe:34:6b:ae:20: c2:8e:75:19:76:98:fb:ea:c2:ec:d1:1d:c7:7f:14:4e:ae:2b: cd:c7:84:3c:6a:cd:f8:f6:17:83:f0:72:04:e1:6f:2e:86:2b: 8a:c0:3a:30:bc:1d:94:17:37:0c:e0:dd:93:57:be:af:1c:7a: e2:c2:08:8a:d4:14:d8:df:1c:1c:d4:6b:76:b9:0e:81:0b:0a: 0b:ba:a8:97:06:e5:c5:a9:01:d4:44:bf:95:ea:26:34:01:f8: 33:d7:43:1c:22:27:b8:70:b6:b1:d5:0a:18:b0:e7:f5:36:fb: 80:91:a8:18:fc:80:0c:45:a7:c2:4f:6f:37:db:c8:4b:4f:dc: bd:c9:82:1f:b5:df:2e:f9:ad:3d:9b:ac:06:eb:60:47:05:9d: 66:4a:82:f2:7c:22:ad:65:98:5b:fb:9f:56:77:3d:dd:b9:98: 06:e5:00:cc:af:31:5f:96:bc:58:5d:e9:a0:a7:4f:e2:8d:b7: 6d:dc:dd:34:89:22:d2:c8:97:81:cc:92:e6:04:da:98:60:4d: ff:4b:15:0a:e4:d8:4d:61:66:a9:39:41:f5:d4:ad:18:f9:79: 5e:17:f5:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj982eKPyFna2/osbTMmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDBhMDI1ZTBlNjFhNDRkOTNlNGE4MDFlMzg4OGIyNmU3 YmQyNDEwHhcNMjYwMjA5MTgwMDI4WhcNMjYwMjEwMTgwMDI4WjAzMTEwLwYDVQQD EyhlN2I3ZmM1NmVmMDM4OWNkZTI2N2M5YjkxMWU0MWNlYmFiMDJjYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncTj5wD0H9KNPVFq2iRYwZwUwPKK NgjfbYpTMpBZQmXgwaBLTdCGRjf8CgrhmogqGxnFaG/n2LsAY1IQLh1r31YHpJzU BF7I/MO7nmQu+Fi3e91IvWMe8O72ti63Kq7lc+09FBj+dpSgaCc3BFLvI0o+8UPR QUxNQ8YJPj9RcUq0XOxjMxzySsC+O6YwTHlpvmkjLaufNmqJQ8GzuI3QlK/sGAo2 mdq+CPxwX4cZSd/rgIRC2+vu/CIzQ5ZGA8TpvlOSccGj26SGvc4JJjfigeOX25c6 rvJGqkTu4czDA28DwUiginyIaajex+xaUlrlKvDJ2cV5Ctvh5NZdg/AwdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe3/FbvA4nN4mfJuRHkHOurAspUMB8GA1UdIwQY MBaAFOJAoCXg5hpE2T5KgB44iLJue9JBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUt Yzc5ZDRlZWI1YWQ2LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUtYzc5ZDRlZWI1YWQ2 LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3rKA/zH x2QS3gGmIRBd5CGZ9fXbitijLRtng7xnQv40a64gwo51GXaY++rC7NEdx38UTq4r zceEPGrN+PYXg/ByBOFvLoYrisA6MLwdlBc3DODdk1e+rxx64sIIitQU2N8cHNRr drkOgQsKC7qolwblxakB1ES/leomNAH4M9dDHCInuHC2sdUKGLDn9Tb7gJGoGPyA DEWnwk9vN9vIS0/cvcmCH7XfLvmtPZusButgRwWdZkqC8nwirWWYW/ufVnc93bmY BuUAzK8xX5a8WF3poKdP4o23bdzdNIki0siXgcyS5gTamGBN/0sVCuTYTWFmqTlB 9dStGPl5Xhf1dA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:05 2026 by rpki-client