This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json) Hash identifier: gGk9ZsXp3i+nFQmy+e13QhqZRUt6lJvfM8MRXCxoFf8= Subject key identifier: F2:16:4E:1C:07:7F:3F:66:E6:0D:60:E3:A3:65:48:99:7D:9D:66:DC Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68 Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68 Certificate serial: 019C41A1EF83594E9ECAE545E0C9B1055A6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft Manifest number: 0ADB Signing time: Mon 09 Feb 2026 09:00:57 +0000 Manifest this update: Mon 09 Feb 2026 09:00:57 +0000 Manifest next update: Tue 10 Feb 2026 09:00:57 +0000 Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: 0mFU8qEY95nnIUwDtd0xJBbOybzolnNfQWsMvlIrlPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ef:83:59:4e:9e:ca:e5:45:e0:c9:b1:05:5a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68 Validity Not Before: Feb 9 09:00:57 2026 GMT Not After : Feb 10 09:00:57 2026 GMT Subject: CN=f2164e1c077f3f66e60d60e3a36548997d9d66dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:6d:ba:23:0b:5d:ee:9a:46:7b:e6:43:d5: 6b:6a:3a:df:fd:6e:4e:b6:2c:20:7f:12:02:d8:40: 6f:54:d2:ca:26:88:32:3d:4f:97:82:85:9f:d0:64: df:f1:16:1d:20:23:4a:d0:99:f2:f0:5a:ce:90:ab: a8:78:89:fd:fe:73:55:19:c2:4d:03:9f:51:4a:f0: fc:e8:a3:d8:57:3e:ab:f6:cd:f7:1c:97:0c:3e:33: 96:0b:08:2f:0a:c4:21:cb:65:9b:65:49:b8:79:9b: 0c:09:1e:2f:1b:20:3f:76:21:3d:dc:10:99:12:0a: 2c:9d:f6:c2:79:35:68:8d:91:26:0d:63:99:d1:9b: 14:db:2b:67:f4:35:f5:bf:43:9d:33:2f:e9:95:27: ee:f5:7f:51:92:1b:b3:16:1b:e6:54:a7:3f:04:44: 0d:6f:ff:c2:8c:c2:7c:cc:88:3d:c1:f2:9d:88:4e: a3:db:de:36:31:b3:9d:f9:f8:1d:8a:29:49:f3:26: 49:4b:0e:36:70:f0:52:e0:80:90:ac:32:b1:23:78: 45:43:21:47:b2:02:ba:a5:db:f8:c7:0c:d5:66:0f: a1:5f:42:56:d7:eb:0b:1a:68:e8:ea:26:18:0a:38: 8c:d9:34:2e:c9:73:ce:16:96:b1:42:db:e1:48:d3: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:4E:1C:07:7F:3F:66:E6:0D:60:E3:A3:65:48:99:7D:9D:66:DC X509v3 Authority Key Identifier: keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:60:e3:b8:28:9b:a0:61:73:60:c3:bc:1b:6f:88:00:06:2c: b4:d3:c6:b0:37:1f:29:35:13:0f:05:bd:06:10:0d:f5:5d:6f: d6:3d:0b:f9:f3:da:03:7a:8a:24:37:94:64:ad:c0:cb:8d:26: 46:0b:cd:07:97:85:aa:91:78:ee:08:9c:d5:20:15:ae:2f:3b: c7:a5:7f:77:4d:1a:41:d7:e5:18:b5:a6:ff:bd:30:bf:d2:1d: 3b:05:72:28:38:b8:c0:ed:2e:b8:00:c8:47:8c:2b:6f:ba:8a: f1:87:23:21:9c:d9:30:49:ba:51:6c:cb:62:81:45:45:61:a4: 7d:f2:4a:b9:de:6f:34:fd:8d:a9:62:1d:31:d8:84:c1:10:76: df:c2:d5:63:00:80:30:d9:8f:ff:1b:4b:e9:82:b0:cc:a6:c1: 7b:69:ed:00:79:1f:f1:07:98:8b:f7:31:22:6c:80:86:60:94: 94:57:a7:a7:5b:48:ba:18:d3:a6:41:a6:0b:b7:2b:e1:83:a0: 7c:02:0b:ad:bd:fa:50:8c:8b:1c:1b:f1:2f:ae:53:9e:8f:ff: 48:c9:32:f3:5f:41:c1:90:91:87:32:86:b2:a8:6b:3a:4a:41: 3a:5a:ee:39:45:90:c3:64:94:21:a8:8b:64:73:c5:99:94:06: b1:85:a9:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoe+DWU6eyuVF4MmxBVpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDk3NGMzYmQ0ZmVhNGU5ZmViNTEyOWRiZWQyMDNjMDc1 YzhkNjgwHhcNMjYwMjA5MDkwMDU3WhcNMjYwMjEwMDkwMDU3WjAzMTEwLwYDVQQD EyhmMjE2NGUxYzA3N2YzZjY2ZTYwZDYwZTNhMzY1NDg5OTdkOWQ2NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkBtuiMLXe6aRnvmQ9Vrajrf/W5O tiwgfxIC2EBvVNLKJogyPU+XgoWf0GTf8RYdICNK0Jny8FrOkKuoeIn9/nNVGcJN A59RSvD86KPYVz6r9s33HJcMPjOWCwgvCsQhy2WbZUm4eZsMCR4vGyA/diE93BCZ EgosnfbCeTVojZEmDWOZ0ZsU2ytn9DX1v0OdMy/plSfu9X9RkhuzFhvmVKc/BEQN b//CjMJ8zIg9wfKdiE6j2942MbOd+fgdiilJ8yZJSw42cPBS4ICQrDKxI3hFQyFH sgK6pdv4xwzVZg+hX0JW1+sLGmjo6iYYCjiM2TQuyXPOFpaxQtvhSNNLRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIWThwHfz9m5g1g46NlSJl9nWbcMB8GA1UdIwQY MBaAFOHZdMO9T+pOn+tRKdvtIDwHXI1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAt YzAzNDEwOTRiMDlhLzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAtYzAzNDEwOTRiMDlh LzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGDjuCib oGFzYMO8G2+IAAYstNPGsDcfKTUTDwW9BhAN9V1v1j0L+fPaA3qKJDeUZK3Ay40m RgvNB5eFqpF47gic1SAVri87x6V/d00aQdflGLWm/70wv9IdOwVyKDi4wO0uuADI R4wrb7qK8YcjIZzZMEm6UWzLYoFFRWGkffJKud5vNP2NqWIdMdiEwRB238LVYwCA MNmP/xtL6YKwzKbBe2ntAHkf8QeYi/cxImyAhmCUlFenp1tIuhjTpkGmC7cr4YOg fAILrb36UIyLHBvxL65Tno//SMky819BwZCRhzKGsqhrOkpBOlruOUWQw2SUIaiL ZHPFmZQGsYWp0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:03 2026 by rpki-client