This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json) Hash identifier: QIq+B6KwsIKUH1w7pLabN++OLlJyl7lk71jWXE+5s6M= Subject key identifier: B5:D3:B1:E7:AD:BD:79:F6:03:6C:06:4D:7D:03:5A:7E:58:82:A3:A2 Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40 Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040 Certificate serial: 019C42B486C730CE9625A16E3F447EF668A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft Manifest number: 05B0 Signing time: Mon 09 Feb 2026 14:00:53 +0000 Manifest this update: Mon 09 Feb 2026 14:00:53 +0000 Manifest next update: Tue 10 Feb 2026 14:00:53 +0000 Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: Cr3/96tF674cyKfC5KW++EqQXOl0H40sCYsbDgY/VlY=) 2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:86:c7:30:ce:96:25:a1:6e:3f:44:7e:f6:68:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e109e278c7862254c88755e4717398a552a49040 Validity Not Before: Feb 9 14:00:53 2026 GMT Not After : Feb 10 14:00:53 2026 GMT Subject: CN=b5d3b1e7adbd79f6036c064d7d035a7e5882a3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:41:8f:9f:1d:a4:e0:11:9a:a6:cb:c8:97: a5:4c:45:bf:5d:23:f7:f6:d8:92:55:89:72:f0:e4: 20:37:c0:82:e8:3c:78:4a:4d:49:49:df:b4:c7:db: 1d:4d:4e:e7:22:76:77:23:5c:52:98:52:84:d2:5d: 24:ba:70:ae:f1:8b:f9:9c:d9:c8:f6:ac:96:d9:2c: a8:9b:f3:53:6c:0f:95:10:9c:a2:dd:18:90:2a:bf: 8c:24:f0:04:c4:2d:81:9a:94:8a:48:44:7c:c1:d0: 2d:d7:a6:b4:e1:1a:96:49:aa:94:43:9e:e8:dc:a0: 4f:cb:6a:80:ff:24:12:00:11:ad:6c:26:15:54:c8: ef:e4:0a:03:68:bf:18:38:87:dd:23:dc:6b:cb:0b: fd:4a:10:62:62:e3:aa:72:65:30:62:22:2c:c3:16: 0f:99:80:d2:81:81:e6:6e:c6:fe:b8:c4:8d:e9:67: d3:95:8f:b0:ca:a5:dd:42:68:ad:34:c5:bb:6b:1a: f4:b2:22:b6:a5:3b:5b:5c:12:e3:9c:cd:50:c7:6b: dd:b7:cb:b8:94:ac:24:7e:19:c5:10:7f:64:a2:4e: 0f:d2:04:8e:27:5e:7f:da:a3:b2:38:8d:80:44:8e: 1f:f3:ba:72:fa:6d:6c:dd:5e:bb:9e:bc:5a:53:e8: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D3:B1:E7:AD:BD:79:F6:03:6C:06:4D:7D:03:5A:7E:58:82:A3:A2 X509v3 Authority Key Identifier: keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d0:29:c1:90:9e:03:13:c2:45:46:0b:22:5b:cf:8e:4d:dc: 85:90:3d:e2:1a:73:76:f9:e1:7d:42:52:d0:90:b6:ad:85:31: 63:e1:e6:03:b0:f2:a2:4a:db:33:b3:86:68:1e:2f:e8:7c:bf: 6d:44:87:14:7f:2c:0b:ba:94:4f:72:aa:6c:82:58:5b:75:55: f6:9e:38:f0:db:5c:ed:d9:a5:33:95:a3:58:e2:d3:63:ab:45: 08:89:c4:6e:03:d4:a6:7c:69:0d:d6:09:37:7e:25:b1:d4:e8: f4:cf:d1:80:cf:84:00:3d:a9:40:6f:c9:92:aa:3f:f8:d7:c0: 08:88:bc:97:fa:a6:83:ff:67:78:26:b6:93:1f:8c:5c:f1:f2: 6f:ff:c4:b4:c4:60:47:84:c6:72:f4:75:63:66:4e:d5:f4:78: 89:d2:78:56:87:2e:14:dd:72:1d:3d:3a:2b:2b:06:69:c4:d9: 09:8e:e5:96:20:16:cd:8b:fe:6f:38:83:22:f5:7e:a8:5e:ff: 18:20:a8:06:8a:80:c2:97:46:2f:42:42:5f:36:f9:58:22:d7: ea:bb:de:57:19:3f:9d:9a:ce:0a:49:75:dc:77:dd:79:7e:fd: 38:34:95:8f:2f:33:bb:6b:09:07:24:a2:71:80:bd:6d:dd:33: b9:d4:e2:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIbHMM6WJaFuP0R+9miiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh NDkwNDAwHhcNMjYwMjA5MTQwMDUzWhcNMjYwMjEwMTQwMDUzWjAzMTEwLwYDVQQD EyhiNWQzYjFlN2FkYmQ3OWY2MDM2YzA2NGQ3ZDAzNWE3ZTU4ODJhM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp1Bj58dpOARmqbLyJelTEW/XSP3 9tiSVYly8OQgN8CC6Dx4Sk1JSd+0x9sdTU7nInZ3I1xSmFKE0l0kunCu8Yv5nNnI 9qyW2Syom/NTbA+VEJyi3RiQKr+MJPAExC2BmpSKSER8wdAt16a04RqWSaqUQ57o 3KBPy2qA/yQSABGtbCYVVMjv5AoDaL8YOIfdI9xrywv9ShBiYuOqcmUwYiIswxYP mYDSgYHmbsb+uMSN6WfTlY+wyqXdQmitNMW7axr0siK2pTtbXBLjnM1Qx2vdt8u4 lKwkfhnFEH9kok4P0gSOJ15/2qOyOI2ARI4f87py+m1s3V67nrxaU+grAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXTseetvXn2A2wGTX0DWn5YgqOiMB8GA1UdIwQY MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItApwZCe AxPCRUYLIlvPjk3chZA94hpzdvnhfUJS0JC2rYUxY+HmA7DyokrbM7OGaB4v6Hy/ bUSHFH8sC7qUT3KqbIJYW3VV9p448Ntc7dmlM5WjWOLTY6tFCInEbgPUpnxpDdYJ N34lsdTo9M/RgM+EAD2pQG/Jkqo/+NfACIi8l/qmg/9neCa2kx+MXPHyb//EtMRg R4TGcvR1Y2ZO1fR4idJ4VocuFN1yHT06KysGacTZCY7lliAWzYv+bziDIvV+qF7/ GCCoBoqAwpdGL0JCXzb5WCLX6rveVxk/nZrOCkl13HfdeX79ODSVjy8zu2sJBySi cYC9bd0zudTiew== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:06 2026 by rpki-client