This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json) Hash identifier: eA+rsnpbB3TmI4oHPHsni1dz42PQ409cYD3x14p5QyI= Subject key identifier: 21:59:AB:19:CC:CD:3B:6E:56:87:10:48:D6:48:B7:06:27:56:EB:DD Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43 Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43 Certificate serial: 019C44D99C5ED3A70EC36633AB8CA221883D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft Manifest number: 144A Signing time: Tue 10 Feb 2026 00:00:37 +0000 Manifest this update: Tue 10 Feb 2026 00:00:37 +0000 Manifest next update: Wed 11 Feb 2026 00:00:37 +0000 Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=) 2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: 9xb9GbstKaai4Qtl/mrR+iDRpnAAtRd7zJJ+1E+sMk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:9c:5e:d3:a7:0e:c3:66:33:ab:8c:a2:21:88:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43 Validity Not Before: Feb 10 00:00:37 2026 GMT Not After : Feb 11 00:00:37 2026 GMT Subject: CN=2159ab19cccd3b6e56871048d648b7062756ebdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:e6:0a:95:7a:79:a0:95:34:d6:60:f9:32: b2:b3:40:50:8c:d7:df:0f:49:cb:e9:d8:65:d3:bb: 7f:fc:ce:d0:0f:d9:f9:5b:dd:07:0d:dd:2c:66:48: 43:f9:48:eb:57:db:0b:c4:a4:57:70:64:a4:04:8b: a6:55:03:d6:9e:ca:e2:04:d4:06:77:36:61:9f:5e: a9:9e:56:ca:bb:cc:d1:0c:0b:e7:c9:10:af:38:e0: de:9b:f4:35:96:7d:6b:bb:8a:99:fa:d3:72:de:a4: 12:d1:f6:67:e2:4f:fb:16:70:93:d0:a9:7c:05:7e: 42:fa:40:8e:7b:f2:c7:2d:51:27:ff:71:84:97:22: 9d:21:06:f4:76:3c:56:b6:ea:48:eb:4d:10:76:be: 29:8f:39:0c:79:b3:06:03:64:4e:0d:20:fa:35:71: 69:9a:a4:da:d2:17:97:36:83:a5:48:4d:21:f3:dc: d9:28:1a:ef:04:4b:6e:8e:06:ce:f9:50:d4:2a:0c: 67:d4:31:53:4f:c8:a0:de:bf:2a:2d:da:2c:18:ba: fc:4e:bc:e8:b5:7a:90:04:d1:d8:4f:ef:4f:f5:7b: b3:33:1b:19:fd:43:11:1f:47:f0:af:4f:ae:78:d6: 16:f2:a6:58:05:56:48:5a:45:f0:a6:da:ff:2c:83: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:59:AB:19:CC:CD:3B:6E:56:87:10:48:D6:48:B7:06:27:56:EB:DD X509v3 Authority Key Identifier: keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d0:a0:3f:ad:a1:e9:e6:76:12:44:9b:ce:de:ce:dd:0f:d8: fe:0b:f1:d5:13:cd:83:99:95:29:3d:ac:72:79:12:b3:37:90: b9:13:f7:18:fc:65:ab:ef:28:36:47:44:e9:b9:0a:17:be:1d: 42:0d:c9:da:c2:a0:e0:bc:9d:1f:ea:53:cf:81:ea:e1:42:83: d3:e3:4e:5a:4a:8b:c0:78:5f:c4:77:38:43:a1:f1:d5:70:af: b0:a7:4b:69:14:2b:33:34:fd:eb:b5:f0:77:db:e5:32:10:ec: ef:4b:6d:44:2d:09:ce:f3:fb:be:02:f7:bf:b4:94:21:8a:7e: 45:9f:ad:a0:31:89:61:4a:1a:57:8b:d0:b6:c9:ea:2c:29:24: 14:72:bf:e1:f3:e2:c7:84:f9:bc:f9:e8:86:b0:6c:86:73:3b: a6:8c:92:c4:cc:c6:20:81:6b:25:54:8c:0d:eb:06:c1:9e:e6: 9c:2d:6a:0a:de:e0:7d:e5:c8:f2:6a:5b:7d:fd:f5:8d:a1:90: b3:fc:90:e1:ed:6b:1f:81:d7:54:d9:3e:89:a0:48:36:16:45: 37:09:4e:b2:23:6c:30:49:d9:53:d5:96:cd:51:7b:d2:81:c3: 9c:70:67:08:4c:84:37:91:9a:6f:fe:54:5a:2e:1a:c5:4f:78: 6a:d2:3f:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2Zxe06cOw2Yzq4yiIYg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYmQ5Mjc2YTZmNzhkYWMxMDAyYzM3ODNhMThkNDVlYzE0 YjVkNDMwHhcNMjYwMjEwMDAwMDM3WhcNMjYwMjExMDAwMDM3WjAzMTEwLwYDVQQD EygyMTU5YWIxOWNjY2QzYjZlNTY4NzEwNDhkNjQ4YjcwNjI3NTZlYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KPmCpV6eaCVNNZg+TKys0BQjNff D0nL6dhl07t//M7QD9n5W90HDd0sZkhD+UjrV9sLxKRXcGSkBIumVQPWnsriBNQG dzZhn16pnlbKu8zRDAvnyRCvOODem/Q1ln1ru4qZ+tNy3qQS0fZn4k/7FnCT0Kl8 BX5C+kCOe/LHLVEn/3GElyKdIQb0djxWtupI600Qdr4pjzkMebMGA2RODSD6NXFp mqTa0heXNoOlSE0h89zZKBrvBEtujgbO+VDUKgxn1DFTT8ig3r8qLdosGLr8Trzo tXqQBNHYT+9P9XuzMxsZ/UMRH0fwr0+ueNYW8qZYBVZIWkXwptr/LIMwtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFZqxnMzTtuVocQSNZItwYnVuvdMB8GA1UdIwQY MBaAFOK9knam942sEALDeDoY1F7BS11DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgt NzFlZWNmODk4ZDQyLzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgtNzFlZWNmODk4ZDQy LzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtCgP62h 6eZ2EkSbzt7O3Q/Y/gvx1RPNg5mVKT2scnkSszeQuRP3GPxlq+8oNkdE6bkKF74d Qg3J2sKg4LydH+pTz4Hq4UKD0+NOWkqLwHhfxHc4Q6Hx1XCvsKdLaRQrMzT967Xw d9vlMhDs70ttRC0JzvP7vgL3v7SUIYp+RZ+toDGJYUoaV4vQtsnqLCkkFHK/4fPi x4T5vPnohrBshnM7poySxMzGIIFrJVSMDesGwZ7mnC1qCt7gfeXI8mpbff31jaGQ s/yQ4e1rH4HXVNk+iaBINhZFNwlOsiNsMEnZU9WWzVF70oHDnHBnCEyEN5Gab/5U Wi4axU94atI/KQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:18 2026 by rpki-client