This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json) Hash identifier: bKkeXm9ab7DdN7pAKyW7wVeBY+0aZ7LsRjhpzrlJfUc= Subject key identifier: 49:1B:06:2E:11:6B:F9:CC:4B:F7:0A:0B:81:45:BB:D8:D4:E9:78:97 Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1 Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1 Certificate serial: 019C420F98CF5CE293E959930E8B93D12C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft Manifest number: 118B Signing time: Mon 09 Feb 2026 11:00:44 +0000 Manifest this update: Mon 09 Feb 2026 11:00:44 +0000 Manifest next update: Tue 10 Feb 2026 11:00:44 +0000 Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: 6dxw94HSDISAalsz2V/99ghGBBwql/SbMMu3UHdp6LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:98:cf:5c:e2:93:e9:59:93:0e:8b:93:d1:2c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1 Validity Not Before: Feb 9 11:00:44 2026 GMT Not After : Feb 10 11:00:44 2026 GMT Subject: CN=491b062e116bf9cc4bf70a0b8145bbd8d4e97897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:28:6a:42:95:2c:67:83:ad:8f:3d:28:02: 70:bf:d1:02:71:d7:aa:6e:72:4f:91:d9:54:7e:25: bb:77:b8:8b:12:4b:47:f9:67:e4:67:e4:17:38:2b: 3e:30:f2:37:22:72:ed:0a:76:09:a2:d8:be:26:15: 17:39:ab:b4:a7:04:95:2d:92:fd:54:ea:d6:ad:6c: 73:21:22:07:7e:f4:78:79:b1:83:5c:28:ce:e4:09: 40:fb:36:c6:5c:0f:53:1c:bc:48:0d:19:19:4c:c5: 4a:9c:cc:04:0f:24:82:32:d8:1c:88:88:9d:72:07: 24:e7:65:00:b9:75:0e:1c:95:80:cc:49:a0:c4:26: 2b:d6:20:47:f3:26:e9:45:6c:6e:ee:31:0e:5c:1b: 7a:f3:24:ac:77:46:0b:77:c6:6a:e7:13:56:cf:2f: bd:53:e1:c2:d4:6b:be:5b:42:00:1b:68:38:b6:41: 29:93:e4:c0:21:a4:ee:3d:4b:1a:e8:c5:a2:68:5e: 3b:fb:d3:0a:de:29:29:a5:d5:8a:d4:34:b8:2b:86: 28:33:4b:e4:6a:22:12:16:08:b5:77:90:01:ca:e2: 0e:2f:79:f5:8b:82:9a:80:9a:a7:13:70:8d:db:71: 68:69:ff:90:89:6c:19:17:e8:b2:b5:2f:af:b2:52: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:06:2E:11:6B:F9:CC:4B:F7:0A:0B:81:45:BB:D8:D4:E9:78:97 X509v3 Authority Key Identifier: keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f8:1a:bc:fd:27:53:3f:85:c6:59:af:4b:a7:54:f4:cc:72: 08:99:f7:ed:d0:a5:a9:7c:06:de:23:b9:5e:af:79:d4:7c:fd: d6:54:16:8e:57:c8:b7:23:e9:fc:b6:fe:98:d4:1e:80:5e:d9: 55:e8:d9:18:14:96:97:60:5f:cc:17:74:6f:63:4c:4f:47:74: 6f:f7:15:03:5d:19:00:f6:d2:09:c7:a6:46:12:2d:3a:98:15: 26:54:b8:6c:ad:e1:ac:b5:50:9d:7c:9f:3a:9c:42:ca:10:84: 9d:92:85:db:d0:a7:e9:07:4c:30:88:76:18:0c:a9:18:a2:53: 62:8d:a1:94:d9:59:03:0d:a9:15:c6:51:cd:5f:2e:d7:87:8a: bd:12:c3:31:bf:ba:fc:ac:79:ef:ad:43:ad:57:ac:0c:de:3a: b1:39:82:ad:ef:b1:e7:94:a3:80:50:4e:33:ba:6c:ca:80:c1: ff:d9:84:e1:3d:c3:27:dc:6e:f6:3e:3d:07:7d:9d:b4:8a:6c: 08:37:e9:b8:e4:26:d4:69:15:0d:84:4e:da:10:0f:da:4e:2a: ce:b9:fc:a7:db:b9:b6:90:39:ff:66:6f:49:67:ed:55:97:4b: db:cb:d1:2a:35:54:64:ce:58:ef:5b:73:1b:2e:e9:5a:fd:bd: d7:9f:b1:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5jPXOKT6VmTDouT0SwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOGE2OGNlMjJhNGMxOWYxNzcwMGY2MmNjZjhiYjZjMmRh ZjUxZTEwHhcNMjYwMjA5MTEwMDQ0WhcNMjYwMjEwMTEwMDQ0WjAzMTEwLwYDVQQD Eyg0OTFiMDYyZTExNmJmOWNjNGJmNzBhMGI4MTQ1YmJkOGQ0ZTk3ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0YoakKVLGeDrY89KAJwv9ECcdeq bnJPkdlUfiW7d7iLEktH+WfkZ+QXOCs+MPI3InLtCnYJoti+JhUXOau0pwSVLZL9 VOrWrWxzISIHfvR4ebGDXCjO5AlA+zbGXA9THLxIDRkZTMVKnMwEDySCMtgciIid cgck52UAuXUOHJWAzEmgxCYr1iBH8ybpRWxu7jEOXBt68ySsd0YLd8Zq5xNWzy+9 U+HC1Gu+W0IAG2g4tkEpk+TAIaTuPUsa6MWiaF47+9MK3ikppdWK1DS4K4YoM0vk aiISFgi1d5AByuIOL3n1i4KagJqnE3CN23Foaf+QiWwZF+iytS+vslLlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkbBi4Ra/nMS/cKC4FFu9jU6XiXMB8GA1UdIwQY MBaAFK+KaM4ipMGfF3APYsz4u2wtr1HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82YjhlYTYtZjkwNy00MGQxLTllN2Qt ZDk0ZTYwMTg0M2QxLzEvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82YjhlYTYtZjkwNy00MGQxLTllN2QtZDk0ZTYwMTg0M2Qx LzEvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPgavP0n Uz+FxlmvS6dU9MxyCJn37dClqXwG3iO5Xq951Hz91lQWjlfItyPp/Lb+mNQegF7Z VejZGBSWl2BfzBd0b2NMT0d0b/cVA10ZAPbSCcemRhItOpgVJlS4bK3hrLVQnXyf OpxCyhCEnZKF29Cn6QdMMIh2GAypGKJTYo2hlNlZAw2pFcZRzV8u14eKvRLDMb+6 /Kx5761DrVesDN46sTmCre+x55SjgFBOM7psyoDB/9mE4T3DJ9xu9j49B32dtIps CDfpuOQm1GkVDYRO2hAP2k4qzrn8p9u5tpA5/2ZvSWftVZdL28vRKjVUZM5Y71tz Gy7pWv2915+xpg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:17 2026 by rpki-client