This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json) Hash identifier: dbexCORoqt2bJVdD3xXerznrBN2U7HGMA7ck3P/Yoko= Subject key identifier: 86:F3:0E:16:2D:AE:84:C4:BA:94:26:99:9F:45:B9:AC:AC:42:AB:62 Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd Certificate serial: 019C43C6C0308D55CA0B55E7507A2EAA77D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft Manifest number: 12D4 Signing time: Mon 09 Feb 2026 19:00:24 +0000 Manifest this update: Mon 09 Feb 2026 19:00:24 +0000 Manifest next update: Tue 10 Feb 2026 19:00:24 +0000 Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: pC/41vgYUnSu0SaC6Qn/eDzDly3JFoJHfKh+vWlHaMk=) 2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:c0:30:8d:55:ca:0b:55:e7:50:7a:2e:aa:77:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd Validity Not Before: Feb 9 19:00:24 2026 GMT Not After : Feb 10 19:00:24 2026 GMT Subject: CN=86f30e162dae84c4ba9426999f45b9acac42ab62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:63:8d:f8:18:5e:d6:0d:ac:5d:79:2b:17: 55:0f:ae:aa:ef:1d:13:6f:7f:07:ee:81:79:47:19: 17:32:fc:a4:bf:f2:3b:90:98:58:68:2f:f4:09:2e: 40:59:d5:29:1b:0b:89:de:e7:0e:ae:8d:88:d9:ff: 4c:96:8b:b0:b4:a3:7f:d9:7d:64:6c:85:ea:c1:7b: 81:79:83:81:88:60:9d:0a:78:e8:e0:a5:73:a5:f6: f5:46:f9:00:d0:63:19:c4:2a:cd:b4:41:ea:06:ff: 50:ea:60:83:f4:a9:45:79:dc:29:31:d0:c5:f8:63: 83:7f:00:81:78:9b:0f:78:a6:a4:ef:c3:4c:48:bc: fe:d0:41:9e:4e:ee:1c:ef:cc:f4:92:73:55:f3:1b: e3:e6:14:03:3a:07:18:05:b8:d2:c0:90:29:5f:17: 82:68:96:2c:8e:20:1e:39:0f:ef:f9:8b:0d:42:46: 7e:bc:18:a5:cb:f2:58:0d:5f:2c:52:13:41:69:c8: 24:ab:3d:e2:ec:03:5a:84:0d:63:fc:e2:f4:a9:a0: c5:44:db:c5:e1:63:13:6a:6b:f1:0b:1c:d2:6a:80: 80:bb:7b:78:bc:b9:ef:ba:8c:e2:34:de:02:08:68: 22:fb:09:d5:b0:b4:7d:72:a8:d1:f0:69:c2:fa:a6: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F3:0E:16:2D:AE:84:C4:BA:94:26:99:9F:45:B9:AC:AC:42:AB:62 X509v3 Authority Key Identifier: keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a8:69:df:c4:8d:eb:a9:2f:5b:ab:2d:6a:1e:bd:73:1b:e8: fc:db:c2:28:05:4f:ec:9e:82:dc:62:48:ba:ed:b2:37:41:db: d5:f4:c0:57:03:d2:aa:87:c8:29:2c:5a:87:15:dd:f6:83:83: 13:fe:73:a0:5e:6d:b5:ea:86:57:d3:f5:bb:16:91:8e:e6:22: 99:03:b0:a6:6b:ba:6c:08:8a:07:a5:11:b3:7c:4d:66:dc:4e: e6:43:fc:48:de:62:22:48:52:d9:f1:bb:d4:cf:8c:14:77:e7: 6e:7a:ee:81:98:5f:6d:cd:93:77:8d:23:f5:cc:dc:67:61:cd: e9:26:cb:41:c2:72:78:9e:fd:26:82:f5:68:30:2e:e3:ec:61: a7:03:97:f8:5b:9b:81:24:b7:8b:dd:2c:3d:b4:c6:fb:d6:8a: 34:d2:eb:83:a0:5f:42:be:60:88:ac:9b:7e:86:ea:51:7d:05: 35:50:9e:3a:ff:96:f2:fa:c0:4a:25:d7:96:3c:68:ab:4a:3c: e3:07:cc:5e:aa:53:23:0b:8c:6a:21:ff:c5:cd:57:23:bf:8a: 44:2f:30:8f:e8:1b:29:29:03:9c:57:f8:71:05:11:10:50:ba: 47:db:3c:5a:c0:02:6a:48:e0:04:74:fc:40:75:33:02:a1:61: d8:1e:21:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxsAwjVXKC1XnUHouqnfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTlmZTNjOGE2OWQ1MDkzNWExZjc0OTY2NmUwOGRjNzU0 NTk0ZGQwHhcNMjYwMjA5MTkwMDI0WhcNMjYwMjEwMTkwMDI0WjAzMTEwLwYDVQQD Eyg4NmYzMGUxNjJkYWU4NGM0YmE5NDI2OTk5ZjQ1YjlhY2FjNDJhYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYVjjfgYXtYNrF15KxdVD66q7x0T b38H7oF5RxkXMvykv/I7kJhYaC/0CS5AWdUpGwuJ3ucOro2I2f9MlouwtKN/2X1k bIXqwXuBeYOBiGCdCnjo4KVzpfb1RvkA0GMZxCrNtEHqBv9Q6mCD9KlFedwpMdDF +GODfwCBeJsPeKak78NMSLz+0EGeTu4c78z0knNV8xvj5hQDOgcYBbjSwJApXxeC aJYsjiAeOQ/v+YsNQkZ+vBily/JYDV8sUhNBacgkqz3i7ANahA1j/OL0qaDFRNvF 4WMTamvxCxzSaoCAu3t4vLnvuoziNN4CCGgi+wnVsLR9cqjR8GnC+qZ3dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbzDhYtroTEupQmmZ9FuaysQqtiMB8GA1UdIwQY MBaAFOGp/jyKadUJNaH3SWZuCNx1RZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGIt NmI2ZmRiNTRiYTMxLzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGItNmI2ZmRiNTRiYTMx LzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADahp38SN 66kvW6stah69cxvo/NvCKAVP7J6C3GJIuu2yN0Hb1fTAVwPSqofIKSxahxXd9oOD E/5zoF5tteqGV9P1uxaRjuYimQOwpmu6bAiKB6URs3xNZtxO5kP8SN5iIkhS2fG7 1M+MFHfnbnrugZhfbc2Td40j9czcZ2HN6SbLQcJyeJ79JoL1aDAu4+xhpwOX+Fub gSS3i90sPbTG+9aKNNLrg6BfQr5giKybfobqUX0FNVCeOv+W8vrASiXXljxoq0o8 4wfMXqpTIwuMaiH/xc1XI7+KRC8wj+gbKSkDnFf4cQUREFC6R9s8WsACakjgBHT8 QHUzAqFh2B4h3Q== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:46 2026 by rpki-client