This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json) Hash identifier: WApGHczFsq/s8uuzSYID1Y4hzva+rjJWpJtq1gQJom0= Subject key identifier: 84:16:B1:2A:35:40:74:F0:C0:D8:6E:AA:E3:40:30:2F:04:A3:F0:ED Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26 Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026 Certificate serial: 019C424644BDC2CBE1E23ACA407ECD400F89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft Manifest number: 136B Signing time: Mon 09 Feb 2026 12:00:26 +0000 Manifest this update: Mon 09 Feb 2026 12:00:26 +0000 Manifest next update: Tue 10 Feb 2026 12:00:26 +0000 Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: c+98snRSDAm4OrzlMubSBN7jYfopk4nweOWngCOml10=) 2: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:44:bd:c2:cb:e1:e2:3a:ca:40:7e:cd:40:0f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026 Validity Not Before: Feb 9 12:00:26 2026 GMT Not After : Feb 10 12:00:26 2026 GMT Subject: CN=8416b12a354074f0c0d86eaae340302f04a3f0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:44:e1:45:92:0e:6b:dc:19:77:ac:f2:35: f5:fc:ad:bf:7c:98:37:0e:88:38:fc:1f:bb:36:7b: 6e:ae:65:ec:b6:b8:0b:35:fc:78:9f:7a:a6:db:16: 2a:08:2d:a9:21:0d:46:2f:6b:a3:d5:cc:2b:5f:c2: e3:00:df:46:df:4c:2a:92:96:44:63:5e:a7:a0:b0: 86:b6:85:87:55:c6:ae:9d:4d:76:a6:67:ff:c4:7c: 1c:d7:4b:89:b9:99:df:cd:1e:c0:ce:53:b8:e9:01: ac:8f:ae:04:7a:9a:68:68:84:68:3a:74:84:5c:96: 3f:ec:15:b4:eb:3a:79:5d:20:78:9c:36:fd:9d:32: b8:c7:a5:36:4c:d3:7a:6e:19:a3:72:31:4c:49:6c: 78:1a:c7:79:9b:7b:a4:96:66:7f:fb:67:31:81:66: 04:9a:08:93:e8:00:ba:4b:57:60:17:ca:f4:c7:22: ac:77:76:c7:28:bc:fb:b7:58:95:b7:b9:24:48:4b: dc:07:c0:87:d7:3e:c9:45:44:77:19:96:a0:5d:42: b5:3f:88:a0:cc:d9:24:55:a5:ae:a1:be:cb:32:15: 16:f7:e8:b9:df:99:84:56:12:22:94:e9:92:10:dc: ba:e3:99:12:07:91:ce:84:76:63:3b:19:90:d0:da: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:16:B1:2A:35:40:74:F0:C0:D8:6E:AA:E3:40:30:2F:04:A3:F0:ED X509v3 Authority Key Identifier: keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5c:f8:53:9b:3a:da:68:2b:34:74:3c:e3:f1:66:9c:93:e6: 8b:1a:f7:46:4d:92:c4:9d:75:87:64:92:81:3e:d9:11:4c:37: c6:be:56:c3:47:51:ff:b2:13:35:2b:de:68:e4:8a:ef:00:fd: d3:8e:85:4c:a8:6b:15:a2:c5:97:f9:15:30:7f:84:41:49:dc: 9c:b9:0d:08:d9:7e:5b:3a:66:5c:6c:de:98:69:6b:c2:5e:f8: ad:b2:17:62:a3:4c:f7:5c:5c:93:78:43:ce:1e:de:8f:07:7c: 64:cc:66:4e:ba:1d:8f:05:76:09:07:cc:e6:60:10:22:1e:33: 68:8b:f0:13:49:21:c5:8b:72:a5:61:eb:66:3c:53:bf:7e:bc: d5:40:2d:d6:70:63:de:d8:67:72:46:5f:b5:86:5d:d4:9b:ad: 95:28:71:8e:6f:2c:39:32:7d:86:72:41:de:11:80:31:34:ec: d2:06:ae:11:fc:e6:87:8b:09:80:59:6b:55:53:87:20:df:55: 6f:ad:35:b1:c6:14:b9:04:94:fb:0e:ef:49:51:1d:1a:3e:ee: ce:29:96:e0:84:d4:17:41:1c:43:a7:f9:57:ce:3d:64:20:e1: a0:2d:1e:f8:80:1e:50:b8:0b:7f:10:e9:8d:7f:18:20:33:65: 58:90:fb:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkS9wsvh4jrKQH7NQA+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm ZDIwMjYwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD Eyg4NDE2YjEyYTM1NDA3NGYwYzBkODZlYWFlMzQwMzAyZjA0YTNmMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfZE4UWSDmvcGXes8jX1/K2/fJg3 Dog4/B+7NnturmXstrgLNfx4n3qm2xYqCC2pIQ1GL2uj1cwrX8LjAN9G30wqkpZE Y16noLCGtoWHVcaunU12pmf/xHwc10uJuZnfzR7AzlO46QGsj64EeppoaIRoOnSE XJY/7BW06zp5XSB4nDb9nTK4x6U2TNN6bhmjcjFMSWx4Gsd5m3uklmZ/+2cxgWYE mgiT6AC6S1dgF8r0xyKsd3bHKLz7t1iVt7kkSEvcB8CH1z7JRUR3GZagXUK1P4ig zNkkVaWuob7LMhUW9+i535mEVhIilOmSENy645kSB5HOhHZjOxmQ0NrEuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQWsSo1QHTwwNhuquNAMC8Eo/DtMB8GA1UdIwQY MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct ZWRhMjNmMmYxN2U5LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5 LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFz4U5s6 2mgrNHQ84/FmnJPmixr3Rk2SxJ11h2SSgT7ZEUw3xr5Ww0dR/7ITNSveaOSK7wD9 046FTKhrFaLFl/kVMH+EQUncnLkNCNl+WzpmXGzemGlrwl74rbIXYqNM91xck3hD zh7ejwd8ZMxmTrodjwV2CQfM5mAQIh4zaIvwE0khxYtypWHrZjxTv3681UAt1nBj 3thnckZftYZd1JutlShxjm8sOTJ9hnJB3hGAMTTs0gauEfzmh4sJgFlrVVOHIN9V b601scYUuQSU+w7vSVEdGj7uzimW4ITUF0EcQ6f5V849ZCDhoC0e+IAeULgLfxDp jX8YIDNlWJD79A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:50 2026 by rpki-client