This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json) Hash identifier: cVTKnt1D5p658gT4afRUlI7Fn31b2w/9Ks3X9Ux4S0k= Subject key identifier: 52:9B:09:2B:71:9A:9D:FF:7B:9A:9C:C8:9C:5A:11:41:4E:85:6E:7C Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11 Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911 Certificate serial: 019C42EB9A5112F75FA3EA9239279E65782C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft Manifest number: 0D21 Signing time: Mon 09 Feb 2026 15:01:02 +0000 Manifest this update: Mon 09 Feb 2026 15:01:02 +0000 Manifest next update: Tue 10 Feb 2026 15:01:02 +0000 Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: 9k+6AvB4MAgToQHRwC118VicAq8PTaLmOdlQx/IBiD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:9a:51:12:f7:5f:a3:ea:92:39:27:9e:65:78:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e229b37eb630686b1328338471b52da95d204911 Validity Not Before: Feb 9 15:01:02 2026 GMT Not After : Feb 10 15:01:02 2026 GMT Subject: CN=529b092b719a9dff7b9a9cc89c5a11414e856e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:ee:f7:6a:d8:7b:21:0a:4d:7a:cd:89:a2: 01:2f:32:e4:6f:05:2b:06:9b:8a:16:4d:11:8b:7d: 11:ed:f1:26:a0:c6:37:7b:81:6a:61:01:1a:1d:d8: ce:a9:7b:4a:f7:ee:31:1a:70:05:fe:88:c4:68:d2: 0e:b7:83:82:6a:86:ef:38:dc:e0:46:70:21:f5:0c: 7a:e6:f3:a3:94:1d:0d:e9:b9:d6:2b:90:1c:ca:7b: 1d:8f:21:c4:5a:1e:51:86:e8:78:5e:76:a6:13:48: f5:7d:95:29:f4:f8:d2:aa:8c:69:8e:dd:0f:a3:70: e8:2d:85:ba:e5:94:0c:40:84:d4:14:16:52:7c:e0: ae:2b:0c:d4:24:21:ad:b7:9b:95:0c:ff:92:98:8c: f4:cc:51:18:90:70:1a:3f:17:02:10:d8:89:47:d7: 38:85:c2:aa:5c:87:d2:63:02:c9:8a:77:9d:d1:e7: 8d:28:dc:58:86:36:a1:02:b6:29:f5:47:d9:fd:8d: 08:a9:66:a9:aa:a4:6f:29:11:c8:1e:6a:30:a7:73: f2:58:fa:bb:fd:68:87:3f:22:97:74:32:26:6d:fc: 79:a4:52:ed:17:a7:e9:35:0a:96:82:ba:1f:9c:4e: d2:e8:a2:28:f3:53:f9:17:e1:34:a8:87:52:e8:0e: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:09:2B:71:9A:9D:FF:7B:9A:9C:C8:9C:5A:11:41:4E:85:6E:7C X509v3 Authority Key Identifier: keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:81:a3:d5:a1:b0:cc:51:cd:97:93:68:61:3a:df:fe:91:8e: 14:4c:24:a7:3b:0c:c4:93:96:53:d0:81:9f:80:b3:b5:86:33: 89:b7:51:07:1b:57:fb:76:87:f7:ac:c3:24:bd:0c:55:0c:d5: 68:cd:69:2a:aa:5b:9b:87:4c:3a:a6:c6:98:44:c6:f0:ac:c5: 60:96:d6:b4:c7:3d:64:59:53:e8:c0:3c:46:20:cf:b3:80:57: 6d:a0:f7:04:76:fb:99:b1:97:bc:b1:7e:f5:ae:7f:0c:a5:0a: 0e:b2:86:72:14:57:25:97:59:f8:78:f7:9a:2f:a5:20:37:89: 48:85:9c:92:c4:2c:a1:f5:d7:34:13:71:99:fe:4d:61:dc:db: 62:55:b4:67:0a:36:73:20:27:58:d6:b0:61:c4:92:af:c8:0d: e7:7c:51:bd:15:95:7a:da:da:c7:3d:e9:7d:cf:25:b8:ee:72: e1:10:8c:ea:f7:37:48:23:98:72:8f:77:ab:c0:4e:4e:2d:ec: d6:b9:4b:4f:2f:c2:e5:a7:ab:da:7d:95:39:f8:e2:16:6d:36: 2c:10:ac:5f:98:0e:7a:18:4b:95:a7:af:24:16:ff:83:3b:34: 2e:5f:fc:51:ad:6e:0e:ff:8c:2c:41:cf:97:23:7b:fd:c5:3c: 24:20:58:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65pREvdfo+qSOSeeZXgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjliMzdlYjYzMDY4NmIxMzI4MzM4NDcxYjUyZGE5NWQy MDQ5MTEwHhcNMjYwMjA5MTUwMTAyWhcNMjYwMjEwMTUwMTAyWjAzMTEwLwYDVQQD Eyg1MjliMDkyYjcxOWE5ZGZmN2I5YTljYzg5YzVhMTE0MTRlODU2ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR7u92rYeyEKTXrNiaIBLzLkbwUr BpuKFk0Ri30R7fEmoMY3e4FqYQEaHdjOqXtK9+4xGnAF/ojEaNIOt4OCaobvONzg RnAh9Qx65vOjlB0N6bnWK5AcynsdjyHEWh5Rhuh4XnamE0j1fZUp9PjSqoxpjt0P o3DoLYW65ZQMQITUFBZSfOCuKwzUJCGtt5uVDP+SmIz0zFEYkHAaPxcCENiJR9c4 hcKqXIfSYwLJined0eeNKNxYhjahArYp9UfZ/Y0IqWapqqRvKRHIHmowp3PyWPq7 /WiHPyKXdDImbfx5pFLtF6fpNQqWgrofnE7S6KIo81P5F+E0qIdS6A6u0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKbCStxmp3/e5qcyJxaEUFOhW58MB8GA1UdIwQY MBaAFOIps362MGhrEygzhHG1LaldIEkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMt N2RlOGQ4YzJlOTMwLzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMtN2RlOGQ4YzJlOTMw LzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYGj1aGw zFHNl5NoYTrf/pGOFEwkpzsMxJOWU9CBn4CztYYzibdRBxtX+3aH96zDJL0MVQzV aM1pKqpbm4dMOqbGmETG8KzFYJbWtMc9ZFlT6MA8RiDPs4BXbaD3BHb7mbGXvLF+ 9a5/DKUKDrKGchRXJZdZ+Hj3mi+lIDeJSIWcksQsofXXNBNxmf5NYdzbYlW0Zwo2 cyAnWNawYcSSr8gN53xRvRWVetraxz3pfc8luO5y4RCM6vc3SCOYco93q8BOTi3s 1rlLTy/C5aer2n2VOfjiFm02LBCsX5gOehhLlaevJBb/gzs0Ll/8Ua1uDv+MLEHP lyN7/cU8JCBYoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:05 2026 by rpki-client