This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json) Hash identifier: 1dsnF2vpNmNX1WpNbRjdhNExL1c/28iFH48L74vsWRc= Subject key identifier: 6A:55:F6:2F:95:4A:AD:47:D3:AA:AE:D0:C6:16:D0:0A:DC:FB:31:15 Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Certificate serial: 019C44A2B6596FD4E6F60843C1B7F92A6E58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft Manifest number: 0B6C Signing time: Mon 09 Feb 2026 23:00:40 +0000 Manifest this update: Mon 09 Feb 2026 23:00:40 +0000 Manifest next update: Tue 10 Feb 2026 23:00:40 +0000 Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: /3r5sj3LhAGNkNFsSQ3BDc9Qr+2dq7+b5o/0Eg/DCYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:b6:59:6f:d4:e6:f6:08:43:c1:b7:f9:2a:6e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Validity Not Before: Feb 9 23:00:40 2026 GMT Not After : Feb 10 23:00:40 2026 GMT Subject: CN=6a55f62f954aad47d3aaaed0c616d00adcfb3115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:00:f2:ff:c7:d8:89:95:f8:8c:ed:c7:bf: 0b:c2:ea:6f:3d:fc:db:76:30:dc:94:94:15:f0:b6: a1:79:f7:aa:73:77:ba:59:7c:4c:1b:2c:05:fb:27: 18:55:8a:bd:ed:86:ba:2e:5a:7f:33:01:c0:72:d7: 77:24:12:63:a4:34:8e:6c:b7:bf:b7:8e:b7:57:8f: 6a:91:ef:a4:a7:65:04:99:1b:39:44:f3:d8:3a:8c: 0f:a5:a8:6e:2e:dc:14:29:ed:a7:10:8b:09:63:de: f7:1c:2d:6c:7c:af:b2:50:ad:d1:9f:6e:2c:1a:38: b7:ff:e7:a8:67:11:1a:72:b3:53:57:71:cc:57:c5: d9:df:fd:eb:26:46:fd:15:96:07:91:0f:a4:51:9c: 4b:6b:e4:24:2c:bf:5f:f9:23:48:b6:a5:71:3a:3c: ab:a1:35:d0:af:55:54:28:e5:6f:eb:bb:c6:b5:68: d6:8a:28:75:a2:17:f4:1f:d4:26:aa:a0:61:18:73: 44:e7:9d:13:a6:17:e8:35:df:dc:5f:2f:e1:7d:78: 34:4d:4f:3d:e6:51:e6:57:8d:7e:a6:a6:5b:f1:37: ac:2d:7d:ca:14:06:86:a9:7e:c3:19:90:ea:62:41: 74:ae:a5:67:d8:f1:96:1e:bc:d7:ab:21:7d:31:a4: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:55:F6:2F:95:4A:AD:47:D3:AA:AE:D0:C6:16:D0:0A:DC:FB:31:15 X509v3 Authority Key Identifier: keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cf:24:6b:53:8e:98:2f:d3:5e:ed:ac:28:6e:69:ec:03:2c: 1b:9d:bb:45:40:ec:a4:33:3b:43:ca:bb:82:12:b4:4e:20:5d: 27:83:17:f2:f0:9c:20:14:c3:68:32:f7:58:2a:4f:20:7d:ef: b9:8c:dc:77:2d:85:0e:aa:48:a8:87:5d:c2:8f:ed:e7:34:3d: b1:06:d1:07:ee:db:ef:2b:02:4f:d7:c1:16:1b:ad:c9:99:80: 52:6c:e7:cf:03:4d:c9:6f:3c:50:c1:ac:95:40:8b:04:60:81: 0c:52:72:2f:84:af:94:ff:1c:4a:a3:6f:f6:f7:be:77:f9:34: 4b:c1:08:ab:2b:3a:a0:bb:4d:01:e5:3b:04:ab:3c:5f:63:7d: d7:8a:ad:62:dd:d8:08:16:8b:6a:20:61:dd:04:75:71:a1:e6: 8a:5d:b3:0e:6a:7b:87:de:ae:79:42:1a:3b:13:17:13:e0:a8: de:fd:0f:23:89:c8:e5:cb:40:51:2a:d0:73:37:1d:f6:03:0b: 01:c7:5c:6e:19:c6:f2:7b:ea:9e:18:28:ff:4a:8e:f9:55:8e: 48:3f:de:96:54:75:d9:52:b3:6e:06:54:9f:96:b3:17:84:fa: e8:09:74:2b:ca:7b:27:bc:a4:04:f7:4d:c1:da:07:a6:09:48: 9d:c4:3e:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEorZZb9Tm9ghDwbf5Km5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmY2NGY3ZjY5N2FhOWI2ZTk5ODJjMGI3NmJiNzg0MjEz Mzg3NmEwHhcNMjYwMjA5MjMwMDQwWhcNMjYwMjEwMjMwMDQwWjAzMTEwLwYDVQQD Eyg2YTU1ZjYyZjk1NGFhZDQ3ZDNhYWFlZDBjNjE2ZDAwYWRjZmIzMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwksA8v/H2ImV+Iztx78LwupvPfzb djDclJQV8Lahefeqc3e6WXxMGywF+ycYVYq97Ya6Llp/MwHActd3JBJjpDSObLe/ t463V49qke+kp2UEmRs5RPPYOowPpahuLtwUKe2nEIsJY973HC1sfK+yUK3Rn24s Gji3/+eoZxEacrNTV3HMV8XZ3/3rJkb9FZYHkQ+kUZxLa+QkLL9f+SNItqVxOjyr oTXQr1VUKOVv67vGtWjWiih1ohf0H9QmqqBhGHNE550TphfoNd/cXy/hfXg0TU89 5lHmV41+pqZb8TesLX3KFAaGqX7DGZDqYkF0rqVn2PGWHrzXqyF9MaQXDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpV9i+VSq1H06qu0MYW0Arc+zEVMB8GA1UdIwQY MBaAFOEvZPf2l6qbbpmCwLdrt4QhM4dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUt NDdjMTBhNWNlNTM0LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUtNDdjMTBhNWNlNTM0 LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM8ka1OO mC/TXu2sKG5p7AMsG527RUDspDM7Q8q7ghK0TiBdJ4MX8vCcIBTDaDL3WCpPIH3v uYzcdy2FDqpIqIddwo/t5zQ9sQbRB+7b7ysCT9fBFhutyZmAUmznzwNNyW88UMGs lUCLBGCBDFJyL4SvlP8cSqNv9ve+d/k0S8EIqys6oLtNAeU7BKs8X2N914qtYt3Y CBaLaiBh3QR1caHmil2zDmp7h96ueUIaOxMXE+Co3v0PI4nI5ctAUSrQczcd9gML AcdcbhnG8nvqnhgo/0qO+VWOSD/ellR12VKzbgZUn5azF4T66Al0K8p7J7ykBPdN wdoHpglIncQ+kw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:47 2026 by rpki-client