This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json) Hash identifier: HQE5nOi5MGGTdgjvlAn6erg/E/5nBfGPH1e9qw+unzQ= Subject key identifier: 91:24:F0:5C:4C:4B:D6:98:81:44:34:B3:DA:14:67:5B:C4:B0:DB:FC Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d Certificate serial: 019C4322F02E56C1FCE7F75479617B5BB92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft Manifest number: 0D68 Signing time: Mon 09 Feb 2026 16:01:29 +0000 Manifest this update: Mon 09 Feb 2026 16:01:29 +0000 Manifest next update: Tue 10 Feb 2026 16:01:29 +0000 Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: mVuXazir1RgIX3SaDMCuAfIQz2ROwIzgK4alr3vrOGc=) 2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f0:2e:56:c1:fc:e7:f7:54:79:61:7b:5b:b9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d Validity Not Before: Feb 9 16:01:29 2026 GMT Not After : Feb 10 16:01:29 2026 GMT Subject: CN=9124f05c4c4bd698814434b3da14675bc4b0dbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:3d:eb:95:ee:49:2b:b9:f1:ca:fb:7a:34: de:8f:d4:ce:b4:26:85:44:62:ed:9a:bc:64:e9:8f: d7:9b:81:65:01:64:f8:ed:b9:aa:e1:2d:f8:2f:60: 9d:61:bd:bb:7f:51:a3:97:0a:ab:da:da:4f:66:14: f9:51:37:a8:f8:59:c4:d1:49:a2:9a:49:bd:f0:53: de:2e:36:15:24:17:8f:2a:a6:02:c9:de:ca:aa:f3: e7:a5:55:74:b3:33:56:54:3f:8c:17:30:77:43:c4: ed:41:e8:d3:32:46:54:06:8c:1d:8d:f0:74:33:cc: c8:21:6a:2a:a8:19:7d:63:2c:05:23:a4:21:49:f1: c6:aa:56:98:f3:4e:4e:15:53:4f:95:3a:55:65:a1: fb:d6:c9:e9:17:2a:2f:e0:51:e1:60:d7:4a:8b:f3: 8b:fa:76:63:64:07:ec:5f:5f:e0:f4:3c:d3:f5:40: 9e:d4:26:28:cf:c8:75:dc:fb:24:ff:77:ed:f4:5d: bd:49:1f:e5:ee:1e:5e:44:01:b5:2e:b5:39:62:ad: c6:f2:ba:28:0d:cd:35:3e:9c:d9:23:b0:88:78:26: c8:2f:81:8f:62:ad:29:77:89:68:76:74:18:2e:b7: 02:0a:b1:01:fc:24:9a:99:c1:2c:e8:e1:8b:19:76: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:24:F0:5C:4C:4B:D6:98:81:44:34:B3:DA:14:67:5B:C4:B0:DB:FC X509v3 Authority Key Identifier: keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:df:bc:1e:b4:81:70:d6:e4:ff:76:90:ea:0f:3e:49:cd:04: fb:f3:42:76:81:fe:33:93:50:df:ff:d7:29:08:b4:23:70:e4: 57:4f:d6:63:9e:d0:ac:26:4a:a7:0d:93:2a:53:be:ad:1a:ce: 18:6f:8d:06:e6:5a:65:c9:47:2c:c9:84:eb:7f:5e:4a:c0:c3: 08:8b:45:0e:ba:70:0b:bc:c1:13:eb:89:79:c5:55:fd:21:9f: 3b:37:4d:fd:4e:80:37:31:79:d2:7d:dd:ed:ce:f8:27:9f:1e: b4:96:9d:6f:9e:fc:4f:c0:27:17:ac:f9:e1:97:29:26:65:86: 3a:31:ec:dd:75:08:33:c4:da:63:25:ca:14:0b:cc:d9:23:5a: 0f:60:28:bc:28:a2:07:d7:38:e9:be:eb:6d:16:5a:a5:7a:23: a2:01:7e:1c:29:69:75:52:c5:81:e9:e5:eb:d4:6d:1f:fc:e7: 72:d0:41:78:d7:15:49:93:2c:58:41:a4:38:2b:57:58:9d:1b: 7d:d5:9f:da:07:da:44:5a:b3:0a:df:8e:bc:b4:9d:60:10:2e: 5a:50:4a:a6:59:40:30:8d:7c:bb:bd:76:bc:c9:dd:3f:f8:41: e1:63:cf:81:c4:91:19:0a:e7:24:4d:89:97:83:c1:f5:ab:2a: e6:ec:a1:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvAuVsH85/dUeWF7W7ksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1 NjVlOWQwHhcNMjYwMjA5MTYwMTI5WhcNMjYwMjEwMTYwMTI5WjAzMTEwLwYDVQQD Eyg5MTI0ZjA1YzRjNGJkNjk4ODE0NDM0YjNkYTE0Njc1YmM0YjBkYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylM965XuSSu58cr7ejTej9TOtCaF RGLtmrxk6Y/Xm4FlAWT47bmq4S34L2CdYb27f1Gjlwqr2tpPZhT5UTeo+FnE0Umi mkm98FPeLjYVJBePKqYCyd7KqvPnpVV0szNWVD+MFzB3Q8TtQejTMkZUBowdjfB0 M8zIIWoqqBl9YywFI6QhSfHGqlaY805OFVNPlTpVZaH71snpFyov4FHhYNdKi/OL +nZjZAfsX1/g9DzT9UCe1CYoz8h13Psk/3ft9F29SR/l7h5eRAG1LrU5Yq3G8roo Dc01PpzZI7CIeCbIL4GPYq0pd4lodnQYLrcCCrEB/CSamcEs6OGLGXacOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEk8FxMS9aYgUQ0s9oUZ1vEsNv8MB8GA1UdIwQY MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN+8HrSB cNbk/3aQ6g8+Sc0E+/NCdoH+M5NQ3//XKQi0I3DkV0/WY57QrCZKpw2TKlO+rRrO GG+NBuZaZclHLMmE639eSsDDCItFDrpwC7zBE+uJecVV/SGfOzdN/U6ANzF50n3d 7c74J58etJadb578T8AnF6z54ZcpJmWGOjHs3XUIM8TaYyXKFAvM2SNaD2AovCii B9c46b7rbRZapXojogF+HClpdVLFgenl69RtH/znctBBeNcVSZMsWEGkOCtXWJ0b fdWf2gfaRFqzCt+OvLSdYBAuWlBKpllAMI18u712vMndP/hB4WPPgcSRGQrnJE2J l4PB9asq5uyhEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:36 2026 by rpki-client