This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json) Hash identifier: I8Z8Ws6N7ncpOancnknDvw5BhWyrccJDnwPS3R1yoSk= Subject key identifier: C2:10:81:4C:23:0D:79:F7:82:1F:F6:7C:A1:AD:07:EB:30:46:C4:3D Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7 Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7 Certificate serial: 019C4510A2DF77E2F939878061D01F447F10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft Manifest number: 03A7 Signing time: Tue 10 Feb 2026 01:00:44 +0000 Manifest this update: Tue 10 Feb 2026 01:00:44 +0000 Manifest next update: Wed 11 Feb 2026 01:00:44 +0000 Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: omkneUlBt6wXSqrtXcHc04YI/W+X0IY+FzbuOE2136k=) 2: Xhzxh_1tEvbHh31P53cpofaJHAY.roa (hash: 31jnPeVemUW3b4ECC8z4gudFDjDHIoHHJ4mUtzZB8F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:a2:df:77:e2:f9:39:87:80:61:d0:1f:44:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7 Validity Not Before: Feb 10 01:00:44 2026 GMT Not After : Feb 11 01:00:44 2026 GMT Subject: CN=c210814c230d79f7821ff67ca1ad07eb3046c43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:01:28:f7:4e:84:b4:4e:14:16:fa:c9:fc: c9:32:7d:9d:6c:10:e9:df:7b:14:86:58:37:48:1e: d8:63:27:f9:f0:c5:de:ba:ca:7a:52:fa:be:25:e2: d7:94:67:7e:ff:f7:da:ce:b4:f3:bf:9b:a9:ef:11: 60:5d:82:0d:fc:b5:62:63:b5:71:5b:e5:09:c9:40: cf:fa:e9:46:e1:f3:4d:98:90:58:94:04:b7:e1:7a: 4f:8f:ad:cf:ab:c7:85:27:a1:2b:50:df:05:22:c6: 06:c7:67:e4:47:3c:6d:26:86:87:d5:05:ea:5d:60: dc:30:7e:d4:dc:65:7c:f2:98:d6:9e:1c:40:17:bf: f7:31:2c:ee:63:10:8a:76:2e:dd:63:d4:c3:80:a3: 8a:4f:2b:7b:8a:f3:ac:f6:e9:29:ad:8f:b5:75:2e: c4:c8:b7:3c:10:89:6d:b6:d5:6d:a6:b8:c2:6c:31: 85:74:25:86:17:02:b4:5e:b7:26:c2:92:71:4d:0d: cd:fe:b9:a8:e8:8b:01:e3:4a:af:98:92:e2:68:95: d5:31:18:a8:39:f3:c9:19:d8:f5:d5:96:04:53:17: 5f:fb:14:47:6d:4e:1c:27:e4:12:c3:bc:7c:99:c0: 3d:7a:7f:82:0f:e2:e4:6f:97:53:30:88:d7:f8:95: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:10:81:4C:23:0D:79:F7:82:1F:F6:7C:A1:AD:07:EB:30:46:C4:3D X509v3 Authority Key Identifier: keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b5:33:7a:11:62:d7:6c:ac:a9:d0:f9:6d:b1:a6:00:5f:c0: f6:6f:52:1c:e0:04:d9:0d:8a:47:b6:db:fb:16:2f:e8:dd:99: 5d:44:2f:c0:94:fa:0f:e7:0d:b7:21:5a:93:f1:89:8d:c7:1c: 62:c2:b9:8c:3d:f3:6b:b3:fa:89:63:51:dc:6c:2b:71:5b:92: 51:8b:7a:69:10:b7:bd:ba:6a:d4:7c:d5:cf:95:61:16:0b:94: ce:4c:95:aa:ec:bd:83:4d:4a:21:c9:00:20:c7:61:5a:21:ee: 6b:cb:a0:6d:24:04:b6:9f:19:84:69:db:22:e9:8c:52:ba:6f: 1d:a6:96:b1:74:fd:08:00:2a:84:5b:73:7d:87:e2:53:c5:34: 8a:34:29:d4:95:ab:a1:ab:e4:ca:0b:bc:4c:ec:8a:6c:44:78: 98:9e:28:ef:a9:45:d1:62:b8:62:ec:8c:8b:00:a4:e8:39:80: c1:8b:16:18:86:c5:ad:ab:59:65:18:e6:dc:88:66:b1:95:4f: e7:6d:23:37:3b:f1:e2:39:44:54:c3:07:ad:ae:db:75:92:6a: da:80:2d:f8:78:fd:c2:ce:8e:23:a6:2e:e0:19:0f:0f:d8:72: b7:2d:80:b9:0a:23:76:f5:7d:25:10:56:b6:f9:72:71:89:26: 0e:c7:90:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEKLfd+L5OYeAYdAfRH8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNzc2YjA4MzhmYTBlMWRhMWJlNGVkY2NmODkyNGJkNDEz YjFkYjcwHhcNMjYwMjEwMDEwMDQ0WhcNMjYwMjExMDEwMDQ0WjAzMTEwLwYDVQQD EyhjMjEwODE0YzIzMGQ3OWY3ODIxZmY2N2NhMWFkMDdlYjMwNDZjNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI4BKPdOhLROFBb6yfzJMn2dbBDp 33sUhlg3SB7YYyf58MXeusp6Uvq+JeLXlGd+//fazrTzv5up7xFgXYIN/LViY7Vx W+UJyUDP+ulG4fNNmJBYlAS34XpPj63Pq8eFJ6ErUN8FIsYGx2fkRzxtJoaH1QXq XWDcMH7U3GV88pjWnhxAF7/3MSzuYxCKdi7dY9TDgKOKTyt7ivOs9ukprY+1dS7E yLc8EIltttVtprjCbDGFdCWGFwK0XrcmwpJxTQ3N/rmo6IsB40qvmJLiaJXVMRio OfPJGdj11ZYEUxdf+xRHbU4cJ+QSw7x8mcA9en+CD+Lkb5dTMIjX+JXo9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIQgUwjDXn3gh/2fKGtB+swRsQ9MB8GA1UdIwQY MBaAFOB3awg4+g4dob5O3M+JJL1BOx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjIt NzM5YTkxYzYyMGFjLzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjItNzM5YTkxYzYyMGFj LzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbUzehFi 12ysqdD5bbGmAF/A9m9SHOAE2Q2KR7bb+xYv6N2ZXUQvwJT6D+cNtyFak/GJjccc YsK5jD3za7P6iWNR3GwrcVuSUYt6aRC3vbpq1HzVz5VhFguUzkyVquy9g01KIckA IMdhWiHua8ugbSQEtp8ZhGnbIumMUrpvHaaWsXT9CAAqhFtzfYfiU8U0ijQp1JWr oavkygu8TOyKbER4mJ4o76lF0WK4YuyMiwCk6DmAwYsWGIbFratZZRjm3IhmsZVP 520jNzvx4jlEVMMHra7bdZJq2oAt+Hj9ws6OI6Yu4BkPD9hyty2AuQojdvV9JRBW tvlycYkmDseQ/g== -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:19 2026 by rpki-client