This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json) Hash identifier: TGR+mjQObhcgCbN4elFtYUzwdsJk/vzW4qGft/xB3m8= Subject key identifier: BD:AB:4F:0F:AE:D3:A2:5C:96:3B:FF:7B:43:1A:FC:E6:78:2C:4B:12 Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91 Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391 Certificate serial: 019C42462070A2243C254F208B025B3F7FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft Manifest number: 1138 Signing time: Mon 09 Feb 2026 12:00:17 +0000 Manifest this update: Mon 09 Feb 2026 12:00:17 +0000 Manifest next update: Tue 10 Feb 2026 12:00:17 +0000 Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: JSMRgjosY5BuZvbr/7FWCKF+u2Jtlp7saHv+DK3Wooo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:20:70:a2:24:3c:25:4f:20:8b:02:5b:3f:7f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391 Validity Not Before: Feb 9 12:00:17 2026 GMT Not After : Feb 10 12:00:17 2026 GMT Subject: CN=bdab4f0faed3a25c963bff7b431afce6782c4b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:30:83:7a:c0:86:e3:56:ba:a5:2a:15:d4: a8:c7:c2:e8:7f:47:90:60:38:1e:25:ee:19:7d:e7: ea:dd:a1:e2:45:0f:36:5c:04:3f:c6:bb:c7:54:cf: 38:a8:b8:2a:5d:0b:b4:47:cf:a1:ec:65:9a:a9:8d: dc:a8:25:da:bf:24:6c:b8:09:39:49:60:b1:67:49: 6f:40:e9:8f:eb:e4:ef:13:30:52:3e:49:97:53:a4: 29:14:d3:aa:7b:ff:f9:8d:35:2f:3d:68:96:5a:9d: ca:b3:73:26:a7:cf:49:ba:1c:de:8c:15:05:37:65: 7d:44:3f:da:ce:b1:c3:8f:8e:d0:6c:6a:83:ca:47: 8f:33:b5:bd:22:b2:05:01:eb:18:54:b7:1b:4f:c9: e4:c4:6e:68:25:66:24:b7:16:b1:f3:21:d1:ad:ad: cf:0e:a6:0a:d6:9f:d3:3a:d3:46:19:0d:02:dd:36: dd:c0:e9:83:c5:5f:83:8e:8b:48:08:f1:40:0e:b8: 86:43:e9:8b:33:68:8f:6a:71:99:3f:3c:a8:50:66: 87:30:47:c8:ae:de:ca:ab:f2:a3:d7:20:5b:53:f8: ba:96:d6:4c:07:c5:f2:48:5f:39:62:d7:98:58:d4: 7c:2d:83:bf:d7:53:cc:8c:51:5b:2e:58:a3:34:85: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:4F:0F:AE:D3:A2:5C:96:3B:FF:7B:43:1A:FC:E6:78:2C:4B:12 X509v3 Authority Key Identifier: keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f1:c1:25:cc:1d:bd:fd:15:7d:c0:e4:29:24:56:fa:fa:87: b5:a0:ff:32:b4:37:a0:60:9e:23:3a:71:54:26:cc:f0:03:5c: 7d:14:2a:a8:e1:41:48:f1:c4:1b:f3:1d:99:5a:59:2b:6c:bb: b2:6d:34:ea:0d:75:59:c4:14:70:25:cd:3e:33:a0:3a:94:6c: 21:07:d4:08:a9:3e:4b:a9:b4:4a:c4:4f:2c:5f:00:9c:58:77: 6c:9b:4c:2e:64:94:8c:60:59:28:f3:d6:ae:e2:e1:f3:6d:87: ac:2e:b0:87:24:cc:5b:a3:9b:6b:a1:09:c0:98:5c:d9:70:21: fb:9a:76:a3:07:6c:29:6e:69:ec:02:7e:0f:03:e5:8e:46:b9: 0a:9f:75:6c:cf:0b:9d:5b:f6:12:7f:c6:a4:ba:43:99:e9:8d: 15:82:8b:1e:ca:05:81:81:40:af:9a:da:1c:53:80:df:3c:14: 6c:39:5f:3d:1f:d3:71:cc:44:3c:ef:84:b8:01:d6:4a:12:9c: 27:eb:df:bf:c2:ed:d5:8e:8b:e1:1e:08:ba:7f:93:d3:53:18: 37:60:be:35:58:6c:5b:db:f1:1e:27:33:a0:0e:68:a1:5a:e7: 9e:48:a3:fb:f5:3b:ce:58:75:99:9a:e9:0b:99:9f:f4:43:3b: 7d:7b:1b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiBwoiQ8JU8giwJbP3+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTFlZjg1MTFiNzU2MmJmM2RjM2MwYjA0MDkzYjMzN2Jj ZTAzOTEwHhcNMjYwMjA5MTIwMDE3WhcNMjYwMjEwMTIwMDE3WjAzMTEwLwYDVQQD EyhiZGFiNGYwZmFlZDNhMjVjOTYzYmZmN2I0MzFhZmNlNjc4MmM0YjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19Iwg3rAhuNWuqUqFdSox8Lof0eQ YDgeJe4Zfefq3aHiRQ82XAQ/xrvHVM84qLgqXQu0R8+h7GWaqY3cqCXavyRsuAk5 SWCxZ0lvQOmP6+TvEzBSPkmXU6QpFNOqe//5jTUvPWiWWp3Ks3Mmp89JuhzejBUF N2V9RD/azrHDj47QbGqDykePM7W9IrIFAesYVLcbT8nkxG5oJWYktxax8yHRra3P DqYK1p/TOtNGGQ0C3TbdwOmDxV+DjotICPFADriGQ+mLM2iPanGZPzyoUGaHMEfI rt7Kq/Kj1yBbU/i6ltZMB8XySF85YteYWNR8LYO/11PMjFFbLlijNIUBywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2rTw+u06Jcljv/e0Ma/OZ4LEsSMB8GA1UdIwQY MBaAFOLh74URt1Yr89w8CwQJOzN7zgORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMt OWI2NTg5MGUyZWFlLzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMtOWI2NTg5MGUyZWFl LzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/HBJcwd vf0VfcDkKSRW+vqHtaD/MrQ3oGCeIzpxVCbM8ANcfRQqqOFBSPHEG/MdmVpZK2y7 sm006g11WcQUcCXNPjOgOpRsIQfUCKk+S6m0SsRPLF8AnFh3bJtMLmSUjGBZKPPW ruLh822HrC6whyTMW6Oba6EJwJhc2XAh+5p2owdsKW5p7AJ+DwPljka5Cp91bM8L nVv2En/GpLpDmemNFYKLHsoFgYFAr5raHFOA3zwUbDlfPR/TccxEPO+EuAHWShKc J+vfv8Lt1Y6L4R4Iun+T01MYN2C+NVhsW9vxHiczoA5ooVrnnkij+/U7zlh1mZrp C5mf9EM7fXsbtg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:44 2026 by rpki-client