This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json) Hash identifier: snxjbluRzEZcipBU3fVVN8CAn/qDICcrLX18ToS17YU= Subject key identifier: B6:5F:0C:A6:84:F3:EB:C2:02:C9:2E:04:FD:C5:A1:86:04:09:3A:F0 Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Certificate serial: 019C4358CD6398639D552C23BC2EA6456FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft Manifest number: 0995 Signing time: Mon 09 Feb 2026 17:00:19 +0000 Manifest this update: Mon 09 Feb 2026 17:00:19 +0000 Manifest next update: Tue 10 Feb 2026 17:00:19 +0000 Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: zG+n8cYiVjEwtWjThNwXYPUMACKPEzUiTK3W6EsgL7c=) 2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:cd:63:98:63:9d:55:2c:23:bc:2e:a6:45:6f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Validity Not Before: Feb 9 17:00:19 2026 GMT Not After : Feb 10 17:00:19 2026 GMT Subject: CN=b65f0ca684f3ebc202c92e04fdc5a18604093af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:b3:e3:80:d0:3d:6a:4e:b8:f4:57:fd:53: e9:b4:4a:03:e2:2c:09:18:f0:a9:aa:b2:d0:a1:69: 57:fd:b2:7f:ed:fd:e1:18:7f:8b:02:07:4b:74:0b: 59:4c:2c:98:c7:1d:af:83:9d:63:55:13:93:aa:25: bc:a3:55:60:18:24:3b:6f:1d:9c:d7:2d:bb:44:e5: ed:bd:db:09:b2:b3:21:57:ff:88:ea:fd:9c:cf:8d: da:26:f8:07:ed:4e:61:2b:45:64:3e:e9:8b:d3:b9: 66:f6:4d:5e:34:56:ce:99:2a:a7:17:04:76:2d:00: a4:bb:0c:39:4c:ff:7b:6d:8d:17:d1:2a:d4:47:1b: 3c:2b:42:70:d0:da:95:cb:39:e1:a4:a7:2a:46:10: 62:cc:ef:c5:24:0e:cd:30:07:ec:9e:66:af:52:91: f7:57:d3:37:b3:83:cd:c7:ca:43:3a:6a:12:45:35: 34:5c:3a:42:11:10:79:03:cc:44:1a:f0:a6:d3:40: 34:f7:fd:37:9d:7b:c6:a2:d6:d8:18:dd:94:52:25: ca:99:a4:51:47:fd:4a:af:f3:3e:2c:d2:72:ea:34: b4:4c:90:a2:f1:9a:4d:c5:14:1e:8e:24:1f:97:2f: d3:52:bb:20:37:2f:8e:82:70:cb:35:7b:75:f0:c3: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5F:0C:A6:84:F3:EB:C2:02:C9:2E:04:FD:C5:A1:86:04:09:3A:F0 X509v3 Authority Key Identifier: keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:00:86:82:09:86:4f:59:65:e7:e9:0e:4c:e5:42:0c:67:80: 8e:81:c3:e3:31:50:4e:23:bb:2a:8f:72:7f:21:2b:f9:1c:a2: 65:e4:89:0e:d0:96:d4:0b:27:d8:65:8b:f8:39:11:60:51:38: 9e:c9:76:12:3a:8c:e8:6d:30:fa:76:6a:89:30:3e:fb:46:40: f8:ad:8e:c1:dd:4a:2a:a3:ee:5f:f8:f0:91:eb:bc:43:d0:1e: 7e:c0:4d:22:11:c0:c9:b9:6c:b8:fc:2d:91:29:e0:73:ce:a2: f6:ac:aa:e4:b6:1b:b9:58:b7:a6:a4:8e:29:9f:71:ed:8e:0e: c4:7a:2b:33:1c:cf:10:24:e3:7b:87:78:9d:2a:28:dd:cb:b9: 3a:ff:b5:0a:59:98:cc:ec:ed:09:52:d0:c1:db:2b:88:3e:81: a2:9c:1d:93:67:c9:67:0c:dc:6c:19:39:3b:84:b7:e5:23:26: 46:10:cc:17:41:28:7f:e0:fd:09:a0:d1:93:7a:14:57:9e:bd: 2f:cc:d9:39:3a:f5:d4:21:74:eb:58:df:30:1c:e7:70:16:17: 94:0e:87:ac:32:da:e0:8b:f7:af:52:49:90:91:2a:4c:75:a8: 3a:88:82:c2:4a:6c:db:41:73:65:20:78:21:d4:59:ed:a2:67: 6f:bb:64:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWM1jmGOdVSwjvC6mRW/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5 YzUzZDkwHhcNMjYwMjA5MTcwMDE5WhcNMjYwMjEwMTcwMDE5WjAzMTEwLwYDVQQD EyhiNjVmMGNhNjg0ZjNlYmMyMDJjOTJlMDRmZGM1YTE4NjA0MDkzYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0POz44DQPWpOuPRX/VPptEoD4iwJ GPCpqrLQoWlX/bJ/7f3hGH+LAgdLdAtZTCyYxx2vg51jVROTqiW8o1VgGCQ7bx2c 1y27ROXtvdsJsrMhV/+I6v2cz43aJvgH7U5hK0VkPumL07lm9k1eNFbOmSqnFwR2 LQCkuww5TP97bY0X0SrURxs8K0Jw0NqVyznhpKcqRhBizO/FJA7NMAfsnmavUpH3 V9M3s4PNx8pDOmoSRTU0XDpCERB5A8xEGvCm00A09/03nXvGotbYGN2UUiXKmaRR R/1Kr/M+LNJy6jS0TJCi8ZpNxRQejiQfly/TUrsgNy+OgnDLNXt18MM23wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZfDKaE8+vCAskuBP3FoYYECTrwMB8GA1UdIwQY MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQCGggmG T1ll5+kOTOVCDGeAjoHD4zFQTiO7Ko9yfyEr+RyiZeSJDtCW1Asn2GWL+DkRYFE4 nsl2EjqM6G0w+nZqiTA++0ZA+K2Owd1KKqPuX/jwkeu8Q9AefsBNIhHAyblsuPwt kSngc86i9qyq5LYbuVi3pqSOKZ9x7Y4OxHorMxzPECTje4d4nSoo3cu5Ov+1ClmY zOztCVLQwdsriD6Bopwdk2fJZwzcbBk5O4S35SMmRhDMF0Eof+D9CaDRk3oUV569 L8zZOTr11CF061jfMBzncBYXlA6HrDLa4Iv3r1JJkJEqTHWoOoiCwkps20FzZSB4 IdRZ7aJnb7tkxA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:59 2026 by rpki-client