This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json) Hash identifier: Wxk7iAPZk0DA73cUnQwlVtDYG62VyRy3dSuF/+6vtnw= Subject key identifier: 21:E2:3E:4C:6C:E9:D4:E9:90:3F:F2:D6:90:25:58:BA:42:D1:A4:1F Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02 Certificate serial: 019C420FABB3B513F13038EC6FBCE3F1C43C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft Manifest number: 0E03 Signing time: Mon 09 Feb 2026 11:00:49 +0000 Manifest this update: Mon 09 Feb 2026 11:00:49 +0000 Manifest next update: Tue 10 Feb 2026 11:00:49 +0000 Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: NQen3IleHO2sHV+uZPcgrNCcEhen+LCchqZhqal4CNE=) 2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ab:b3:b5:13:f1:30:38:ec:6f:bc:e3:f1:c4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02 Validity Not Before: Feb 9 11:00:49 2026 GMT Not After : Feb 10 11:00:49 2026 GMT Subject: CN=21e23e4c6ce9d4e9903ff2d6902558ba42d1a41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:42:05:56:03:41:5b:34:11:1c:55:5c:18: b5:25:4d:13:fb:f6:df:fc:18:bd:53:f3:93:4a:1c: 9c:05:30:7a:78:ee:40:92:0c:e8:19:9d:0c:59:3c: 1d:e0:98:44:01:ac:71:25:75:02:0a:17:7d:83:ad: f7:22:7c:a4:0c:d1:4f:33:be:65:15:01:0e:15:53: 54:d3:6e:4a:c6:02:f3:75:e0:78:ce:21:92:5a:9f: f1:d5:7b:00:d3:23:2b:08:d2:72:bc:76:71:38:8a: 47:e3:51:02:11:ef:d1:2b:97:c2:a7:74:17:fd:1e: 7f:54:04:1a:c9:2c:26:da:b6:81:16:f1:c9:0c:f1: 8d:3b:28:54:31:d5:91:a4:34:d6:18:d7:a3:a9:06: 59:f8:c5:60:9e:6c:33:f1:d5:9e:16:94:dd:a0:c6: c4:42:80:29:4b:ff:1f:dd:84:4e:3e:09:6f:0f:92: 3d:d4:85:50:25:80:5e:ff:6e:7e:b2:c1:0e:f3:f9: 87:24:c5:6b:cd:ab:19:a4:59:29:2a:24:0a:18:cf: 82:20:1a:a3:db:fc:19:f9:a0:c8:a1:be:95:62:7d: 92:6f:d6:59:4b:46:af:67:1c:22:16:a2:10:72:53: 69:85:d1:39:72:a9:2c:52:00:8f:78:aa:d9:90:4e: 7c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E2:3E:4C:6C:E9:D4:E9:90:3F:F2:D6:90:25:58:BA:42:D1:A4:1F X509v3 Authority Key Identifier: keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a4:8e:d9:f9:ab:4e:72:e7:26:dd:0e:37:37:6c:8c:90:7f: 64:40:5f:7d:c7:66:10:b2:22:67:a7:96:25:e6:64:c8:4e:63: 5b:8e:d9:8a:db:ce:95:e7:17:af:d7:99:a9:79:68:c3:b8:9b: 66:43:1b:ff:80:69:5a:b3:09:44:22:90:21:f4:bf:f7:25:00: 36:bf:87:66:fe:a6:81:57:4c:10:bd:91:fb:05:de:22:10:1a: 6f:42:35:7d:67:fa:bd:e7:11:b0:42:16:24:ad:a5:01:3e:c1: a7:c7:e1:ec:2f:4e:ca:72:75:98:8b:51:e2:f3:3b:b1:2c:73: a3:b6:ad:3e:67:25:2f:77:d9:a1:5e:95:d6:56:5f:9d:35:03: be:11:0e:e4:62:a7:93:81:3a:bd:e8:ef:30:48:20:36:07:a4: 16:24:91:b4:40:8a:6f:c5:30:94:c4:60:07:b9:be:60:42:c4: da:03:10:72:2b:60:2b:41:b4:87:76:34:dd:6a:1d:c4:77:5f: 63:dd:bb:d6:6d:4d:58:b4:a7:f9:b9:64:1d:11:a8:4d:84:37: 55:ab:d0:59:2b:7b:27:a3:8c:f6:7a:41:d2:12:12:a8:e5:3e: 93:11:25:3f:19:ae:aa:d2:ea:23:c4:21:d3:f2:c5:3f:61:70: c7:82:7c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6uztRPxMDjsb7zj8cQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3 NTBkMDIwHhcNMjYwMjA5MTEwMDQ5WhcNMjYwMjEwMTEwMDQ5WjAzMTEwLwYDVQQD EygyMWUyM2U0YzZjZTlkNGU5OTAzZmYyZDY5MDI1NThiYTQyZDFhNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZZCBVYDQVs0ERxVXBi1JU0T+/bf /Bi9U/OTShycBTB6eO5AkgzoGZ0MWTwd4JhEAaxxJXUCChd9g633InykDNFPM75l FQEOFVNU025KxgLzdeB4ziGSWp/x1XsA0yMrCNJyvHZxOIpH41ECEe/RK5fCp3QX /R5/VAQaySwm2raBFvHJDPGNOyhUMdWRpDTWGNejqQZZ+MVgnmwz8dWeFpTdoMbE QoApS/8f3YROPglvD5I91IVQJYBe/25+ssEO8/mHJMVrzasZpFkpKiQKGM+CIBqj 2/wZ+aDIob6VYn2Sb9ZZS0avZxwiFqIQclNphdE5cqksUgCPeKrZkE58bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHiPkxs6dTpkD/y1pAlWLpC0aQfMB8GA1UdIwQY MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKSO2fmr TnLnJt0ONzdsjJB/ZEBffcdmELIiZ6eWJeZkyE5jW47ZitvOlecXr9eZqXlow7ib ZkMb/4BpWrMJRCKQIfS/9yUANr+HZv6mgVdMEL2R+wXeIhAab0I1fWf6vecRsEIW JK2lAT7Bp8fh7C9OynJ1mItR4vM7sSxzo7atPmclL3fZoV6V1lZfnTUDvhEO5GKn k4E6vejvMEggNgekFiSRtECKb8UwlMRgB7m+YELE2gMQcitgK0G0h3Y03WodxHdf Y9271m1NWLSn+blkHRGoTYQ3VavQWSt7J6OM9npB0hISqOU+kxElPxmuqtLqI8Qh 0/LFP2Fwx4J8cA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:46 2026 by rpki-client