This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json) Hash identifier: FN+TUAorW1etkDhdKercF9+P7vaIC7dcQ8/O+BTMbRc= Subject key identifier: 91:8E:49:43:E9:E9:3A:B9:FE:69:57:9D:EC:72:CE:8B:2E:B8:68:63 Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c Certificate serial: 019C427D6330DE98B8E75EC65843E21E5013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 13:00:39 +0000 Manifest this update: Mon 09 Feb 2026 13:00:39 +0000 Manifest next update: Tue 10 Feb 2026 13:00:39 +0000 Files and hashes: 1: EOVG1E-Fss-TCAZp6FvBla5puoE.roa (hash: QLZCSRXuXCEog/Ml5Xp9IxcczY5XpGCzAWi6jfDK03o=) 2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: 24fmcz8J1GfC2bp2khq5SSAlulmToj7S7OOsJ6pw3Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:63:30:de:98:b8:e7:5e:c6:58:43:e2:1e:50:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c Validity Not Before: Feb 9 13:00:39 2026 GMT Not After : Feb 10 13:00:39 2026 GMT Subject: CN=918e4943e9e93ab9fe69579dec72ce8b2eb86863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:d6:8b:fb:7b:ed:e0:22:62:c0:b7:9a:31: 42:c4:40:9d:88:5c:b7:e3:b7:5d:ed:53:3b:81:81: 1d:59:a0:98:de:52:10:27:34:0a:65:2e:cc:59:5b: 0c:d9:d3:72:4a:ca:dc:fe:55:5a:8f:04:e6:07:d8: fe:95:cc:bd:09:1b:1b:0c:b3:40:a6:95:66:0e:a3: b0:bd:87:f1:57:a4:b3:54:7d:f6:f4:52:29:34:01: 2d:61:98:99:d2:2d:a3:16:08:bb:60:0f:f1:a2:15: 44:2f:d2:4c:2d:e8:05:1d:f5:fe:71:76:44:91:43: 9d:b7:ea:28:af:03:63:18:11:cd:c4:80:d8:18:89: be:1f:29:6d:e3:f0:e8:35:a1:e0:5d:cb:f8:0b:f9: 48:ad:68:b7:90:e0:f1:d7:67:80:af:f9:1d:e1:c3: 9f:ae:1e:59:39:79:76:e7:e2:92:6a:24:f4:22:61: 97:f8:93:40:20:0f:90:63:e3:9e:5f:f4:fa:93:d5: 68:06:f9:1b:d1:7a:eb:c1:d7:4a:af:c9:b4:53:c1: 28:93:3e:5e:9e:6a:80:1d:c4:14:68:99:89:da:77: 1c:c3:3c:2f:eb:12:2c:45:fd:a5:de:66:d0:7e:0a: 71:b3:71:54:82:16:86:09:1c:ca:90:43:3b:4c:cf: 23:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:49:43:E9:E9:3A:B9:FE:69:57:9D:EC:72:CE:8B:2E:B8:68:63 X509v3 Authority Key Identifier: keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:94:f5:8d:4f:9b:37:c4:74:92:10:bf:e9:1c:7e:56:7a:3d: 28:1f:e2:a8:29:01:3d:92:56:b1:0f:3c:60:c9:3e:91:fd:5d: 68:72:b9:2a:c0:32:fa:7a:97:e8:79:23:9c:20:39:85:9d:f3: 8f:0b:3a:ad:da:51:21:26:a4:99:76:68:07:19:b7:cc:cd:e2: ae:3c:57:a4:cb:90:a0:b8:47:50:c7:7b:e5:8d:e7:82:12:18: 0b:b6:3a:3a:f8:c8:c2:70:38:f0:96:94:06:be:52:69:71:33: 9f:b9:73:06:b3:82:9b:1a:76:e0:a6:64:6f:3d:93:4a:e9:ae: 4e:c7:07:58:45:ab:0e:dd:a6:fc:4a:2e:2f:29:af:c7:5c:19: e0:51:01:4c:d1:ba:2b:3e:36:78:16:e4:03:ef:65:7b:41:89: 68:24:2c:1d:a6:da:0c:94:de:62:74:a8:8c:d6:bd:19:da:08: d3:15:3b:64:ec:67:72:88:f1:25:58:ed:8c:1a:58:4b:4f:02: 4b:d5:a0:db:20:1f:e4:c0:dc:19:90:20:50:40:4c:c6:c6:d0: 27:7a:45:a9:98:97:46:3b:87:a5:bc:06:8d:d6:6f:76:7b:2c: cf:1e:e5:41:1a:04:dc:dc:7d:1b:c3:cb:de:f6:bd:a0:24:20: 84:45:7e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWMw3pi4517GWEPiHlATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0 MTU0MmMwHhcNMjYwMjA5MTMwMDM5WhcNMjYwMjEwMTMwMDM5WjAzMTEwLwYDVQQD Eyg5MThlNDk0M2U5ZTkzYWI5ZmU2OTU3OWRlYzcyY2U4YjJlYjg2ODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+3Wi/t77eAiYsC3mjFCxECdiFy3 47dd7VM7gYEdWaCY3lIQJzQKZS7MWVsM2dNySsrc/lVajwTmB9j+lcy9CRsbDLNA ppVmDqOwvYfxV6SzVH329FIpNAEtYZiZ0i2jFgi7YA/xohVEL9JMLegFHfX+cXZE kUOdt+oorwNjGBHNxIDYGIm+Hylt4/DoNaHgXcv4C/lIrWi3kODx12eAr/kd4cOf rh5ZOXl25+KSaiT0ImGX+JNAIA+QY+OeX/T6k9VoBvkb0XrrwddKr8m0U8Eokz5e nmqAHcQUaJmJ2nccwzwv6xIsRf2l3mbQfgpxs3FUghaGCRzKkEM7TM8jnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGOSUPp6Tq5/mlXnexyzosuuGhjMB8GA1UdIwQY MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZT1jU+b N8R0khC/6Rx+Vno9KB/iqCkBPZJWsQ88YMk+kf1daHK5KsAy+nqX6HkjnCA5hZ3z jws6rdpRISakmXZoBxm3zM3irjxXpMuQoLhHUMd75Y3nghIYC7Y6OvjIwnA48JaU Br5SaXEzn7lzBrOCmxp24KZkbz2TSumuTscHWEWrDt2m/EouLymvx1wZ4FEBTNG6 Kz42eBbkA+9le0GJaCQsHabaDJTeYnSojNa9GdoI0xU7ZOxncojxJVjtjBpYS08C S9Wg2yAf5MDcGZAgUEBMxsbQJ3pFqZiXRjuHpbwGjdZvdnsszx7lQRoE3Nx9G8PL 3va9oCQghEV+Tg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:37 2026 by rpki-client