This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json) Hash identifier: z4q/aDedKz3eyazdncfxNCZfhiMoIKke13rRtPAZK5w= Subject key identifier: 20:8A:9F:D8:49:9D:A3:FF:38:51:3C:9E:1E:46:32:8E:82:DE:72:A1 Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Certificate serial: 019C4390545485F7F7A4C74A4E1F59570BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:58 +0000 Manifest this update: Mon 09 Feb 2026 18:00:58 +0000 Manifest next update: Tue 10 Feb 2026 18:00:58 +0000 Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: awLpef1zZ+fOjJFC0QXboNCAO6FotTFm/ZHoRQUpJ9A=) 2: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:54:54:85:f7:f7:a4:c7:4a:4e:1f:59:57:0b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Validity Not Before: Feb 9 18:00:58 2026 GMT Not After : Feb 10 18:00:58 2026 GMT Subject: CN=208a9fd8499da3ff38513c9e1e46328e82de72a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:a2:2f:c9:1c:40:cd:4a:60:eb:47:c4:2e: 63:6e:89:9f:63:91:ac:71:0d:ff:25:eb:00:97:66: 6f:2e:62:18:5e:70:29:f6:5e:8f:74:05:ee:37:c2: 7e:ec:45:0b:97:ba:ba:2d:80:0e:7b:79:ec:74:07: 00:73:5b:af:38:5e:e5:c3:f7:1d:a2:45:c1:2d:88: 41:06:ce:15:69:56:3b:b6:7e:9e:e4:39:10:74:ea: 09:f5:d3:72:9f:fa:be:17:c1:8e:ce:9d:d3:4d:36: c9:2e:3e:75:c9:d8:46:46:a9:99:e8:bc:4e:a2:49: 90:87:dc:2c:52:08:43:83:03:58:92:3e:a6:ae:d3: 84:0c:27:fe:67:ac:76:9d:cb:36:76:8e:80:33:fc: d6:c1:2d:df:92:83:e3:87:79:d3:7c:76:8b:74:d1: 4d:74:24:da:6c:f2:4a:48:f5:69:0e:f5:73:36:28: 9b:7d:0c:7c:89:e8:b9:6b:60:f4:d9:90:49:b2:d7: d6:d5:ea:42:dd:dd:72:7f:f1:9a:66:d5:a8:c4:ef: c1:f5:c7:e3:99:93:4f:3e:de:e2:48:61:42:56:23: de:c0:87:b8:91:e5:27:5e:98:49:93:f0:62:1d:f5: 97:57:84:6f:f1:43:19:dd:56:e2:dd:d7:90:e2:21: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:9F:D8:49:9D:A3:FF:38:51:3C:9E:1E:46:32:8E:82:DE:72:A1 X509v3 Authority Key Identifier: keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a5:44:ca:3b:51:b5:0f:1f:4f:6a:4a:91:e3:66:7f:7e:fb: 7c:3a:54:5f:0a:a6:33:57:16:ba:e4:0e:93:04:18:fc:e1:a7: a3:c0:18:0c:d2:e8:84:c5:df:b0:3b:04:01:10:b7:2e:73:a1: 4a:5a:4f:e3:69:f4:cb:00:78:68:3e:6b:26:7b:6b:f2:4f:14: 9c:b8:64:91:07:75:e9:3b:96:f6:5f:f4:02:d6:a5:d1:b4:0f: 2e:29:22:55:24:1b:00:2c:ce:cb:ec:87:24:4d:8e:7f:4c:4a: 34:40:e3:4e:07:ac:d5:1a:87:c5:7c:78:3a:45:07:22:c1:35: 11:bf:2a:17:be:1a:a8:bb:26:30:e1:7d:5d:e0:22:bb:31:e6: f2:ab:43:64:a9:52:8b:6f:9f:3c:91:65:20:75:d2:69:29:38: 09:74:35:fc:01:95:48:73:d0:f7:cf:4c:7b:52:72:91:f9:e5: bb:e1:d0:02:a8:5a:1c:52:2f:83:ad:3d:1c:75:af:a9:40:15: c2:07:6b:e4:24:27:0e:3a:87:6f:e6:6a:e0:24:74:98:6d:26: de:df:98:5c:6e:c0:f8:49:00:b8:d6:e0:b2:32:f0:e8:97:32: 90:c5:77:03:0e:fb:52:d4:0a:c6:52:27:f8:75:ba:69:00:61: e8:0c:da:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFRUhff3pMdKTh9ZVwvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh NjE5ODcwHhcNMjYwMjA5MTgwMDU4WhcNMjYwMjEwMTgwMDU4WjAzMTEwLwYDVQQD EygyMDhhOWZkODQ5OWRhM2ZmMzg1MTNjOWUxZTQ2MzI4ZTgyZGU3MmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYCiL8kcQM1KYOtHxC5jbomfY5Gs cQ3/JesAl2ZvLmIYXnAp9l6PdAXuN8J+7EULl7q6LYAOe3nsdAcAc1uvOF7lw/cd okXBLYhBBs4VaVY7tn6e5DkQdOoJ9dNyn/q+F8GOzp3TTTbJLj51ydhGRqmZ6LxO okmQh9wsUghDgwNYkj6mrtOEDCf+Z6x2ncs2do6AM/zWwS3fkoPjh3nTfHaLdNFN dCTabPJKSPVpDvVzNiibfQx8iei5a2D02ZBJstfW1epC3d1yf/GaZtWoxO/B9cfj mZNPPt7iSGFCViPewIe4keUnXphJk/BiHfWXV4Rv8UMZ3Vbi3deQ4iFo0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCKn9hJnaP/OFE8nh5GMo6C3nKhMB8GA1UdIwQY MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqVEyjtR tQ8fT2pKkeNmf377fDpUXwqmM1cWuuQOkwQY/OGno8AYDNLohMXfsDsEARC3LnOh SlpP42n0ywB4aD5rJntr8k8UnLhkkQd16TuW9l/0Atal0bQPLikiVSQbACzOy+yH JE2Of0xKNEDjTges1RqHxXx4OkUHIsE1Eb8qF74aqLsmMOF9XeAiuzHm8qtDZKlS i2+fPJFlIHXSaSk4CXQ1/AGVSHPQ989Me1Jykfnlu+HQAqhaHFIvg609HHWvqUAV wgdr5CQnDjqHb+Zq4CR0mG0m3t+YXG7A+EkAuNbgsjLw6JcykMV3Aw77UtQKxlIn +HW6aQBh6Aza4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:12 2026 by rpki-client