This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json) Hash identifier: xD9W/jltoOfXbb0lBlCGXVbXMNDrt/ksJ47K3zDJaRY= Subject key identifier: E2:3A:1C:F5:BD:0F:3F:60:F6:FF:8F:D7:36:4E:12:FF:E9:F8:1F:DC Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Certificate serial: 019C4321D94867D5D3A657B17BC4DB51F0E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft Manifest number: 0C1C Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: +B9qvohIQC4XgTPJBVZVdTLDhdGeOD07T7scL41okNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d9:48:67:d5:d3:a6:57:b1:7b:c4:db:51:f0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=e23a1cf5bd0f3f60f6ff8fd7364e12ffe9f81fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:46:6e:da:db:39:96:bf:78:a4:51:e8:09:21: de:1a:a6:d3:2d:fe:0a:e8:fa:fd:92:dd:b7:d9:43: 7b:f9:70:c2:e0:46:6b:db:1a:1a:7a:3e:6f:0c:51: ac:75:44:e8:6f:5e:b7:1d:76:60:89:6a:b1:a6:8f: f9:cd:b4:d2:91:47:99:17:eb:66:e9:da:f0:72:14: ed:17:81:6b:b8:47:0b:ca:2c:8b:c7:85:b2:fa:9d: 8f:6c:e1:b7:2b:e7:da:81:da:3a:a9:6d:00:5b:4d: 04:03:b4:da:aa:9a:99:ef:07:f4:c1:9f:b8:7f:2b: 75:af:18:83:27:26:a3:43:31:f3:86:0a:47:a3:69: bc:f3:70:08:41:99:31:68:8a:bc:b7:23:4c:57:20: 02:30:cc:66:56:6a:1d:a0:02:02:d8:e8:8c:d7:fc: 7a:9d:9d:ec:a7:a1:da:c7:a0:98:4b:81:78:33:df: 45:6f:a6:45:4e:d0:6a:4b:da:b0:1a:e6:78:9f:21: ac:a3:37:fa:de:cf:6d:6d:6e:f2:c5:44:03:db:4b: 86:7b:7d:4b:ba:e6:c1:f0:93:ff:21:be:9a:df:41: 7d:58:ce:32:5a:15:0f:91:2a:58:10:78:07:23:b6: d0:98:23:31:ba:6b:59:4c:4c:d0:0d:e9:c6:4d:c5: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3A:1C:F5:BD:0F:3F:60:F6:FF:8F:D7:36:4E:12:FF:E9:F8:1F:DC X509v3 Authority Key Identifier: keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:46:f1:06:82:c6:c3:87:00:a5:60:e3:d3:70:51:6b:06:08: f0:90:5b:71:15:e6:f4:9a:c6:6a:ee:74:af:94:b0:75:d0:d9: f3:f9:7a:49:75:75:c5:0a:52:dd:32:fe:47:22:21:c1:03:e3: a1:4d:f7:4c:96:76:8b:43:06:7b:d3:11:f4:b5:84:b0:b8:be: 3c:b4:b2:fd:e1:ac:3d:07:80:81:cb:b7:91:51:8b:8d:78:c0: c8:d5:9c:55:0c:65:ee:42:06:20:87:0b:38:7a:f8:2c:31:28: 70:39:bf:55:5b:2a:32:8b:a7:d6:45:f4:3e:09:67:09:e3:ec: db:79:0b:4e:07:8c:c7:58:27:b6:5d:de:d8:b6:5d:a7:15:c4: e5:ae:b4:60:56:32:0a:7e:bb:1d:49:29:ee:c3:1e:ce:91:f4: 6f:0b:02:d4:0a:1b:5d:1f:d0:7a:6d:d2:aa:42:30:e2:c8:78: 6e:af:63:da:5f:bc:71:05:5c:77:2d:e5:5b:55:0c:e1:db:d9: a0:a8:99:24:ec:7a:fe:f5:29:f2:6a:f1:76:c8:1b:cc:5c:7e: 85:53:44:f9:0d:1e:df:ff:7d:b2:1e:19:ef:6a:52:bc:03:ec: 54:fa:12:f0:48:a5:2f:31:61:72:d0:7b:0f:f8:f4:c9:2d:95: 25:ba:1a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdlIZ9XTplexe8TbUfDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODRhNDE5OTdlZWVhNGQwNWZjYzdjZDQwYjEyMTEzYTVi YjY5ZTgwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD EyhlMjNhMWNmNWJkMGYzZjYwZjZmZjhmZDczNjRlMTJmZmU5ZjgxZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkZu2ts5lr94pFHoCSHeGqbTLf4K 6Pr9kt232UN7+XDC4EZr2xoaej5vDFGsdUTob163HXZgiWqxpo/5zbTSkUeZF+tm 6drwchTtF4FruEcLyiyLx4Wy+p2PbOG3K+fagdo6qW0AW00EA7TaqpqZ7wf0wZ+4 fyt1rxiDJyajQzHzhgpHo2m883AIQZkxaIq8tyNMVyACMMxmVmodoAIC2OiM1/x6 nZ3sp6Hax6CYS4F4M99Fb6ZFTtBqS9qwGuZ4nyGsozf63s9tbW7yxUQD20uGe31L uubB8JP/Ib6a30F9WM4yWhUPkSpYEHgHI7bQmCMxumtZTEzQDenGTcXZpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI6HPW9Dz9g9v+P1zZOEv/p+B/cMB8GA1UdIwQY MBaAFNOEpBmX7upNBfzHzUCxIROlu2noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUt ZjZkMGZmNDU4NjQ4LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUtZjZkMGZmNDU4NjQ4 LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkbxBoLG w4cApWDj03BRawYI8JBbcRXm9JrGau50r5SwddDZ8/l6SXV1xQpS3TL+RyIhwQPj oU33TJZ2i0MGe9MR9LWEsLi+PLSy/eGsPQeAgcu3kVGLjXjAyNWcVQxl7kIGIIcL OHr4LDEocDm/VVsqMoun1kX0PglnCePs23kLTgeMx1gntl3e2LZdpxXE5a60YFYy Cn67HUkp7sMezpH0bwsC1AobXR/Qem3SqkIw4sh4bq9j2l+8cQVcdy3lW1UM4dvZ oKiZJOx6/vUp8mrxdsgbzFx+hVNE+Q0e3/99sh4Z72pSvAPsVPoS8EilLzFhctB7 D/j0yS2VJboa8w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:49 2026 by rpki-client