This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json) Hash identifier: 3inEGWiGBHwKOtunF99dL4j9LqaIZrW0DN77NeKubhc= Subject key identifier: FA:28:C4:B6:04:3D:EA:B9:E4:FE:82:E4:85:EA:87:79:EA:3F:C2:F4 Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Certificate serial: 019C42B45316D96A105F3E4425EF6B94476E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft Manifest number: 0B53 Signing time: Mon 09 Feb 2026 14:00:39 +0000 Manifest this update: Mon 09 Feb 2026 14:00:39 +0000 Manifest next update: Tue 10 Feb 2026 14:00:39 +0000 Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: ceOgt/JnhivPA/6TKSJsMh4kwzyg6xgggH1laGSUd38=) 2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:53:16:d9:6a:10:5f:3e:44:25:ef:6b:94:47:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : Feb 10 14:00:39 2026 GMT Subject: CN=fa28c4b6043deab9e4fe82e485ea8779ea3fc2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:30:06:14:82:de:3b:e3:53:d3:44:02:b6: 65:b4:02:5e:2f:ad:9c:96:b0:0f:0f:ee:55:59:28: e4:a9:62:0e:81:b4:78:c5:50:01:e5:15:a1:8b:7b: f6:63:85:ea:e7:b3:d5:8f:c6:3a:61:d8:55:f1:8e: e1:33:38:c6:9f:60:59:2b:c7:f7:79:9f:49:c1:77: 8d:b5:0f:a1:eb:49:bd:d5:02:d6:fd:10:08:5b:84: 9b:e9:5b:5f:fc:54:47:ab:43:1e:53:86:d1:d2:27: d0:53:d4:3b:01:4c:30:e4:18:49:48:03:51:ef:5e: d4:95:55:20:c9:51:6d:b3:37:af:47:4f:71:b6:85: 11:90:99:df:f0:c1:d9:84:ad:96:ba:24:16:c0:50: 8f:6d:7a:76:a7:4d:f3:75:50:bb:a2:7c:d8:96:9e: a4:12:7a:55:c5:76:c7:49:5a:3e:46:1e:c4:f8:b4: 1e:12:67:39:cd:cd:0f:c8:88:c0:2e:74:d0:7a:0a: 2f:ef:69:b0:92:99:8e:09:67:6e:f2:9d:75:93:9c: 9a:af:2d:68:18:08:25:ca:45:88:56:73:a0:b6:b9: b8:c6:16:bb:b5:26:0a:f7:4a:2d:ba:cc:dd:e6:81: aa:16:18:da:14:45:1b:8d:88:56:eb:68:c9:a1:14: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:28:C4:B6:04:3D:EA:B9:E4:FE:82:E4:85:EA:87:79:EA:3F:C2:F4 X509v3 Authority Key Identifier: keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:41:6d:99:f5:1a:34:f2:26:59:54:47:a2:ef:e9:0b:60:d3: 23:81:db:2c:40:28:d0:9f:21:5f:f2:32:47:f1:29:5d:87:6e: af:50:f6:cd:19:b5:c1:07:a6:1d:1f:e6:23:99:41:7a:42:73: 9d:46:62:37:df:ec:a4:4e:ff:ae:a0:07:15:3e:50:2e:ff:e1: 75:21:67:3e:2b:ab:b9:8f:f7:35:80:99:12:4c:0f:e8:d2:90: be:12:a1:35:ea:8a:ca:8b:45:6c:0b:75:45:30:01:86:1e:80: 6f:85:0c:29:d7:0f:45:63:2e:af:e5:9e:0a:c4:25:f4:2c:0f: b6:86:52:e7:fc:4c:ce:09:73:75:50:bf:0f:fe:ac:08:bc:03: 1d:30:27:6b:06:d1:21:ec:ba:75:8a:ce:af:67:ae:ff:92:78: 15:8c:ae:16:47:e7:65:46:80:8b:78:37:be:cb:46:98:9e:03: 46:88:5b:0f:86:fb:0f:3a:73:06:3e:cd:54:ab:bb:5c:cc:b2: a2:ac:99:e1:a1:e0:39:f4:2c:48:67:5e:be:75:d5:a0:fc:f0: 26:25:f1:4b:00:82:9a:11:13:74:c0:e9:8c:f0:ed:a0:31:ce: 06:c5:8d:f0:ff:0d:e8:12:8d:24:65:57:86:ea:e2:1b:70:9b: bb:55:04:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFMW2WoQXz5EJe9rlEduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2 MDM4Y2MwHhcNMjYwMjA5MTQwMDM5WhcNMjYwMjEwMTQwMDM5WjAzMTEwLwYDVQQD EyhmYTI4YzRiNjA0M2RlYWI5ZTRmZTgyZTQ4NWVhODc3OWVhM2ZjMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwUwBhSC3jvjU9NEArZltAJeL62c lrAPD+5VWSjkqWIOgbR4xVAB5RWhi3v2Y4Xq57PVj8Y6YdhV8Y7hMzjGn2BZK8f3 eZ9JwXeNtQ+h60m91QLW/RAIW4Sb6Vtf/FRHq0MeU4bR0ifQU9Q7AUww5BhJSANR 717UlVUgyVFtszevR09xtoURkJnf8MHZhK2WuiQWwFCPbXp2p03zdVC7onzYlp6k EnpVxXbHSVo+Rh7E+LQeEmc5zc0PyIjALnTQegov72mwkpmOCWdu8p11k5yary1o GAglykWIVnOgtrm4xha7tSYK90otuszd5oGqFhjaFEUbjYhW62jJoRRj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPooxLYEPeq55P6C5IXqh3nqP8L0MB8GA1UdIwQY MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt N2U0N2RhMWNlNDA2LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2 LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUFtmfUa NPImWVRHou/pC2DTI4HbLEAo0J8hX/IyR/EpXYdur1D2zRm1wQemHR/mI5lBekJz nUZiN9/spE7/rqAHFT5QLv/hdSFnPiuruY/3NYCZEkwP6NKQvhKhNeqKyotFbAt1 RTABhh6Ab4UMKdcPRWMur+WeCsQl9CwPtoZS5/xMzglzdVC/D/6sCLwDHTAnawbR Iey6dYrOr2eu/5J4FYyuFkfnZUaAi3g3vstGmJ4DRohbD4b7DzpzBj7NVKu7XMyy oqyZ4aHgOfQsSGdevnXVoPzwJiXxSwCCmhETdMDpjPDtoDHOBsWN8P8N6BKNJGVX huriG3Cbu1UEqw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:03 2026 by rpki-client