This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json) Hash identifier: 1NdMjASRw8E6jWdq1/oaia6qtx3HnrGKwE1TcG8/xgM= Subject key identifier: 5F:09:48:E5:23:DC:5E:CF:76:A6:A3:8E:A0:D9:AF:1D:07:0F:03:CC Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Certificate serial: 019C446C563BF7DDEBE59F82FD3902EE4AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft Manifest number: 052C Signing time: Mon 09 Feb 2026 22:01:16 +0000 Manifest this update: Mon 09 Feb 2026 22:01:16 +0000 Manifest next update: Tue 10 Feb 2026 22:01:16 +0000 Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: DQrTfcicuqJ59bKTgRGzCP+RipSDnk4cMObLwsP9oGE=) 2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:56:3b:f7:dd:eb:e5:9f:82:fd:39:02:ee:4a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Validity Not Before: Feb 9 22:01:16 2026 GMT Not After : Feb 10 22:01:16 2026 GMT Subject: CN=5f0948e523dc5ecf76a6a38ea0d9af1d070f03cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:ce:c0:7b:da:f7:a6:e9:ac:62:d3:75:90: 5d:f5:c5:5b:47:11:91:e2:70:bc:00:f9:b4:62:60: 56:8f:33:76:43:87:63:e9:5f:e9:a1:d7:45:5f:01: c8:3f:c2:5d:93:ef:a2:76:55:c7:fa:7d:f5:16:1b: 35:2d:27:78:62:56:76:62:2c:bd:e5:44:fb:cc:20: 27:4d:55:9a:6e:a5:87:68:ab:41:46:aa:f4:4d:2b: 66:9e:90:a8:84:7c:f3:ba:49:2c:11:7e:7f:c9:83: 7d:4c:71:c1:cf:dc:55:1f:68:5f:74:63:f9:31:10: 42:f2:40:21:c9:89:10:14:35:f5:38:a8:14:2a:37: 22:92:b8:7d:95:83:78:5d:0d:f5:e0:41:09:a6:a0: 95:cc:34:06:4e:a1:6f:31:32:15:3f:cf:e9:cf:96: b2:10:5f:8b:a5:2e:9d:51:d6:4b:55:74:14:c0:29: b9:35:fe:04:49:25:d2:f8:5c:b8:dc:65:6a:57:3b: 49:30:92:57:ab:a3:d8:7d:86:a8:d5:35:51:e2:24: c8:e3:16:9f:1c:4b:b3:3b:3e:d7:14:dd:c2:2e:2b: dd:2e:e3:78:01:8b:93:25:9a:11:f9:e8:77:2d:58: bc:a3:1a:3d:b4:29:42:64:53:91:bc:bd:ab:01:6a: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:09:48:E5:23:DC:5E:CF:76:A6:A3:8E:A0:D9:AF:1D:07:0F:03:CC X509v3 Authority Key Identifier: keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fe:7f:3c:a9:c2:9d:8f:c5:2f:5e:84:f2:22:0a:ee:7c:69: 9f:67:05:92:7f:68:de:e1:b4:5b:d4:9e:fd:34:a6:6a:ed:ef: b6:6c:74:30:7a:c8:3f:a6:2e:69:56:03:50:9f:d2:b1:d0:9d: e1:60:5b:b6:42:76:bf:97:11:b3:a3:73:1c:2a:27:3c:3b:70: 2f:6e:51:09:31:68:7b:58:6a:bf:66:f6:05:be:3f:1e:96:0b: f1:cb:b1:31:1f:62:e6:e1:9f:6c:25:b6:52:a5:11:c5:8c:05: ea:74:55:a4:0a:74:ac:60:88:b2:53:48:55:99:b3:9e:20:e7: d9:c8:56:96:c5:e0:f9:04:88:35:2c:dc:2a:9c:80:52:ac:6d: d3:91:39:72:2e:e5:68:4e:54:a9:17:a4:a7:2b:66:b6:5b:b6: 6e:c4:31:3e:3c:81:fb:13:96:f9:41:12:83:27:c2:4b:38:05: e7:3e:a8:af:26:9c:97:91:8f:4d:b7:f5:c2:d5:dd:43:06:76: e3:a5:46:f3:63:1b:04:60:4c:27:a0:78:dd:56:40:ae:83:d3: c5:24:01:97:b4:bd:3a:7f:7e:d6:6e:2d:ee:21:7a:ba:de:3b: 37:2d:97:fb:7a:1b:3d:69:c0:64:99:52:19:a3:d3:fe:06:a4: 8c:d2:51:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbFY7993r5Z+C/TkC7krsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj YmZkZDQwHhcNMjYwMjA5MjIwMTE2WhcNMjYwMjEwMjIwMTE2WjAzMTEwLwYDVQQD Eyg1ZjA5NDhlNTIzZGM1ZWNmNzZhNmEzOGVhMGQ5YWYxZDA3MGYwM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fHOwHva96bprGLTdZBd9cVbRxGR 4nC8APm0YmBWjzN2Q4dj6V/poddFXwHIP8Jdk++idlXH+n31Fhs1LSd4YlZ2Yiy9 5UT7zCAnTVWabqWHaKtBRqr0TStmnpCohHzzukksEX5/yYN9THHBz9xVH2hfdGP5 MRBC8kAhyYkQFDX1OKgUKjcikrh9lYN4XQ314EEJpqCVzDQGTqFvMTIVP8/pz5ay EF+LpS6dUdZLVXQUwCm5Nf4ESSXS+Fy43GVqVztJMJJXq6PYfYao1TVR4iTI4xaf HEuzOz7XFN3CLivdLuN4AYuTJZoR+eh3LVi8oxo9tClCZFORvL2rAWqslQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8JSOUj3F7PdqajjqDZrx0HDwPMMB8GA1UdIwQY MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0 LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv5/PKnC nY/FL16E8iIK7nxpn2cFkn9o3uG0W9Se/TSmau3vtmx0MHrIP6YuaVYDUJ/SsdCd 4WBbtkJ2v5cRs6NzHConPDtwL25RCTFoe1hqv2b2Bb4/HpYL8cuxMR9i5uGfbCW2 UqURxYwF6nRVpAp0rGCIslNIVZmzniDn2chWlsXg+QSINSzcKpyAUqxt05E5ci7l aE5UqRekpytmtlu2bsQxPjyB+xOW+UESgyfCSzgF5z6oryacl5GPTbf1wtXdQwZ2 46VG82MbBGBMJ6B43VZAroPTxSQBl7S9On9+1m4t7iF6ut47Ny2X+3obPWnAZJlS GaPT/gakjNJRjQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:55 2026 by rpki-client