This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json) Hash identifier: RaUo7nRyXpNoprxk6pd99QCBnNNzOus9MFGPUd+PwcA= Subject key identifier: 2F:5A:AD:C9:0E:46:AE:CB:F6:92:3D:66:61:1D:F1:33:01:7F:71:80 Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Certificate serial: 019C420FD055FC881294E23ED03E903A95F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft Manifest number: 179E Signing time: Mon 09 Feb 2026 11:00:58 +0000 Manifest this update: Mon 09 Feb 2026 11:00:58 +0000 Manifest next update: Tue 10 Feb 2026 11:00:58 +0000 Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: e9R6jClrZzhPj7YCalP1i9ll8YypkaxzXTD4FCVoTdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:d0:55:fc:88:12:94:e2:3e:d0:3e:90:3a:95:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Validity Not Before: Feb 9 11:00:58 2026 GMT Not After : Feb 10 11:00:58 2026 GMT Subject: CN=2f5aadc90e46aecbf6923d66611df133017f7180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b8:67:83:b8:84:f6:4a:e8:10:19:3a:9c:ae: 3d:b2:81:43:74:1d:18:bb:32:09:c6:7f:f6:8a:22: 3b:02:39:db:fc:18:34:52:30:99:b9:56:bf:e8:6b: f5:ca:9a:ea:49:7a:10:09:1e:5d:8f:17:cf:47:ba: bd:a4:34:ba:a0:90:30:0d:84:15:8c:05:3e:22:d8: 2b:4a:8f:53:99:e6:0f:5f:db:af:33:d1:b0:c1:5d: 66:a2:25:28:a5:30:69:cf:88:14:8b:4f:a2:0b:37: 63:ae:3e:2e:59:aa:f7:f5:18:c9:ac:83:53:c9:4f: d0:35:34:f8:c8:48:dd:5e:ff:35:83:97:bd:d9:e9: d6:b3:b8:7e:ce:6e:5f:b8:ff:9e:f7:22:b8:78:b5: 90:b2:ab:7d:7c:0c:d0:8e:10:e0:35:5a:fe:c5:d4: cb:b6:16:05:7c:0c:b5:61:1f:e5:73:20:ce:2a:66: 4d:fa:37:72:50:8f:da:92:8d:d7:b2:e9:52:80:ed: ae:8e:35:1d:0f:a0:25:90:a0:99:9a:e5:c8:01:21: b0:52:72:81:79:8f:72:e3:ef:53:d4:f1:10:cf:f9: 8d:eb:76:cb:3e:6a:45:05:fd:f0:ec:f9:92:48:82: 24:97:83:75:d4:ff:d1:31:d4:3b:e8:82:f7:60:52: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5A:AD:C9:0E:46:AE:CB:F6:92:3D:66:61:1D:F1:33:01:7F:71:80 X509v3 Authority Key Identifier: keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:74:01:69:3f:2d:e5:1c:62:75:cd:3a:11:e1:da:59:f6: 59:e6:69:fe:f5:1b:7f:1d:da:83:52:a6:8f:49:5b:a7:9d:db: 9c:07:33:b5:5c:b1:e7:b4:12:97:f0:78:a5:60:8f:eb:0c:20: d1:b4:96:df:1f:11:01:43:f8:45:b6:e2:a1:7e:6e:ab:b2:e6: 20:69:cc:79:a7:4b:18:1f:13:7d:8c:0a:71:71:a7:9d:8e:1f: 04:09:b1:a6:d7:c4:a2:da:80:fe:37:e1:8c:d8:c9:91:78:14: c6:0b:43:9d:5c:a2:35:73:c8:71:67:62:da:19:21:3a:d9:4b: a3:7b:c0:e3:c9:82:9e:30:dc:31:f5:07:1a:8a:b5:2b:1e:7e: 34:78:a2:da:60:e3:31:07:31:2d:59:4b:4f:e3:44:fb:c0:03: 09:df:60:86:82:9d:4b:a2:9b:f3:33:8e:a6:fd:0a:53:64:3c: 53:f8:43:92:9e:41:f3:a2:2c:ba:a6:ff:5a:87:24:a3:f9:e8: d7:42:af:3a:38:21:ab:0a:60:f1:10:7d:b9:fb:7d:c4:cd:9b: 21:96:2d:3e:11:dc:c8:cb:56:8f:54:63:b5:3f:4d:72:eb:74: 30:32:da:a2:5c:11:19:43:7d:17:97:4c:0b:6c:33:c5:24:ba: ed:3d:d0:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9BV/IgSlOI+0D6QOpX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk NmUxMmYwHhcNMjYwMjA5MTEwMDU4WhcNMjYwMjEwMTEwMDU4WjAzMTEwLwYDVQQD EygyZjVhYWRjOTBlNDZhZWNiZjY5MjNkNjY2MTFkZjEzMzAxN2Y3MTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rhng7iE9kroEBk6nK49soFDdB0Y uzIJxn/2iiI7Ajnb/Bg0UjCZuVa/6Gv1yprqSXoQCR5djxfPR7q9pDS6oJAwDYQV jAU+ItgrSo9TmeYPX9uvM9GwwV1moiUopTBpz4gUi0+iCzdjrj4uWar39RjJrINT yU/QNTT4yEjdXv81g5e92enWs7h+zm5fuP+e9yK4eLWQsqt9fAzQjhDgNVr+xdTL thYFfAy1YR/lcyDOKmZN+jdyUI/ako3XsulSgO2ujjUdD6AlkKCZmuXIASGwUnKB eY9y4+9T1PEQz/mN63bLPmpFBf3w7PmSSIIkl4N11P/RMdQ76IL3YFI54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9arckORq7L9pI9ZmEd8TMBf3GAMB8GA1UdIwQY MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8N0AWk/ LeUcYnXNOhHh2ln2WeZp/vUbfx3ag1Kmj0lbp53bnAcztVyx57QSl/B4pWCP6wwg 0bSW3x8RAUP4RbbioX5uq7LmIGnMeadLGB8TfYwKcXGnnY4fBAmxptfEotqA/jfh jNjJkXgUxgtDnVyiNXPIcWdi2hkhOtlLo3vA48mCnjDcMfUHGoq1Kx5+NHii2mDj MQcxLVlLT+NE+8ADCd9ghoKdS6Kb8zOOpv0KU2Q8U/hDkp5B86Isuqb/Wocko/no 10KvOjghqwpg8RB9uft9xM2bIZYtPhHcyMtWj1RjtT9Ncut0MDLaolwRGUN9F5dM C2wzxSS67T3QAw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:45 2026 by rpki-client