This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json) Hash identifier: TiM9E39tBQU99ov0eRrr+SgYOSkMqiVy6jszDd4ICOA= Subject key identifier: 51:38:0A:66:B4:EA:A3:38:1B:41:9F:A7:99:FC:7A:D8:5F:D2:2A:14 Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a Certificate serial: 019C43229E94D3CA985D4F22AC991A23B4FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft Manifest number: 039C Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: XHF1a+T71kFJGRnXZBJAXWAATWkbZ7mCNwWGgpuzt4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9e:94:d3:ca:98:5d:4f:22:ac:99:1a:23:b4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=51380a66b4eaa3381b419fa799fc7ad85fd22a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:f1:4d:cc:ef:1d:fc:6d:6e:a1:8c:2d:fa: 08:29:8e:19:74:4f:c2:83:ec:4a:37:d4:19:72:9c: 5d:ce:3f:73:0f:ed:14:d2:9b:96:a5:00:4d:76:a5: b6:45:79:41:c5:9c:e7:9f:60:db:d5:ab:f5:7e:2c: 10:d9:b2:a7:ce:b7:28:d7:e8:85:1b:f2:e1:77:80: 44:85:69:80:ff:16:31:06:8e:f1:3d:88:e2:f8:51: 21:62:0a:21:a1:3c:af:be:df:4e:a5:46:35:8a:2b: a5:e3:a5:d8:58:fc:49:97:ab:88:e1:41:b7:6e:56: bc:9a:c8:b3:3c:aa:3e:57:36:21:33:c7:6d:68:bd: 93:9e:ce:c5:3e:2f:9b:14:10:01:24:c9:e0:95:01: 3f:05:06:b4:08:55:c4:4b:ee:4c:4b:d1:8a:0a:2b: fe:86:7f:be:9e:fe:36:d5:fe:8a:d3:b2:39:fc:1f: 6a:66:20:10:bd:23:58:c8:74:44:72:e5:8b:c2:e7: 58:72:9e:df:1d:97:73:cb:75:4d:08:67:35:e6:f8: 6b:f9:3d:e1:59:a8:f7:ac:86:1f:ff:35:de:08:57: 20:c5:a3:e4:5f:a8:54:e5:d8:14:ff:72:0a:95:58: 09:57:37:22:22:35:89:27:24:84:2b:25:3f:a6:9d: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:0A:66:B4:EA:A3:38:1B:41:9F:A7:99:FC:7A:D8:5F:D2:2A:14 X509v3 Authority Key Identifier: keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0d:04:44:5a:e4:a9:c9:5e:f3:82:25:43:ef:d1:cb:95:21: 38:d0:7d:f3:72:4f:6f:8f:96:65:36:57:50:54:5a:b3:fe:2a: ff:d3:d3:7d:ef:f1:c3:14:8c:78:b1:7e:3c:f5:9d:17:f5:36: 2c:8c:5e:b5:56:41:30:52:36:73:b0:f3:c4:d8:46:d9:d7:9c: af:75:65:0e:60:3b:13:1c:81:14:80:63:68:5e:95:23:20:23: db:b5:87:f9:e0:1e:a9:85:4f:5e:54:ec:e1:04:81:2a:07:ef: 77:93:96:f3:1b:34:8e:88:be:7d:06:92:97:a0:16:d9:7e:11: 59:12:cf:c6:08:ac:ff:3d:10:b9:22:59:d0:15:01:41:0d:55: 93:76:9f:a1:67:76:43:cc:f0:23:9e:5a:7d:f7:ca:0e:07:ef: ef:d0:21:89:1c:b0:bb:5c:b9:8e:a0:e6:27:05:b6:1f:09:ba: 61:01:ca:2f:4a:5d:06:18:a0:26:ee:b5:8d:6d:09:31:4c:45: 95:89:10:51:c8:0f:ac:71:c3:31:ef:57:da:cb:aa:b6:23:59: 5a:87:84:d2:a1:17:9e:4e:45:3f:1c:fa:3f:2c:31:11:dc:1f: 56:79:62:5f:13:d4:53:86:9d:21:a6:11:59:51:ed:ee:04:f2: 5f:0f:97:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIp6U08qYXU8irJkaI7T6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODVlYzczZGMxODFmOTkzNTY1OWY1OGFlZDIwODUzMmEy YzJhNmEwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD Eyg1MTM4MGE2NmI0ZWFhMzM4MWI0MTlmYTc5OWZjN2FkODVmZDIyYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaDxTczvHfxtbqGMLfoIKY4ZdE/C g+xKN9QZcpxdzj9zD+0U0puWpQBNdqW2RXlBxZznn2Db1av1fiwQ2bKnzrco1+iF G/Lhd4BEhWmA/xYxBo7xPYji+FEhYgohoTyvvt9OpUY1iiul46XYWPxJl6uI4UG3 bla8msizPKo+VzYhM8dtaL2Tns7FPi+bFBABJMnglQE/BQa0CFXES+5MS9GKCiv+ hn++nv421f6K07I5/B9qZiAQvSNYyHREcuWLwudYcp7fHZdzy3VNCGc15vhr+T3h Waj3rIYf/zXeCFcgxaPkX6hU5dgU/3IKlVgJVzciIjWJJySEKyU/pp2oKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE4Cma06qM4G0Gfp5n8ethf0ioUMB8GA1UdIwQY MBaAFLeF7HPcGB+ZNWWfWK7SCFMqLCpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lODU0MTgtNjRiMy00NDRiLTkxM2Et NjNjMmJhNGM5OTZjLzEvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lODU0MTgtNjRiMy00NDRiLTkxM2EtNjNjMmJhNGM5OTZj LzEvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag0ERFrk qcle84IlQ+/Ry5UhONB983JPb4+WZTZXUFRas/4q/9PTfe/xwxSMeLF+PPWdF/U2 LIxetVZBMFI2c7DzxNhG2decr3VlDmA7ExyBFIBjaF6VIyAj27WH+eAeqYVPXlTs 4QSBKgfvd5OW8xs0joi+fQaSl6AW2X4RWRLPxgis/z0QuSJZ0BUBQQ1Vk3afoWd2 Q8zwI55afffKDgfv79AhiRywu1y5jqDmJwW2Hwm6YQHKL0pdBhigJu61jW0JMUxF lYkQUcgPrHHDMe9X2suqtiNZWoeE0qEXnk5FPxz6PywxEdwfVnliXxPUU4adIaYR WVHt7gTyXw+XUA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:22 2026 by rpki-client