This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json) Hash identifier: AqLgiKOFP9pfMMSJv/tEX6FZ/xVr9I40r/5ZeTawYCE= Subject key identifier: EC:39:47:EB:5B:D9:AC:F2:FD:A4:97:57:72:36:10:34:24:64:F3:52 Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Certificate serial: 019C446C74052774CF8633D391742E40B89B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 22:01:24 +0000 Manifest this update: Mon 09 Feb 2026 22:01:24 +0000 Manifest next update: Tue 10 Feb 2026 22:01:24 +0000 Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=) 2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: QZ/8pRVjEL4PN2RRTQe2vu3MmEDDDKaqfkpg4UXVLdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:74:05:27:74:cf:86:33:d3:91:74:2e:40:b8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Validity Not Before: Feb 9 22:01:24 2026 GMT Not After : Feb 10 22:01:24 2026 GMT Subject: CN=ec3947eb5bd9acf2fda49757723610342464f352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:c6:bd:ee:74:b3:39:77:be:ba:ba:2e:8b: f2:7a:68:dc:d2:a9:9c:99:2c:25:8b:0a:cd:95:3e: 33:93:e3:40:de:ff:75:e7:a0:94:53:9c:d0:4f:0a: 9c:9f:dd:5e:d7:d6:a2:37:a5:bf:80:35:ce:0b:9a: 86:fd:24:2c:e3:f7:11:ec:5e:26:35:bf:ba:a2:87: 60:29:3c:80:33:e3:d0:e3:e0:e5:4a:58:6c:86:4c: a0:65:fb:81:05:85:48:49:ad:8b:81:4e:12:22:56: 02:19:fc:42:50:3d:6d:9f:13:4b:ca:67:83:1c:62: 57:63:e7:8d:62:5b:f8:a3:31:04:06:26:f6:0a:1e: cf:e9:0a:ec:4f:15:81:23:47:ac:b5:4a:7c:67:9a: 96:b9:91:1f:60:c9:95:c6:a6:34:1f:f9:e6:00:55: f4:7f:be:6a:99:5a:df:6e:78:78:7a:46:5a:c8:db: 8c:e4:bb:fe:69:4d:70:6c:9f:14:be:3b:79:7c:56: cd:72:83:be:77:00:04:62:a1:29:81:4b:6b:05:e5: e2:7e:eb:13:8e:fa:59:90:64:2e:41:83:fa:d7:ca: bf:56:b2:1a:ac:7e:5d:32:31:f0:5a:1e:9d:e5:0c: 91:e1:9d:55:71:f2:8d:51:9d:93:2a:0c:9b:8e:9e: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:39:47:EB:5B:D9:AC:F2:FD:A4:97:57:72:36:10:34:24:64:F3:52 X509v3 Authority Key Identifier: keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0e:b6:1f:bb:ee:c9:4b:86:66:6b:bd:80:0d:dc:a0:2f:29: 31:94:30:93:c8:8d:54:ef:b8:6d:2d:95:d2:cd:6c:9f:9e:6b: 68:ce:cd:46:eb:a8:9f:7a:63:5c:6c:e2:6a:fa:07:34:65:52: cf:c3:fd:1a:d2:06:83:80:b3:95:f9:67:1b:be:d8:0a:92:29: 70:75:63:47:c8:92:50:24:cd:b9:77:17:31:64:49:7e:75:da: e4:4a:1d:74:8c:b5:19:56:5e:5d:83:c4:d1:dd:af:8f:a9:bc: 27:df:9a:d5:ed:9c:9d:34:52:d6:be:a4:7b:2a:e0:36:35:97: bb:06:83:af:c9:cb:23:de:72:09:29:b2:96:1a:74:bb:d3:35: 6c:8a:85:69:e0:04:8f:ea:4b:c9:40:7a:f7:e5:27:d1:55:21: 67:ad:cb:a2:45:56:f9:09:09:1e:93:aa:e1:80:cd:bc:3b:4f: ba:6b:63:1e:a7:bc:44:42:88:34:4d:c9:be:ef:97:df:dc:5f: f8:93:19:1b:b4:f6:66:de:31:e3:37:56:cf:29:74:d4:6b:7a: 4b:2c:f1:89:d0:d5:53:8b:cb:d6:6a:f0:aa:73:1c:2b:a0:db: 63:15:87:5b:73:91:0d:99:84:0f:62:68:a6:b5:32:09:ad:b3: 18:37:ff:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbHQFJ3TPhjPTkXQuQLibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2 NzRmZWIwHhcNMjYwMjA5MjIwMTI0WhcNMjYwMjEwMjIwMTI0WjAzMTEwLwYDVQQD EyhlYzM5NDdlYjViZDlhY2YyZmRhNDk3NTc3MjM2MTAzNDI0NjRmMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqevGve50szl3vrq6Lovyemjc0qmc mSwliwrNlT4zk+NA3v9156CUU5zQTwqcn91e19aiN6W/gDXOC5qG/SQs4/cR7F4m Nb+6oodgKTyAM+PQ4+DlSlhshkygZfuBBYVISa2LgU4SIlYCGfxCUD1tnxNLymeD HGJXY+eNYlv4ozEEBib2Ch7P6QrsTxWBI0estUp8Z5qWuZEfYMmVxqY0H/nmAFX0 f75qmVrfbnh4ekZayNuM5Lv+aU1wbJ8Uvjt5fFbNcoO+dwAEYqEpgUtrBeXifusT jvpZkGQuQYP618q/VrIarH5dMjHwWh6d5QyR4Z1VcfKNUZ2TKgybjp6XHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw5R+tb2azy/aSXV3I2EDQkZPNSMB8GA1UdIwQY MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqA62H7vu yUuGZmu9gA3coC8pMZQwk8iNVO+4bS2V0s1sn55raM7NRuuon3pjXGziavoHNGVS z8P9GtIGg4CzlflnG77YCpIpcHVjR8iSUCTNuXcXMWRJfnXa5EoddIy1GVZeXYPE 0d2vj6m8J9+a1e2cnTRS1r6keyrgNjWXuwaDr8nLI95yCSmylhp0u9M1bIqFaeAE j+pLyUB69+Un0VUhZ63LokVW+QkJHpOq4YDNvDtPumtjHqe8REKINE3Jvu+X39xf +JMZG7T2Zt4x4zdWzyl01Gt6SyzxidDVU4vL1mrwqnMcK6DbYxWHW3ORDZmED2Jo prUyCa2zGDf/Zw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:55 2026 by rpki-client