This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json) Hash identifier: 9vJ//QCIotiK3ZqkV1AozZr/SnymcOv3g+F8a/I8UfA= Subject key identifier: AC:AA:2F:F8:3A:BD:FF:36:86:EC:FA:8E:B8:93:67:D5:4A:9C:B4:A9 Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Certificate serial: 019C43220FE624736582ED5466B9C1C00264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:31 +0000 Manifest this update: Mon 09 Feb 2026 16:00:31 +0000 Manifest next update: Tue 10 Feb 2026 16:00:31 +0000 Files and hashes: 1: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: ftApaAR3LCsxKqnPeDV4z6yVTonhsCJET4j5nqhDo2Q=) 2: gArRCC3q1YnlfTTgUixtQVGvcFs.roa (hash: narCCTYRY9LX6p6g8xSiiHiFz+JGuLFkwOfUQUNN3Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0f:e6:24:73:65:82:ed:54:66:b9:c1:c0:02:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Validity Not Before: Feb 9 16:00:31 2026 GMT Not After : Feb 10 16:00:31 2026 GMT Subject: CN=acaa2ff83abdff3686ecfa8eb89367d54a9cb4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9d:db:27:75:ae:b4:aa:e6:11:14:e4:df:fd: c2:50:f0:15:20:f9:c6:d9:6c:ab:7d:19:f0:be:5b: 7e:87:94:19:73:b6:23:6d:23:cf:0d:45:af:54:db: c8:2b:25:cd:7c:95:c8:68:53:92:76:e8:6f:c5:59: 81:1d:19:d0:d0:ce:d1:54:0c:1f:36:29:b2:6b:4f: fa:99:75:56:92:b8:63:2b:b5:68:48:b6:65:f3:de: 3d:13:20:34:59:09:29:71:8a:53:e7:1a:d3:83:33: ad:ab:60:69:ab:c4:cd:83:2e:76:ec:47:6f:c2:2d: 48:63:92:da:05:0f:8e:ff:f7:0c:d4:ca:14:87:e0: 9f:55:e8:58:d2:07:9c:13:b2:48:eb:de:7e:76:75: ee:e7:f8:d5:71:27:98:36:02:e6:ef:41:4f:63:b0: 75:d5:42:86:f7:7e:d5:bf:8f:0b:96:a8:30:74:d4: d0:ee:b7:ca:ef:0b:dd:e3:bb:d2:98:4c:e7:eb:51: b8:cf:d8:9c:8a:c2:eb:0a:cb:60:d7:2f:8c:e7:05: fa:dc:46:69:c8:c7:86:e8:e0:89:9e:6b:02:84:79: a6:e0:9f:c2:39:4e:e9:ca:ea:0a:ec:e0:de:e1:e9: 9b:03:fd:ab:6d:46:97:4c:37:35:ab:f2:ca:a5:0c: fd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AA:2F:F8:3A:BD:FF:36:86:EC:FA:8E:B8:93:67:D5:4A:9C:B4:A9 X509v3 Authority Key Identifier: keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:54:1b:cb:7c:83:43:31:29:2b:42:49:97:83:29:1c:56:c1: bb:be:8a:52:b1:71:ad:87:9a:37:52:71:34:79:42:26:91:dc: ad:18:6f:15:7a:24:d4:81:34:4c:68:4a:b6:bc:b8:3e:4b:19: 7f:ea:2c:f4:4a:2c:fe:43:19:b3:c5:85:ed:b8:0c:72:4c:ec: 46:53:bc:db:47:e1:fb:75:5f:5d:79:e2:30:79:60:18:9c:67: 87:b4:60:da:e1:00:8b:af:84:e5:d0:11:92:02:17:2f:c3:08: 8f:da:8e:34:02:bb:76:8b:92:4a:04:93:09:a2:47:be:08:30: 92:23:91:c4:0e:8f:8c:d1:c2:4f:fe:e5:70:8f:ac:ac:ea:a0: 94:c8:f0:91:e6:b2:eb:66:49:55:99:c4:6a:58:54:7b:87:69: cd:d1:1d:9a:7b:6d:50:6a:1f:99:ab:bf:da:d7:f7:cb:50:f5: c4:af:ac:c6:e0:ac:41:05:9f:4b:4e:c3:d2:5a:63:7e:7a:47: 17:2d:b4:c5:85:38:65:10:45:99:65:57:d2:59:00:42:95:4f: d3:60:c4:fe:3b:93:d9:d4:3b:e6:d2:f5:5e:df:97:9f:e0:2f: 07:cd:08:c6:a2:a4:26:eb:2d:90:89:e2:1f:8d:eb:1a:c6:e0: 1b:bd:c0:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIg/mJHNlgu1UZrnBwAJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM3YmQwYzQ0ODZiYTA3M2NlMmRlNTNiYTA3NGQ3MGU0 NWI1ZTcwHhcNMjYwMjA5MTYwMDMxWhcNMjYwMjEwMTYwMDMxWjAzMTEwLwYDVQQD EyhhY2FhMmZmODNhYmRmZjM2ODZlY2ZhOGViODkzNjdkNTRhOWNiNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Z3bJ3WutKrmERTk3/3CUPAVIPnG 2WyrfRnwvlt+h5QZc7YjbSPPDUWvVNvIKyXNfJXIaFOSduhvxVmBHRnQ0M7RVAwf Nimya0/6mXVWkrhjK7VoSLZl8949EyA0WQkpcYpT5xrTgzOtq2Bpq8TNgy527Edv wi1IY5LaBQ+O//cM1MoUh+CfVehY0gecE7JI695+dnXu5/jVcSeYNgLm70FPY7B1 1UKG937Vv48LlqgwdNTQ7rfK7wvd47vSmEzn61G4z9icisLrCstg1y+M5wX63EZp yMeG6OCJnmsChHmm4J/COU7pyuoK7ODe4embA/2rbUaXTDc1q/LKpQz9SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyqL/g6vf82huz6jriTZ9VKnLSpMB8GA1UdIwQY MBaAFEuMe9DESGugc84t5TugdNcORbXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgt MDI0MGU3NDQ3NmE3LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgtMDI0MGU3NDQ3NmE3 LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFQby3yD QzEpK0JJl4MpHFbBu76KUrFxrYeaN1JxNHlCJpHcrRhvFXok1IE0TGhKtry4PksZ f+os9Eos/kMZs8WF7bgMckzsRlO820fh+3VfXXniMHlgGJxnh7Rg2uEAi6+E5dAR kgIXL8MIj9qONAK7douSSgSTCaJHvggwkiORxA6PjNHCT/7lcI+srOqglMjwkeay 62ZJVZnEalhUe4dpzdEdmnttUGofmau/2tf3y1D1xK+sxuCsQQWfS07D0lpjfnpH Fy20xYU4ZRBFmWVX0lkAQpVP02DE/juT2dQ75tL1Xt+Xn+AvB80IxqKkJustkIni H43rGsbgG73A2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:29 2026 by rpki-client