This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json) Hash identifier: d71lD9DNPOLkK4Plj8UIGSxfWMbJC+mFcOfG+sI/0Ak= Subject key identifier: 1C:00:3B:0C:AC:C9:CF:AC:EC:EF:93:C1:16:2D:C5:3D:5D:82:A5:6A Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Certificate serial: 019C427D1C692C990A422B41940E55ADC849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft Manifest number: 0CDA Signing time: Mon 09 Feb 2026 13:00:21 +0000 Manifest this update: Mon 09 Feb 2026 13:00:21 +0000 Manifest next update: Tue 10 Feb 2026 13:00:21 +0000 Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: 2tioLTJanlhQUv+n1yMGHA5bmfKhuS2ZnEO5afC7lVE=) 2: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:1c:69:2c:99:0a:42:2b:41:94:0e:55:ad:c8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Validity Not Before: Feb 9 13:00:21 2026 GMT Not After : Feb 10 13:00:21 2026 GMT Subject: CN=1c003b0cacc9cfacecef93c1162dc53d5d82a56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:a3:a6:10:1a:7d:04:73:8d:14:cf:3b:76: 12:3e:ee:33:3d:13:4b:86:2c:e4:88:05:2f:d6:8b: 10:5d:95:db:a6:2b:49:a8:2e:8a:7a:fd:39:02:de: 69:ae:8a:6d:f0:bb:9a:40:b4:5e:75:3d:ac:9b:ad: b1:fa:4a:44:75:c2:31:50:39:bc:ae:f7:48:78:1a: 7b:1a:a0:c5:d1:ae:5d:99:24:ae:a6:44:3f:f6:b1: 01:ac:53:d7:59:95:86:65:0d:8b:f1:fc:21:7d:13: 0a:77:14:af:1d:bb:97:d6:c4:00:62:71:a2:b5:80: 00:53:8e:d7:a5:1b:a0:55:94:2d:d0:c2:58:dc:d0: 38:29:16:e7:cf:a9:f0:91:b4:30:5d:6c:26:7a:94: 5c:6b:2f:8e:59:93:62:cc:b4:97:96:21:e3:fd:0d: 1e:23:23:72:b2:6b:cd:88:cc:05:16:a2:71:a9:cd: 12:fc:4a:61:a3:9f:8e:03:71:5f:ea:04:41:f3:8f: 7c:14:ce:0b:d5:b8:6f:4a:32:6e:fc:55:81:aa:09: 14:47:64:16:76:b5:e3:32:a4:45:21:95:18:87:b5: 51:86:29:89:16:e9:c7:17:d8:da:59:a2:16:8b:e9: 4a:c3:77:3c:af:34:58:d6:26:bd:24:2b:29:79:0e: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:00:3B:0C:AC:C9:CF:AC:EC:EF:93:C1:16:2D:C5:3D:5D:82:A5:6A X509v3 Authority Key Identifier: keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:16:a6:dd:ba:9a:7b:e3:09:82:40:2f:37:c7:5f:44:1b:05: 56:6e:48:79:d7:36:71:db:11:ff:b3:55:a1:19:31:5e:54:94: 8e:fd:9f:f7:15:47:07:af:a6:8b:b1:c0:63:6f:eb:c8:45:6c: 87:9e:7e:a2:de:f2:19:de:61:a4:1d:2e:a6:ce:69:0a:32:80: ce:e3:8b:a4:2c:0b:e0:dc:ea:8c:2c:ef:7e:e9:f8:84:13:77: 65:51:5d:82:90:2d:8f:0c:ad:31:12:8b:0f:e3:9d:d2:72:a4: d8:68:a7:c4:7c:90:89:e7:3f:04:f5:18:a6:e2:0d:51:88:96: 01:f1:d5:ed:bf:36:ac:d6:01:38:16:74:c0:cc:0b:5a:11:9e: 70:db:36:18:f8:87:73:95:26:08:23:0d:0f:74:9c:2a:ea:12: 2d:99:87:6b:3e:e0:b6:ba:84:56:fb:ce:fa:24:38:d8:05:da: 01:d2:b3:73:b8:ab:db:88:d2:66:6b:56:82:1a:ae:83:c1:06: 8a:3b:50:37:fb:b7:b9:4e:2d:f4:21:49:54:09:02:d6:cd:57: cc:81:62:05:31:d5:24:97:36:70:cb:96:f9:40:a2:a5:e2:06: 64:e0:44:70:ea:4c:6b:e8:19:df:b0:96:57:d3:10:fe:16:64: ab:eb:ea:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfRxpLJkKQitBlA5VrchJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz NmVjZDQwHhcNMjYwMjA5MTMwMDIxWhcNMjYwMjEwMTMwMDIxWjAzMTEwLwYDVQQD EygxYzAwM2IwY2FjYzljZmFjZWNlZjkzYzExNjJkYzUzZDVkODJhNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMmjphAafQRzjRTPO3YSPu4zPRNL hizkiAUv1osQXZXbpitJqC6Kev05At5propt8LuaQLRedT2sm62x+kpEdcIxUDm8 rvdIeBp7GqDF0a5dmSSupkQ/9rEBrFPXWZWGZQ2L8fwhfRMKdxSvHbuX1sQAYnGi tYAAU47XpRugVZQt0MJY3NA4KRbnz6nwkbQwXWwmepRcay+OWZNizLSXliHj/Q0e IyNysmvNiMwFFqJxqc0S/Epho5+OA3Ff6gRB8498FM4L1bhvSjJu/FWBqgkUR2QW drXjMqRFIZUYh7VRhimJFunHF9jaWaIWi+lKw3c8rzRY1ia9JCspeQ6Z/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwAOwysyc+s7O+TwRYtxT1dgqVqMB8GA1UdIwQY MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3 LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsham3bqa e+MJgkAvN8dfRBsFVm5Iedc2cdsR/7NVoRkxXlSUjv2f9xVHB6+mi7HAY2/ryEVs h55+ot7yGd5hpB0ups5pCjKAzuOLpCwL4NzqjCzvfun4hBN3ZVFdgpAtjwytMRKL D+Od0nKk2GinxHyQiec/BPUYpuINUYiWAfHV7b82rNYBOBZ0wMwLWhGecNs2GPiH c5UmCCMND3ScKuoSLZmHaz7gtrqEVvvO+iQ42AXaAdKzc7ir24jSZmtWghqug8EG ijtQN/u3uU4t9CFJVAkC1s1XzIFiBTHVJJc2cMuW+UCipeIGZOBEcOpMa+gZ37CW V9MQ/hZkq+vq8w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:34 2026 by rpki-client