This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json) Hash identifier: OxUUDN1Tgf+rT68N2pFLWj/QJHtqF6S7SQnF8rmOO48= Subject key identifier: 86:CA:E2:2B:ED:CF:1B:A1:59:7C:55:73:C8:D5:DB:81:5B:6A:75:8C Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e Certificate serial: 019C420F6E2C3CB6DBF5C060EB2BC8F07AF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft Manifest number: 0F49 Signing time: Mon 09 Feb 2026 11:00:33 +0000 Manifest this update: Mon 09 Feb 2026 11:00:33 +0000 Manifest next update: Tue 10 Feb 2026 11:00:33 +0000 Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: ZIklG+VkJYJomF5a+5UmSXCPWHRyrM9e/yXOSh00fXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:6e:2c:3c:b6:db:f5:c0:60:eb:2b:c8:f0:7a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e Validity Not Before: Feb 9 11:00:33 2026 GMT Not After : Feb 10 11:00:33 2026 GMT Subject: CN=86cae22bedcf1ba1597c5573c8d5db815b6a758c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:f6:b7:45:65:5a:02:18:be:22:41:24:c9: 19:c6:98:0e:cd:5f:87:7a:e6:db:dc:3b:71:c2:cc: 0b:ca:0e:6b:8a:02:c4:0a:93:c0:b6:bc:dd:81:8c: 64:74:54:37:2e:a2:ee:e6:12:a2:61:cd:6b:38:e1: d3:e0:ac:b5:0a:d5:4a:1a:70:5a:89:c7:d2:68:96: 7d:09:be:70:ab:7e:35:46:d3:02:59:95:f4:d4:2d: 9f:0c:67:d8:61:65:08:cb:74:b7:19:97:e8:34:de: 42:fe:b9:47:d3:e1:21:6f:15:ea:d9:4f:aa:23:ef: 3c:37:57:53:88:04:40:52:ed:71:8f:22:9e:38:22: 6d:42:3a:2e:a7:7d:1f:68:a7:06:ca:47:4a:c2:8e: 05:30:3b:97:c1:31:3f:50:17:65:20:f6:46:1f:b5: 03:d2:ed:b2:ef:1a:6d:e8:1b:6b:c1:1e:df:14:26: a1:b4:8c:ee:ed:37:35:2b:a3:a5:af:cd:93:98:0b: da:ce:f5:4d:20:54:96:03:05:6f:bc:5d:50:d6:f8: 90:0e:62:d0:3d:42:7c:93:2f:92:e3:ab:e5:6a:01: b3:de:35:f4:b9:13:a7:46:8b:85:53:55:ce:44:55: 83:20:d5:07:f5:df:46:09:9c:76:d8:03:e3:e0:77: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CA:E2:2B:ED:CF:1B:A1:59:7C:55:73:C8:D5:DB:81:5B:6A:75:8C X509v3 Authority Key Identifier: keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:21:39:c5:79:ff:61:c2:35:c9:8f:ef:35:76:e9:d5:e0:45: 16:76:25:61:cd:14:a7:7a:1a:a3:64:6a:a4:ea:55:a3:4f:a3: f2:36:55:95:b8:d9:ea:62:98:93:f8:25:eb:01:e4:28:af:0e: e7:c2:96:80:af:a5:84:69:36:68:52:d3:2f:70:dc:8c:df:e3: 34:93:59:a0:f8:91:cf:11:d0:2b:fa:a2:9d:31:ff:80:c5:52: 49:5e:d9:a3:b3:48:5b:02:e1:f8:9d:b7:0b:b0:44:9d:31:de: 13:be:e9:b0:11:73:bd:ab:d6:77:ae:a5:f6:86:e5:ec:29:c3: 54:41:66:0c:ce:ac:ac:1c:10:cf:b3:2e:be:ef:e5:3c:37:a4: 64:d9:7d:68:d3:09:df:7f:df:55:0d:d5:37:ec:d6:40:cf:1c: fd:72:2d:ed:01:08:c0:dc:3d:9a:03:bf:55:a3:fb:79:92:f9: b5:62:a4:da:e4:3b:6d:06:e6:5a:5c:49:72:51:c5:69:32:9d: ec:35:46:43:9c:42:ac:da:ef:99:46:03:c4:d0:d2:01:46:ad: 04:d3:a9:97:8f:2a:33:16:20:4d:91:f5:82:26:19:b7:4c:3c: b9:b0:ba:33:71:ee:b5:9c:27:fb:9f:70:59:67:53:8a:ce:fa: 9c:e4:bc:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD24sPLbb9cBg6yvI8HrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOGY5OWU4OGRhMDQ2ZGYzMTA0OWQ5N2RkOTEyYWU2NTBk NTZkNGUwHhcNMjYwMjA5MTEwMDMzWhcNMjYwMjEwMTEwMDMzWjAzMTEwLwYDVQQD Eyg4NmNhZTIyYmVkY2YxYmExNTk3YzU1NzNjOGQ1ZGI4MTViNmE3NThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ32t0VlWgIYviJBJMkZxpgOzV+H eubb3DtxwswLyg5rigLECpPAtrzdgYxkdFQ3LqLu5hKiYc1rOOHT4Ky1CtVKGnBa icfSaJZ9Cb5wq341RtMCWZX01C2fDGfYYWUIy3S3GZfoNN5C/rlH0+EhbxXq2U+q I+88N1dTiARAUu1xjyKeOCJtQjoup30faKcGykdKwo4FMDuXwTE/UBdlIPZGH7UD 0u2y7xpt6BtrwR7fFCahtIzu7Tc1K6Olr82TmAvazvVNIFSWAwVvvF1Q1viQDmLQ PUJ8ky+S46vlagGz3jX0uROnRouFU1XORFWDINUH9d9GCZx22APj4HcHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbK4ivtzxuhWXxVc8jV24FbanWMMB8GA1UdIwQY MBaAFC+PmeiNoEbfMQSdl92RKuZQ1W1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2Mzkt MTJkNTJmMWU1NGRiLzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2MzktMTJkNTJmMWU1NGRi LzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCE5xXn/ YcI1yY/vNXbp1eBFFnYlYc0Up3oao2RqpOpVo0+j8jZVlbjZ6mKYk/gl6wHkKK8O 58KWgK+lhGk2aFLTL3DcjN/jNJNZoPiRzxHQK/qinTH/gMVSSV7Zo7NIWwLh+J23 C7BEnTHeE77psBFzvavWd66l9obl7CnDVEFmDM6srBwQz7Muvu/lPDekZNl9aNMJ 33/fVQ3VN+zWQM8c/XIt7QEIwNw9mgO/VaP7eZL5tWKk2uQ7bQbmWlxJclHFaTKd 7DVGQ5xCrNrvmUYDxNDSAUatBNOpl48qMxYgTZH1giYZt0w8ubC6M3HutZwn+59w WWdTis76nOS8eg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:14 2026 by rpki-client