This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json) Hash identifier: /q1sF4EHB5mDbwCuBansOXCEkvCVjd1duL4JNnuE7bg= Subject key identifier: 66:3A:BC:F8:DC:B1:EE:AD:BB:B5:4F:2D:AA:A3:E4:C5:F2:40:E6:44 Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6 Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6 Certificate serial: 019C41D89906A0456586A3D60241ED74695E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft Manifest number: 02AE Signing time: Mon 09 Feb 2026 10:00:39 +0000 Manifest this update: Mon 09 Feb 2026 10:00:39 +0000 Manifest next update: Tue 10 Feb 2026 10:00:39 +0000 Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: YmvIRuxB+iQ51BRhS1x4w5qGs3ca8r2bBOcJTH6U3QM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:99:06:a0:45:65:86:a3:d6:02:41:ed:74:69:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6 Validity Not Before: Feb 9 10:00:39 2026 GMT Not After : Feb 10 10:00:39 2026 GMT Subject: CN=663abcf8dcb1eeadbbb54f2daaa3e4c5f240e644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:c4:2d:49:83:8c:39:4c:45:45:f1:a8:cf: ab:49:52:d1:b8:46:5a:4b:77:56:fc:c4:a7:fc:ea: 9a:b8:18:e1:d9:ed:33:3d:f0:9b:35:47:40:18:00: 00:78:72:4e:78:68:4c:d2:6b:52:69:1a:03:3e:07: 8c:17:b1:5a:a9:4b:aa:0a:54:cd:cb:3a:80:71:91: d5:f4:2f:80:7d:dd:a5:8c:71:6f:3c:b0:f9:94:5f: 21:53:7d:e2:50:23:f7:d2:81:bf:d7:5b:bd:c5:08: 62:6d:b6:d5:4d:7a:fd:ce:f6:74:78:31:08:00:00: b4:fc:0b:71:57:9f:24:f9:b6:f8:be:86:ee:1c:ac: a8:e4:80:a1:16:31:ff:66:1b:b5:72:70:a3:8e:44: 0c:c7:19:2d:16:dc:f1:84:65:11:d7:98:48:37:e7: 82:54:bc:6b:27:44:72:99:cb:66:63:93:a4:bf:83: b9:5e:e2:cd:e6:b6:7e:95:33:5b:54:a7:d1:69:6c: 6b:85:cd:92:6b:22:7e:4c:10:0e:34:3c:d1:c8:af: e0:be:42:0e:ce:3c:5c:25:b3:9a:08:a6:3d:a2:8a: 7d:bd:ec:38:a5:2a:92:cf:8f:cd:07:28:bf:1f:af: 4b:50:18:34:3d:64:91:b7:f3:67:2f:b9:dc:ce:0c: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:BC:F8:DC:B1:EE:AD:BB:B5:4F:2D:AA:A3:E4:C5:F2:40:E6:44 X509v3 Authority Key Identifier: keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:51:af:5c:40:99:83:d4:35:0a:25:68:51:06:87:23:41:4e: 03:00:98:5d:3e:42:16:42:b2:f7:1e:44:25:14:41:35:e5:fe: af:c4:f6:3e:61:e2:36:8f:db:58:09:22:5d:8a:7d:71:19:d4: 66:b0:fa:b1:08:7c:08:11:20:7d:15:97:91:50:e0:cb:bf:fd: 7b:62:9b:96:81:f1:1f:03:82:32:2a:37:80:c7:31:25:1c:39: de:dc:6a:c6:9f:7c:28:d3:e1:7f:78:a1:5e:91:43:c4:3b:b7: 59:f7:2d:0d:21:ae:ed:0c:61:4d:54:24:42:6f:6e:1b:66:fe: 89:49:0f:0e:e0:53:12:d7:94:5a:bf:3b:6e:c3:1f:02:b5:0b: ac:b8:fc:b2:4f:f8:e1:5c:ed:78:0d:60:57:d6:7e:22:69:e9: cc:39:38:d0:8b:fe:d3:31:a6:6f:ec:b8:33:5d:ff:9b:64:1f: 05:80:bf:c7:d1:aa:12:24:b3:9e:0b:d7:ba:70:74:49:c4:e7: b4:6b:22:3a:2c:aa:b0:f9:0c:87:99:98:aa:3e:c7:de:5f:88: 70:e1:35:1c:d2:b8:6c:5d:23:a3:05:fd:60:62:51:d8:b7:61: cf:f3:72:3a:ef:e9:21:c1:d8:a4:69:7b:ab:ed:3d:57:3d:ce: 2f:89:da:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JkGoEVlhqPWAkHtdGleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWJjODc0YWZjMjk5Y2YxMGU1YjE3ZGM4YTQzYTI0ZmI5 YzRhZTYwHhcNMjYwMjA5MTAwMDM5WhcNMjYwMjEwMTAwMDM5WjAzMTEwLwYDVQQD Eyg2NjNhYmNmOGRjYjFlZWFkYmJiNTRmMmRhYWEzZTRjNWYyNDBlNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUnELUmDjDlMRUXxqM+rSVLRuEZa S3dW/MSn/OqauBjh2e0zPfCbNUdAGAAAeHJOeGhM0mtSaRoDPgeMF7FaqUuqClTN yzqAcZHV9C+Afd2ljHFvPLD5lF8hU33iUCP30oG/11u9xQhibbbVTXr9zvZ0eDEI AAC0/AtxV58k+bb4vobuHKyo5IChFjH/Zhu1cnCjjkQMxxktFtzxhGUR15hIN+eC VLxrJ0RymctmY5Okv4O5XuLN5rZ+lTNbVKfRaWxrhc2SayJ+TBAONDzRyK/gvkIO zjxcJbOaCKY9oop9vew4pSqSz4/NByi/H69LUBg0PWSRt/NnL7nczgy3+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGY6vPjcse6tu7VPLaqj5MXyQOZEMB8GA1UdIwQY MBaAFOAbyHSvwpnPEOWxfcikOiT7nErmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAt NWM4NTdhZjE5MTg4LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAtNWM4NTdhZjE5MTg4 LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVGvXECZ g9Q1CiVoUQaHI0FOAwCYXT5CFkKy9x5EJRRBNeX+r8T2PmHiNo/bWAkiXYp9cRnU ZrD6sQh8CBEgfRWXkVDgy7/9e2KbloHxHwOCMio3gMcxJRw53txqxp98KNPhf3ih XpFDxDu3WfctDSGu7QxhTVQkQm9uG2b+iUkPDuBTEteUWr87bsMfArULrLj8sk/4 4VzteA1gV9Z+ImnpzDk40Iv+0zGmb+y4M13/m2QfBYC/x9GqEiSzngvXunB0ScTn tGsiOiyqsPkMh5mYqj7H3l+IcOE1HNK4bF0jowX9YGJR2Ldhz/NyOu/pIcHYpGl7 q+09Vz3OL4nanA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:23 2026 by rpki-client