This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json) Hash identifier: tC9lJ5ATSUvIs81/X/0liyXLsYrRLvBJKJ2c0cCCEr0= Subject key identifier: E6:65:7E:E3:19:F5:0D:B0:FE:3B:44:7F:09:74:CE:E4:C6:07:4C:5F Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c Certificate serial: 019C41D84B9E90703E84B849C51C543FDACA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft Manifest number: 07C3 Signing time: Mon 09 Feb 2026 10:00:19 +0000 Manifest this update: Mon 09 Feb 2026 10:00:19 +0000 Manifest next update: Tue 10 Feb 2026 10:00:19 +0000 Files and hashes: 1: YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa (hash: v2F9ZSNvDEOEkn09bpTuxmjtHiwOPIKq7B7AJM2GesM=) 2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: yj9AiCA697OdbYZgWnl0SEvI+WdLn4OpTHi4+ZT/C9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:4b:9e:90:70:3e:84:b8:49:c5:1c:54:3f:da:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c Validity Not Before: Feb 9 10:00:19 2026 GMT Not After : Feb 10 10:00:19 2026 GMT Subject: CN=e6657ee319f50db0fe3b447f0974cee4c6074c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:58:6d:c1:d4:ae:96:f9:d5:f4:c1:06:aa: 36:52:dc:14:b3:c1:e8:e6:c7:58:b9:2d:f1:f4:38: 03:e9:53:c6:be:bc:93:0a:a3:d0:5b:43:17:39:f7: 11:b1:e8:44:62:36:64:b6:0e:b7:8c:0e:ab:89:36: c5:6d:9a:ff:8b:57:5f:61:10:73:a7:ef:11:9d:d7: d2:e3:87:e6:72:0e:ae:cd:ad:e6:4a:87:57:7e:05: c4:14:48:58:07:87:1d:92:7c:d0:a2:af:19:e7:93: f0:53:0d:f3:c0:54:41:da:3e:1d:55:c8:53:4e:aa: 66:15:b2:48:49:a5:fb:03:f0:d3:ea:c7:c2:65:82: 5c:59:13:da:06:70:27:c4:9a:4e:a9:9e:bd:37:a4: 79:91:5b:11:3f:40:34:35:fc:6a:30:03:84:8f:94: 4d:2a:c0:ac:11:f0:fa:d7:3d:5d:2a:78:39:69:1d: c0:b0:8f:14:e9:49:c9:46:a1:ab:f5:56:8b:bd:c7: 81:56:c6:24:e4:f1:31:51:f4:e7:ab:1a:e5:27:f3: b0:64:11:19:c2:7f:3c:f3:7f:c5:9a:df:6f:d6:6b: 01:12:45:de:fb:4a:ae:96:2b:21:50:71:f8:da:90: 94:7e:7a:d5:e8:cb:e9:8d:20:65:b0:36:1d:70:83: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:7E:E3:19:F5:0D:B0:FE:3B:44:7F:09:74:CE:E4:C6:07:4C:5F X509v3 Authority Key Identifier: keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ef:c7:c4:f3:11:45:fc:0a:f1:1f:06:58:5f:68:a4:b3:d4: f9:2f:e2:da:14:3b:22:5a:39:34:77:ff:d9:24:33:33:11:cb: 85:48:25:c2:54:b0:27:d0:db:fe:f9:35:33:55:0e:d6:51:1e: a2:16:c6:67:dc:d2:55:7e:d8:04:e0:95:ec:62:d8:67:95:a0: 78:37:bc:01:5b:30:ee:9c:a4:bb:00:ba:8e:ce:ae:c0:1b:73: 01:40:46:f7:bc:26:62:d9:43:14:f6:07:96:98:68:1d:99:a3: 61:bf:83:40:79:32:34:3d:48:7c:46:c3:7d:0c:c4:5a:e3:80: 66:c8:b1:d8:46:95:a2:45:1d:55:b9:fe:5a:63:13:d3:60:4e: ba:7f:76:7e:34:7b:54:0e:24:6d:5e:16:c6:f4:fc:a3:af:b8: 2b:d0:a5:30:3e:b9:7e:7b:6f:69:98:5c:c8:7f:be:35:d5:c2: 95:e9:40:e2:fc:c1:fa:ca:65:9a:68:01:a1:d5:fa:49:12:55: b7:67:8c:6b:58:75:30:83:08:a3:fc:23:d3:5c:06:da:5e:f1: 3b:42:ec:3d:35:50:1b:cb:f1:54:0a:a9:b1:5f:3c:b3:e0:91: 27:d0:ea:76:41:ea:80:74:5c:dc:38:4b:be:69:5a:42:5d:cf: ee:47:cc:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2EuekHA+hLhJxRxUP9rKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODRjYzdjMWIzM2QyNzk3N2ZjY2RiMzRiM2NjMjk0YTJh NDA4OGMwHhcNMjYwMjA5MTAwMDE5WhcNMjYwMjEwMTAwMDE5WjAzMTEwLwYDVQQD EyhlNjY1N2VlMzE5ZjUwZGIwZmUzYjQ0N2YwOTc0Y2VlNGM2MDc0YzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKRYbcHUrpb51fTBBqo2UtwUs8Ho 5sdYuS3x9DgD6VPGvryTCqPQW0MXOfcRsehEYjZktg63jA6riTbFbZr/i1dfYRBz p+8RndfS44fmcg6uza3mSodXfgXEFEhYB4cdknzQoq8Z55PwUw3zwFRB2j4dVchT TqpmFbJISaX7A/DT6sfCZYJcWRPaBnAnxJpOqZ69N6R5kVsRP0A0NfxqMAOEj5RN KsCsEfD61z1dKng5aR3AsI8U6UnJRqGr9VaLvceBVsYk5PExUfTnqxrlJ/OwZBEZ wn8883/Fmt9v1msBEkXe+0qulishUHH42pCUfnrV6MvpjSBlsDYdcINnIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZlfuMZ9Q2w/jtEfwl0zuTGB0xfMB8GA1UdIwQY MBaAFJeEzHwbM9J5d/zNs0s8wpSipAiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmIt Yzg4NmZiNmIzYmNkLzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmItYzg4NmZiNmIzYmNk LzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+/HxPMR RfwK8R8GWF9opLPU+S/i2hQ7Ilo5NHf/2SQzMxHLhUglwlSwJ9Db/vk1M1UO1lEe ohbGZ9zSVX7YBOCV7GLYZ5WgeDe8AVsw7pykuwC6js6uwBtzAUBG97wmYtlDFPYH lphoHZmjYb+DQHkyND1IfEbDfQzEWuOAZsix2EaVokUdVbn+WmMT02BOun92fjR7 VA4kbV4WxvT8o6+4K9ClMD65fntvaZhcyH++NdXClelA4vzB+splmmgBodX6SRJV t2eMa1h1MIMIo/wj01wG2l7xO0LsPTVQG8vxVAqpsV88s+CRJ9DqdkHqgHRc3DhL vmlaQl3P7kfMIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:50 2026 by rpki-client