This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json) Hash identifier: HKrKmC2y4rpWmfm2J7+KaGrE3QqIXAgTOEBymEh7pAA= Subject key identifier: 07:75:D5:ED:C4:20:1C:2F:13:06:A9:DF:D6:EC:2A:3B:BB:1B:62:D9 Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Certificate serial: 019C42B41989EEC8499D5F7108C49B73CD2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft Manifest number: 0821 Signing time: Mon 09 Feb 2026 14:00:24 +0000 Manifest this update: Mon 09 Feb 2026 14:00:24 +0000 Manifest next update: Tue 10 Feb 2026 14:00:24 +0000 Files and hashes: 1: U5LwFLNFwIzSSkxpdpnTKouxi20.roa (hash: ovCIG9r02PFi/FWVt8o3at5aILc9+LJLTQmUSraYt70=) 2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: qBO1Elry5QBv85f/zsLzUuTjcW/0nbU1tjgM3mb+sRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:19:89:ee:c8:49:9d:5f:71:08:c4:9b:73:cd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Validity Not Before: Feb 9 14:00:24 2026 GMT Not After : Feb 10 14:00:24 2026 GMT Subject: CN=0775d5edc4201c2f1306a9dfd6ec2a3bbb1b62d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:d6:66:ec:c2:56:6b:5a:9d:bc:d4:3e:eb: bf:1a:5a:2d:95:71:a5:4e:dd:1a:2f:05:52:01:d5: 12:60:68:6b:2f:f3:5e:4f:54:de:29:82:90:10:b9: f3:91:7e:8b:28:ef:50:0c:31:d2:5a:b6:3f:41:1b: 76:36:ee:d7:d8:70:be:6c:32:b8:ef:5e:3b:a8:7a: 4e:1e:e8:01:9a:7e:b3:ef:32:5f:c9:e4:6d:a3:80: 5e:dd:08:ca:c4:bf:65:89:77:4f:b5:1d:a7:1c:eb: 41:00:d3:97:60:72:e1:f4:9b:28:78:71:9f:08:f9: 5b:3f:e4:4b:04:1b:62:00:5f:7b:d9:f9:be:f9:2f: d9:16:56:a9:ab:00:f6:e1:63:8e:e3:76:ce:cd:b0: 62:bf:36:9d:9d:b3:ef:9c:03:69:a2:0c:77:41:8b: 3a:65:9b:f0:cd:a4:30:e4:c4:9e:a1:8e:75:8b:22: bc:9c:8d:72:e3:02:1d:94:50:ce:2f:86:33:38:6e: e6:87:46:5d:bd:65:40:9e:0b:c6:ff:35:a2:46:bd: df:2b:b1:28:91:b8:40:f4:b4:b1:7c:99:4e:46:0e: ab:00:04:13:19:5a:8b:4f:65:06:60:18:56:a3:08: d0:b5:aa:14:03:90:af:e3:53:47:70:20:7f:59:1f: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:75:D5:ED:C4:20:1C:2F:13:06:A9:DF:D6:EC:2A:3B:BB:1B:62:D9 X509v3 Authority Key Identifier: keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:39:66:3f:66:67:74:25:51:3a:d0:42:59:9e:3b:82:66:03: b9:2e:73:9e:0a:2f:30:de:ca:42:7f:9b:3b:89:ba:db:b9:49: 70:62:a1:35:fd:b4:67:73:97:8a:ec:75:2b:28:aa:a4:90:8e: e7:79:85:e2:fe:18:f3:24:49:02:4b:d6:2a:9e:a2:3f:b3:63: ac:0f:2c:5a:7f:1a:5f:fe:2c:2d:ea:18:0e:ac:10:01:ca:d2: 7a:7d:59:95:f2:8e:c3:8a:c2:93:45:eb:a4:5a:15:a0:e7:f6: 1f:25:a5:c3:7a:2e:cf:ac:d3:15:f1:82:56:4f:ac:c7:25:53: e3:af:9a:dc:c8:a5:de:96:bf:06:bd:98:66:e8:57:ad:2f:47: 10:5a:06:51:7d:f0:aa:d2:1b:71:5d:07:17:da:b8:d2:de:d5: 25:6d:66:59:7b:4e:23:7f:fc:b6:3e:35:40:3d:f3:27:74:b2: ff:31:6e:5b:13:12:88:7b:03:8d:f1:93:a8:1f:1a:2b:b4:fd: d8:5d:06:7a:8e:45:67:6d:f9:f2:ac:1e:05:8e:38:a5:61:59: 9c:f5:f7:3f:83:7d:bd:1e:67:e8:c2:f5:98:ac:ab:97:88:ae: 40:a2:b8:cd:a9:9f:a2:74:f5:13:0c:15:0e:7e:52:54:00:b3: ad:77:58:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBmJ7shJnV9xCMSbc80rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODg1ZTM4YWM3N2NhYzA0NDgyOWI1M2NiM2IyNWFiZTYx ZTlmNjQwHhcNMjYwMjA5MTQwMDI0WhcNMjYwMjEwMTQwMDI0WjAzMTEwLwYDVQQD EygwNzc1ZDVlZGM0MjAxYzJmMTMwNmE5ZGZkNmVjMmEzYmJiMWI2MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbzWZuzCVmtanbzUPuu/GlotlXGl Tt0aLwVSAdUSYGhrL/NeT1TeKYKQELnzkX6LKO9QDDHSWrY/QRt2Nu7X2HC+bDK4 7147qHpOHugBmn6z7zJfyeRto4Be3QjKxL9liXdPtR2nHOtBANOXYHLh9JsoeHGf CPlbP+RLBBtiAF972fm++S/ZFlapqwD24WOO43bOzbBivzadnbPvnANpogx3QYs6 ZZvwzaQw5MSeoY51iyK8nI1y4wIdlFDOL4YzOG7mh0ZdvWVAngvG/zWiRr3fK7Eo kbhA9LSxfJlORg6rAAQTGVqLT2UGYBhWowjQtaoUA5Cv41NHcCB/WR8BbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd11e3EIBwvEwap39bsKju7G2LZMB8GA1UdIwQY MBaAFIOIXjisd8rARIKbU8s7JavmHp9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2Qt YTJmNTllYWU4NmQwLzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2QtYTJmNTllYWU4NmQw LzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzlmP2Zn dCVROtBCWZ47gmYDuS5zngovMN7KQn+bO4m627lJcGKhNf20Z3OXiux1KyiqpJCO 53mF4v4Y8yRJAkvWKp6iP7NjrA8sWn8aX/4sLeoYDqwQAcrSen1ZlfKOw4rCk0Xr pFoVoOf2HyWlw3ouz6zTFfGCVk+sxyVT46+a3Mil3pa/Br2YZuhXrS9HEFoGUX3w qtIbcV0HF9q40t7VJW1mWXtOI3/8tj41QD3zJ3Sy/zFuWxMSiHsDjfGTqB8aK7T9 2F0Geo5FZ2358qweBY44pWFZnPX3P4N9vR5n6ML1mKyrl4iuQKK4zamfonT1EwwV Dn5SVACzrXdYtw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:57 2026 by rpki-client