This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json) Hash identifier: N3qxu7QyIKK0am8QitZkXAHq8Nh5kG0coLdH7wxNX0M= Subject key identifier: BD:84:DE:D7:9D:3F:88:00:8D:F3:E7:52:C6:95:D7:E6:9E:E6:49:9E Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e Certificate serial: 019C4358D0D72E574F7AC36141CBA9061AB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft Manifest number: 120A Signing time: Mon 09 Feb 2026 17:00:19 +0000 Manifest this update: Mon 09 Feb 2026 17:00:19 +0000 Manifest next update: Tue 10 Feb 2026 17:00:19 +0000 Files and hashes: 1: e7qW7ktzFbhQzttwga3E9zXgNCo.roa (hash: ROhx5VIRKogH2P7o1oUw2zoKl8d9a5YmW7HEMyeGDjI=) 2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: rFW81SMHW6O6H7w6EVxje61INScjUruncox3kUKGhKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:d0:d7:2e:57:4f:7a:c3:61:41:cb:a9:06:1a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e Validity Not Before: Feb 9 17:00:19 2026 GMT Not After : Feb 10 17:00:19 2026 GMT Subject: CN=bd84ded79d3f88008df3e752c695d7e69ee6499e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:6b:5c:a7:2a:9d:f4:ec:43:15:5f:78:93: ef:8c:fa:ef:44:a4:5e:7c:b6:4d:2c:30:c2:f6:67: 4f:c9:ca:5a:e6:df:67:18:ab:ab:13:cd:25:41:42: 32:2e:fc:1c:a2:e0:ed:c8:a8:85:e8:a0:de:17:ae: f6:d1:f6:1b:45:e3:dd:b1:3e:23:18:37:cd:66:bf: 35:a0:79:e3:c7:87:fd:a7:2d:82:69:12:fc:7a:d3: 18:22:1c:2c:6b:ff:70:59:77:0c:24:81:8e:7e:c8: 5b:50:70:b6:ea:59:b8:fd:1f:a5:ab:02:09:18:12: f6:35:eb:58:a8:82:1c:0c:59:96:f6:9b:0e:31:54: 38:9e:51:80:85:30:3b:45:1c:04:99:d7:de:8e:8d: c4:dc:60:b3:36:4b:33:67:d6:4d:29:e9:fe:1f:a3: 02:4c:12:ea:f6:83:68:41:75:27:bd:b7:53:4f:95: cd:af:65:bd:f7:8c:e4:cb:fa:48:4f:ab:2a:01:e2: ff:d6:e3:7f:4e:09:10:05:9a:e9:8a:61:07:ba:7e: 1d:24:40:ed:4e:97:a3:b6:ff:10:b2:b2:56:67:e5: 0f:09:60:24:b0:5f:cd:5d:5a:d3:85:92:2a:51:c6: ac:28:4e:47:3f:2f:42:03:27:00:52:6d:00:ab:7e: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:84:DE:D7:9D:3F:88:00:8D:F3:E7:52:C6:95:D7:E6:9E:E6:49:9E X509v3 Authority Key Identifier: keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ce:60:2c:11:32:ff:a8:12:d8:45:83:d3:47:89:62:bf:f7: df:b1:89:a7:b8:d0:1e:57:40:cb:0a:22:58:13:c3:d5:d3:b8: d5:51:5b:78:ef:89:e9:9c:e0:d0:d0:ee:57:1d:19:23:76:96: f6:e1:2e:77:85:6e:53:00:b5:fa:49:75:96:d8:63:e1:ca:42: 4b:cd:30:e6:1f:6c:3a:ad:3a:22:84:86:de:a4:7e:06:a3:51: 02:b1:fc:31:14:7f:79:9c:f4:61:1b:57:9b:92:c1:53:44:57: dc:ea:3f:9c:87:37:7d:9f:0a:b2:e7:d1:00:4c:67:5c:84:09: 24:1f:f0:71:64:58:06:7f:d2:c4:e5:6e:70:32:fb:0c:1d:80: e4:55:69:59:e7:15:6e:f9:07:f8:0f:fc:5c:09:af:8c:10:99: f8:91:7b:24:0e:13:ec:49:98:4a:c5:f8:7b:cd:9b:46:9a:ae: 52:9b:f9:96:00:53:47:72:66:60:41:22:c7:d2:84:d9:5b:6a: 09:e1:4a:59:8f:9f:90:8f:e1:4a:18:e7:a4:6e:fb:1c:f2:7c: 9e:b5:2f:58:47:84:69:a2:f4:43:3c:77:05:0c:68:e7:5e:98: 69:5d:7b:ca:db:53:4e:d9:30:75:cd:c9:85:96:90:ca:27:0d: 53:3e:95:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNDXLldPesNhQcupBhq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw Y2ZlNGUwHhcNMjYwMjA5MTcwMDE5WhcNMjYwMjEwMTcwMDE5WjAzMTEwLwYDVQQD EyhiZDg0ZGVkNzlkM2Y4ODAwOGRmM2U3NTJjNjk1ZDdlNjllZTY0OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUtrXKcqnfTsQxVfeJPvjPrvRKRe fLZNLDDC9mdPycpa5t9nGKurE80lQUIyLvwcouDtyKiF6KDeF6720fYbRePdsT4j GDfNZr81oHnjx4f9py2CaRL8etMYIhwsa/9wWXcMJIGOfshbUHC26lm4/R+lqwIJ GBL2NetYqIIcDFmW9psOMVQ4nlGAhTA7RRwEmdfejo3E3GCzNkszZ9ZNKen+H6MC TBLq9oNoQXUnvbdTT5XNr2W994zky/pIT6sqAeL/1uN/TgkQBZrpimEHun4dJEDt Tpejtv8QsrJWZ+UPCWAksF/NXVrThZIqUcasKE5HPy9CAycAUm0Aq3624QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2E3tedP4gAjfPnUsaV1+ae5kmeMB8GA1UdIwQY MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc5gLBEy /6gS2EWD00eJYr/337GJp7jQHldAywoiWBPD1dO41VFbeO+J6Zzg0NDuVx0ZI3aW 9uEud4VuUwC1+kl1lthj4cpCS80w5h9sOq06IoSG3qR+BqNRArH8MRR/eZz0YRtX m5LBU0RX3Oo/nIc3fZ8KsufRAExnXIQJJB/wcWRYBn/SxOVucDL7DB2A5FVpWecV bvkH+A/8XAmvjBCZ+JF7JA4T7EmYSsX4e82bRpquUpv5lgBTR3JmYEEix9KE2Vtq CeFKWY+fkI/hShjnpG77HPJ8nrUvWEeEaaL0Qzx3BQxo516YaV17yttTTtkwdc3J hZaQyicNUz6V8w== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:20 2026 by rpki-client