This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json) Hash identifier: QG/Y8IVnn6DUgfUDmqLoAQlCUHoQDZHzRKhBAQzWg8U= Subject key identifier: EB:16:D8:17:D3:38:D9:F5:FE:93:3F:94:68:6A:65:6B:A0:55:85:F2 Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Certificate serial: 019C420FE476F744B7D9E844C89F8D1AD8EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft Manifest number: 02F5 Signing time: Mon 09 Feb 2026 11:01:03 +0000 Manifest this update: Mon 09 Feb 2026 11:01:03 +0000 Manifest next update: Tue 10 Feb 2026 11:01:03 +0000 Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: DHTdFaZCCE3hzq5IurF844WGVEvD+5pW9DksfIzMaYU=) 2: valzYXczYY3RJ6xb_g__yzBDYXU.roa (hash: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e4:76:f7:44:b7:d9:e8:44:c8:9f:8d:1a:d8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Validity Not Before: Feb 9 11:01:03 2026 GMT Not After : Feb 10 11:01:03 2026 GMT Subject: CN=eb16d817d338d9f5fe933f94686a656ba05585f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:ad:d1:11:1d:8e:eb:86:6b:15:a6:e7:02: 9a:43:6c:9b:02:20:83:08:d0:2d:1c:c7:a0:c7:a6: 58:22:d2:b8:0f:d8:d9:fa:91:9f:4c:79:f0:9f:d2: 93:2c:1a:6f:e4:ed:6c:1c:be:e1:36:f4:51:11:e1: 2e:36:d9:ff:5e:ea:db:b4:fb:18:ba:f9:36:f1:bf: 4d:61:f9:49:f7:96:86:85:ce:ab:8a:e9:39:a1:ce: bd:da:d1:ad:f5:4e:f6:d6:29:01:78:4e:c3:e6:eb: 8f:9c:83:2e:05:02:7b:cd:99:37:c7:a5:83:37:63: e7:f5:1b:f9:75:2d:ea:62:80:42:f0:63:77:ca:8f: d3:a5:77:66:17:74:ba:d4:d9:e8:d6:61:00:05:12: be:16:d7:b6:05:0d:82:87:de:35:10:7e:8c:f3:32: 04:38:e1:83:2b:9c:7e:fd:ef:24:c4:44:a6:64:33: 47:ae:c7:fa:34:b7:44:58:19:3b:ec:88:99:19:18: 37:6b:93:66:4a:c4:f1:c4:29:d3:98:7a:57:b7:1a: 3b:5b:fd:2e:f6:02:d5:51:60:73:e2:76:97:3b:df: 8a:19:8f:f0:9a:3e:55:78:31:45:90:3d:83:12:0a: 62:2a:4d:bf:fe:d3:fb:37:b0:db:9c:b1:b2:f0:62: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:16:D8:17:D3:38:D9:F5:FE:93:3F:94:68:6A:65:6B:A0:55:85:F2 X509v3 Authority Key Identifier: keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a7:1b:d0:21:c0:f1:9d:d0:ad:c7:0e:06:4f:5a:20:3b:10: 56:fe:85:6e:b4:bd:4c:15:10:b2:d8:76:44:31:4b:93:30:a4: e7:cd:1c:77:32:ec:b5:87:15:d7:fc:c0:34:50:3c:b2:4f:7d: 19:25:fb:a0:04:8a:ad:32:2f:fd:45:27:32:47:f9:8f:c9:19: 2c:57:ee:9a:de:43:15:05:8d:f0:7e:15:03:c4:ef:e5:65:52: 42:85:6a:2d:35:07:05:3d:9f:7c:42:f4:c1:4a:3a:bc:a6:43: 93:b9:ff:1e:b8:f6:6c:0b:df:a8:28:26:61:e5:27:c8:b6:7d: 8d:4d:1b:aa:6a:20:16:f7:ff:0f:6a:4d:39:00:ba:f8:61:e7: 19:49:c7:c9:c9:e1:76:eb:46:37:d7:4a:92:45:a4:11:1a:a8: 4f:84:32:58:b7:2b:cc:6d:f7:e3:19:52:37:08:6c:75:04:45: 3f:28:09:e2:bf:79:0c:37:0b:c6:da:12:9c:96:b6:a3:9b:9a: a8:61:c4:53:7b:c3:8c:1d:92:e7:b1:3d:7c:4b:c4:e4:c5:60: 92:1b:1c:5b:44:30:ae:0a:8e:69:9b:5f:eb:2b:9c:9d:31:62: f7:be:f9:29:1e:6d:36:38:8a:32:65:92:cb:c7:a2:1e:06:a4: 9c:c7:4a:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+R290S32ehEyJ+NGtjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx NDQxYWYwHhcNMjYwMjA5MTEwMTAzWhcNMjYwMjEwMTEwMTAzWjAzMTEwLwYDVQQD EyhlYjE2ZDgxN2QzMzhkOWY1ZmU5MzNmOTQ2ODZhNjU2YmEwNTU4NWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bqt0REdjuuGaxWm5wKaQ2ybAiCD CNAtHMegx6ZYItK4D9jZ+pGfTHnwn9KTLBpv5O1sHL7hNvRREeEuNtn/XurbtPsY uvk28b9NYflJ95aGhc6riuk5oc692tGt9U721ikBeE7D5uuPnIMuBQJ7zZk3x6WD N2Pn9Rv5dS3qYoBC8GN3yo/TpXdmF3S61Nno1mEABRK+Fte2BQ2Ch941EH6M8zIE OOGDK5x+/e8kxESmZDNHrsf6NLdEWBk77IiZGRg3a5NmSsTxxCnTmHpXtxo7W/0u 9gLVUWBz4naXO9+KGY/wmj5VeDFFkD2DEgpiKk2//tP7N7DbnLGy8GIMpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsW2BfTONn1/pM/lGhqZWugVYXyMB8GA1UdIwQY MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4 LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjacb0CHA 8Z3QrccOBk9aIDsQVv6FbrS9TBUQsth2RDFLkzCk580cdzLstYcV1/zANFA8sk99 GSX7oASKrTIv/UUnMkf5j8kZLFfumt5DFQWN8H4VA8Tv5WVSQoVqLTUHBT2ffEL0 wUo6vKZDk7n/Hrj2bAvfqCgmYeUnyLZ9jU0bqmogFvf/D2pNOQC6+GHnGUnHycnh dutGN9dKkkWkERqoT4QyWLcrzG334xlSNwhsdQRFPygJ4r95DDcLxtoSnJa2o5ua qGHEU3vDjB2S57E9fEvE5MVgkhscW0QwrgqOaZtf6yucnTFi9775KR5tNjiKMmWS y8eiHgaknMdK9A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:55 2026 by rpki-client