This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json) Hash identifier: 6KD0UBV0921im6vn/dWrE+okzZpOl7iS4Vu2LPyZzBM= Subject key identifier: 1A:B0:7A:B3:37:95:DD:32:CB:29:4D:E2:22:81:66:48:EF:91:6E:AB Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7 Certificate serial: 019C42EB75BAC80AC5A6F5DAC442DCBB9EE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft Manifest number: 1540 Signing time: Mon 09 Feb 2026 15:00:53 +0000 Manifest this update: Mon 09 Feb 2026 15:00:53 +0000 Manifest next update: Tue 10 Feb 2026 15:00:53 +0000 Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: vAuuH8UmEvih88vQooMtIyJKChGN4Xv1ioneP+g05ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:75:ba:c8:0a:c5:a6:f5:da:c4:42:dc:bb:9e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7 Validity Not Before: Feb 9 15:00:53 2026 GMT Not After : Feb 10 15:00:53 2026 GMT Subject: CN=1ab07ab33795dd32cb294de222816648ef916eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:d3:d0:da:b4:5e:84:75:af:7f:cc:02:f1: 22:48:4f:3a:34:1f:76:17:c5:29:8e:40:99:fb:b8: 8d:25:c7:68:d2:23:0e:cc:be:c3:0e:cb:18:ab:41: c0:77:20:b9:7d:dd:6c:73:c9:f8:e5:8a:dd:4f:24: 08:5b:02:91:0d:fa:92:dd:19:55:0a:37:fa:a6:e5: a3:07:f7:0a:00:e5:a8:75:5e:6f:1c:e8:7a:e2:a1: 12:74:6d:1f:7e:3e:2a:13:b2:14:b9:3a:dd:de:71: 1d:70:3e:a9:02:2b:9f:2f:fe:c6:0a:d5:9a:a5:20: 4f:91:ea:6f:dd:48:99:f7:97:65:28:83:1a:64:c3: 77:aa:b0:d3:c6:04:fb:4e:ad:6e:6f:be:1d:14:3f: c3:85:50:17:d8:43:02:9d:a1:97:82:c7:55:77:c7: b6:11:33:20:11:18:0a:9e:19:7b:13:b2:8b:05:92: 47:a5:4a:c8:21:8f:73:18:96:9d:13:28:87:15:f7: 0d:31:71:e5:7d:2e:92:bb:37:f9:2f:00:39:bc:2c: 88:26:c8:47:e9:b0:24:90:5c:47:ff:07:4f:d8:42: ec:a5:2c:65:f1:2b:05:78:79:19:ae:4c:ee:94:2a: c8:3f:17:7f:3a:77:74:e9:32:f4:d8:5f:50:5f:7a: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B0:7A:B3:37:95:DD:32:CB:29:4D:E2:22:81:66:48:EF:91:6E:AB X509v3 Authority Key Identifier: keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:41:00:8f:c5:9e:18:51:00:55:80:e1:d7:fe:f8:a8:ba:f6: cb:d3:c5:30:1d:57:46:4b:f5:57:9d:d0:e6:25:ac:07:b4:e8: f2:24:e7:7f:24:a4:b0:b6:16:ca:12:b3:04:6b:0f:45:5a:5e: ea:ae:7c:0d:f6:de:b5:48:44:5d:b9:e1:b7:05:44:14:44:c3: 7b:12:59:53:71:76:3a:23:4b:ea:51:10:68:ee:bd:19:42:c6: c5:18:d9:3a:a9:c3:0e:4d:c3:65:4a:dc:97:c3:c9:ad:08:88: e1:13:93:e7:16:b2:89:8b:94:01:56:15:a0:c9:61:75:6a:31: 60:88:63:39:b7:14:0e:f9:fd:6b:21:c2:1c:8a:c5:15:15:8d: 65:f5:42:74:78:a8:ac:be:7a:f7:7f:89:4a:bb:d4:cb:35:66: 33:25:73:3f:31:4e:83:bc:72:8d:07:48:fa:0d:47:95:d4:ef: 97:9c:38:2b:b1:5f:ad:66:9b:c0:ff:5a:34:33:9d:e8:f3:b7: 92:89:a2:46:58:89:fd:78:1d:1b:72:f2:35:57:6f:de:3c:7d: 92:46:a7:d0:76:91:1a:61:48:6b:6b:a0:d5:e7:2e:63:a7:92: b0:b1:77:5e:b2:0c:cb:a7:5c:78:df:90:d8:17:b8:f0:7f:c7: e1:67:18:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63W6yArFpvXaxELcu57nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWY2MTUxYTM0N2M3OTIyYWM3Y2Y0Njk5MjUzNDQzMzBk NzI0ZjcwHhcNMjYwMjA5MTUwMDUzWhcNMjYwMjEwMTUwMDUzWjAzMTEwLwYDVQQD EygxYWIwN2FiMzM3OTVkZDMyY2IyOTRkZTIyMjgxNjY0OGVmOTE2ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNPT0Nq0XoR1r3/MAvEiSE86NB92 F8UpjkCZ+7iNJcdo0iMOzL7DDssYq0HAdyC5fd1sc8n45YrdTyQIWwKRDfqS3RlV Cjf6puWjB/cKAOWodV5vHOh64qESdG0ffj4qE7IUuTrd3nEdcD6pAiufL/7GCtWa pSBPkepv3UiZ95dlKIMaZMN3qrDTxgT7Tq1ub74dFD/DhVAX2EMCnaGXgsdVd8e2 ETMgERgKnhl7E7KLBZJHpUrIIY9zGJadEyiHFfcNMXHlfS6Suzf5LwA5vCyIJshH 6bAkkFxH/wdP2ELspSxl8SsFeHkZrkzulCrIPxd/Ond06TL02F9QX3pu0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqwerM3ld0yyylN4iKBZkjvkW6rMB8GA1UdIwQY MBaAFOGfYVGjR8eSKsfPRpklNEMw1yT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYt NDJkNDkzOWEwNTE5LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYtNDJkNDkzOWEwNTE5 LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0EAj8We GFEAVYDh1/74qLr2y9PFMB1XRkv1V53Q5iWsB7To8iTnfySksLYWyhKzBGsPRVpe 6q58DfbetUhEXbnhtwVEFETDexJZU3F2OiNL6lEQaO69GULGxRjZOqnDDk3DZUrc l8PJrQiI4ROT5xayiYuUAVYVoMlhdWoxYIhjObcUDvn9ayHCHIrFFRWNZfVCdHio rL5693+JSrvUyzVmMyVzPzFOg7xyjQdI+g1HldTvl5w4K7FfrWabwP9aNDOd6PO3 komiRliJ/XgdG3LyNVdv3jx9kkan0HaRGmFIa2ug1ecuY6eSsLF3XrIMy6dceN+Q 2Be48H/H4WcYKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:47 2026 by rpki-client