This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json) Hash identifier: AC8Lr+Tl0Uie3jcVI5Gt94h5vIQxn8J4JJWNRk0+F48= Subject key identifier: E1:9E:8C:49:D3:05:64:50:26:0C:03:F9:28:F0:3C:88:4B:9F:F7:D6 Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e Certificate serial: 019C42101BBBCEC33981FBD0836862215E91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft Manifest number: 032C Signing time: Mon 09 Feb 2026 11:01:17 +0000 Manifest this update: Mon 09 Feb 2026 11:01:17 +0000 Manifest next update: Tue 10 Feb 2026 11:01:17 +0000 Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: V+DYPmnBrq2oP4KvAAy6rHZO1px0y5DPWOUBxClsZpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:1b:bb:ce:c3:39:81:fb:d0:83:68:62:21:5e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e Validity Not Before: Feb 9 11:01:17 2026 GMT Not After : Feb 10 11:01:17 2026 GMT Subject: CN=e19e8c49d3056450260c03f928f03c884b9ff7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ca:d7:dd:7c:42:f7:ec:8e:2f:cf:0b:9d:d0: 5b:bb:e1:b3:91:8a:c0:b9:ff:70:e5:aa:45:1c:98: 76:0a:09:32:c2:ad:8a:42:9e:c4:91:d1:97:20:20: a0:de:07:dc:e8:94:00:d1:29:8c:86:c9:53:2f:e9: f2:9e:ca:9b:c5:5d:35:ec:93:c2:fc:59:8e:e3:a8: 36:ad:64:92:78:b3:50:7d:80:83:a0:74:ee:7d:33: 45:28:fb:81:09:03:da:99:59:5d:11:44:b7:5d:c6: d1:61:a7:28:b0:56:f4:72:01:f4:f5:fd:4b:d8:53: c0:d4:1a:9c:9f:24:41:74:7d:81:f8:0b:a9:37:bc: 20:1f:f7:48:42:42:48:7d:c8:f2:6e:ce:38:9b:5c: 31:1d:3a:66:aa:96:c8:2b:9b:1b:5a:f8:5f:12:61: 28:77:79:51:f1:f1:6d:cf:f8:c2:f1:3b:c2:5c:75: 69:04:ea:86:0f:08:7c:f8:40:6a:f3:71:0b:71:ee: d6:03:dd:40:33:b9:4b:c6:8b:e5:4c:5d:72:fa:f6: a4:3b:a1:e3:e1:43:71:56:d6:bc:4a:f2:08:62:e9: 28:33:75:4b:b3:7c:da:d6:fa:0f:a4:ac:59:a8:e6: b2:c1:75:5d:26:82:e0:82:e4:46:ab:d9:bf:3c:f6: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:8C:49:D3:05:64:50:26:0C:03:F9:28:F0:3C:88:4B:9F:F7:D6 X509v3 Authority Key Identifier: keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:50:83:0c:b4:98:fc:40:cc:25:03:f7:04:99:3e:6b:0a:a0: d1:04:af:b2:da:ce:a5:79:1e:8e:e0:4e:48:b4:85:2a:0c:45: 57:30:6a:3c:38:5d:e5:05:9f:ba:e1:43:d7:3b:bc:31:8a:5f: b5:8c:75:65:c3:4e:fb:5e:ae:41:d2:bd:b8:52:6b:67:0e:75: 5f:ad:eb:f4:1b:9b:ff:cd:10:7a:1f:98:7b:5f:15:e3:00:79: a8:31:3c:cc:8a:24:4b:37:78:73:7c:d4:c2:2a:0c:85:ea:a0: 25:68:b1:41:24:98:cf:a1:6d:0c:9c:2d:71:dc:57:45:2f:d3: 00:fa:78:5c:1d:aa:b8:5d:a1:3a:8d:60:42:7c:56:6c:90:24: 7a:41:0d:2a:70:88:d8:ab:e4:a1:58:53:ee:56:7e:80:3c:bc: b0:3a:8f:5c:16:83:d7:b2:0a:ea:2b:5e:b2:5a:43:90:7e:8b: 2e:86:e9:3b:0f:d5:a3:09:60:e0:fe:b1:94:75:c1:27:cb:8b: 03:d2:5f:d8:a0:08:d4:73:ef:99:5b:60:32:ad:d2:d8:36:e9: 3f:33:15:36:eb:04:82:1b:f7:40:74:68:6f:de:c5:92:6b:b2: 94:6d:3b:10:4a:54:c3:9d:ba:67:25:1c:dc:b7:6b:78:9f:be: eb:17:64:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBu7zsM5gfvQg2hiIV6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODZiMTFiYTNiZDk5OGRlZGVmOTgxM2MxMzNjNDI2NDIz NDk1NWUwHhcNMjYwMjA5MTEwMTE3WhcNMjYwMjEwMTEwMTE3WjAzMTEwLwYDVQQD EyhlMTllOGM0OWQzMDU2NDUwMjYwYzAzZjkyOGYwM2M4ODRiOWZmN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksrX3XxC9+yOL88LndBbu+GzkYrA uf9w5apFHJh2Cgkywq2KQp7EkdGXICCg3gfc6JQA0SmMhslTL+nynsqbxV017JPC /FmO46g2rWSSeLNQfYCDoHTufTNFKPuBCQPamVldEUS3XcbRYacosFb0cgH09f1L 2FPA1BqcnyRBdH2B+AupN7wgH/dIQkJIfcjybs44m1wxHTpmqpbIK5sbWvhfEmEo d3lR8fFtz/jC8TvCXHVpBOqGDwh8+EBq83ELce7WA91AM7lLxovlTF1y+vakO6Hj 4UNxVta8SvIIYukoM3VLs3za1voPpKxZqOaywXVdJoLgguRGq9m/PPbYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGejEnTBWRQJgwD+SjwPIhLn/fWMB8GA1UdIwQY MBaAFJeGsRujvZmN7e+YE8EzxCZCNJVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRheEc2TzltWTN0NzVnVHdUUEVKa0kwbFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNzM3ZTktY2Q0ZC00OGEwLWIwN2Mt OTNmZmZmYmNhNTVkLzEvbDRheEc2TzltWTN0NzVnVHdUUEVKa0kwbFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNzM3ZTktY2Q0ZC00OGEwLWIwN2MtOTNmZmZmYmNhNTVk LzEvbDRheEc2TzltWTN0NzVnVHdUUEVKa0kwbFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFCDDLSY /EDMJQP3BJk+awqg0QSvstrOpXkejuBOSLSFKgxFVzBqPDhd5QWfuuFD1zu8MYpf tYx1ZcNO+16uQdK9uFJrZw51X63r9Bub/80Qeh+Ye18V4wB5qDE8zIokSzd4c3zU wioMheqgJWixQSSYz6FtDJwtcdxXRS/TAPp4XB2quF2hOo1gQnxWbJAkekENKnCI 2KvkoVhT7lZ+gDy8sDqPXBaD17IK6iteslpDkH6LLobpOw/Vowlg4P6xlHXBJ8uL A9Jf2KAI1HPvmVtgMq3S2DbpPzMVNusEghv3QHRob97FkmuylG07EEpUw526ZyUc 3LdreJ++6xdkVw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:36 2026 by rpki-client