This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json) Hash identifier: bSq8asmhXYOaFMumkiM6GNCE+9BJ6qyA9CQ9MN/XzgQ= Subject key identifier: 02:E1:DA:B3:2C:0B:9D:B5:DA:99:93:8E:E0:72:5F:28:F0:C5:78:06 Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6 Certificate serial: 019C439060F53BDD2724107ABB21CA4B1409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft Manifest number: 0ECD Signing time: Mon 09 Feb 2026 18:01:01 +0000 Manifest this update: Mon 09 Feb 2026 18:01:01 +0000 Manifest next update: Tue 10 Feb 2026 18:01:01 +0000 Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: nJhIdC1/O4+N2CV4WFJfQnER3o0sBf8lTzRIaECsaoA=) 2: 8tBydKhivtaaA2YrjstORqOwPZ8.roa (hash: 8g5rTWXRC9HIHz7K2ellDpMM70dVqGZuBdKss0wihGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:60:f5:3b:dd:27:24:10:7a:bb:21:ca:4b:14:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6 Validity Not Before: Feb 9 18:01:01 2026 GMT Not After : Feb 10 18:01:01 2026 GMT Subject: CN=02e1dab32c0b9db5da99938ee0725f28f0c57806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:71:6c:e7:e4:a1:6b:3f:ca:a1:f8:96:cc:e1: 54:bb:4c:6f:bb:bd:c3:f7:2a:4f:56:5f:6b:bc:8b: 05:bb:a8:31:ac:cd:be:46:85:61:08:7b:f0:09:35: 88:9c:7b:ad:02:80:c1:37:7c:ec:43:2f:4f:6d:18: 75:fe:20:f9:7b:c0:46:f9:22:84:c1:ff:d4:4f:b3: 1b:99:f3:3e:cb:1d:37:7c:61:4d:c9:62:8d:64:7a: ce:88:76:9c:f9:f1:54:c0:42:5f:92:e4:a0:6d:9b: 44:d2:60:11:11:38:8d:30:0c:b7:0f:06:02:7b:2c: bc:3d:52:c6:fb:ab:f9:cc:6b:cb:b7:d7:ab:c8:30: 7f:a6:69:22:a0:33:b8:d2:ca:c4:d4:1a:68:d9:c7: 9d:50:18:f5:0b:a8:cb:04:1c:dc:7b:5d:2b:97:bc: 8a:42:11:8f:00:eb:a7:07:4b:3a:bb:32:85:33:42: 5a:28:20:ad:c8:db:8b:b0:8b:86:4d:ab:03:4b:51: 27:fd:6e:ab:16:09:23:ca:ea:e9:6c:30:07:23:6f: 27:b2:88:5f:2e:f7:51:8d:51:de:b3:e0:4b:0b:aa: fe:04:fb:9a:38:d8:86:af:8c:c6:58:6d:35:0f:00: 37:e1:8a:28:38:75:a2:6c:f0:af:67:48:98:b6:ef: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E1:DA:B3:2C:0B:9D:B5:DA:99:93:8E:E0:72:5F:28:F0:C5:78:06 X509v3 Authority Key Identifier: keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:31:11:dc:c6:8c:48:76:e6:f3:50:06:b7:89:b7:84:78:9c: 8d:40:3e:31:6f:fc:8c:2c:e7:85:0f:00:dd:fc:ca:17:78:f2: 6b:1c:2d:86:a9:c3:5a:ed:4d:13:99:77:ab:56:44:05:dc:98: 8c:f6:bb:a7:04:e6:e0:6e:60:d6:a6:ed:d0:85:4c:c2:d4:52: ba:a9:d5:c9:c1:14:ec:5a:bb:50:09:66:0e:d2:44:ca:11:db: 4d:8c:35:37:6b:b5:e9:c5:aa:5d:3c:c7:8d:68:4d:85:40:70: 66:f1:00:c4:5f:e5:f1:14:7d:5a:eb:54:f3:75:e9:07:c5:1f: 61:ba:88:54:e0:2f:75:1a:e6:74:74:d4:c0:f0:de:20:44:45: a4:a7:61:f7:e6:08:9a:16:78:f2:ea:55:15:7a:de:f8:8c:e9: 17:25:70:8e:da:74:42:63:4a:dc:af:ce:ea:59:b7:e2:09:c6: 30:d7:b9:22:bb:c7:8a:1c:7d:ab:34:a3:19:b2:59:de:5a:1f: bd:59:ea:31:db:50:94:ec:b8:08:e5:3a:bf:dc:4a:94:b9:4b: 8b:ce:0f:d1:63:a2:7a:62:35:29:94:75:75:03:31:fa:b9:b0: 5a:fb:5e:5b:90:66:9a:f0:7a:a6:6e:8f:2f:16:f4:11:66:c3: b8:a1:23:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGD1O90nJBB6uyHKSxQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGZiYjliM2NkMWMyMTZhZGM2OTllNWVkYWQ1ZjUzMWQ5 YWZjYjYwHhcNMjYwMjA5MTgwMTAxWhcNMjYwMjEwMTgwMTAxWjAzMTEwLwYDVQQD EygwMmUxZGFiMzJjMGI5ZGI1ZGE5OTkzOGVlMDcyNWYyOGYwYzU3ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XFs5+Shaz/KofiWzOFUu0xvu73D 9ypPVl9rvIsFu6gxrM2+RoVhCHvwCTWInHutAoDBN3zsQy9PbRh1/iD5e8BG+SKE wf/UT7MbmfM+yx03fGFNyWKNZHrOiHac+fFUwEJfkuSgbZtE0mARETiNMAy3DwYC eyy8PVLG+6v5zGvLt9eryDB/pmkioDO40srE1Bpo2cedUBj1C6jLBBzce10rl7yK QhGPAOunB0s6uzKFM0JaKCCtyNuLsIuGTasDS1En/W6rFgkjyurpbDAHI28nsohf LvdRjVHes+BLC6r+BPuaONiGr4zGWG01DwA34YooOHWibPCvZ0iYtu/yiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALh2rMsC5212pmTjuByXyjwxXgGMB8GA1UdIwQY MBaAFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQt NjJhMjhmM2UwMDFjLzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQtNjJhMjhmM2UwMDFj LzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDER3MaM SHbm81AGt4m3hHicjUA+MW/8jCznhQ8A3fzKF3jyaxwthqnDWu1NE5l3q1ZEBdyY jPa7pwTm4G5g1qbt0IVMwtRSuqnVycEU7Fq7UAlmDtJEyhHbTYw1N2u16cWqXTzH jWhNhUBwZvEAxF/l8RR9WutU83XpB8UfYbqIVOAvdRrmdHTUwPDeIERFpKdh9+YI mhZ48upVFXre+IzpFyVwjtp0QmNK3K/O6lm34gnGMNe5IrvHihx9qzSjGbJZ3lof vVnqMdtQlOy4COU6v9xKlLlLi84P0WOiemI1KZR1dQMx+rmwWvteW5BmmvB6pm6P Lxb0EWbDuKEjVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:26 2026 by rpki-client