This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft File: k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json) Hash identifier: as1mWlrOPojNP1ZMZU0PuQ2dXekftO6S5mTwi0wa85I= Subject key identifier: A2:4E:54:31:4A:AB:FE:73:1E:F4:32:F0:2F:AE:25:1F:D8:41:15:02 Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3 Certificate issuer: /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3 Certificate serial: 019C4322055FD49A0A58E33BBBC35C3F4621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft Manifest number: 0874 Signing time: Mon 09 Feb 2026 16:00:28 +0000 Manifest this update: Mon 09 Feb 2026 16:00:28 +0000 Manifest next update: Tue 10 Feb 2026 16:00:28 +0000 Files and hashes: 1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: cxXa5zVBly7xG4XnV0v3ctOFI90QPTRscZgWU53Ec6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:05:5f:d4:9a:0a:58:e3:3b:bb:c3:5c:3f:46:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3 Validity Not Before: Feb 9 16:00:28 2026 GMT Not After : Feb 10 16:00:28 2026 GMT Subject: CN=a24e54314aabfe731ef432f02fae251fd8411502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:00:04:ca:e3:e7:13:0f:e8:ce:5f:92:51: fc:36:40:3e:cb:02:da:84:cc:15:aa:16:26:2c:e2: de:79:98:ac:a2:7a:b1:2a:b9:3c:ae:03:db:1f:1c: eb:9d:26:b3:ef:af:36:02:f1:7d:3f:58:a1:f1:f7: 72:f1:75:f7:55:0b:37:55:c9:b9:50:be:ab:2c:90: 04:11:af:82:17:40:f4:4c:d7:83:0a:eb:df:c5:d5: 0b:20:8f:e1:cd:b7:7c:bf:1a:03:cd:54:38:9d:3e: 30:1d:6d:79:bd:a4:f6:26:72:10:77:82:c6:05:22: 19:23:c2:40:eb:87:8d:36:41:87:b2:0d:4d:e4:6f: 7d:a1:f7:a5:5f:38:05:ec:97:7d:7c:8f:cb:3c:63: b9:9b:65:8b:dd:5e:ae:99:cc:b7:56:c4:c5:2f:85: 34:3e:f5:46:68:04:0b:6c:83:cf:ac:3f:a8:84:c0: e0:09:45:c7:94:2a:29:44:0d:78:7b:73:01:04:8c: b9:c7:da:71:fc:bb:c7:9d:47:46:07:54:44:3f:7d: b2:46:e5:4b:e7:0a:35:fa:89:ef:a1:da:01:82:3b: c1:5e:5c:0b:2a:17:dc:18:30:84:95:f6:33:c3:96: 54:84:af:8e:cc:2f:77:b8:2c:f5:9a:86:03:e9:13: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4E:54:31:4A:AB:FE:73:1E:F4:32:F0:2F:AE:25:1F:D8:41:15:02 X509v3 Authority Key Identifier: keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:64:cd:f5:6e:51:ad:cd:d5:c7:19:aa:28:b5:4c:97:22:31: 22:77:80:6e:72:97:2b:ec:c1:a7:8d:87:89:9c:87:c3:60:4e: 70:b4:af:34:f1:40:2b:6b:43:15:23:0c:c7:a0:3d:89:76:40: a8:51:0f:0c:a8:9d:e7:9b:d7:9c:c2:33:20:0e:2f:c1:43:3e: 8b:17:c5:07:90:cc:72:8d:55:f6:44:5b:4a:37:f0:95:9d:67: 90:1b:3b:9c:c2:c3:68:48:39:08:77:a7:10:0c:66:73:b1:1a: 29:2e:be:de:d0:a4:20:ad:57:2f:a0:ac:96:86:7c:cc:d0:30: 32:bf:9e:39:be:ed:b7:e0:f8:67:cf:2a:1f:30:6f:04:df:ef: c7:6e:c3:e3:5c:04:e3:70:1f:fb:cd:d5:41:a9:63:42:04:7e: 6d:81:0b:33:42:48:07:dc:84:36:34:0f:09:54:4a:fe:09:0e: fb:9f:61:15:8e:5b:c6:60:05:4b:50:5d:6e:e4:cd:55:67:e1: 5e:24:f3:a1:59:6b:56:6f:97:3a:b4:63:28:b5:b1:65:38:16: 6f:ef:25:36:28:38:62:68:fa:9d:57:4c:1c:8f:88:98:ff:a5: 04:2f:27:88:7a:2f:45:18:91:73:a2:a6:7b:b5:81:20:c0:f5: 9e:fe:69:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgVf1JoKWOM7u8NcP0YhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzODEwN2QxMTQ2NDY5YTExYTYzZTVmNWQyZDdkYjhmNmYz YmQ3YjMwHhcNMjYwMjA5MTYwMDI4WhcNMjYwMjEwMTYwMDI4WjAzMTEwLwYDVQQD EyhhMjRlNTQzMTRhYWJmZTczMWVmNDMyZjAyZmFlMjUxZmQ4NDExNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxMABMrj5xMP6M5fklH8NkA+ywLa hMwVqhYmLOLeeZisonqxKrk8rgPbHxzrnSaz7682AvF9P1ih8fdy8XX3VQs3Vcm5 UL6rLJAEEa+CF0D0TNeDCuvfxdULII/hzbd8vxoDzVQ4nT4wHW15vaT2JnIQd4LG BSIZI8JA64eNNkGHsg1N5G99ofelXzgF7Jd9fI/LPGO5m2WL3V6umcy3VsTFL4U0 PvVGaAQLbIPPrD+ohMDgCUXHlCopRA14e3MBBIy5x9px/LvHnUdGB1REP32yRuVL 5wo1+onvodoBgjvBXlwLKhfcGDCElfYzw5ZUhK+OzC93uCz1moYD6ROltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJOVDFKq/5zHvQy8C+uJR/YQRUCMB8GA1UdIwQY MBaAFJOBB9EUZGmhGmPl9dLX249vO9ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRFSDBSUmthYUVhWS1YMTB0ZmJqMjg3MTdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hZmY0YTktM2M1ZS00YTcxLWI1MjQt Y2JjNmNjYzA4OTMyLzEvazRFSDBSUmthYUVhWS1YMTB0ZmJqMjg3MTdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hZmY0YTktM2M1ZS00YTcxLWI1MjQtY2JjNmNjYzA4OTMy LzEvazRFSDBSUmthYUVhWS1YMTB0ZmJqMjg3MTdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGTN9W5R rc3VxxmqKLVMlyIxIneAbnKXK+zBp42HiZyHw2BOcLSvNPFAK2tDFSMMx6A9iXZA qFEPDKid55vXnMIzIA4vwUM+ixfFB5DMco1V9kRbSjfwlZ1nkBs7nMLDaEg5CHen EAxmc7EaKS6+3tCkIK1XL6CsloZ8zNAwMr+eOb7tt+D4Z88qHzBvBN/vx27D41wE 43Af+83VQaljQgR+bYELM0JIB9yENjQPCVRK/gkO+59hFY5bxmAFS1BdbuTNVWfh XiTzoVlrVm+XOrRjKLWxZTgWb+8lNig4Ymj6nVdMHI+ImP+lBC8niHovRRiRc6Km e7WBIMD1nv5p9g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:04 2026 by rpki-client