This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft File: 4YpwGxuHPrjfflleMt8fBxMJ4vE.mft (raw, json) Hash identifier: asAw5ZsHrhcl/sUdwH7Suyvj1fOB8dgbHUEFcmXuLkM= Subject key identifier: 53:77:00:ED:C8:BD:80:08:2D:15:1D:1A:1C:B8:B4:2E:74:11:02:CA Authority key identifier: E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1 Certificate issuer: /CN=e18a701b1b873eb8df7e595e32df1f071309e2f1 Certificate serial: 019C4322076B27F5491C4EE2896F700A6F4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft Manifest number: 41 Signing time: Mon 09 Feb 2026 16:00:29 +0000 Manifest this update: Mon 09 Feb 2026 16:00:29 +0000 Manifest next update: Tue 10 Feb 2026 16:00:29 +0000 Files and hashes: 1: 4YpwGxuHPrjfflleMt8fBxMJ4vE.crl (hash: b/qcrgADGRVTyfJR4vXHWD09aKGlNaZPJ3cFdULYdWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:07:6b:27:f5:49:1c:4e:e2:89:6f:70:0a:6f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18a701b1b873eb8df7e595e32df1f071309e2f1 Validity Not Before: Feb 9 16:00:29 2026 GMT Not After : Feb 10 16:00:29 2026 GMT Subject: CN=537700edc8bd80082d151d1a1cb8b42e741102ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:4c:86:d2:4e:01:6e:b2:82:66:69:04:9c: 40:3a:d0:a9:a2:85:9f:8a:db:08:32:d6:b0:0f:08: 4a:2a:ac:b3:a0:df:7c:24:81:b5:5b:d6:da:98:3b: ed:65:80:6e:b1:da:7a:82:bc:97:bd:61:01:1a:d7: 10:f8:dc:7d:fe:bd:37:65:25:37:2c:07:df:6a:02: 1e:25:67:e0:fc:3f:19:13:0e:57:c1:39:59:2b:7d: 0d:c5:a9:16:48:c9:cf:29:b3:0a:0b:ff:75:1b:d4: ec:70:e1:db:7b:52:89:20:e3:2d:22:54:1c:fb:6d: 3c:98:3f:99:b8:ce:07:6e:e2:72:c3:1f:e4:0e:35: 92:f9:30:ba:bc:1b:d5:f8:5d:54:a6:8a:a6:0f:91: 2f:69:9d:4f:d4:cc:de:c7:a5:b7:ac:0a:e9:6a:a9: ff:c9:f2:e6:25:90:dd:ee:2a:3e:86:6f:b4:e6:77: e7:7b:26:07:69:c6:26:9d:94:8e:29:27:e6:47:f9: 8b:fa:b3:79:d3:79:aa:a0:64:02:38:3e:bb:17:1f: 11:60:cb:03:dd:49:d6:e8:f7:e9:92:b7:fc:94:3a: eb:5a:5e:da:c7:25:ce:56:9e:ca:ed:8b:8f:2e:77: 5d:92:03:0d:4e:4b:13:38:1e:d7:9f:a9:51:40:ad: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:77:00:ED:C8:BD:80:08:2D:15:1D:1A:1C:B8:B4:2E:74:11:02:CA X509v3 Authority Key Identifier: keyid:E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e7:d8:c6:de:6a:1e:44:99:af:e1:54:ed:e3:b9:2c:01:2f: b7:2a:4d:05:fb:d1:10:c3:8a:0b:81:8f:b1:52:bd:a7:0a:a2: 42:9c:c0:00:bc:a2:7b:9d:09:a2:e3:b2:e9:7f:98:d2:14:61: f2:33:11:9f:5c:93:5e:63:ab:44:68:35:70:aa:8f:44:f1:ab: 00:b2:0b:91:1c:69:45:9f:dc:63:76:6c:9a:0b:d2:e8:f2:6c: d6:f0:96:cd:3b:91:c0:a3:5d:34:7e:bc:51:dc:8e:65:2e:b7: 46:11:db:e4:e8:87:1a:e2:dc:a3:b1:dc:90:08:8c:e8:12:b2: 4f:ca:a8:ad:e9:f1:3a:cb:27:31:eb:43:e0:97:6a:44:61:d6: 47:af:51:05:72:41:46:1c:4e:23:aa:c6:37:5c:9b:70:91:91: bc:82:2f:78:43:3c:1d:00:54:f4:ec:1c:c7:6b:6b:9f:f5:02: 45:70:7f:7b:58:e5:de:9b:2d:25:54:ef:97:43:b1:5c:ce:d0: 29:8d:6d:65:5f:9d:de:c5:86:68:e1:36:c2:3a:2e:48:ea:d2: e4:0f:95:89:86:6e:fb:05:ec:bb:52:dc:58:5c:b4:36:4a:9a: f8:45:1f:3f:7e:09:93:7e:56:3a:f3:0d:23:66:e4:a4:22:5c: da:df:e0:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgdrJ/VJHE7iiW9wCm9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOGE3MDFiMWI4NzNlYjhkZjdlNTk1ZTMyZGYxZjA3MTMw OWUyZjEwHhcNMjYwMjA5MTYwMDI5WhcNMjYwMjEwMTYwMDI5WjAzMTEwLwYDVQQD Eyg1Mzc3MDBlZGM4YmQ4MDA4MmQxNTFkMWExY2I4YjQyZTc0MTEwMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjdMhtJOAW6ygmZpBJxAOtCpooWf itsIMtawDwhKKqyzoN98JIG1W9bamDvtZYBusdp6gryXvWEBGtcQ+Nx9/r03ZSU3 LAffagIeJWfg/D8ZEw5XwTlZK30NxakWSMnPKbMKC/91G9TscOHbe1KJIOMtIlQc +208mD+ZuM4HbuJywx/kDjWS+TC6vBvV+F1UpoqmD5EvaZ1P1Mzex6W3rArpaqn/ yfLmJZDd7io+hm+05nfneyYHacYmnZSOKSfmR/mL+rN503mqoGQCOD67Fx8RYMsD 3UnW6Pfpkrf8lDrrWl7axyXOVp7K7YuPLnddkgMNTksTOB7Xn6lRQK3YcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN3AO3IvYAILRUdGhy4tC50EQLKMB8GA1UdIwQY MBaAFOGKcBsbhz64335ZXjLfHwcTCeLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80MjgwYWYtYjIxMi00OTY4LTlmOTIt Yjc5NWNhY2IzYjkzLzEvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80MjgwYWYtYjIxMi00OTY4LTlmOTItYjc5NWNhY2IzYjkz LzEvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOfYxt5q HkSZr+FU7eO5LAEvtypNBfvREMOKC4GPsVK9pwqiQpzAALyie50JouOy6X+Y0hRh 8jMRn1yTXmOrRGg1cKqPRPGrALILkRxpRZ/cY3ZsmgvS6PJs1vCWzTuRwKNdNH68 UdyOZS63RhHb5OiHGuLco7HckAiM6BKyT8qorenxOssnMetD4JdqRGHWR69RBXJB RhxOI6rGN1ybcJGRvIIveEM8HQBU9Owcx2trn/UCRXB/e1jl3pstJVTvl0OxXM7Q KY1tZV+d3sWGaOE2wjouSOrS5A+ViYZu+wXsu1LcWFy0Nkqa+EUfP34Jk35WOvMN I2bkpCJc2t/g1w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:29 2026 by rpki-client