This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json) Hash identifier: QCz9BlIuk+p7NGhUnRdcneUSJTyh/OizrTLzUWitQGo= Subject key identifier: 4D:24:AF:45:A5:54:5C:6F:D1:BA:C5:BB:EF:EE:C3:CF:DE:DC:2F:6B Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb Certificate serial: 019C4321DEFA2C587CE1E8807E6FFF57BD72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:19 +0000 Manifest this update: Mon 09 Feb 2026 16:00:19 +0000 Manifest next update: Tue 10 Feb 2026 16:00:19 +0000 Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: 5b4uT5KYhvArVmjD85jV47JBGU01CJPlE3WoCRJgtHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:de:fa:2c:58:7c:e1:e8:80:7e:6f:ff:57:bd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb Validity Not Before: Feb 9 16:00:19 2026 GMT Not After : Feb 10 16:00:19 2026 GMT Subject: CN=4d24af45a5545c6fd1bac5bbefeec3cfdedc2f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:7f:3f:b7:ec:c3:26:b2:88:43:b5:f7:12: 3b:b8:cf:e4:d0:f5:ae:93:c6:f1:f0:65:c7:5f:68: 07:a8:52:e1:89:ff:92:36:a8:8e:f7:1f:de:c6:fb: df:df:22:9b:73:8d:3d:3b:7d:c3:42:12:4b:58:e6: 99:3f:c5:6e:38:fc:38:a9:22:7b:af:b7:4c:cc:cf: f8:d8:9f:a0:09:14:fa:3f:33:3b:50:7f:d8:c0:61: ef:d4:31:59:95:7a:47:10:7f:a6:e7:79:c2:ab:c7: 40:8d:35:12:b8:0e:bc:e7:6d:7a:d2:3b:3f:4a:94: 20:6f:c2:c7:3e:96:fa:c0:4c:74:98:63:f9:7b:4e: c7:70:2c:c6:54:0b:3b:c8:a5:66:7d:2c:5a:33:c2: d4:dc:cb:3a:7d:cc:9b:63:09:ed:19:1d:01:ce:c2: 7e:32:94:f1:f9:3c:78:1f:87:5c:20:b9:20:3e:cd: 99:ee:38:85:6d:f2:30:98:06:93:0a:de:06:fc:6f: c7:4b:9f:59:28:de:dc:0c:e9:d6:ff:8c:fb:10:ba: 9c:f4:97:f6:fe:94:59:3c:aa:c8:32:96:31:65:d7: f5:1c:6a:cb:e6:f6:e3:fc:89:55:ff:76:a5:d3:7e: 73:fd:ad:68:40:e7:99:9a:ae:7d:5a:66:2b:6b:5b: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:24:AF:45:A5:54:5C:6F:D1:BA:C5:BB:EF:EE:C3:CF:DE:DC:2F:6B X509v3 Authority Key Identifier: keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:16:32:ba:56:4b:99:70:47:22:f1:ca:23:c2:61:a5:bb:94: 79:31:78:e4:c4:be:94:a3:d9:46:58:85:f9:62:58:76:70:22: 7c:07:0f:7d:fb:f0:70:c3:ae:e1:fd:dc:45:53:e3:1f:56:1f: d9:35:a7:a8:23:2c:73:60:1f:fa:82:cf:d0:73:d1:ec:b3:09: 6c:73:4f:56:bc:c2:d1:c8:5d:65:ca:91:ed:55:f1:93:f3:b3: 1c:4d:a1:c5:cd:df:f7:b6:3d:e2:ce:ec:26:20:7a:e2:9a:b5: a2:ab:d4:cf:b3:8e:ea:9c:d2:2c:1a:ba:f5:2d:bc:ee:15:73: 7c:a5:b8:cd:3c:a2:57:de:25:91:e1:fa:f5:38:89:85:c7:30: c2:dd:77:16:cd:d1:9c:63:7d:4e:66:27:cb:87:56:d1:95:3b: bb:dc:ba:a2:e4:99:82:30:e7:9d:0a:e2:60:0a:15:8b:78:e4: de:8c:a2:07:c1:04:33:cc:b2:ed:43:5c:58:2d:31:f2:d2:13: 6e:8e:ca:18:c4:3e:32:fe:ed:0e:fa:44:2d:cf:95:5f:a4:ad: 4b:50:3d:21:ae:cb:9d:71:56:0c:53:1c:16:8b:85:4e:50:9f: 0e:fb:b8:ec:cd:96:23:f3:9e:7c:f9:28:5c:c4:4d:f3:7b:3a: b8:24:16:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDId76LFh84eiAfm//V71yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzcyN2EyOTQ1MWJlNGRkOTkyMmI2MGQxYzU5NmU4MDZh OTk1ZmIwHhcNMjYwMjA5MTYwMDE5WhcNMjYwMjEwMTYwMDE5WjAzMTEwLwYDVQQD Eyg0ZDI0YWY0NWE1NTQ1YzZmZDFiYWM1YmJlZmVlYzNjZmRlZGMyZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0N/P7fswyayiEO19xI7uM/k0PWu k8bx8GXHX2gHqFLhif+SNqiO9x/exvvf3yKbc409O33DQhJLWOaZP8VuOPw4qSJ7 r7dMzM/42J+gCRT6PzM7UH/YwGHv1DFZlXpHEH+m53nCq8dAjTUSuA6852160js/ SpQgb8LHPpb6wEx0mGP5e07HcCzGVAs7yKVmfSxaM8LU3Ms6fcybYwntGR0BzsJ+ MpTx+Tx4H4dcILkgPs2Z7jiFbfIwmAaTCt4G/G/HS59ZKN7cDOnW/4z7ELqc9Jf2 /pRZPKrIMpYxZdf1HGrL5vbj/IlV/3al035z/a1oQOeZmq59WmYra1usBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0kr0WlVFxv0brFu+/uw8/e3C9rMB8GA1UdIwQY MBaAFOE3J6KUUb5N2ZIrYNHFlugGqZX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmIt YWM0YzhmMTk4NzZkLzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmItYWM0YzhmMTk4NzZk LzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRYyulZL mXBHIvHKI8JhpbuUeTF45MS+lKPZRliF+WJYdnAifAcPffvwcMOu4f3cRVPjH1Yf 2TWnqCMsc2Af+oLP0HPR7LMJbHNPVrzC0chdZcqR7VXxk/OzHE2hxc3f97Y94s7s JiB64pq1oqvUz7OO6pzSLBq69S287hVzfKW4zTyiV94lkeH69TiJhccwwt13Fs3R nGN9TmYny4dW0ZU7u9y6ouSZgjDnnQriYAoVi3jk3oyiB8EEM8yy7UNcWC0x8tIT bo7KGMQ+Mv7tDvpELc+VX6StS1A9Ia7LnXFWDFMcFouFTlCfDvu47M2WI/OefPko XMRN83s6uCQWKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:16 2026 by rpki-client