This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json) Hash identifier: vCDqKmyLaSmCSigrWvu/LoBJdAhL/V4Od5ZHwRORNlU= Subject key identifier: 36:59:02:BC:4B:D8:42:32:C7:56:FF:4A:76:C3:49:93:96:17:45:E6 Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12 Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12 Certificate serial: 019C420F439E50AE9997ED684EF099EA87AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft Manifest number: 0D8C Signing time: Mon 09 Feb 2026 11:00:22 +0000 Manifest this update: Mon 09 Feb 2026 11:00:22 +0000 Manifest next update: Tue 10 Feb 2026 11:00:22 +0000 Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: Zb0XAyWEp96tCm69o5IK5JhyVGRrIx63GDtwGpz1j/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:43:9e:50:ae:99:97:ed:68:4e:f0:99:ea:87:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12 Validity Not Before: Feb 9 11:00:22 2026 GMT Not After : Feb 10 11:00:22 2026 GMT Subject: CN=365902bc4bd84232c756ff4a76c34993961745e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:22:c2:d5:5b:0d:1a:a5:49:95:85:ff:bf: c5:b2:42:c7:85:46:76:5c:f9:61:8a:f4:68:c6:11: b4:0e:fc:86:65:66:fd:aa:5e:a7:73:dc:37:70:51: ca:ea:cc:0b:ad:b0:ea:42:9d:ae:07:2c:d3:b1:bf: bd:d0:2f:9d:76:49:67:d8:00:94:53:ac:03:44:4b: d1:1d:fc:6f:7d:49:1b:a4:51:85:dc:70:ba:fe:6c: b2:bd:a7:81:41:12:8a:93:16:51:a5:c9:9d:7e:36: b0:e8:4b:84:90:92:61:f2:3f:25:84:6f:1a:50:4f: 23:2f:54:a5:ab:f2:fc:a2:7a:da:13:1b:81:de:a5: b4:19:c8:31:3d:d3:87:21:87:9d:e5:f2:30:a8:1f: 13:ac:71:7a:4a:14:5d:b1:eb:d3:ae:47:0c:07:64: b8:ec:50:09:5f:55:2b:4c:5d:d8:dd:28:97:93:a8: 1e:32:cc:42:87:0b:ab:87:b4:b0:27:50:dc:35:17: 22:41:96:01:88:d3:39:75:4b:2b:e1:84:12:65:07: 64:56:fa:2e:4b:9f:6d:93:37:f7:7a:e1:d1:29:45: 1b:34:8c:fd:0e:a0:30:88:19:ae:da:cc:6c:b1:7b: d5:6f:52:a8:bb:79:fc:45:7d:b1:14:d7:07:55:f9: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:59:02:BC:4B:D8:42:32:C7:56:FF:4A:76:C3:49:93:96:17:45:E6 X509v3 Authority Key Identifier: keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:1d:80:6b:a3:0f:90:84:00:4b:97:79:df:df:db:c7:3f:34: 66:9a:a2:e7:8a:bd:af:76:29:fd:53:97:a1:77:75:9b:f0:38: 83:c6:c3:f5:26:23:99:cd:74:78:0f:15:37:4f:8f:12:12:b8: c2:2c:a0:ea:b8:f0:c9:22:00:c8:0d:96:9a:4e:e0:55:06:91: 38:af:85:80:ce:1c:f8:9b:fa:0d:61:94:f9:dd:0a:32:43:3f: 3b:f6:03:74:02:18:20:ad:4c:7e:7e:83:19:c1:fa:ac:10:aa: 4e:9e:7f:35:31:90:6a:24:53:16:c1:78:e1:01:1f:e2:55:fb: ee:9d:0e:3f:e6:8d:2e:8f:f6:c9:f0:ef:09:ce:24:0b:20:06: 47:75:81:e7:63:1d:03:1a:d4:e0:fe:a6:db:93:3d:ea:4b:9c: ba:77:fa:7a:5a:72:cc:34:74:96:9b:2e:61:3f:9a:cb:d6:ae: ca:ca:1e:3e:c4:3f:5c:c1:55:b0:ed:6f:09:a8:63:93:9c:98: 8d:e0:e6:f0:49:a3:39:56:97:40:7b:fb:32:5c:70:1f:4d:1a: b4:13:e5:02:a0:f0:50:d8:32:77:fc:26:bf:80:e5:ad:a6:d3: 47:d7:a0:64:57:bd:bd:d2:0d:e9:66:6e:9d:56:77:9e:41:c8: e1:64:f3:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0OeUK6Zl+1oTvCZ6oerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGZiYjI0YzI4YmEyMTE3MjEyZjBkMzI3M2EzYzJhNGMy N2NjMTIwHhcNMjYwMjA5MTEwMDIyWhcNMjYwMjEwMTEwMDIyWjAzMTEwLwYDVQQD EygzNjU5MDJiYzRiZDg0MjMyYzc1NmZmNGE3NmMzNDk5Mzk2MTc0NWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt4iwtVbDRqlSZWF/7/FskLHhUZ2 XPlhivRoxhG0DvyGZWb9ql6nc9w3cFHK6swLrbDqQp2uByzTsb+90C+ddkln2ACU U6wDREvRHfxvfUkbpFGF3HC6/myyvaeBQRKKkxZRpcmdfjaw6EuEkJJh8j8lhG8a UE8jL1Slq/L8onraExuB3qW0GcgxPdOHIYed5fIwqB8TrHF6ShRdsevTrkcMB2S4 7FAJX1UrTF3Y3SiXk6geMsxChwurh7SwJ1DcNRciQZYBiNM5dUsr4YQSZQdkVvou S59tkzf3euHRKUUbNIz9DqAwiBmu2sxssXvVb1Kou3n8RX2xFNcHVfmPhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZZArxL2EIyx1b/SnbDSZOWF0XmMB8GA1UdIwQY MBaAFIuPuyTCi6IRchLw0yc6PCpMJ8wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTct YzJlOWQxN2Q4ZDRhLzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTctYzJlOWQxN2Q4ZDRh LzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApR2Aa6MP kIQAS5d539/bxz80Zpqi54q9r3Yp/VOXoXd1m/A4g8bD9SYjmc10eA8VN0+PEhK4 wiyg6rjwySIAyA2Wmk7gVQaROK+FgM4c+Jv6DWGU+d0KMkM/O/YDdAIYIK1Mfn6D GcH6rBCqTp5/NTGQaiRTFsF44QEf4lX77p0OP+aNLo/2yfDvCc4kCyAGR3WB52Md AxrU4P6m25M96kucunf6elpyzDR0lpsuYT+ay9auysoePsQ/XMFVsO1vCahjk5yY jeDm8EmjOVaXQHv7MlxwH00atBPlAqDwUNgyd/wmv4DlrabTR9egZFe9vdIN6WZu nVZ3nkHI4WTzcw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:56 2026 by rpki-client