This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json) Hash identifier: 9lNOkjp6Qh6ZUqmhfZnN5sZfSUeug9hHCL448UhQMJM= Subject key identifier: 57:1C:33:24:49:A3:0E:1E:8A:36:67:5B:40:4B:0C:A7:74:BA:0B:8F Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17 Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17 Certificate serial: 019C435960CC2761B6C1C64917A880DF9AD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft Manifest number: 062C Signing time: Mon 09 Feb 2026 17:00:56 +0000 Manifest this update: Mon 09 Feb 2026 17:00:56 +0000 Manifest next update: Tue 10 Feb 2026 17:00:56 +0000 Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: IevSfWbBUrTiFkAGshl1ywfAaXY+eMV2ZaReijJmoTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:60:cc:27:61:b6:c1:c6:49:17:a8:80:df:9a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17 Validity Not Before: Feb 9 17:00:56 2026 GMT Not After : Feb 10 17:00:56 2026 GMT Subject: CN=571c332449a30e1e8a36675b404b0ca774ba0b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:52:b7:43:3b:58:21:49:de:bd:88:1f:17: 8c:bf:82:ea:6a:ee:b6:eb:6b:6b:a3:90:31:c5:8e: b2:a8:e8:e5:ec:3e:6c:b0:bf:d7:47:c6:5c:77:ab: 3a:67:1c:4c:57:73:9a:7a:5a:4d:8d:54:ee:32:75: d2:0d:a9:d1:99:d0:81:2e:c1:2d:9b:3d:dc:1d:9c: 97:2d:0c:21:a5:68:dc:e6:30:aa:28:ed:82:74:01: 9a:6f:67:1f:27:7f:2f:37:a6:44:53:57:46:cf:11: 07:f8:b9:5a:9f:8f:9b:31:20:ae:9c:e9:fb:d4:7f: ad:5a:5d:02:e5:fb:1f:a3:8c:b2:dc:6f:3c:d4:d3: 0e:e3:fc:b0:5c:96:dc:25:47:51:ad:29:81:95:fd: af:93:cd:eb:96:b3:bf:ea:07:38:7f:ab:b9:ee:22: 84:6d:fe:dd:d7:8c:22:2b:a3:2a:f0:83:b2:ca:32: 4f:9b:12:83:c7:43:e0:5b:72:cc:d0:25:0e:8a:1e: 62:05:a5:fd:d9:d2:d9:dc:40:5e:45:c2:a0:55:dd: c0:9b:7e:36:8c:3d:28:db:a4:bd:44:b7:cf:1e:60: 8b:76:b4:b8:86:a8:03:c6:6d:fb:e5:b6:0b:b5:65: 13:40:62:b7:64:ad:85:97:33:e7:7d:e2:80:f0:4c: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1C:33:24:49:A3:0E:1E:8A:36:67:5B:40:4B:0C:A7:74:BA:0B:8F X509v3 Authority Key Identifier: keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f7:32:c4:09:18:de:8e:27:ea:ed:22:3f:39:16:3b:b1:0b: f5:ae:62:25:64:30:52:e4:b4:4d:e9:1a:bf:af:54:47:37:cc: 94:f1:2d:2b:fe:12:ea:25:d8:0f:63:54:e2:0d:17:be:bd:d6: 88:e6:53:d4:37:77:04:74:b1:78:1b:f4:e9:9e:b5:10:96:9f: a6:6a:18:d9:dc:f3:dc:b9:c6:3e:cb:cd:ee:4f:58:c9:e6:88: c9:51:41:57:be:f1:b6:0c:71:4f:e7:b2:db:b6:65:97:ef:b1: 1c:3b:99:08:b8:be:bd:51:bd:3d:77:bf:ee:63:55:f9:b0:47: b1:e9:d5:9f:0f:b6:79:ae:b6:b2:d0:f2:90:b9:e7:fd:fe:a1: bc:bc:b6:75:20:2c:16:ae:66:2c:ba:8a:56:a5:ee:5a:a7:9e: f9:f4:b1:e7:a2:d0:d6:d1:5c:a5:3b:a2:80:54:7c:8a:1a:e9: 1c:44:b0:61:8c:39:45:ca:1c:ef:d0:08:3c:c0:69:5a:39:e8: 17:c1:56:a3:f8:a3:56:b3:0e:22:cb:fa:22:db:7e:4b:15:fc: f3:ee:ca:39:92:5c:38:56:3a:27:f9:99:71:b5:e7:aa:af:02: d5:d8:ba:55:3a:60:63:bd:b4:a9:2a:c4:c9:5e:14:fb:d7:63: a5:29:b1:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWWDMJ2G2wcZJF6iA35rYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjIzZjM4OTFiZDdkZTE3OWRlNDEwMzBhMmZkMWZhNThl NDNkMTcwHhcNMjYwMjA5MTcwMDU2WhcNMjYwMjEwMTcwMDU2WjAzMTEwLwYDVQQD Eyg1NzFjMzMyNDQ5YTMwZTFlOGEzNjY3NWI0MDRiMGNhNzc0YmEwYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDlSt0M7WCFJ3r2IHxeMv4Lqau62 62tro5AxxY6yqOjl7D5ssL/XR8Zcd6s6ZxxMV3OaelpNjVTuMnXSDanRmdCBLsEt mz3cHZyXLQwhpWjc5jCqKO2CdAGab2cfJ38vN6ZEU1dGzxEH+Llan4+bMSCunOn7 1H+tWl0C5fsfo4yy3G881NMO4/ywXJbcJUdRrSmBlf2vk83rlrO/6gc4f6u57iKE bf7d14wiK6Mq8IOyyjJPmxKDx0PgW3LM0CUOih5iBaX92dLZ3EBeRcKgVd3Am342 jD0o26S9RLfPHmCLdrS4hqgDxm375bYLtWUTQGK3ZK2FlzPnfeKA8EzmBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFccMyRJow4eijZnW0BLDKd0uguPMB8GA1UdIwQY MBaAFOHyPziRvX3hed5BAwov0fpY5D0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYt ODYxNzYzYjVmMDY1LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYtODYxNzYzYjVmMDY1 LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavcyxAkY 3o4n6u0iPzkWO7EL9a5iJWQwUuS0Tekav69URzfMlPEtK/4S6iXYD2NU4g0Xvr3W iOZT1Dd3BHSxeBv06Z61EJafpmoY2dzz3LnGPsvN7k9YyeaIyVFBV77xtgxxT+ey 27Zll++xHDuZCLi+vVG9PXe/7mNV+bBHsenVnw+2ea62stDykLnn/f6hvLy2dSAs Fq5mLLqKVqXuWqee+fSx56LQ1tFcpTuigFR8ihrpHESwYYw5Rcoc79AIPMBpWjno F8FWo/ijVrMOIsv6Itt+SxX88+7KOZJcOFY6J/mZcbXnqq8C1di6VTpgY720qSrE yV4U+9djpSmxEA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:57 2026 by rpki-client