This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json) Hash identifier: R45z2ZHFC6d+BNmEUND6fFWGyGH5XC0K5upBjIFVG1Q= Subject key identifier: 4A:4C:BE:B2:A6:58:D7:98:A9:0F:54:A5:A3:46:41:2F:0D:A1:63:3B Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11 Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011 Certificate serial: 019C427D11C4DDA168DAFC732D3A25422049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:00:18 +0000 Manifest this update: Mon 09 Feb 2026 13:00:18 +0000 Manifest next update: Tue 10 Feb 2026 13:00:18 +0000 Files and hashes: 1: _pFw1M_LxWF-tK9gXqaVnNopZlc.roa (hash: ath0PSyjXUpmRHBuIYRm7IvaVnfoTyInZ3ULpEebhQ0=) 2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: lPQXHTligrDieGDMZ6feqhd8go+1ukB+bhkxxt2M+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:11:c4:dd:a1:68:da:fc:73:2d:3a:25:42:20:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011 Validity Not Before: Feb 9 13:00:18 2026 GMT Not After : Feb 10 13:00:18 2026 GMT Subject: CN=4a4cbeb2a658d798a90f54a5a346412f0da1633b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:1a:ce:8e:76:3d:09:6e:e3:1c:31:ec:21: c0:ef:f2:7e:98:c0:d3:9c:b1:1f:45:f8:81:b9:89: 53:c2:63:e1:10:68:cf:5f:b5:8e:42:c0:dd:73:f7: 3d:4e:a4:86:79:ea:b5:47:56:15:86:e3:cf:0e:cd: 1e:49:0f:8d:f8:0e:12:cd:f5:30:fb:11:1e:54:fe: 68:15:0d:3f:2a:92:4d:40:b4:ab:56:3c:8e:07:7c: 80:78:e8:0d:69:23:dc:86:6c:86:bb:9a:3b:75:de: 43:04:90:38:31:ac:53:e5:54:73:31:34:36:a5:e0: 82:b2:56:50:8f:6b:e7:65:54:51:6e:86:f5:9f:2c: ad:58:7a:99:47:95:4b:33:81:d9:d9:a9:bf:8c:ee: b4:b5:1a:c7:99:f3:02:b1:83:d7:ae:27:de:1f:81: 0a:db:cf:63:aa:e8:7a:22:07:64:63:94:b6:53:1f: 2a:46:af:cc:ae:0b:55:95:c8:d3:62:20:35:fe:81: cc:8a:3a:e4:89:fb:b2:cb:32:7e:a6:80:4c:9d:dd: 4e:35:70:d2:2f:f0:4c:e8:5f:30:a1:72:9c:af:45: 0f:dc:c9:73:8b:74:2d:ce:fd:b6:b6:2c:2b:97:df: a4:d0:a3:f0:d1:b4:1e:a8:58:e2:79:08:6a:bf:2b: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:BE:B2:A6:58:D7:98:A9:0F:54:A5:A3:46:41:2F:0D:A1:63:3B X509v3 Authority Key Identifier: keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:55:28:f9:44:8e:6e:2b:95:a5:08:48:29:45:ed:04:e2:b7: 11:22:03:25:65:96:ba:8d:32:cc:ab:cb:98:17:64:4e:0e:83: 04:66:71:63:9a:5e:33:34:ba:3a:f8:a8:e7:24:c9:16:da:61: 67:2c:21:d2:78:1b:12:9d:a0:40:6b:fc:96:13:14:c4:45:d6: b4:ed:62:dd:bc:64:a3:20:81:4f:40:09:d0:2c:07:3c:a8:8a: a0:61:f1:62:27:c9:68:b9:f6:50:ec:0b:b6:f1:5e:b7:e6:8c: d6:17:88:d1:48:db:d0:3a:88:aa:0e:9b:fc:85:49:61:37:76: f4:33:e9:d4:75:9c:6c:8e:9f:e0:d6:23:31:90:02:f6:af:49: a9:a5:42:9c:4c:0a:4d:55:d9:9b:f9:8e:b9:45:97:11:5a:0a: 43:3d:e9:8c:4b:5a:a2:ac:99:93:4c:9d:48:9e:19:85:6e:3a: d6:68:70:45:d8:59:cc:9c:b3:7b:ff:3e:f5:0d:56:0e:95:20: 23:46:f0:b9:ef:75:5c:e6:ca:61:f6:0f:05:9e:16:8c:89:2f: 0c:13:7d:8e:7e:09:48:ff:f8:2a:eb:1f:60:f7:b7:10:a3:73: cc:bb:ab:2b:9b:02:18:5c:fb:92:f1:19:f8:cc:0b:f6:d6:2b: 32:d9:a6:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfRHE3aFo2vxzLTolQiBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTczODY5NzNmYmY4OGE4NjdjODJhODg2N2IwNTBmY2E2 MGIwMTEwHhcNMjYwMjA5MTMwMDE4WhcNMjYwMjEwMTMwMDE4WjAzMTEwLwYDVQQD Eyg0YTRjYmViMmE2NThkNzk4YTkwZjU0YTVhMzQ2NDEyZjBkYTE2MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVQazo52PQlu4xwx7CHA7/J+mMDT nLEfRfiBuYlTwmPhEGjPX7WOQsDdc/c9TqSGeeq1R1YVhuPPDs0eSQ+N+A4SzfUw +xEeVP5oFQ0/KpJNQLSrVjyOB3yAeOgNaSPchmyGu5o7dd5DBJA4MaxT5VRzMTQ2 peCCslZQj2vnZVRRbob1nyytWHqZR5VLM4HZ2am/jO60tRrHmfMCsYPXrifeH4EK 289jquh6IgdkY5S2Ux8qRq/MrgtVlcjTYiA1/oHMijrkifuyyzJ+poBMnd1ONXDS L/BM6F8woXKcr0UP3Mlzi3Qtzv22tiwrl9+k0KPw0bQeqFjieQhqvyvoEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpMvrKmWNeYqQ9UpaNGQS8NoWM7MB8GA1UdIwQY MBaAFHEXOGlz+/iKhnyCqIZ7BQ/KYLARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYt OWYzMDNlYTY3ZTY1LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYtOWYzMDNlYTY3ZTY1 LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVUo+USO biuVpQhIKUXtBOK3ESIDJWWWuo0yzKvLmBdkTg6DBGZxY5peMzS6Ovio5yTJFtph Zywh0ngbEp2gQGv8lhMUxEXWtO1i3bxkoyCBT0AJ0CwHPKiKoGHxYifJaLn2UOwL tvFet+aM1heI0Ujb0DqIqg6b/IVJYTd29DPp1HWcbI6f4NYjMZAC9q9JqaVCnEwK TVXZm/mOuUWXEVoKQz3pjEtaoqyZk0ydSJ4ZhW461mhwRdhZzJyze/8+9Q1WDpUg I0bwue91XObKYfYPBZ4WjIkvDBN9jn4JSP/4KusfYPe3EKNzzLurK5sCGFz7kvEZ +MwL9tYrMtmmmg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:38:07 2026 by rpki-client