This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json) Hash identifier: HCAPqaOU9XYSIZ7r+FYQCGmWjUxFdy2Jzjfardz36sI= Subject key identifier: 5A:C2:89:BE:06:AB:A3:7E:C4:9D:BF:D2:14:EA:73:A5:95:04:8D:63 Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31 Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31 Certificate serial: 019C439094DDC8F601E5330845183A7C912B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft Manifest number: 0FDC Signing time: Mon 09 Feb 2026 18:01:14 +0000 Manifest this update: Mon 09 Feb 2026 18:01:14 +0000 Manifest next update: Tue 10 Feb 2026 18:01:14 +0000 Files and hashes: 1: 8Oob-MaKU0NvwXJUiKMB7ekq4Cg.roa (hash: 63MHEzPjU99WPqV+lKCTZbVzEP7CPni86OEOEBrlKcE=) 2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: NdYv17w/6Lnp9YZaI5GRYSjb5FjW5U144Lm+Pmj9SGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:94:dd:c8:f6:01:e5:33:08:45:18:3a:7c:91:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c782735aa98d4645d041093a7662a12379503a31 Validity Not Before: Feb 9 18:01:14 2026 GMT Not After : Feb 10 18:01:14 2026 GMT Subject: CN=5ac289be06aba37ec49dbfd214ea73a595048d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:54:c9:78:1d:f0:fe:5d:3d:0c:32:88:69: 76:f9:d6:e3:d9:31:78:b9:62:67:1a:50:f3:5e:9f: cc:7a:fd:22:a3:01:b5:7b:d0:9f:aa:38:5b:f9:9f: 14:5b:06:06:90:4e:24:25:20:9a:d6:72:ce:fc:a0: 80:08:36:44:82:46:93:a3:df:4c:72:04:20:6d:77: 9f:5e:f2:d2:02:39:e8:63:ca:80:b0:e5:16:4f:dc: e4:60:cc:0f:57:e6:2f:62:b9:a5:31:6f:e3:d8:e3: 4f:b2:76:30:8c:60:d7:27:2b:3b:c0:22:15:21:f7: 22:05:3c:98:9b:6c:76:b9:44:55:5f:d6:bc:0c:fd: 35:e2:02:90:b2:64:f3:c2:d9:8a:77:09:37:a3:51: 47:8d:75:57:ec:2d:9f:e3:16:0a:fc:c5:f7:3f:e3: 5e:fe:2a:57:42:7f:f8:8b:61:d8:26:e5:79:f8:0a: c6:42:26:14:84:6a:0b:48:e8:38:60:d9:20:d4:18: 29:12:9a:21:bc:79:fd:24:87:73:b3:c1:f4:7b:75: ab:a9:44:34:72:c9:85:62:e9:63:f5:e0:25:0d:c2: 3c:99:89:ad:97:12:22:0a:a0:5b:21:d6:d3:18:ab: 0b:1a:04:de:e4:68:73:17:35:05:a9:4e:90:cd:fb: 68:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C2:89:BE:06:AB:A3:7E:C4:9D:BF:D2:14:EA:73:A5:95:04:8D:63 X509v3 Authority Key Identifier: keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b0:ae:5c:b5:fa:fe:ef:d6:c6:02:37:10:01:ba:96:79:11: b1:29:56:a1:d5:98:2f:0c:ec:ae:05:93:77:e4:2a:3a:db:60: 3b:cf:d2:b0:71:32:07:5e:a9:d0:6b:95:4f:0e:f9:65:72:47: 6e:34:f8:80:bc:aa:70:4a:f2:c0:4b:af:9d:46:bc:b8:37:0b: 39:63:fa:0c:ad:72:9c:df:f8:d1:b8:85:13:e5:4c:16:bd:e1: 45:50:92:ed:ed:8f:e8:33:f9:0d:86:26:00:60:81:eb:8d:ff: 33:a8:f3:84:63:35:06:0a:fe:85:c4:9f:79:80:9c:0c:13:50: 2c:cc:11:eb:09:41:91:d2:78:c3:a9:9f:ed:43:88:68:70:db: eb:4f:71:17:ef:1b:92:59:96:f5:e7:52:60:53:39:a4:b6:65: a0:51:e3:1c:0d:99:2d:87:8a:aa:b3:5a:8b:da:08:c8:50:ad: 60:e1:8b:10:51:23:61:d5:c5:c4:b8:ea:85:e2:4d:96:a2:b3: 15:0c:3c:20:4b:75:ec:88:40:53:6a:83:e6:08:55:e8:3d:c7: 3a:e6:20:fe:44:84:58:fc:25:2d:da:aa:f8:28:8d:27:32:26: f4:ee:83:0d:6e:eb:89:ae:f2:a7:bd:29:10:b5:98:2c:a1:09: ac:26:7b:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkJTdyPYB5TMIRRg6fJErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODI3MzVhYTk4ZDQ2NDVkMDQxMDkzYTc2NjJhMTIzNzk1 MDNhMzEwHhcNMjYwMjA5MTgwMTE0WhcNMjYwMjEwMTgwMTE0WjAzMTEwLwYDVQQD Eyg1YWMyODliZTA2YWJhMzdlYzQ5ZGJmZDIxNGVhNzNhNTk1MDQ4ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qNUyXgd8P5dPQwyiGl2+dbj2TF4 uWJnGlDzXp/Mev0iowG1e9Cfqjhb+Z8UWwYGkE4kJSCa1nLO/KCACDZEgkaTo99M cgQgbXefXvLSAjnoY8qAsOUWT9zkYMwPV+YvYrmlMW/j2ONPsnYwjGDXJys7wCIV IfciBTyYm2x2uURVX9a8DP014gKQsmTzwtmKdwk3o1FHjXVX7C2f4xYK/MX3P+Ne /ipXQn/4i2HYJuV5+ArGQiYUhGoLSOg4YNkg1BgpEpohvHn9JIdzs8H0e3WrqUQ0 csmFYulj9eAlDcI8mYmtlxIiCqBbIdbTGKsLGgTe5GhzFzUFqU6QzftosQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrCib4Gq6N+xJ2/0hTqc6WVBI1jMB8GA1UdIwQY MBaAFMeCc1qpjUZF0EEJOnZioSN5UDoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYt YjQ5M2E5ZGY0ZjhmLzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYtYjQ5M2E5ZGY0Zjhm LzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLCuXLX6 /u/WxgI3EAG6lnkRsSlWodWYLwzsrgWTd+QqOttgO8/SsHEyB16p0GuVTw75ZXJH bjT4gLyqcErywEuvnUa8uDcLOWP6DK1ynN/40biFE+VMFr3hRVCS7e2P6DP5DYYm AGCB643/M6jzhGM1Bgr+hcSfeYCcDBNQLMwR6wlBkdJ4w6mf7UOIaHDb609xF+8b klmW9edSYFM5pLZloFHjHA2ZLYeKqrNai9oIyFCtYOGLEFEjYdXFxLjqheJNlqKz FQw8IEt17IhAU2qD5ghV6D3HOuYg/kSEWPwlLdqq+CiNJzIm9O6DDW7ria7yp70p ELWYLKEJrCZ7OQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:13:30 2026 by rpki-client