This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json) Hash identifier: p2f+Mw5fQwbWVFkC74XsTz/9r4OhjgRktB0FfY/tkKk= Subject key identifier: 80:AC:8D:D5:A5:E1:37:F8:A4:C0:E3:2C:8D:19:F8:FB:F4:5E:8B:24 Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Certificate serial: 019C435931EB87BE035B675CB31EE919F9D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft Manifest number: 17A6 Signing time: Mon 09 Feb 2026 17:00:44 +0000 Manifest this update: Mon 09 Feb 2026 17:00:44 +0000 Manifest next update: Tue 10 Feb 2026 17:00:44 +0000 Files and hashes: 1: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: 1ucKuhvhGZVXLNQgdASZAStslBDCNx0Ww7ZHka1JxjA=) 2: w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa (hash: S9cgU4aODgbYFlt1oo6eD08eYcxMr87FOJ/xbk/bpB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:31:eb:87:be:03:5b:67:5c:b3:1e:e9:19:f9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Validity Not Before: Feb 9 17:00:44 2026 GMT Not After : Feb 10 17:00:44 2026 GMT Subject: CN=80ac8dd5a5e137f8a4c0e32c8d19f8fbf45e8b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:68:c0:79:b7:10:49:dd:0f:42:26:ef:19: b2:09:b3:d2:5c:4e:7f:87:80:b9:7b:db:6a:f3:38: 2d:98:64:67:5b:3e:67:05:10:9f:46:bd:1d:10:50: 24:b9:b2:f0:19:e2:8a:45:e0:8d:26:e4:05:5c:02: dc:aa:13:95:a5:2e:bb:4f:b6:95:8f:b6:d9:c5:c3: c1:35:3c:0c:5e:26:a2:df:1b:88:f8:dd:72:43:fd: 5d:ee:68:7e:f9:67:c4:0f:b5:a4:bf:67:b9:86:37: 17:d3:fa:55:e3:62:2f:24:a0:30:c4:78:68:dc:b7: 49:0e:0d:c6:09:e9:e0:ce:b5:39:d5:01:73:c5:80: 2e:ab:07:56:84:1b:e8:1e:c9:f3:a4:37:0c:bc:81: 21:30:14:54:98:21:03:8a:7c:3d:a0:42:c3:57:d4: 23:23:6a:57:f2:da:cb:a0:b2:c0:58:9d:74:0b:08: 87:a6:de:2b:74:d7:4c:0b:8b:28:6d:f9:ab:9d:4b: 25:85:4b:ec:04:16:a4:5b:93:ec:10:e3:d7:fb:ef: ab:9a:e7:88:28:19:26:6d:21:90:af:e1:4a:cb:d9: 71:36:c1:82:53:90:19:da:ee:5d:b9:28:25:08:95: cb:42:a5:c6:dc:78:e4:f7:51:60:b4:3c:a7:a8:ab: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AC:8D:D5:A5:E1:37:F8:A4:C0:E3:2C:8D:19:F8:FB:F4:5E:8B:24 X509v3 Authority Key Identifier: keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:da:57:1f:5b:b8:a6:9f:ad:36:01:67:48:ee:b9:85:0c:ca: 5f:84:4d:d9:5e:d3:87:ac:98:2a:09:6b:7a:b3:ab:aa:66:2a: a8:5b:4a:64:02:09:ec:9d:c7:85:9e:a5:bc:0c:5a:53:2a:b9: 2b:74:76:7c:f4:50:bc:9e:31:54:1d:42:5d:01:c1:be:0a:14: 44:ae:9f:93:3f:4a:1c:c5:20:3b:64:95:d5:9a:68:56:7f:31: bc:09:9f:a0:77:75:34:52:28:c5:38:e7:57:85:9b:cb:e3:a1: 65:09:1b:bc:73:6c:08:ed:a9:bf:d6:16:45:83:e9:c7:bd:a5: 11:e9:d6:5e:0a:35:0e:99:d7:ff:7e:66:3d:cb:35:39:da:c6: fa:2a:68:4f:34:f9:9f:01:11:90:ed:7c:34:db:81:db:d5:d4: dc:96:da:1a:3f:8c:1d:04:90:e5:3f:43:47:95:dc:aa:59:3f: 32:a9:2f:34:b7:31:d4:cd:58:82:cd:71:74:59:94:8e:c5:bc: 70:69:59:a1:a3:e4:8b:ca:e2:2f:72:01:44:f2:ae:1e:a3:29: e8:db:db:d0:fd:71:4e:2d:b8:9e:cb:73:45:5c:55:de:24:13: fa:e3:6a:29:b5:52:c2:27:b9:e6:a4:bb:7e:80:21:55:72:8e: 7d:73:a3:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTHrh74DW2dcsx7pGfnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjlhYjZmMDk1NzJhZmI0NmU5ZjhlOWEwNjM5ZDgyMGI5 Njk0MjIwHhcNMjYwMjA5MTcwMDQ0WhcNMjYwMjEwMTcwMDQ0WjAzMTEwLwYDVQQD Eyg4MGFjOGRkNWE1ZTEzN2Y4YTRjMGUzMmM4ZDE5ZjhmYmY0NWU4YjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwJowHm3EEndD0Im7xmyCbPSXE5/ h4C5e9tq8zgtmGRnWz5nBRCfRr0dEFAkubLwGeKKReCNJuQFXALcqhOVpS67T7aV j7bZxcPBNTwMXiai3xuI+N1yQ/1d7mh++WfED7Wkv2e5hjcX0/pV42IvJKAwxHho 3LdJDg3GCengzrU51QFzxYAuqwdWhBvoHsnzpDcMvIEhMBRUmCEDinw9oELDV9Qj I2pX8trLoLLAWJ10CwiHpt4rdNdMC4sobfmrnUslhUvsBBakW5PsEOPX+++rmueI KBkmbSGQr+FKy9lxNsGCU5AZ2u5duSglCJXLQqXG3Hjk91FgtDynqKt/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICsjdWl4Tf4pMDjLI0Z+Pv0XoskMB8GA1UdIwQY MBaAFOBpq28JVyr7Run46aBjnYILlpQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEt NDRmNDFkOWUxMjc3LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEtNDRmNDFkOWUxMjc3 LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldpXH1u4 pp+tNgFnSO65hQzKX4RN2V7Th6yYKglrerOrqmYqqFtKZAIJ7J3HhZ6lvAxaUyq5 K3R2fPRQvJ4xVB1CXQHBvgoURK6fkz9KHMUgO2SV1ZpoVn8xvAmfoHd1NFIoxTjn V4Wby+OhZQkbvHNsCO2pv9YWRYPpx72lEenWXgo1DpnX/35mPcs1OdrG+ipoTzT5 nwERkO18NNuB29XU3JbaGj+MHQSQ5T9DR5Xcqlk/MqkvNLcx1M1Ygs1xdFmUjsW8 cGlZoaPki8riL3IBRPKuHqMp6Nvb0P1xTi24nstzRVxV3iQT+uNqKbVSwie55qS7 foAhVXKOfXOjog== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:45 2026 by rpki-client