This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft File: 4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json) Hash identifier: 1fxuKkFL91lPO2g+JTfjiwc0XVs4hZCjkTXGMC/Pt4s= Subject key identifier: A6:A6:D8:DD:E4:5B:97:C4:2C:65:BF:94:D7:30:5B:14:A0:16:7C:57 Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4 Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4 Certificate serial: 019C41A227C8B60D5C4E67ACC70D2C10E9D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft Manifest number: 0220 Signing time: Mon 09 Feb 2026 09:01:11 +0000 Manifest this update: Mon 09 Feb 2026 09:01:11 +0000 Manifest next update: Tue 10 Feb 2026 09:01:11 +0000 Files and hashes: 1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: m9SW3H+dpZ5EVAeVsIDnKT8jYDzPn3ThyrfkQ2MLCwE=) 2: aeMqOjfotVxQU7L_71TE5A4rNWU.roa (hash: gZnRYvhPdhuDLwx6E5z6j8fKe+fAGfafgA+jlQbEpfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:27:c8:b6:0d:5c:4e:67:ac:c7:0d:2c:10:e9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4 Validity Not Before: Feb 9 09:01:11 2026 GMT Not After : Feb 10 09:01:11 2026 GMT Subject: CN=a6a6d8dde45b97c42c65bf94d7305b14a0167c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:a5:ef:91:20:8d:fc:4a:07:7c:ec:ac:09: 26:9b:56:4a:bd:8a:6e:1c:04:11:fe:8d:ba:8e:6b: ee:78:14:85:12:ba:e7:a6:f8:51:21:03:81:ae:ea: 17:2f:a2:f6:bc:d9:b7:01:8e:64:ec:a9:14:82:6c: fc:91:ef:d2:ff:39:81:e0:b8:74:53:92:69:1a:32: e1:22:6e:46:79:06:f4:88:93:84:b4:bd:b8:54:f7: 3d:36:19:3e:d0:01:f8:b9:c0:fc:3e:f0:e5:8f:ff: 54:db:77:65:f3:27:7c:64:e0:76:92:da:29:28:ad: e8:38:96:8d:3f:02:20:a0:a7:d3:4b:3a:40:2c:6a: a9:28:f5:89:c3:da:ee:79:e7:8e:c3:6e:4b:be:74: 0e:ba:c8:30:a3:b0:e8:32:e5:3f:b0:80:88:d1:38: bf:5f:06:78:25:03:46:f1:ef:73:f8:53:c0:3a:1e: 2a:ea:f4:79:2e:35:a6:78:36:2d:c0:e1:8a:40:ce: 16:c9:3b:ee:ba:e2:72:f1:36:86:25:3b:7f:ed:2c: 01:73:35:44:bc:18:62:ae:db:02:18:8e:aa:ac:d9: bb:04:77:7e:04:f2:ca:e8:ec:9d:3f:b4:b7:97:1e: d8:6d:03:72:b7:11:dc:6c:3a:6a:c3:a5:71:70:ba: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A6:D8:DD:E4:5B:97:C4:2C:65:BF:94:D7:30:5B:14:A0:16:7C:57 X509v3 Authority Key Identifier: keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2b:c1:c3:4d:52:bd:b4:fe:30:c4:80:47:8d:d4:e0:41:58: b6:7c:4b:de:be:b8:46:ab:6f:15:69:8b:0d:89:eb:fa:4b:c4: da:80:2a:d6:8d:c0:62:c2:5a:26:ac:8e:87:ca:4c:5c:c0:bc: 80:aa:a0:ce:00:60:a2:c9:bb:9c:55:7e:56:37:e8:93:39:be: fd:1c:b4:d6:0c:f9:d3:bc:e0:a7:59:4d:af:33:53:0f:1e:d5: 99:59:5d:e4:9f:7f:38:3c:c9:06:94:17:91:3e:8e:9c:10:c4: cf:48:fc:13:a2:4b:27:49:e0:9d:aa:6c:ae:5c:20:14:5c:57: c0:c6:72:21:04:52:12:2c:e1:11:bd:03:f0:20:dc:10:ed:14: 7b:3c:d0:af:8f:26:b8:90:6a:6b:cb:07:fe:ed:5e:b2:24:cf: 16:ac:28:fc:24:94:d6:50:69:2e:84:72:e3:35:41:0e:c5:85: 7d:6a:1e:1b:d3:17:c9:0d:20:4f:79:0f:31:7f:2e:ad:f7:4e: c9:f2:f4:22:b9:82:14:f0:f7:e4:a8:06:ff:29:d2:15:2e:1b: ae:9d:6c:3c:70:ed:be:9a:ca:27:d8:fc:59:ed:9c:dc:cd:a3: 02:15:d5:fd:1e:49:fb:3c:21:ff:af:f5:2f:e6:e7:ce:b6:67: 4c:5d:a8:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoifItg1cTmesxw0sEOnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMWNlNmI3ZGQ5YTZhYzBiMzI0YmE1YWQ4NzNiMGFmNDZh MzkyZDQwHhcNMjYwMjA5MDkwMTExWhcNMjYwMjEwMDkwMTExWjAzMTEwLwYDVQQD EyhhNmE2ZDhkZGU0NWI5N2M0MmM2NWJmOTRkNzMwNWIxNGEwMTY3YzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ml75EgjfxKB3zsrAkmm1ZKvYpu HAQR/o26jmvueBSFErrnpvhRIQOBruoXL6L2vNm3AY5k7KkUgmz8ke/S/zmB4Lh0 U5JpGjLhIm5GeQb0iJOEtL24VPc9Nhk+0AH4ucD8PvDlj/9U23dl8yd8ZOB2ktop KK3oOJaNPwIgoKfTSzpALGqpKPWJw9rueeeOw25LvnQOusgwo7DoMuU/sICI0Ti/ XwZ4JQNG8e9z+FPAOh4q6vR5LjWmeDYtwOGKQM4WyTvuuuJy8TaGJTt/7SwBczVE vBhirtsCGI6qrNm7BHd+BPLK6OydP7S3lx7YbQNytxHcbDpqw6VxcLqgGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKam2N3kW5fELGW/lNcwWxSgFnxXMB8GA1UdIwQY MBaAFOEc5rfdmmrAsyS6WthzsK9Go5LUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYt ZTU5MGU2YjRjZDBlLzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYtZTU5MGU2YjRjZDBl LzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESvBw01S vbT+MMSAR43U4EFYtnxL3r64RqtvFWmLDYnr+kvE2oAq1o3AYsJaJqyOh8pMXMC8 gKqgzgBgosm7nFV+Vjfokzm+/Ry01gz507zgp1lNrzNTDx7VmVld5J9/ODzJBpQX kT6OnBDEz0j8E6JLJ0ngnapsrlwgFFxXwMZyIQRSEizhEb0D8CDcEO0UezzQr48m uJBqa8sH/u1esiTPFqwo/CSU1lBpLoRy4zVBDsWFfWoeG9MXyQ0gT3kPMX8urfdO yfL0IrmCFPD35KgG/ynSFS4brp1sPHDtvprKJ9j8We2c3M2jAhXV/R5J+zwh/6/1 L+bnzrZnTF2oOA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:47 2026 by rpki-client