This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json) Hash identifier: aLpe4e86rEj/zn/My5e9C40BpMyh+NI0S5H33rLlr24= Subject key identifier: 0C:BD:A1:C1:22:7E:AA:88:F9:8A:A9:D2:7B:4D:9B:24:96:AE:12:BA Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f Certificate serial: 019C44A2C18430CB7627A498AFF8F9D4B915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft Manifest number: 0402 Signing time: Mon 09 Feb 2026 23:00:42 +0000 Manifest this update: Mon 09 Feb 2026 23:00:42 +0000 Manifest next update: Tue 10 Feb 2026 23:00:42 +0000 Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: ZUpomIRK913VeaKihhnoq+M5Ywef1LvGYLv80+ZmW+4=) 2: 8J8jqfIBZIcDi5qcEjDOA-SS3uk.roa (hash: P2MosB3uZAItjOGMQglzm3PWOTUEZCA6IE9hN8uIIUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:c1:84:30:cb:76:27:a4:98:af:f8:f9:d4:b9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f Validity Not Before: Feb 9 23:00:42 2026 GMT Not After : Feb 10 23:00:42 2026 GMT Subject: CN=0cbda1c1227eaa88f98aa9d27b4d9b2496ae12ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:9f:db:ff:1e:7c:43:95:57:b8:e3:bd:80: 7e:71:5f:d1:82:21:60:09:81:44:6a:48:14:78:e0: 97:4f:a2:cc:e3:5b:bd:4b:aa:b9:61:c3:5f:6a:97: 2a:01:a6:94:9b:67:9d:2b:ed:71:25:c7:12:47:b0: a6:a4:f4:67:9c:cc:32:54:cd:8e:2a:d1:bd:c5:40: 9a:9d:33:a7:4f:10:23:9f:d2:ab:26:05:e2:eb:34: e9:9c:61:d1:be:8e:03:82:f1:38:3b:53:b6:2f:c7: f5:ef:a2:e9:53:63:fb:e9:dd:e9:36:e0:37:8d:2d: 37:ac:ea:a2:8a:45:a6:4c:0a:68:00:0b:28:a2:61: c3:0d:84:cf:50:7c:8a:cd:7f:b5:61:53:5f:cf:86: c7:ae:71:8f:ad:25:2c:09:88:1e:9c:2f:fa:ad:6b: 8a:ff:14:ab:48:4a:98:3c:f5:85:75:b9:cb:6e:5b: 28:34:a0:2d:56:cf:60:20:71:98:09:c6:cf:ba:56: c6:1e:49:d8:98:78:5e:59:3a:01:42:66:4d:b8:ea: 83:ac:89:0f:21:b9:bb:87:9e:17:a2:59:ad:74:4c: 98:d7:3e:aa:47:3c:f6:ee:c2:2c:fc:b0:8b:39:66: 00:8f:61:80:09:99:6e:b1:91:3b:e9:54:3b:18:d9: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BD:A1:C1:22:7E:AA:88:F9:8A:A9:D2:7B:4D:9B:24:96:AE:12:BA X509v3 Authority Key Identifier: keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:62:72:02:39:4b:3a:c1:3b:ee:e3:ee:d1:6c:31:64:68:42: 45:66:c9:dd:e1:c1:ee:d5:84:c9:ec:f8:53:7f:e8:a6:fb:81: 9f:cd:26:eb:f3:a6:a3:8c:76:13:3e:8e:9d:d4:98:9f:5c:10: dd:5f:a1:c0:9a:0e:e5:62:41:2c:0b:8b:bf:d4:16:82:f3:e5: ac:30:82:fc:72:b9:f8:b8:47:34:1f:e3:5c:16:fb:76:fe:7e: 7d:0b:eb:94:73:89:48:8d:c5:1d:44:44:c2:aa:45:d8:92:09: 7c:31:0f:79:be:72:ad:7e:f7:59:e6:81:09:a1:a8:40:c9:b3: 65:01:c5:e3:7d:80:1b:2c:f3:0e:94:74:8d:12:1c:84:38:3c: b5:22:e0:6c:b2:f7:51:4b:9b:d0:62:b2:0a:9d:84:c1:98:c6: a0:a2:96:e4:46:b0:79:18:12:5b:ce:52:8a:91:be:70:bb:24: a6:16:fa:c4:de:a1:09:c1:2e:cb:ee:6d:82:b9:66:a0:97:4c: 98:94:c0:f9:07:56:df:3b:aa:f3:51:92:a1:1f:8c:3d:0b:fa: d1:a2:5d:b1:ea:d8:f3:21:b9:c2:32:4b:cc:50:5b:72:e6:7a: 22:01:b1:01:ff:ef:79:eb:11:00:2d:07:70:42:5f:08:53:19: 27:f5:a5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEosGEMMt2J6SYr/j51LkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjBiYzQ2OTQ1MzlhMTUwMjZlYzU1YWFkMTlhMTJiYzIx NGMxNWYwHhcNMjYwMjA5MjMwMDQyWhcNMjYwMjEwMjMwMDQyWjAzMTEwLwYDVQQD EygwY2JkYTFjMTIyN2VhYTg4Zjk4YWE5ZDI3YjRkOWIyNDk2YWUxMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupif2/8efEOVV7jjvYB+cV/RgiFg CYFEakgUeOCXT6LM41u9S6q5YcNfapcqAaaUm2edK+1xJccSR7CmpPRnnMwyVM2O KtG9xUCanTOnTxAjn9KrJgXi6zTpnGHRvo4DgvE4O1O2L8f176LpU2P76d3pNuA3 jS03rOqiikWmTApoAAsoomHDDYTPUHyKzX+1YVNfz4bHrnGPrSUsCYgenC/6rWuK /xSrSEqYPPWFdbnLblsoNKAtVs9gIHGYCcbPulbGHknYmHheWToBQmZNuOqDrIkP Ibm7h54XolmtdEyY1z6qRzz27sIs/LCLOWYAj2GACZlusZE76VQ7GNmHdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy9ocEifqqI+Yqp0ntNmySWrhK6MB8GA1UdIwQY MBaAFOIgvEaUU5oVAm7FWq0ZoSvCFMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMt ZThkNTE1ZTRjZTU2LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMtZThkNTE1ZTRjZTU2 LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmJyAjlL OsE77uPu0WwxZGhCRWbJ3eHB7tWEyez4U3/opvuBn80m6/Omo4x2Ez6OndSYn1wQ 3V+hwJoO5WJBLAuLv9QWgvPlrDCC/HK5+LhHNB/jXBb7dv5+fQvrlHOJSI3FHURE wqpF2JIJfDEPeb5yrX73WeaBCaGoQMmzZQHF432AGyzzDpR0jRIchDg8tSLgbLL3 UUub0GKyCp2EwZjGoKKW5EaweRgSW85SipG+cLskphb6xN6hCcEuy+5tgrlmoJdM mJTA+QdW3zuq81GSoR+MPQv60aJdserY8yG5wjJLzFBbcuZ6IgGxAf/veesRAC0H cEJfCFMZJ/WlJQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:14 2026 by rpki-client