This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json) Hash identifier: bsx3c8MA5hJaVFdNXI9iOw3t54+3LMX4gtetGhkL0f8= Subject key identifier: FD:0A:14:72:36:77:99:A5:C9:83:2C:62:64:5B:ED:04:B4:2E:5D:80 Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03 Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03 Certificate serial: 019C4322C49C84DA258748F470385AD8E06D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft Manifest number: 02CE Signing time: Mon 09 Feb 2026 16:01:17 +0000 Manifest this update: Mon 09 Feb 2026 16:01:17 +0000 Manifest next update: Tue 10 Feb 2026 16:01:17 +0000 Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: ZCzm2rf4linKZQVhm6dan1AVLqKM13MJAS/Tnxcv6r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c4:9c:84:da:25:87:48:f4:70:38:5a:d8:e0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03 Validity Not Before: Feb 9 16:01:17 2026 GMT Not After : Feb 10 16:01:17 2026 GMT Subject: CN=fd0a1472367799a5c9832c62645bed04b42e5d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:6f:36:b3:e3:15:d5:0f:00:f2:d8:48:f7: b1:a3:08:5e:d7:e8:69:16:61:69:d8:b1:58:76:13: f9:0c:e1:ea:4d:5d:1d:7c:d5:40:fe:91:e4:da:bc: 3c:6d:77:ca:8e:07:68:bf:8a:9a:b9:46:e0:b6:ed: 10:d5:2d:14:0b:7b:47:87:b2:14:f1:51:d7:ea:ce: 8d:65:8e:65:9e:06:0c:fb:47:fd:d6:a6:a5:37:58: cd:28:bc:d8:b7:55:ed:5c:00:96:46:09:96:5e:17: 47:61:5b:0c:a0:7e:1f:64:79:b2:83:fc:93:4d:94: 4a:cf:52:bc:72:16:34:20:0b:fd:5f:b1:29:16:a4: e3:20:5c:29:90:90:22:d3:5b:3d:9b:0e:4b:e2:f1: 86:8c:43:11:83:a5:9a:10:48:f2:5b:1c:75:7e:92: 78:d1:b0:87:3d:3a:02:3b:d2:fd:29:3d:47:8e:71: be:12:8f:23:77:ac:65:4b:ca:c5:98:ee:fc:23:ef: 36:d9:88:cf:8a:31:ff:5c:7d:dc:4b:e7:c6:4a:43: c0:1e:ec:a3:79:f8:04:d8:b9:2f:68:1c:57:0e:b3: 9c:cb:aa:8e:eb:19:f9:7f:40:c6:02:7e:08:23:2d: a4:b2:2d:28:3e:9d:fd:b9:3f:bd:70:84:64:89:ae: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0A:14:72:36:77:99:A5:C9:83:2C:62:64:5B:ED:04:B4:2E:5D:80 X509v3 Authority Key Identifier: keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:99:06:03:c3:f7:13:4a:1c:3a:60:58:1b:f5:e6:a1:61:f2: 5c:03:a2:bd:c8:4b:20:91:85:13:6b:3b:46:4c:3b:3d:6c:ce: 4b:3f:cd:9a:10:2e:8a:15:e2:7f:4f:1f:be:af:a8:b4:81:54: e0:97:c8:46:f4:bd:37:b6:24:d1:5f:8c:7e:3b:95:10:09:d4: 2a:4a:c8:56:a6:0c:36:7e:2f:10:4f:b4:83:e5:1b:04:f0:6f: 6d:bb:55:ec:e7:da:0c:41:b1:b2:cf:31:26:9e:a1:35:2c:3e: 59:a4:ed:aa:53:7c:4a:d3:5e:f9:22:58:b2:ff:b2:a7:3e:2c: 68:88:1e:2d:a4:f8:1a:b0:f7:88:0a:da:1f:57:fc:f5:31:16: f7:1c:ca:1a:8e:0d:e9:66:2f:8a:e1:7f:e2:96:f6:d1:c6:fb: e6:a9:42:0f:dd:f4:f1:5f:1f:c3:18:5e:3c:b0:81:63:a2:d6: 3f:ba:69:58:9e:e2:28:48:70:94:84:87:eb:c0:9e:65:87:d2: 91:8c:d8:33:94:15:2b:93:9f:11:a0:ac:ed:fa:c4:72:9f:cc: 6e:8c:b9:bb:0e:c0:e5:29:b2:50:ed:57:0d:92:31:5f:12:fb: df:fd:b2:43:1e:32:b1:44:61:2a:4d:d9:9f:a3:cc:84:cf:5c: 12:4f:59:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsSchNolh0j0cDha2OBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyN2UyMThhMzE4M2Y1MTI4MjdlNWFjNmQ5ZTU0MjVlMmJm MGVlMDMwHhcNMjYwMjA5MTYwMTE3WhcNMjYwMjEwMTYwMTE3WjAzMTEwLwYDVQQD EyhmZDBhMTQ3MjM2Nzc5OWE1Yzk4MzJjNjI2NDViZWQwNGI0MmU1ZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e5vNrPjFdUPAPLYSPexowhe1+hp FmFp2LFYdhP5DOHqTV0dfNVA/pHk2rw8bXfKjgdov4qauUbgtu0Q1S0UC3tHh7IU 8VHX6s6NZY5lngYM+0f91qalN1jNKLzYt1XtXACWRgmWXhdHYVsMoH4fZHmyg/yT TZRKz1K8chY0IAv9X7EpFqTjIFwpkJAi01s9mw5L4vGGjEMRg6WaEEjyWxx1fpJ4 0bCHPToCO9L9KT1HjnG+Eo8jd6xlS8rFmO78I+822YjPijH/XH3cS+fGSkPAHuyj efgE2LkvaBxXDrOcy6qO6xn5f0DGAn4IIy2ksi0oPp39uT+9cIRkia5/awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0KFHI2d5mlyYMsYmRb7QS0Ll2AMB8GA1UdIwQY MBaAFHJ+IYoxg/USgn5axtnlQl4r8O4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zZTUxM2YtYjlhYS00NzQ0LWE1NzAt ZWZjYjU4MjAwZThhLzEvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zZTUxM2YtYjlhYS00NzQ0LWE1NzAtZWZjYjU4MjAwZThh LzEvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpkGA8P3 E0ocOmBYG/XmoWHyXAOivchLIJGFE2s7Rkw7PWzOSz/NmhAuihXif08fvq+otIFU 4JfIRvS9N7Yk0V+MfjuVEAnUKkrIVqYMNn4vEE+0g+UbBPBvbbtV7OfaDEGxss8x Jp6hNSw+WaTtqlN8StNe+SJYsv+ypz4saIgeLaT4GrD3iAraH1f89TEW9xzKGo4N 6WYviuF/4pb20cb75qlCD9308V8fwxhePLCBY6LWP7ppWJ7iKEhwlISH68CeZYfS kYzYM5QVK5OfEaCs7frEcp/Mboy5uw7A5SmyUO1XDZIxXxL73/2yQx4ysURhKk3Z n6PMhM9cEk9Z6g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:06 2026 by rpki-client