This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json) Hash identifier: kHpVt1sgRvrCQwwmWIMm41/YgrAKCRwpx6YgMupsxkk= Subject key identifier: 6C:57:57:CA:79:19:18:BD:76:8F:6E:01:12:A3:7C:C2:90:C8:95:3D Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2 Certificate serial: 019C446C43FA388C20919CBD857FB3E6C82C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft Manifest number: 07C7 Signing time: Mon 09 Feb 2026 22:01:11 +0000 Manifest this update: Mon 09 Feb 2026 22:01:11 +0000 Manifest next update: Tue 10 Feb 2026 22:01:11 +0000 Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: QdqEbWdc43tUORH1LizwhYhQvrtKhPqW3exECgeW6S8=) 2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:43:fa:38:8c:20:91:9c:bd:85:7f:b3:e6:c8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2 Validity Not Before: Feb 9 22:01:11 2026 GMT Not After : Feb 10 22:01:11 2026 GMT Subject: CN=6c5757ca791918bd768f6e0112a37cc290c8953d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:1b:7c:9a:9d:e2:65:da:cb:cc:f8:74:30: 42:57:69:fc:f7:59:d2:7a:27:cc:ee:26:4f:7e:67: 8c:68:f9:4d:0b:d7:ca:dc:a9:60:65:87:e5:0c:80: be:da:26:a3:f2:5a:e0:a3:71:e7:52:f5:90:f7:a6: b0:92:74:d9:41:56:cd:6b:d5:05:b9:6e:ca:1e:0b: c4:51:1e:e8:0c:92:ae:61:ed:91:5b:1d:e1:fb:f7: 80:49:66:e0:7b:95:7e:e3:d2:24:0f:6a:2a:b9:b7: 8c:f7:87:a0:2b:6f:a9:a7:43:67:b5:72:ae:4c:c1: 96:4e:da:73:7a:7b:b7:d1:02:7c:54:01:80:54:08: 66:6d:38:4c:27:0a:82:08:d8:91:7b:70:ca:be:8a: 16:49:c4:d1:9d:af:8a:dc:ac:02:ba:41:2e:98:0d: 87:62:6a:b3:be:06:f1:f5:4d:af:6a:3b:1d:d2:f8: 47:90:0d:44:1b:52:f7:d1:9b:10:53:92:34:e5:ef: e3:7d:65:45:a0:58:66:25:a2:20:cb:36:f2:8a:93: 05:c3:29:00:a6:36:c1:07:2b:c4:3d:0a:dc:19:33: b2:41:9d:6a:46:e8:ef:da:ec:d2:90:6f:09:c2:a2: ee:22:85:db:62:ff:8a:5e:84:37:dd:d5:ae:27:d0: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:57:CA:79:19:18:BD:76:8F:6E:01:12:A3:7C:C2:90:C8:95:3D X509v3 Authority Key Identifier: keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:27:ab:ed:fa:dc:38:d9:d6:5c:3f:8d:b9:03:fb:f6:42:f1: f0:87:60:10:4d:d8:58:40:4b:40:de:b9:e2:5c:cd:b8:1c:95: 0b:e1:81:41:98:e8:38:46:a7:2d:e6:dc:52:38:1d:cd:4a:1d: 74:fb:8b:9f:31:6d:97:b6:98:e8:bf:39:0c:93:da:ea:62:be: 51:67:77:f2:93:eb:03:7f:86:ff:33:53:cd:b8:40:3c:f7:48: 69:ca:33:b2:9f:7b:53:2d:5e:92:58:42:0d:f7:50:8e:c1:91: fd:8a:a2:6f:c4:50:cb:e2:3c:23:1f:f7:45:19:00:57:c6:25: 89:86:79:4d:20:ad:b6:1c:8c:22:bc:1a:9f:4e:50:00:42:ab: e8:ae:f4:aa:96:ad:b2:12:16:00:e3:e6:31:db:86:99:46:fb: c9:5a:08:f5:a2:61:56:39:36:f0:68:07:76:8d:c7:f7:a9:27: 91:d5:c2:d0:5d:7c:4f:50:e8:e8:b2:28:91:09:b2:98:d0:09: cf:1f:d0:8a:23:bc:1b:7c:bf:70:11:4b:fa:65:e1:8f:0f:15: 73:6e:82:0e:bf:29:c6:2e:77:9f:46:53:29:f9:f9:16:70:8d: dc:61:49:88:83:cd:8e:d8:65:20:71:ef:a7:4f:b8:ee:52:da: 8b:c6:1b:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbEP6OIwgkZy9hX+z5sgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy MjIyZDIwHhcNMjYwMjA5MjIwMTExWhcNMjYwMjEwMjIwMTExWjAzMTEwLwYDVQQD Eyg2YzU3NTdjYTc5MTkxOGJkNzY4ZjZlMDExMmEzN2NjMjkwYzg5NTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwsbfJqd4mXay8z4dDBCV2n891nS eifM7iZPfmeMaPlNC9fK3KlgZYflDIC+2iaj8lrgo3HnUvWQ96awknTZQVbNa9UF uW7KHgvEUR7oDJKuYe2RWx3h+/eASWbge5V+49IkD2oqubeM94egK2+pp0NntXKu TMGWTtpzenu30QJ8VAGAVAhmbThMJwqCCNiRe3DKvooWScTRna+K3KwCukEumA2H Ymqzvgbx9U2vajsd0vhHkA1EG1L30ZsQU5I05e/jfWVFoFhmJaIgyzbyipMFwykA pjbBByvEPQrcGTOyQZ1qRujv2uzSkG8JwqLuIoXbYv+KXoQ33dWuJ9CbqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxXV8p5GRi9do9uARKjfMKQyJU9MB8GA1UdIwQY MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt NmQ3NjUwY2EzZDA0LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0 LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhier7frc ONnWXD+NuQP79kLx8IdgEE3YWEBLQN654lzNuByVC+GBQZjoOEanLebcUjgdzUod dPuLnzFtl7aY6L85DJPa6mK+UWd38pPrA3+G/zNTzbhAPPdIacozsp97Uy1eklhC DfdQjsGR/Yqib8RQy+I8Ix/3RRkAV8YliYZ5TSCtthyMIrwan05QAEKr6K70qpat shIWAOPmMduGmUb7yVoI9aJhVjk28GgHdo3H96knkdXC0F18T1Do6LIokQmymNAJ zx/QiiO8G3y/cBFL+mXhjw8Vc26CDr8pxi53n0ZTKfn5FnCN3GFJiIPNjthlIHHv p0+47lLai8Ybcg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:44 2026 by rpki-client