This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft File: b4F55dBS0rDksngcPxxkBb6UIJs.mft (raw, json) Hash identifier: h52N+0kepiwyUcDUVUVxX3CwNBgaWECEWRBIM8IIz9c= Subject key identifier: 29:41:C2:9E:B9:D7:C2:C7:07:D5:E6:6E:E7:B1:BB:6A:41:CC:FB:3C Authority key identifier: 6F:81:79:E5:D0:52:D2:B0:E4:B2:78:1C:3F:1C:64:05:BE:94:20:9B Certificate issuer: /CN=6f8179e5d052d2b0e4b2781c3f1c6405be94209b Certificate serial: 019C420FE214D9D5DCE04F6184588F875DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft Manifest number: 38 Signing time: Mon 09 Feb 2026 11:01:02 +0000 Manifest this update: Mon 09 Feb 2026 11:01:02 +0000 Manifest next update: Tue 10 Feb 2026 11:01:02 +0000 Files and hashes: 1: b4F55dBS0rDksngcPxxkBb6UIJs.crl (hash: 4xQUv0RJiNQ4TTSF0LhKGgknuKyIdvuWwBfi5/vwvRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e2:14:d9:d5:dc:e0:4f:61:84:58:8f:87:5d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8179e5d052d2b0e4b2781c3f1c6405be94209b Validity Not Before: Feb 9 11:01:02 2026 GMT Not After : Feb 10 11:01:02 2026 GMT Subject: CN=2941c29eb9d7c2c707d5e66ee7b1bb6a41ccfb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:c3:0e:04:e7:a1:4c:11:04:32:ef:30:8d: 4f:7c:65:74:53:25:62:69:be:28:23:d7:d8:01:42: a7:b2:77:51:12:ff:46:ee:f6:5d:a4:55:73:1d:41: 75:70:e7:dd:b6:66:12:cf:47:ce:91:02:89:b5:71: 2e:77:9d:6e:7a:9c:59:d1:d1:0c:a0:46:31:64:cf: 61:30:2e:0e:3b:12:a4:7e:b3:58:b2:c0:16:53:7f: c5:a7:fc:1c:28:6a:32:5d:4e:a9:19:98:09:1b:7b: 31:6c:9a:4f:6b:68:0b:7d:5d:89:5d:1e:3e:a9:2a: 97:d9:ad:01:d7:5f:f0:fa:f0:84:1b:ac:9a:e4:db: 70:db:77:cd:da:3c:20:b2:ca:47:42:63:3d:4b:2d: 7f:71:c9:0a:ec:2a:09:4a:80:3f:e2:ba:ec:ff:54: df:16:c6:4a:62:ca:b4:cd:2c:f5:7c:38:77:99:b4: 35:a7:86:c3:2d:db:db:ab:6a:4e:c9:be:5d:df:6a: 25:86:89:de:3b:30:cc:a5:9f:62:da:f8:5b:94:cc: ac:52:4f:c5:3b:ad:07:61:03:8e:54:00:a8:4f:85: f6:d8:2d:b7:cb:d2:34:c9:a8:76:c9:e6:3c:45:bf: 4d:ab:8e:db:7c:0a:a9:a2:f2:72:1f:59:19:6c:b5: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:41:C2:9E:B9:D7:C2:C7:07:D5:E6:6E:E7:B1:BB:6A:41:CC:FB:3C X509v3 Authority Key Identifier: keyid:6F:81:79:E5:D0:52:D2:B0:E4:B2:78:1C:3F:1C:64:05:BE:94:20:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6b:6e:0b:f9:3e:4d:28:a9:9b:e6:db:f4:ba:64:63:03:0d: 1d:16:18:02:45:ac:f7:8d:27:9f:5a:05:e7:40:88:73:72:81: 29:61:4a:fb:28:66:ce:2f:dc:22:82:e3:a4:7d:a0:12:41:3d: 5b:24:6a:9b:0d:e8:6e:d0:f3:10:02:c4:4e:08:ca:be:b1:87: fe:90:2b:3b:96:7f:cc:9b:e7:f2:bc:fd:42:35:df:d9:85:97: ea:ff:7c:07:5e:ac:93:c8:cc:ba:14:b7:d1:4e:29:4d:87:3f: 2e:db:97:89:c0:34:99:bc:51:55:b2:30:35:8f:48:6c:3d:d4: e2:5e:64:a8:8a:83:d5:43:db:c3:a3:36:7b:41:62:3e:d5:e7: 48:05:da:d0:79:33:27:05:f5:d7:cb:e8:fa:7a:77:82:15:26: 26:f4:f0:9a:50:28:74:08:37:4f:cf:70:b3:20:cb:b4:f2:3a: b7:33:b8:63:a4:2c:d1:fa:3d:a1:0e:bd:fe:fc:73:27:94:30: 6f:02:56:ea:ce:0f:f4:23:88:4f:f0:dc:50:ab:a4:ae:ec:8f: ef:75:23:f4:c3:06:f3:4e:b2:8b:07:e1:60:05:14:84:c4:e8: 92:ac:2f:be:3c:2e:55:e8:ec:64:2c:38:8d:c0:d1:0c:5c:25: 14:4a:ad:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+IU2dXc4E9hhFiPh13XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODE3OWU1ZDA1MmQyYjBlNGIyNzgxYzNmMWM2NDA1YmU5 NDIwOWIwHhcNMjYwMjA5MTEwMTAyWhcNMjYwMjEwMTEwMTAyWjAzMTEwLwYDVQQD EygyOTQxYzI5ZWI5ZDdjMmM3MDdkNWU2NmVlN2IxYmI2YTQxY2NmYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbTDDgTnoUwRBDLvMI1PfGV0UyVi ab4oI9fYAUKnsndREv9G7vZdpFVzHUF1cOfdtmYSz0fOkQKJtXEud51uepxZ0dEM oEYxZM9hMC4OOxKkfrNYssAWU3/Fp/wcKGoyXU6pGZgJG3sxbJpPa2gLfV2JXR4+ qSqX2a0B11/w+vCEG6ya5Ntw23fN2jwgsspHQmM9Sy1/cckK7CoJSoA/4rrs/1Tf FsZKYsq0zSz1fDh3mbQ1p4bDLdvbq2pOyb5d32olhoneOzDMpZ9i2vhblMysUk/F O60HYQOOVACoT4X22C23y9I0yah2yeY8Rb9Nq47bfAqpovJyH1kZbLVbawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClBwp6518LHB9Xmbuexu2pBzPs8MB8GA1UdIwQY MBaAFG+BeeXQUtKw5LJ4HD8cZAW+lCCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNmMwODktMjFlYy00MTExLWE1ZDQt MzU5MDA1ZDE1NzM4LzEvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hNmMwODktMjFlYy00MTExLWE1ZDQtMzU5MDA1ZDE1NzM4 LzEvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGtuC/k+ TSipm+bb9LpkYwMNHRYYAkWs940nn1oF50CIc3KBKWFK+yhmzi/cIoLjpH2gEkE9 WyRqmw3obtDzEALETgjKvrGH/pArO5Z/zJvn8rz9QjXf2YWX6v98B16sk8jMuhS3 0U4pTYc/LtuXicA0mbxRVbIwNY9IbD3U4l5kqIqD1UPbw6M2e0FiPtXnSAXa0Hkz JwX118vo+np3ghUmJvTwmlAodAg3T89wsyDLtPI6tzO4Y6Qs0fo9oQ69/vxzJ5Qw bwJW6s4P9COIT/DcUKukruyP73Uj9MMG806yiwfhYAUUhMTokqwvvjwuVejsZCw4 jcDRDFwlFEqtWA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:40 2026 by rpki-client