This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json) Hash identifier: Do1KkgD8+lasNjMHQagl9CFZM5l732kA9Vi3NNCFMgQ= Subject key identifier: 17:A1:DF:23:1C:72:C5:BE:A3:5E:01:45:78:29:16:88:CA:41:6C:07 Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790 Certificate serial: 019C420F5E782874CDCA787065DF208BD9D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft Manifest number: 13F7 Signing time: Mon 09 Feb 2026 11:00:29 +0000 Manifest this update: Mon 09 Feb 2026 11:00:29 +0000 Manifest next update: Tue 10 Feb 2026 11:00:29 +0000 Files and hashes: 1: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: AyJIfWUa3oRGpP1lR59+wofXH/cAl8DCBvq0IwOLE/s=) 2: _kQ6sm_mo_p1SKdQoRItAP8rezY.roa (hash: FamL8pGq13zRSsk9bbJZ26sKBwj3qZkJI9rn7zZOeO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:5e:78:28:74:cd:ca:78:70:65:df:20:8b:d9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790 Validity Not Before: Feb 9 11:00:29 2026 GMT Not After : Feb 10 11:00:29 2026 GMT Subject: CN=17a1df231c72c5bea35e014578291688ca416c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:13:77:f0:f0:92:c9:d5:0d:d4:f6:3f:11: 93:60:1b:6f:9a:cd:c3:61:79:48:fc:27:aa:e6:fc: 92:bd:b9:fb:eb:74:f5:3d:74:c2:be:68:d3:4a:8c: 9e:fb:0c:c2:21:b3:58:20:51:92:2e:7a:d2:2b:e0: 93:92:c8:33:ea:eb:e2:29:e4:55:ca:b0:e8:bf:ff: 4a:e4:ba:4f:d7:7c:a6:48:d5:00:00:d2:fc:32:8d: 0b:11:dc:32:ac:7d:20:68:36:b8:e5:2e:33:ac:b4: c7:58:df:51:ba:75:c3:4f:5f:22:8c:c4:13:fa:1d: 17:3f:e2:5d:98:4e:e9:e7:c1:25:d8:b2:ca:f3:8e: 67:92:5e:1e:cb:e0:54:c1:3a:88:41:69:ae:c7:a7: 16:81:62:5f:77:23:c8:98:4c:64:8a:82:3f:5f:f2: 63:22:7a:98:2b:0d:a1:32:62:0a:22:d0:6c:4b:1c: b0:50:d9:22:60:da:b6:ca:88:f8:75:34:87:00:ca: 98:60:7b:91:e4:b3:29:c0:0e:0e:87:e3:d8:7e:84: 67:9e:6f:a7:4b:69:71:a2:6a:bb:09:59:f1:86:4d: ec:75:fd:6b:c9:1f:2f:a9:3c:e0:7d:79:f0:ed:fe: 51:13:eb:cc:46:cd:25:54:f2:94:43:c1:d8:0d:c6: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A1:DF:23:1C:72:C5:BE:A3:5E:01:45:78:29:16:88:CA:41:6C:07 X509v3 Authority Key Identifier: keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a3:5b:61:5a:de:e4:99:7a:47:c0:1a:4e:28:b1:ff:18:69: f3:77:56:9a:f7:7d:6d:54:ff:28:b6:fc:54:49:c4:3f:dd:8b: 46:53:b4:b3:c8:de:e7:02:7c:16:84:07:bb:9b:d8:84:05:95: af:96:92:3c:e6:de:2d:4f:08:8a:9f:9c:4a:5c:05:e3:ed:15: bd:45:9f:08:c5:19:0e:3e:39:6a:a6:3b:f9:16:fd:0e:30:be: 53:28:c8:b0:63:b7:1a:a9:80:a8:47:5a:2b:bc:c4:37:94:30: c9:99:44:12:98:4c:27:a6:73:f1:2d:9f:ca:7f:78:cd:e2:7b: d2:c0:21:87:81:c6:c1:cd:64:74:0e:86:d1:dd:31:c0:aa:5f: 07:80:d5:c3:24:86:99:38:b4:a1:8c:49:f4:50:71:fe:74:8f: 25:7a:5f:67:0d:f1:c0:39:72:30:6f:61:f2:a8:84:8f:be:64: cd:ac:76:ff:21:1b:6b:ea:f6:64:6f:52:90:02:e3:e2:0f:c6: 40:ac:bc:83:ee:9c:ed:61:c5:10:0f:09:f0:1b:04:cb:ba:23: 63:14:88:27:67:99:fa:ff:4f:5e:26:24:92:fa:9f:04:56:b2: ee:31:9a:46:a5:0b:dd:cf:e5:33:54:3b:23:3a:e8:dd:8b:d6: 8a:e3:3e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD154KHTNynhwZd8gi9nXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZGFjMTUwODQ4MzI1ZjBmNzI1ODcwNjRmOGFiYTM3YzVm ZjM3OTAwHhcNMjYwMjA5MTEwMDI5WhcNMjYwMjEwMTEwMDI5WjAzMTEwLwYDVQQD EygxN2ExZGYyMzFjNzJjNWJlYTM1ZTAxNDU3ODI5MTY4OGNhNDE2YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjkTd/DwksnVDdT2PxGTYBtvms3D YXlI/Ceq5vySvbn763T1PXTCvmjTSoye+wzCIbNYIFGSLnrSK+CTksgz6uviKeRV yrDov/9K5LpP13ymSNUAANL8Mo0LEdwyrH0gaDa45S4zrLTHWN9RunXDT18ijMQT +h0XP+JdmE7p58El2LLK845nkl4ey+BUwTqIQWmux6cWgWJfdyPImExkioI/X/Jj InqYKw2hMmIKItBsSxywUNkiYNq2yoj4dTSHAMqYYHuR5LMpwA4Oh+PYfoRnnm+n S2lxomq7CVnxhk3sdf1ryR8vqTzgfXnw7f5RE+vMRs0lVPKUQ8HYDcbaUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeh3yMccsW+o14BRXgpFojKQWwHMB8GA1UdIwQY MBaAFOLawVCEgyXw9yWHBk+KujfF/zeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUt M2I5ZTNjNTNiYWIwLzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUtM2I5ZTNjNTNiYWIw LzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKNbYVre 5Jl6R8AaTiix/xhp83dWmvd9bVT/KLb8VEnEP92LRlO0s8je5wJ8FoQHu5vYhAWV r5aSPObeLU8Iip+cSlwF4+0VvUWfCMUZDj45aqY7+Rb9DjC+UyjIsGO3GqmAqEda K7zEN5QwyZlEEphMJ6Zz8S2fyn94zeJ70sAhh4HGwc1kdA6G0d0xwKpfB4DVwySG mTi0oYxJ9FBx/nSPJXpfZw3xwDlyMG9h8qiEj75kzax2/yEba+r2ZG9SkALj4g/G QKy8g+6c7WHFEA8J8BsEy7ojYxSIJ2eZ+v9PXiYkkvqfBFay7jGaRqUL3c/lM1Q7 Izro3YvWiuM+NA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:15 2026 by rpki-client