This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json) Hash identifier: CcFfEoyE29extNVSqit8+tVmkQM7ToXbkMOkYFTgBts= Subject key identifier: 86:29:EA:C2:6C:C1:E4:3B:34:2A:3B:95:3F:A0:87:01:19:23:66:2A Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Certificate serial: 019C43224BFEC38A82570FD22B4180C2DC86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft Manifest number: 0A1F Signing time: Mon 09 Feb 2026 16:00:46 +0000 Manifest this update: Mon 09 Feb 2026 16:00:46 +0000 Manifest next update: Tue 10 Feb 2026 16:00:46 +0000 Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: aFdLDnryfFkOmzPsZkO3gDjrSRf4MY6CXccvXIslfuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4b:fe:c3:8a:82:57:0f:d2:2b:41:80:c2:dc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Validity Not Before: Feb 9 16:00:46 2026 GMT Not After : Feb 10 16:00:46 2026 GMT Subject: CN=8629eac26cc1e43b342a3b953fa087011923662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:2b:4b:d7:55:c3:3a:26:44:d6:f3:67:6b: d3:de:db:59:fc:c0:50:da:53:75:98:35:3a:1a:d2: b3:f5:26:4e:49:87:fe:87:8b:83:b0:c6:4f:53:04: e5:02:31:31:57:2d:78:26:c1:c6:be:89:bf:cb:e5: ee:69:6c:3a:30:5e:d3:a1:1a:ad:c0:af:df:18:f6: 1b:ca:b3:a1:8e:9f:eb:22:2b:fd:da:53:e9:12:00: 7f:57:1a:8e:8c:e3:ab:f8:02:02:e7:04:e7:7e:8c: 06:c2:f2:36:72:ca:cb:b7:ec:26:52:c5:95:ba:04: 28:da:79:4d:02:47:c1:a6:b6:48:b8:7a:14:0e:2e: db:fc:df:21:29:f0:12:f9:37:9c:06:6a:24:88:9d: 51:d7:77:a9:81:f0:72:59:2b:c6:6f:7a:f4:e9:27: fb:99:70:bf:63:7e:d9:73:43:5a:cb:a2:75:4d:55: 83:eb:72:18:01:02:ca:c7:41:47:90:ed:64:2f:97: 26:ff:7b:96:39:56:d1:91:3c:41:95:fe:3f:aa:c3: 32:60:b9:da:31:94:cc:57:79:ba:d1:59:50:d2:2b: ed:be:07:b1:b5:c5:e8:33:99:6c:93:1e:34:a0:11: 53:f1:1b:05:58:62:84:82:23:e2:61:d0:5f:1d:58: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:29:EA:C2:6C:C1:E4:3B:34:2A:3B:95:3F:A0:87:01:19:23:66:2A X509v3 Authority Key Identifier: keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fa:e7:98:95:ed:63:a0:4b:9e:72:ea:9b:98:70:45:7c:af: ff:6b:1b:14:3e:d5:63:6a:10:41:11:53:4c:d7:c5:dc:26:6e: c9:01:b8:4e:ab:33:f4:62:db:80:be:88:ac:61:04:56:19:39: a4:42:af:54:ec:61:2a:bc:ed:25:92:95:fb:2c:c1:51:86:09: 2a:45:af:de:b2:ee:0b:5f:46:96:9c:91:4e:07:93:c1:3d:7b: 9a:64:ee:6d:23:80:d8:ef:83:0e:e1:81:0a:8f:09:ea:d0:37: a0:c7:38:6e:ca:4a:a1:c3:2b:c0:6f:35:16:3e:fb:03:35:ef: 42:20:8d:34:32:58:b2:2c:15:cd:ff:56:52:41:74:50:b1:8e: 84:bf:b2:1c:f5:cf:59:39:a8:35:16:60:9c:32:7b:b4:4a:04: 4d:3f:7a:d0:28:64:9d:3a:96:d3:43:b4:88:f8:0d:44:cc:05: 58:c7:9a:27:0b:00:e7:e4:4f:ee:c9:dd:49:1e:ee:58:87:d1: d9:20:b9:d8:4b:8a:f3:bf:3c:83:f0:d4:fe:d9:f2:e6:92:0b: 61:e2:11:c3:19:47:42:bb:a3:57:2b:80:21:7d:46:fd:22:b6: 77:fd:cd:40:7b:11:9a:80:f0:2a:12:25:b5:de:cd:53:d7:51: 59:20:53:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkv+w4qCVw/SK0GAwtyGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx N2FmMjYwHhcNMjYwMjA5MTYwMDQ2WhcNMjYwMjEwMTYwMDQ2WjAzMTEwLwYDVQQD Eyg4NjI5ZWFjMjZjYzFlNDNiMzQyYTNiOTUzZmEwODcwMTE5MjM2NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K0rS9dVwzomRNbzZ2vT3ttZ/MBQ 2lN1mDU6GtKz9SZOSYf+h4uDsMZPUwTlAjExVy14JsHGvom/y+XuaWw6MF7ToRqt wK/fGPYbyrOhjp/rIiv92lPpEgB/VxqOjOOr+AIC5wTnfowGwvI2csrLt+wmUsWV ugQo2nlNAkfBprZIuHoUDi7b/N8hKfAS+TecBmokiJ1R13epgfByWSvGb3r06Sf7 mXC/Y37Zc0Nay6J1TVWD63IYAQLKx0FHkO1kL5cm/3uWOVbRkTxBlf4/qsMyYLna MZTMV3m60VlQ0ivtvgextcXoM5lskx40oBFT8RsFWGKEgiPiYdBfHVjM0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYp6sJsweQ7NCo7lT+ghwEZI2YqMB8GA1UdIwQY MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0 LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPrnmJXt Y6BLnnLqm5hwRXyv/2sbFD7VY2oQQRFTTNfF3CZuyQG4Tqsz9GLbgL6IrGEEVhk5 pEKvVOxhKrztJZKV+yzBUYYJKkWv3rLuC19GlpyRTgeTwT17mmTubSOA2O+DDuGB Co8J6tA3oMc4bspKocMrwG81Fj77AzXvQiCNNDJYsiwVzf9WUkF0ULGOhL+yHPXP WTmoNRZgnDJ7tEoETT960ChknTqW00O0iPgNRMwFWMeaJwsA5+RP7sndSR7uWIfR 2SC52EuK8788g/DU/tny5pILYeIRwxlHQrujVyuAIX1G/SK2d/3NQHsRmoDwKhIl td7NU9dRWSBTxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:38 2026 by rpki-client