This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json) Hash identifier: /aFtvod8Z3mGTQKxmoRn6AmBvV7uRgG4v9WeQuGil1s= Subject key identifier: 3D:94:97:6D:DC:F6:54:6A:B1:C5:13:D1:41:BC:C0:14:9B:67:EA:0B Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Certificate serial: 019C42EB489F276B90B97D13558BFD89E125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft Manifest number: 035B Signing time: Mon 09 Feb 2026 15:00:41 +0000 Manifest this update: Mon 09 Feb 2026 15:00:41 +0000 Manifest next update: Tue 10 Feb 2026 15:00:41 +0000 Files and hashes: 1: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=) 2: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: N2c9KMR4M5jJf1+dx9NvXTfV/WQr288KK0fTMyoaIqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:48:9f:27:6b:90:b9:7d:13:55:8b:fd:89:e1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Validity Not Before: Feb 9 15:00:41 2026 GMT Not After : Feb 10 15:00:41 2026 GMT Subject: CN=3d94976ddcf6546ab1c513d141bcc0149b67ea0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e6:cd:b1:f9:f0:f1:8d:82:1a:bb:7c:68:cf: 5f:cd:3a:7a:0f:b6:d1:99:74:b9:d4:e7:f1:8d:11: 36:85:4e:69:c7:a2:9b:90:8b:a9:c9:b6:5f:ca:00: 13:89:6f:b9:ce:9b:20:85:1d:aa:60:b7:19:bc:c1: 8b:7b:29:0b:4e:85:cc:89:ea:0d:55:24:9e:e6:d4: 53:d8:38:8f:39:c7:cb:0e:d3:e3:66:38:82:62:b9: 1c:14:ee:25:7f:17:24:0e:09:5a:25:82:91:86:d0: 9d:0e:18:51:a4:db:b9:10:02:93:a5:11:3c:c5:06: b7:2f:a3:4a:dd:d3:a5:0f:85:7b:dc:54:3f:ae:21: 7f:48:92:cb:76:77:b9:0f:a7:9d:7d:98:84:1a:2a: 9e:a0:7c:93:c4:b6:11:49:c6:3a:41:dd:e1:25:24: d9:87:6c:1c:37:08:ce:6d:52:f7:d6:ab:70:a2:8c: 2b:16:21:0f:e0:79:ab:a4:7d:22:95:87:b9:06:24: fe:f3:30:ef:02:19:32:e8:34:ba:75:1e:32:f0:de: 80:a5:fe:33:b8:d3:3f:05:15:bb:45:e3:8b:60:c6: db:63:ed:47:58:b3:ce:f5:00:d7:fc:e3:85:16:58: 79:25:e9:71:2e:da:1f:75:98:40:a9:93:ce:93:95: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:97:6D:DC:F6:54:6A:B1:C5:13:D1:41:BC:C0:14:9B:67:EA:0B X509v3 Authority Key Identifier: keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:bd:c6:16:13:62:ef:5d:49:4c:2e:51:7f:04:65:a5:2e:50: fa:26:6f:7a:fa:d0:5a:42:81:e9:d9:c8:9b:d1:10:3c:ad:c2: 58:e2:61:37:2e:06:5e:7c:c6:d5:9e:70:2b:b9:2d:9a:21:84: c6:6f:b3:44:8e:75:6f:10:20:2a:a8:66:45:9d:94:e1:98:46: ca:6f:5d:29:86:16:bb:87:7d:ca:ff:f4:c3:4d:8d:5f:1b:b7: 36:b0:bb:ea:52:73:b1:f9:28:ad:e7:0d:10:2c:84:17:12:ab: dd:b9:ac:1f:69:b9:82:c3:bd:a8:28:ae:d9:90:78:a1:24:a1: c7:ed:ac:db:d0:fe:f6:f4:17:d3:b7:78:05:cb:78:b2:cd:8c: 8b:ed:df:07:de:7e:47:42:19:4e:6b:2d:9c:e9:0f:a7:66:20: 04:ad:9b:c5:a4:25:fb:66:70:a3:2d:4e:f0:a1:9d:45:9f:48: 2d:1a:f0:0b:b5:53:24:5a:75:e9:1a:c1:4a:52:58:10:5e:c3: 55:83:14:93:2d:85:8d:a2:2b:78:24:b2:5e:b8:00:b3:1c:c7: cf:14:3a:c5:30:07:03:ec:4c:99:61:44:8e:5f:58:ca:2b:1b: 54:d3:8a:47:d8:90:38:2f:f8:24:2a:c7:ea:8c:3b:0c:83:1f: 55:57:86:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC60ifJ2uQuX0TVYv9ieElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODQ2NzRlYTAwN2ExMjAzMGFjOGQyYmU1NjBkYjIxZjRm YzBiOTkwHhcNMjYwMjA5MTUwMDQxWhcNMjYwMjEwMTUwMDQxWjAzMTEwLwYDVQQD EygzZDk0OTc2ZGRjZjY1NDZhYjFjNTEzZDE0MWJjYzAxNDliNjdlYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+bNsfnw8Y2CGrt8aM9fzTp6D7bR mXS51OfxjRE2hU5px6KbkIupybZfygATiW+5zpsghR2qYLcZvMGLeykLToXMieoN VSSe5tRT2DiPOcfLDtPjZjiCYrkcFO4lfxckDglaJYKRhtCdDhhRpNu5EAKTpRE8 xQa3L6NK3dOlD4V73FQ/riF/SJLLdne5D6edfZiEGiqeoHyTxLYRScY6Qd3hJSTZ h2wcNwjObVL31qtwoowrFiEP4HmrpH0ilYe5BiT+8zDvAhky6DS6dR4y8N6Apf4z uNM/BRW7ReOLYMbbY+1HWLPO9QDX/OOFFlh5JelxLtofdZhAqZPOk5VH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2Ul23c9lRqscUT0UG8wBSbZ+oLMB8GA1UdIwQY MBaAFCOEZ06gB6EgMKyNK+Vg2yH0/AuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUt YzhmNTZjMTIyZmVjLzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUtYzhmNTZjMTIyZmVj LzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxL3GFhNi 711JTC5RfwRlpS5Q+iZvevrQWkKB6dnIm9EQPK3CWOJhNy4GXnzG1Z5wK7ktmiGE xm+zRI51bxAgKqhmRZ2U4ZhGym9dKYYWu4d9yv/0w02NXxu3NrC76lJzsfkorecN ECyEFxKr3bmsH2m5gsO9qCiu2ZB4oSShx+2s29D+9vQX07d4Bct4ss2Mi+3fB95+ R0IZTmstnOkPp2YgBK2bxaQl+2Zwoy1O8KGdRZ9ILRrwC7VTJFp16RrBSlJYEF7D VYMUky2FjaIreCSyXrgAsxzHzxQ6xTAHA+xMmWFEjl9YyisbVNOKR9iQOC/4JCrH 6ow7DIMfVVeGLw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:17 2026 by rpki-client