This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft File: q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json) Hash identifier: HDPHRreh2SUGYtWjwJAmKCJ7XouXxv+/ktCvj1OpyL0= Subject key identifier: 49:DD:3E:48:66:2A:29:8A:EB:90:58:66:D4:38:04:E8:0F:14:9F:3F Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51 Certificate issuer: /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451 Certificate serial: 019C43FDAF1BDB1909EC7EC7FFA03F9B8935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft Manifest number: 0E04 Signing time: Mon 09 Feb 2026 20:00:24 +0000 Manifest this update: Mon 09 Feb 2026 20:00:24 +0000 Manifest next update: Tue 10 Feb 2026 20:00:24 +0000 Files and hashes: 1: AlG308eUrdACgBL2wLNqtHFgCfE.roa (hash: ln/5TqimsvosBxc2NaYRg6677es5mps+ZXNF6/n2oDg=) 2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: i0I3VfZDSecWp0RAfTfzksWC7xJoAzJtlAz4/AYuQqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:af:1b:db:19:09:ec:7e:c7:ff:a0:3f:9b:89:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451 Validity Not Before: Feb 9 20:00:24 2026 GMT Not After : Feb 10 20:00:24 2026 GMT Subject: CN=49dd3e48662a298aeb905866d43804e80f149f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:6b:8c:7b:a7:e7:09:0b:16:79:b2:65:37: 35:71:cf:0f:83:2e:bd:4f:04:10:40:d1:de:9a:17: 9d:ad:2e:2a:4c:0b:d3:a2:68:53:2e:83:75:d7:1a: 79:f7:d7:0b:5b:22:f0:99:91:d2:ca:9d:eb:da:df: 81:7f:e8:e5:53:e9:62:7a:0c:a5:59:f6:96:3d:93: 6f:a8:fe:b5:95:41:c4:21:37:fe:6c:4d:87:ee:df: 2a:96:46:8d:d1:b9:11:54:5d:ff:e8:21:30:c2:ab: 4e:5a:67:9a:1d:89:b5:96:e2:cc:45:83:d8:fe:1a: a1:a2:b5:38:01:db:69:24:a3:ce:84:1b:d7:bf:24: d1:bb:4d:88:fc:44:04:cf:b8:6c:ec:c6:81:80:6e: 29:c8:fe:ef:9a:4a:22:8c:b4:88:ce:3b:92:f7:dc: c2:00:02:56:ad:c3:ff:8e:a6:19:9d:7d:53:e7:20: 9b:06:4e:90:08:a6:16:7c:a6:35:95:b6:62:e7:75: ae:2c:08:99:ec:b5:46:7d:26:8d:14:1e:d3:9e:36: 7e:72:d4:38:dc:df:33:c1:3d:7a:91:a6:35:44:52: 53:d0:9c:d9:bf:1a:34:df:54:c7:f1:5d:2b:e4:bb: 6d:03:91:62:7a:3c:c5:0c:ff:e2:fc:c8:15:6f:7d: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:3E:48:66:2A:29:8A:EB:90:58:66:D4:38:04:E8:0F:14:9F:3F X509v3 Authority Key Identifier: keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ef:e2:27:eb:e1:22:69:cc:9e:7c:8a:7a:b2:7c:ac:40:96: 01:57:2b:6a:f9:17:f8:29:54:4f:f0:82:57:7a:6c:f1:e1:12: ca:30:d0:1c:6d:48:aa:b9:7f:3d:c5:6b:8c:d6:a0:7e:11:d1: 88:76:c7:38:20:78:6d:7d:dd:38:2f:09:0f:5b:c3:09:d9:14: 98:f3:e3:50:53:fd:89:40:54:cd:39:e0:9a:71:bb:fa:c9:55: c5:59:01:f2:cc:1e:a0:1a:fe:c5:54:10:33:50:ac:86:a3:5a: df:a6:1e:ff:44:22:99:e1:2c:e8:70:03:42:03:b9:ba:a0:f6: ba:c8:9c:97:53:44:94:9b:e8:d2:8a:18:ab:67:da:93:c0:8e: ef:1e:b4:de:02:74:5b:71:e8:8c:ec:50:77:b5:61:80:87:26: 08:c3:52:e3:d4:27:86:ff:eb:45:17:5a:55:39:9d:e3:6b:2b: 62:84:49:48:a6:0b:82:e3:37:15:3d:9d:b9:27:91:46:37:7d: df:41:47:2f:fc:50:8c:0c:6d:a3:13:4c:28:87:9c:50:be:63: d9:ab:af:30:6f:23:6e:10:e6:d5:e7:b9:0e:5b:20:a6:86:0a: b1:b7:cb:28:28:9a:2d:7b:fd:24:85:b8:ea:6d:35:26:c2:4e: f8:16:ee:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/a8b2xkJ7H7H/6A/m4k1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODUyMGVjODNlMzBlYjc5MzhiODAwMmY0NzBmMGQxYzUw NWM0NTEwHhcNMjYwMjA5MjAwMDI0WhcNMjYwMjEwMjAwMDI0WjAzMTEwLwYDVQQD Eyg0OWRkM2U0ODY2MmEyOThhZWI5MDU4NjZkNDM4MDRlODBmMTQ5ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/ZrjHun5wkLFnmyZTc1cc8Pgy69 TwQQQNHemhedrS4qTAvTomhTLoN11xp599cLWyLwmZHSyp3r2t+Bf+jlU+liegyl WfaWPZNvqP61lUHEITf+bE2H7t8qlkaN0bkRVF3/6CEwwqtOWmeaHYm1luLMRYPY /hqhorU4AdtpJKPOhBvXvyTRu02I/EQEz7hs7MaBgG4pyP7vmkoijLSIzjuS99zC AAJWrcP/jqYZnX1T5yCbBk6QCKYWfKY1lbZi53WuLAiZ7LVGfSaNFB7TnjZ+ctQ4 3N8zwT16kaY1RFJT0JzZvxo031TH8V0r5LttA5FiejzFDP/i/MgVb309LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEndPkhmKimK65BYZtQ4BOgPFJ8/MB8GA1UdIwQY MBaAFKuFIOyD4w63k4uAAvRw8NHFBcRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRVZzdJUGpEcmVUaTRBQzlIRHcwY1VGeEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mYWVhNjUtOTBiNC00NmRiLWJlZWYt ODRiNDczYjllYmNkLzEvcTRVZzdJUGpEcmVUaTRBQzlIRHcwY1VGeEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mYWVhNjUtOTBiNC00NmRiLWJlZWYtODRiNDczYjllYmNk LzEvcTRVZzdJUGpEcmVUaTRBQzlIRHcwY1VGeEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdO/iJ+vh ImnMnnyKerJ8rECWAVcravkX+ClUT/CCV3ps8eESyjDQHG1Iqrl/PcVrjNagfhHR iHbHOCB4bX3dOC8JD1vDCdkUmPPjUFP9iUBUzTngmnG7+slVxVkB8sweoBr+xVQQ M1CshqNa36Ye/0QimeEs6HADQgO5uqD2usicl1NElJvo0ooYq2fak8CO7x603gJ0 W3HojOxQd7VhgIcmCMNS49Qnhv/rRRdaVTmd42srYoRJSKYLguM3FT2duSeRRjd9 30FHL/xQjAxtoxNMKIecUL5j2auvMG8jbhDm1ee5DlsgpoYKsbfLKCiaLXv9JIW4 6m01JsJO+Bbuqg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:26 2026 by rpki-client