This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json) Hash identifier: /YQTt0sR682aiIZOyFYnkudxjjNA6jMVykG3BlUhHM8= Subject key identifier: C8:5F:91:18:70:07:1B:68:E8:FE:5A:48:85:FF:DD:54:CD:9B:F1:6E Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a Certificate serial: 019C41A1988C3D67FDCBBFDDC497221D06CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft Manifest number: 14D5 Signing time: Mon 09 Feb 2026 09:00:35 +0000 Manifest this update: Mon 09 Feb 2026 09:00:35 +0000 Manifest next update: Tue 10 Feb 2026 09:00:35 +0000 Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: ydZ5wUjsXrPfFByG5IB7on4D9HzF1oer1L6uT56NvMc=) 2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:98:8c:3d:67:fd:cb:bf:dd:c4:97:22:1d:06:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e017872403452f3e008ab798047342db24edb35a Validity Not Before: Feb 9 09:00:35 2026 GMT Not After : Feb 10 09:00:35 2026 GMT Subject: CN=c85f911870071b68e8fe5a4885ffdd54cd9bf16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:d3:52:26:aa:3a:39:2d:69:2b:e8:17:20: 8f:4a:40:39:b4:dd:4f:e7:f2:d9:3a:51:05:a9:c4: 49:62:1f:5d:d7:e7:21:0a:2e:d5:92:e3:dc:24:aa: ec:85:8c:6d:c7:99:f9:02:86:8f:56:68:51:a1:a9: 80:20:15:16:b8:10:64:58:4c:94:4a:ce:aa:80:20: 8d:cb:01:6e:bd:f9:1f:08:5a:32:43:88:cc:4e:42: 55:a0:db:65:19:78:67:d3:91:d5:8d:ad:24:f4:81: 0f:ef:75:fc:1f:99:8b:3d:fa:74:a8:23:04:fe:09: 73:11:1c:00:01:b1:17:ca:ea:db:de:c0:52:75:0e: 22:9d:7c:f1:70:d2:48:9b:a3:b5:09:ac:73:b4:13: 56:89:36:13:b8:0c:51:1d:63:f9:39:bd:11:a7:53: 6d:f4:6c:03:56:cd:d9:7e:cc:b4:eb:ef:f4:9e:b9: 53:d8:12:79:24:f0:88:cc:99:6e:8c:d9:10:58:28: 49:32:fa:30:ec:c7:a5:55:ad:8a:a7:86:a6:8b:e7: e5:39:fe:34:cd:d3:82:2f:03:28:9a:c1:d3:9f:7e: a7:85:72:2d:58:52:06:26:13:87:74:6c:02:e3:61: d6:d8:75:61:22:cb:00:e5:69:9f:af:a9:af:23:2e: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5F:91:18:70:07:1B:68:E8:FE:5A:48:85:FF:DD:54:CD:9B:F1:6E X509v3 Authority Key Identifier: keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:1b:99:42:f4:e8:f2:dc:92:b1:d4:b0:1e:71:ab:6a:c4: 03:e2:0b:b0:d2:ab:87:13:f2:23:ed:db:27:f0:e9:bc:20:ed: 4a:15:28:26:69:92:bf:6d:82:01:df:eb:27:ab:66:4a:fc:45: 25:2d:9f:6d:5d:49:06:01:19:c0:94:22:29:1d:91:60:e4:f5: ef:96:b2:85:e5:12:91:56:ba:af:25:c5:5a:f5:1e:ed:2b:62: d3:26:62:d7:fd:7d:8a:7b:af:f2:7d:57:12:71:4c:d9:0a:6f: 94:da:30:41:8a:9a:16:f1:be:17:e6:e7:7a:0b:e0:ee:ff:be: 46:86:28:af:7e:30:46:f6:10:f5:6c:31:54:e4:e2:e8:39:ab: 87:80:dc:55:d9:61:03:45:fa:4c:d9:bf:79:f3:44:2c:13:04: 55:0b:25:49:c1:ba:88:e0:39:e5:79:09:71:40:d0:2d:4f:fe: a6:62:58:2d:7f:f0:3f:8f:81:a0:f8:a0:95:e6:a3:78:07:0e: 0c:1c:89:24:be:d7:61:76:d4:15:51:88:06:43:72:9e:23:48: d3:cf:47:03:b9:82:a6:c4:b6:8a:47:02:5a:51:e2:26:38:4f: ec:cf:fc:9b:52:8c:9a:b2:0b:61:ca:26:45:62:a1:1e:2f:84: 98:3a:f8:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZiMPWf9y7/dxJciHQbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl ZGIzNWEwHhcNMjYwMjA5MDkwMDM1WhcNMjYwMjEwMDkwMDM1WjAzMTEwLwYDVQQD EyhjODVmOTExODcwMDcxYjY4ZThmZTVhNDg4NWZmZGQ1NGNkOWJmMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEfTUiaqOjktaSvoFyCPSkA5tN1P 5/LZOlEFqcRJYh9d1+chCi7VkuPcJKrshYxtx5n5AoaPVmhRoamAIBUWuBBkWEyU Ss6qgCCNywFuvfkfCFoyQ4jMTkJVoNtlGXhn05HVja0k9IEP73X8H5mLPfp0qCME /glzERwAAbEXyurb3sBSdQ4inXzxcNJIm6O1CaxztBNWiTYTuAxRHWP5Ob0Rp1Nt 9GwDVs3Zfsy06+/0nrlT2BJ5JPCIzJlujNkQWChJMvow7MelVa2Kp4ami+flOf40 zdOCLwMomsHTn36nhXItWFIGJhOHdGwC42HW2HVhIssA5Wmfr6mvIy5u0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhfkRhwBxto6P5aSIX/3VTNm/FuMB8GA1UdIwQY MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt ODc3ZTBlODY2YjI0LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0 LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemUbmUL0 6PLckrHUsB5xq2rEA+ILsNKrhxPyI+3bJ/DpvCDtShUoJmmSv22CAd/rJ6tmSvxF JS2fbV1JBgEZwJQiKR2RYOT175ayheUSkVa6ryXFWvUe7Sti0yZi1/19inuv8n1X EnFM2QpvlNowQYqaFvG+F+bnegvg7v++RoYor34wRvYQ9WwxVOTi6Dmrh4DcVdlh A0X6TNm/efNELBMEVQslScG6iOA55XkJcUDQLU/+pmJYLX/wP4+BoPigleajeAcO DByJJL7XYXbUFVGIBkNyniNI089HA7mCpsS2ikcCWlHiJjhP7M/8m1KMmrILYcom RWKhHi+EmDr46Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:11 2026 by rpki-client