This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json) Hash identifier: yY6hjI431jTe+s2XdYm5SQt9yqPSmx+DSR/FeWvWU0A= Subject key identifier: 3A:39:20:78:9C:D2:E8:4E:03:41:78:9F:4C:37:B2:42:32:90:D9:F7 Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f Certificate serial: 019C4358F7EB066C1D89D62E1848F6307C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft Manifest number: 0D98 Signing time: Mon 09 Feb 2026 17:00:29 +0000 Manifest this update: Mon 09 Feb 2026 17:00:29 +0000 Manifest next update: Tue 10 Feb 2026 17:00:29 +0000 Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: j4Slrn4SjNu9EWAgh28ME9LNXXZQGSBdsP7vkKYBaGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:f7:eb:06:6c:1d:89:d6:2e:18:48:f6:30:7c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f Validity Not Before: Feb 9 17:00:29 2026 GMT Not After : Feb 10 17:00:29 2026 GMT Subject: CN=3a3920789cd2e84e0341789f4c37b2423290d9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:3d:8b:4a:ea:14:29:60:e7:6a:6a:64:db: ef:1d:b5:e0:cf:c3:f3:89:05:0b:6f:ae:f7:ec:7d: 8a:3f:27:4c:99:6c:0d:b8:b1:74:9b:72:f1:5b:b4: 92:9f:30:d6:c8:7d:97:c9:46:f4:00:ca:85:98:d7: 73:b2:c3:94:1d:9a:b2:b9:0b:e9:a7:b4:56:cc:aa: 3a:80:6a:38:6f:02:c6:c5:a7:1a:37:18:65:e7:94: 9f:49:e8:25:57:22:56:df:ed:54:f9:f3:e0:41:02: f2:3d:b6:08:f9:04:3d:2b:e4:23:20:ed:61:86:59: ed:04:e0:62:e3:87:12:47:02:b3:88:39:fc:e8:a8: 1f:15:a1:26:c0:0d:2a:c2:26:87:4a:6b:cb:6c:cb: c4:7c:bf:98:27:a9:7b:55:f0:6a:aa:e1:30:0e:45: 82:ca:d4:ac:c7:3a:65:8a:d0:d6:25:c2:cc:40:08: 48:5e:43:ff:22:fc:51:79:e9:14:d1:6a:b0:4b:6d: c5:6c:70:6a:66:1b:a3:d7:b8:72:1f:ca:b9:d2:6a: 3b:48:39:93:4e:0c:b4:db:c0:a8:fb:cd:6d:0c:9c: 2e:fd:21:6f:bb:32:9e:31:ee:a0:c6:33:2f:79:9b: 35:e4:68:4c:18:49:52:b0:91:b6:6d:a6:23:7d:db: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:20:78:9C:D2:E8:4E:03:41:78:9F:4C:37:B2:42:32:90:D9:F7 X509v3 Authority Key Identifier: keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5a:66:ef:89:9c:28:30:cf:f6:9e:79:f3:4d:6c:9f:44:7a: 0b:5e:05:39:65:92:9f:28:26:ab:fd:b1:19:4c:f1:94:cf:ba: 1d:e0:4c:bd:04:fe:46:87:40:b7:ba:8a:12:8a:e5:02:2e:1a: 6a:16:3a:83:8c:a1:c7:de:2e:60:41:f1:7a:21:4d:18:b4:65: d4:f4:1e:cb:c6:71:96:66:01:03:9f:b9:07:05:cd:63:81:23: 9f:ab:9d:7f:c1:8a:13:d3:06:f1:5e:2e:39:cc:6b:2a:0b:2d: 8b:b9:64:94:db:e7:b2:30:51:07:cc:b5:52:bc:70:26:63:f4: 32:23:8b:6e:c5:8a:0e:62:75:4c:db:53:27:1a:41:b0:af:4f: bc:74:81:60:e4:ca:50:82:3d:32:89:23:da:6c:4a:54:30:66: 6e:6e:ad:43:45:e7:8a:52:b2:14:08:3c:3a:94:c7:8e:6e:0f: 72:b2:5d:48:7e:05:b2:2d:ae:5b:6c:2a:bb:c7:f2:a6:04:4b: 91:98:34:6a:fd:fc:47:6b:01:1e:d8:f4:57:63:fe:eb:1e:02: 08:01:02:38:b1:84:2b:8b:61:73:3f:7c:0e:cf:94:cd:ab:7f: 2b:e1:9e:c1:64:6d:37:7e:6c:bb:d7:cf:c6:3c:24:fe:1f:aa: 66:64:9c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWPfrBmwdidYuGEj2MHwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmZWM0OTA2YWI4OTAyMGExMTZiNjg0NDZjY2VhZjZj YzUwMGYwHhcNMjYwMjA5MTcwMDI5WhcNMjYwMjEwMTcwMDI5WjAzMTEwLwYDVQQD EygzYTM5MjA3ODljZDJlODRlMDM0MTc4OWY0YzM3YjI0MjMyOTBkOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteM9i0rqFClg52pqZNvvHbXgz8Pz iQULb6737H2KPydMmWwNuLF0m3LxW7SSnzDWyH2XyUb0AMqFmNdzssOUHZqyuQvp p7RWzKo6gGo4bwLGxacaNxhl55SfSeglVyJW3+1U+fPgQQLyPbYI+QQ9K+QjIO1h hlntBOBi44cSRwKziDn86KgfFaEmwA0qwiaHSmvLbMvEfL+YJ6l7VfBqquEwDkWC ytSsxzplitDWJcLMQAhIXkP/IvxReekU0WqwS23FbHBqZhuj17hyH8q50mo7SDmT Tgy028Co+81tDJwu/SFvuzKeMe6gxjMveZs15GhMGElSsJG2baYjfdsIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo5IHic0uhOA0F4n0w3skIykNn3MB8GA1UdIwQY MBaAFGuE/sSQariQIKEWtoRGzOr2zFAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgt ZDFkOTQ3ZTczMzA5LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgtZDFkOTQ3ZTczMzA5 LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFpm74mc KDDP9p55801sn0R6C14FOWWSnygmq/2xGUzxlM+6HeBMvQT+RodAt7qKEorlAi4a ahY6g4yhx94uYEHxeiFNGLRl1PQey8ZxlmYBA5+5BwXNY4Ejn6udf8GKE9MG8V4u OcxrKgsti7lklNvnsjBRB8y1UrxwJmP0MiOLbsWKDmJ1TNtTJxpBsK9PvHSBYOTK UII9Mokj2mxKVDBmbm6tQ0XnilKyFAg8OpTHjm4PcrJdSH4Fsi2uW2wqu8fypgRL kZg0av38R2sBHtj0V2P+6x4CCAECOLGEK4thcz98Ds+Uzat/K+GewWRtN35su9fP xjwk/h+qZmScDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:52 2026 by rpki-client