This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json) Hash identifier: gXoRjI8rfkcsWidMLAbM2RCl/cmKSaAVJkE4JDazRqQ= Subject key identifier: 9C:08:C8:02:E6:30:AD:E9:23:F4:C7:F5:BB:A6:82:B4:E9:30:E5:71 Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Certificate serial: 019C4246A2B5FC74B574297E6FB4FD5D99FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft Manifest number: 0E0E Signing time: Mon 09 Feb 2026 12:00:51 +0000 Manifest this update: Mon 09 Feb 2026 12:00:51 +0000 Manifest next update: Tue 10 Feb 2026 12:00:51 +0000 Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: jwTzmJFS4wy2C/3NZOpYGEy8xntUcQYGa9G4U/WGtkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a2:b5:fc:74:b5:74:29:7e:6f:b4:fd:5d:99:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Validity Not Before: Feb 9 12:00:51 2026 GMT Not After : Feb 10 12:00:51 2026 GMT Subject: CN=9c08c802e630ade923f4c7f5bba682b4e930e571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:35:07:0e:13:50:df:17:f3:21:90:6f:21: 41:4b:00:c0:2a:e5:b5:9b:50:82:15:ff:4d:2a:59: 1a:0b:f9:30:ff:31:9a:6a:3f:76:f9:88:7a:9a:d5: 82:90:88:d5:72:3f:23:ac:8e:9c:1b:92:2b:ba:aa: 2b:d0:49:76:9f:0d:80:9c:b0:2c:c6:a1:16:82:d9: a4:38:bd:dc:9e:6d:64:96:21:d8:d3:b2:5a:81:3e: cc:f4:2f:50:d5:92:45:60:3c:93:73:16:4a:ca:f0: 3a:28:1b:23:b9:b3:1c:48:77:80:5f:30:42:26:77: 9a:fc:33:a2:b8:43:a9:24:42:60:7b:d9:28:a1:d1: 17:08:29:83:b3:aa:88:3e:24:c2:87:90:24:4d:f1: c6:6e:d6:ab:e8:9e:e3:4c:fe:66:8f:28:62:af:a8: 04:84:b5:ab:c2:f7:e7:3f:34:41:3c:c0:46:a6:e4: ed:33:ac:c7:0b:fe:d2:93:71:a2:0f:9b:1a:c3:6d: b1:bd:08:61:f8:a0:97:2f:c6:3a:20:40:82:0b:9f: 91:a2:0c:54:50:56:39:77:34:5a:bd:5d:ce:f7:59: 44:0d:d7:36:15:7b:f8:82:5f:15:66:1b:e3:3a:69: b6:5c:a9:18:fb:34:2b:86:5f:13:f9:54:2d:65:9c: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:08:C8:02:E6:30:AD:E9:23:F4:C7:F5:BB:A6:82:B4:E9:30:E5:71 X509v3 Authority Key Identifier: keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3b:d0:00:cd:47:64:99:6f:85:fe:16:54:34:07:23:e7:15: 86:35:b1:c5:7a:d6:32:d5:7e:f0:88:3e:53:41:27:4a:31:31: 5f:c3:0d:9a:c5:cd:d4:7d:7f:e1:fe:90:50:8d:25:fd:21:bb: 0f:6e:d6:e9:44:77:4d:1e:62:7a:29:8c:bd:a7:ae:3b:89:eb: b5:fd:ea:6d:b1:5c:74:22:50:bb:1a:3d:55:32:9b:8e:b4:ab: 25:bb:15:d2:28:1f:6f:a4:47:80:2a:8a:de:91:e3:46:c2:68: e3:9b:7e:9b:19:20:df:ae:dd:aa:e3:9a:a9:6d:f3:e4:86:df: 33:1b:cf:8a:4e:7b:a3:ef:f2:31:2b:b0:f3:ad:20:28:9c:a5: 9e:c9:5f:98:b9:1e:67:3d:af:c4:f8:51:e3:81:22:49:41:e2: 91:df:a4:39:a1:63:2b:ad:2d:b7:9d:a0:f2:b1:42:91:98:dc: f1:28:d4:e5:e0:b4:d5:ff:b8:92:2b:10:73:3f:d9:27:13:88: eb:60:8e:9a:03:4b:47:b0:92:62:99:a4:d0:94:da:b2:3e:50: 64:39:bd:1d:88:f9:12:99:f3:00:f5:17:38:f1:03:41:e7:15: 32:89:52:74:4b:5e:48:a4:9f:96:4c:55:64:a3:d0:c7:c3:e0: 83:57:8f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqK1/HS1dCl+b7T9XZn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh M2Q0NjUwHhcNMjYwMjA5MTIwMDUxWhcNMjYwMjEwMTIwMDUxWjAzMTEwLwYDVQQD Eyg5YzA4YzgwMmU2MzBhZGU5MjNmNGM3ZjViYmE2ODJiNGU5MzBlNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS41Bw4TUN8X8yGQbyFBSwDAKuW1 m1CCFf9NKlkaC/kw/zGaaj92+Yh6mtWCkIjVcj8jrI6cG5Iruqor0El2nw2AnLAs xqEWgtmkOL3cnm1kliHY07JagT7M9C9Q1ZJFYDyTcxZKyvA6KBsjubMcSHeAXzBC Jnea/DOiuEOpJEJge9koodEXCCmDs6qIPiTCh5AkTfHGbtar6J7jTP5mjyhir6gE hLWrwvfnPzRBPMBGpuTtM6zHC/7Sk3GiD5saw22xvQhh+KCXL8Y6IECCC5+RogxU UFY5dzRavV3O91lEDdc2FXv4gl8VZhvjOmm2XKkY+zQrhl8T+VQtZZwe9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwIyALmMK3pI/TH9bumgrTpMOVxMB8GA1UdIwQY MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjvQAM1H ZJlvhf4WVDQHI+cVhjWxxXrWMtV+8Ig+U0EnSjExX8MNmsXN1H1/4f6QUI0l/SG7 D27W6UR3TR5ieimMvaeuO4nrtf3qbbFcdCJQuxo9VTKbjrSrJbsV0igfb6RHgCqK 3pHjRsJo45t+mxkg367dquOaqW3z5IbfMxvPik57o+/yMSuw860gKJylnslfmLke Zz2vxPhR44EiSUHikd+kOaFjK60tt52g8rFCkZjc8SjU5eC01f+4kisQcz/ZJxOI 62COmgNLR7CSYpmk0JTasj5QZDm9HYj5EpnzAPUXOPEDQecVMolSdEteSKSflkxV ZKPQx8Pgg1ePBw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:09 2026 by rpki-client