This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json) Hash identifier: +qt524udIOAsHMJb1sIzgxHX7zMmHidZS4q/tcLYjJA= Subject key identifier: 4F:04:EC:D3:86:98:2F:13:07:AE:8C:99:2D:10:12:74:45:EF:04:DB Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Certificate serial: 019C41A1592D5E874193769E8CA47E69EA5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft Manifest number: 0EF4 Signing time: Mon 09 Feb 2026 09:00:19 +0000 Manifest this update: Mon 09 Feb 2026 09:00:19 +0000 Manifest next update: Tue 10 Feb 2026 09:00:19 +0000 Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: iOhrt+JazalrgOxbSiEFw3S4RN2SUnIRV+rDQ77YqrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:59:2d:5e:87:41:93:76:9e:8c:a4:7e:69:ea:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Validity Not Before: Feb 9 09:00:19 2026 GMT Not After : Feb 10 09:00:19 2026 GMT Subject: CN=4f04ecd386982f1307ae8c992d10127445ef04db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:7f:22:b4:09:bf:4e:2d:7b:f8:aa:9b:f6: 20:8a:cc:1a:6a:84:d5:0c:5d:43:ba:9e:4e:06:ba: 7c:d9:55:c4:c3:a8:c1:15:95:8d:73:ba:a6:17:f3: 05:c1:ac:f1:e1:70:d9:96:82:a5:c1:af:ac:4d:33: b4:e4:3b:84:f2:c2:ec:06:4e:06:14:7a:b2:96:99: ad:d9:bc:ca:6e:3f:03:c7:53:7a:a5:89:4d:de:c8: 8e:21:31:b7:2e:14:94:4f:97:20:66:29:76:80:8f: 57:91:07:34:8a:4c:06:98:6d:9b:06:fe:ce:5a:37: 9e:58:23:d8:33:f7:10:bd:c6:09:ae:c5:6d:f4:1f: 79:0d:61:a2:b7:2f:6f:9b:f4:38:a2:ba:74:f2:8b: 1e:52:f3:df:03:ac:9b:2e:64:4d:4e:18:67:a7:93: e4:02:7a:3d:06:93:35:07:02:1c:41:fc:08:3e:f1: 07:ca:71:2a:5c:dd:ae:0d:8b:a1:55:52:84:d9:66: b7:da:13:12:1f:7b:c1:36:a5:67:dd:7f:11:23:96: b8:77:c6:15:56:f7:bb:85:e9:57:47:7d:d4:23:cb: dc:61:3f:8c:ac:f5:45:ec:4f:81:26:04:98:26:49: 94:2c:5f:dc:18:a9:6c:51:14:29:3b:d9:17:68:06: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:EC:D3:86:98:2F:13:07:AE:8C:99:2D:10:12:74:45:EF:04:DB X509v3 Authority Key Identifier: keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6f:03:e0:47:5f:b7:75:06:d5:97:7c:21:f0:9a:22:86:aa: a5:de:ab:94:f5:a6:52:94:28:d6:35:78:63:9b:63:63:03:9b: be:84:72:05:a2:4e:f1:b1:2d:51:93:d2:b6:ec:61:3d:9d:dc: 41:7a:9e:2d:9d:28:3a:5e:23:ad:b4:d4:9c:87:fd:4e:43:cc: 18:d1:a2:a7:c0:dd:73:01:a6:44:e7:e3:08:76:77:41:bd:72: e2:8e:f2:e5:3d:db:a0:6b:a5:d0:bd:f9:ad:30:27:0a:3c:cd: 04:8c:f5:08:a4:52:7f:8a:a6:ea:ae:41:5e:b5:1d:bf:6b:d6: 2d:55:e4:03:a8:65:c1:af:39:05:58:e0:29:56:4f:90:22:50: a4:61:d2:be:74:01:bc:51:48:c5:28:ef:06:f8:96:79:16:b2: 17:fc:36:f1:15:85:6a:05:9e:d6:6b:18:f2:16:de:2b:96:c6: 14:f1:e7:63:d6:15:c2:13:1c:7f:e3:c8:b2:5b:5e:f5:bb:45: d5:da:7e:b7:6a:d8:04:97:7d:54:b5:c7:f5:49:b7:b3:94:62: 62:92:89:03:4e:89:b6:74:43:db:fe:a9:3b:f1:81:c9:a6:09: 39:46:93:51:5b:20:4e:ed:9a:cd:26:62:5a:ca:65:28:8d:82: b0:4a:40:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVktXodBk3aejKR+aepbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmI3YjMwN2I4Yzk2ZTZjNzdiNWI4YTc4M2ZmNTVlMzc5 MDc2MzYwHhcNMjYwMjA5MDkwMDE5WhcNMjYwMjEwMDkwMDE5WjAzMTEwLwYDVQQD Eyg0ZjA0ZWNkMzg2OTgyZjEzMDdhZThjOTkyZDEwMTI3NDQ1ZWYwNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzt/IrQJv04te/iqm/YgiswaaoTV DF1Dup5OBrp82VXEw6jBFZWNc7qmF/MFwazx4XDZloKlwa+sTTO05DuE8sLsBk4G FHqylpmt2bzKbj8Dx1N6pYlN3siOITG3LhSUT5cgZil2gI9XkQc0ikwGmG2bBv7O WjeeWCPYM/cQvcYJrsVt9B95DWGity9vm/Q4orp08oseUvPfA6ybLmRNThhnp5Pk Ano9BpM1BwIcQfwIPvEHynEqXN2uDYuhVVKE2Wa32hMSH3vBNqVn3X8RI5a4d8YV Vve7helXR33UI8vcYT+MrPVF7E+BJgSYJkmULF/cGKlsURQpO9kXaAYQeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8E7NOGmC8TB66MmS0QEnRF7wTbMB8GA1UdIwQY MBaAFOArezB7jJbmx3tbing/9V43kHY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0Zjkt MjIwZGRiZTJjMDlmLzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0ZjktMjIwZGRiZTJjMDlm LzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPm8D4Edf t3UG1Zd8IfCaIoaqpd6rlPWmUpQo1jV4Y5tjYwObvoRyBaJO8bEtUZPStuxhPZ3c QXqeLZ0oOl4jrbTUnIf9TkPMGNGip8DdcwGmROfjCHZ3Qb1y4o7y5T3boGul0L35 rTAnCjzNBIz1CKRSf4qm6q5BXrUdv2vWLVXkA6hlwa85BVjgKVZPkCJQpGHSvnQB vFFIxSjvBviWeRayF/w28RWFagWe1msY8hbeK5bGFPHnY9YVwhMcf+PIslte9btF 1dp+t2rYBJd9VLXH9Um3s5RiYpKJA06JtnRD2/6pO/GByaYJOUaTUVsgTu2azSZi WsplKI2CsEpAKw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:56 2026 by rpki-client