This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json) Hash identifier: Twanj5H+GouQSh3iCAgap8gYGh4i+LEYx4YvfguwQYQ= Subject key identifier: 62:C4:7D:63:B7:AE:F4:E8:A9:6D:CB:10:21:69:FD:B2:09:F0:37:84 Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6 Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6 Certificate serial: 019C424698934848C129DBC15C449CB515E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft Manifest number: 048E Signing time: Mon 09 Feb 2026 12:00:48 +0000 Manifest this update: Mon 09 Feb 2026 12:00:48 +0000 Manifest next update: Tue 10 Feb 2026 12:00:48 +0000 Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: DZyijpwY86PHRiMF8lkh346RSn1NaNDTQQcnwKX8pdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:98:93:48:48:c1:29:db:c1:5c:44:9c:b5:15:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6 Validity Not Before: Feb 9 12:00:48 2026 GMT Not After : Feb 10 12:00:48 2026 GMT Subject: CN=62c47d63b7aef4e8a96dcb102169fdb209f03784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:39:38:d3:7b:7f:e6:78:e2:5b:64:70:69: 7a:1c:e5:29:92:45:5b:25:58:a5:5c:e1:13:87:28: 02:92:c3:9a:c6:8a:56:3d:89:3e:07:b8:81:40:cb: 11:93:ce:54:96:f7:ac:95:e0:e0:c3:8c:4b:ce:cb: ce:16:61:75:af:59:11:e2:a7:f2:7f:00:91:0c:c4: 52:5c:1a:ba:13:96:7a:73:f4:de:90:48:1a:10:10: 1d:e9:b7:8c:4e:ba:5e:66:f1:29:a5:fc:2b:49:bc: 3e:62:45:74:31:b0:c0:4a:a7:68:17:4a:18:9f:08: 34:d2:bb:6b:0d:b7:14:a0:5c:10:d6:b3:b8:d2:c4: 1f:6b:ab:5a:a7:10:d8:00:39:5a:e0:96:01:22:5c: b1:d4:92:a2:79:d1:90:75:d4:af:05:23:12:ce:61: 0f:d1:cf:62:a1:9b:69:39:91:6b:b0:fb:e4:1d:8b: 42:2c:90:d1:97:79:b4:0a:89:23:1c:d8:44:05:cd: 54:07:51:63:db:78:8b:78:b3:9a:c7:ec:3a:40:31: 60:21:21:65:61:4a:4f:e7:0f:be:c0:6b:c5:a9:fc: 26:49:76:da:36:85:b7:24:33:46:90:fe:f7:36:31: e8:5b:29:8d:c9:84:8f:3f:07:48:ba:26:b2:b1:1c: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C4:7D:63:B7:AE:F4:E8:A9:6D:CB:10:21:69:FD:B2:09:F0:37:84 X509v3 Authority Key Identifier: keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:de:cb:bf:42:20:27:99:c1:e0:75:0f:9e:ef:2a:20:14:db: ea:f0:61:ab:28:3b:03:38:3c:a5:c5:d8:82:1f:72:3f:5b:c6: c3:cb:bb:9a:8c:fa:2d:90:e2:0c:43:5e:39:f0:1f:99:b7:26: 28:94:5f:46:4f:b2:fe:e2:37:e7:aa:c9:8c:d0:05:77:87:3b: 0d:9d:bf:64:b0:4f:7b:ef:55:57:01:d7:5d:db:89:b1:22:23: ad:04:01:cc:ce:67:44:82:09:5f:ba:11:89:8e:7b:db:3b:4e: 65:4a:ec:6e:5a:08:6a:a9:d8:e7:e1:c8:8d:15:d1:fe:44:ce: b9:5c:54:3a:29:0a:06:7f:ff:78:2b:5d:9b:9a:d8:39:e9:2e: 10:00:0d:e3:ab:8f:16:67:98:4c:bf:93:e0:84:08:aa:59:ff: 2a:b9:04:f7:ef:ba:d2:ee:36:1f:3b:e2:b1:ec:b9:8c:f2:e9: e7:3e:c5:92:9f:ce:80:f3:0e:4d:cd:29:18:d0:d9:11:10:6b: dd:a7:d0:7c:9e:fd:5e:5b:e8:27:7b:d3:4d:59:8c:7a:c1:ac: 34:bc:81:14:57:96:66:e9:29:f5:3c:06:95:ca:8e:b4:43:fe: 05:31:3f:5f:19:bf:18:55:ee:b4:28:28:e2:23:f1:33:8e:d0: 65:6d:07:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpiTSEjBKdvBXESctRXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGJlMjlkNGZlMGM0Yzg0MzUwMTcyYThhMzQ5NmNjNjY3 YzEzZjYwHhcNMjYwMjA5MTIwMDQ4WhcNMjYwMjEwMTIwMDQ4WjAzMTEwLwYDVQQD Eyg2MmM0N2Q2M2I3YWVmNGU4YTk2ZGNiMTAyMTY5ZmRiMjA5ZjAzNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDE5ONN7f+Z44ltkcGl6HOUpkkVb JVilXOEThygCksOaxopWPYk+B7iBQMsRk85UlvesleDgw4xLzsvOFmF1r1kR4qfy fwCRDMRSXBq6E5Z6c/TekEgaEBAd6beMTrpeZvEppfwrSbw+YkV0MbDASqdoF0oY nwg00rtrDbcUoFwQ1rO40sQfa6tapxDYADla4JYBIlyx1JKiedGQddSvBSMSzmEP 0c9ioZtpOZFrsPvkHYtCLJDRl3m0CokjHNhEBc1UB1Fj23iLeLOax+w6QDFgISFl YUpP5w++wGvFqfwmSXbaNoW3JDNGkP73NjHoWymNyYSPPwdIuiaysRzTAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLEfWO3rvToqW3LECFp/bIJ8DeEMB8GA1UdIwQY MBaAFOJL4p1P4MTIQ1AXKoo0lsxmfBP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjct ZDhmZWNjYmQ2NThjLzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjctZDhmZWNjYmQ2NThj LzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt7Lv0Ig J5nB4HUPnu8qIBTb6vBhqyg7Azg8pcXYgh9yP1vGw8u7moz6LZDiDENeOfAfmbcm KJRfRk+y/uI356rJjNAFd4c7DZ2/ZLBPe+9VVwHXXduJsSIjrQQBzM5nRIIJX7oR iY572ztOZUrsbloIaqnY5+HIjRXR/kTOuVxUOikKBn//eCtdm5rYOekuEAAN46uP FmeYTL+T4IQIqln/KrkE9++60u42Hzvisey5jPLp5z7Fkp/OgPMOTc0pGNDZERBr 3afQfJ79XlvoJ3vTTVmMesGsNLyBFFeWZukp9TwGlcqOtEP+BTE/Xxm/GFXutCgo 4iPxM47QZW0HNg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:45 2026 by rpki-client