This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json) Hash identifier: YN2wJbrlwvh3g2J10Km8CGwYug7AP+SBd/audAzzRYA= Subject key identifier: B7:61:AA:9A:28:AB:94:1E:D6:26:DB:9F:72:63:82:5E:40:64:E4:39 Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41 Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41 Certificate serial: 019C42EB147BBBFA3667B4EB42DD5800B10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft Manifest number: 044E Signing time: Mon 09 Feb 2026 15:00:28 +0000 Manifest this update: Mon 09 Feb 2026 15:00:28 +0000 Manifest next update: Tue 10 Feb 2026 15:00:28 +0000 Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: 6agjRUMZoNP07hci5mqNO97AN48EFOPR4sEhPKsuTQk=) 2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:14:7b:bb:fa:36:67:b4:eb:42:dd:58:00:b1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41 Validity Not Before: Feb 9 15:00:28 2026 GMT Not After : Feb 10 15:00:28 2026 GMT Subject: CN=b761aa9a28ab941ed626db9f7263825e4064e439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:00:8d:6a:b8:83:2d:4e:f2:f8:75:06:68: d5:f5:46:53:82:e3:c9:0d:00:64:bf:56:17:ae:d8: 2e:38:09:81:eb:d4:f2:cc:18:86:cf:1f:4a:57:03: c8:62:e7:fc:70:2e:47:9d:da:05:8f:8d:3c:58:6b: 71:be:0b:13:ae:0c:d2:63:46:4d:ef:02:ec:b2:41: 4e:96:c4:73:91:63:14:32:64:c4:94:af:ed:b5:b6: 59:95:fe:d4:1b:27:7e:11:ea:56:1d:4a:92:a4:23: 19:a3:c5:4b:8c:bc:94:3d:8f:7e:ec:d4:ea:2c:59: 1f:d7:4b:5d:c2:ec:80:31:59:dc:ef:ef:09:ee:2b: 77:f4:5e:6f:ae:b2:16:36:7d:58:11:7d:87:f4:b3: 3d:e2:7f:6c:57:42:c2:ab:cd:a4:03:91:bc:1d:19: e1:2f:cb:92:9e:99:80:b0:47:f5:c3:9e:08:87:4c: e7:7f:bf:b0:8f:1a:ee:dd:79:dc:c8:bd:f8:0c:1a: 52:72:5e:33:bc:4a:87:87:13:c9:d3:5f:4a:8a:c0: e5:d2:69:b4:cd:cf:49:1e:be:59:fc:67:7e:48:bb: 5b:24:e9:bb:aa:d9:36:5d:81:83:2a:ca:b1:3f:e9: b0:2a:b9:7e:8e:c2:ef:67:c1:0e:5d:fb:24:71:f3: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:61:AA:9A:28:AB:94:1E:D6:26:DB:9F:72:63:82:5E:40:64:E4:39 X509v3 Authority Key Identifier: keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:67:73:2a:21:89:ad:cb:64:77:da:16:55:a0:d3:a6:ce:49: 0a:47:3d:10:3a:63:e6:a5:4e:72:b7:d5:8d:3e:c5:b0:d4:d3: 03:67:58:7f:9b:09:11:a0:6f:22:11:e9:b4:b5:95:b7:51:f9: 2b:af:27:16:48:f4:a9:66:e2:15:c2:08:91:5d:2d:c7:bc:76: 64:c4:5d:41:37:f9:04:89:44:c3:82:37:6c:e6:a7:cd:15:39: b0:89:46:6d:4b:b8:8a:16:83:8c:f0:37:74:5e:d0:a9:69:89: cf:17:91:3b:f6:8f:02:80:d2:8b:d0:13:20:22:84:b7:45:51: 03:40:8a:ec:a9:ee:aa:d6:9b:bc:e1:a4:b8:d9:8e:8f:07:c2: 72:1c:04:7d:7a:cc:39:1d:dd:45:20:d8:aa:d0:53:d0:42:18: 81:26:1a:a0:82:ee:56:53:4b:b9:fc:eb:3c:e0:26:d9:7f:17: 1a:c8:f7:f9:9e:a6:14:4a:87:e6:3d:80:1d:11:05:5f:21:5e: ca:f6:b9:37:fa:5f:9a:b0:77:4b:40:17:11:52:48:8e:3c:56: be:87:7b:f9:1d:1d:52:40:9b:d7:33:dd:b3:19:cf:55:98:e6: 96:b7:5a:c7:07:7b:3b:47:5f:b0:5f:ef:bc:df:ad:6e:59:13: 44:c5:57:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xR7u/o2Z7TrQt1YALEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5 YmRkNDEwHhcNMjYwMjA5MTUwMDI4WhcNMjYwMjEwMTUwMDI4WjAzMTEwLwYDVQQD EyhiNzYxYWE5YTI4YWI5NDFlZDYyNmRiOWY3MjYzODI1ZTQwNjRlNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsQAjWq4gy1O8vh1BmjV9UZTguPJ DQBkv1YXrtguOAmB69TyzBiGzx9KVwPIYuf8cC5HndoFj408WGtxvgsTrgzSY0ZN 7wLsskFOlsRzkWMUMmTElK/ttbZZlf7UGyd+EepWHUqSpCMZo8VLjLyUPY9+7NTq LFkf10tdwuyAMVnc7+8J7it39F5vrrIWNn1YEX2H9LM94n9sV0LCq82kA5G8HRnh L8uSnpmAsEf1w54Ih0znf7+wjxru3XncyL34DBpScl4zvEqHhxPJ019KisDl0mm0 zc9JHr5Z/Gd+SLtbJOm7qtk2XYGDKsqxP+mwKrl+jsLvZ8EOXfskcfPytwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdhqpooq5Qe1ibbn3Jjgl5AZOQ5MB8GA1UdIwQY MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt OTE4NGE5MWI4YWUxLzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmdzKiGJ rctkd9oWVaDTps5JCkc9EDpj5qVOcrfVjT7FsNTTA2dYf5sJEaBvIhHptLWVt1H5 K68nFkj0qWbiFcIIkV0tx7x2ZMRdQTf5BIlEw4I3bOanzRU5sIlGbUu4ihaDjPA3 dF7QqWmJzxeRO/aPAoDSi9ATICKEt0VRA0CK7KnuqtabvOGkuNmOjwfCchwEfXrM OR3dRSDYqtBT0EIYgSYaoILuVlNLufzrPOAm2X8XGsj3+Z6mFEqH5j2AHREFXyFe yva5N/pfmrB3S0AXEVJIjjxWvod7+R0dUkCb1zPdsxnPVZjmlrdaxwd7O0dfsF/v vN+tblkTRMVXCA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:13 2026 by rpki-client