This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json) Hash identifier: gzCsWmdDKv1F/KHldknvUG73MzetFIR8Deblm0x2PJg= Subject key identifier: D4:F1:EA:08:3B:C5:E8:67:31:0A:FC:7F:2A:46:E4:A9:56:D1:2D:7F Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e Certificate serial: 019C439085EE15AB253A9324E0B98EA4C4F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft Manifest number: 0575 Signing time: Mon 09 Feb 2026 18:01:10 +0000 Manifest this update: Mon 09 Feb 2026 18:01:10 +0000 Manifest next update: Tue 10 Feb 2026 18:01:10 +0000 Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: Hd2r79lAfdduo5S84WNeKHtU8FCODaCPjKdc76FZZrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:85:ee:15:ab:25:3a:93:24:e0:b9:8e:a4:c4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e Validity Not Before: Feb 9 18:01:10 2026 GMT Not After : Feb 10 18:01:10 2026 GMT Subject: CN=d4f1ea083bc5e867310afc7f2a46e4a956d12d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:67:18:8d:8c:1f:47:b3:e4:a8:af:5c:76: e5:1b:7e:79:32:24:b7:d6:05:59:f9:2b:98:50:6b: 5d:e4:63:08:c0:f1:21:78:04:0b:71:d1:f7:a8:16: 57:93:9a:0f:1f:f7:8d:33:21:d7:7b:b7:c8:3e:b1: 59:05:4d:40:b9:77:03:92:71:b8:87:23:30:66:2d: 84:50:c3:b9:8d:70:90:85:14:eb:b2:0c:7f:a9:0c: 82:37:36:31:79:47:98:7b:c6:37:1d:a1:03:18:28: be:a4:6b:93:b3:24:5f:b6:f9:da:5c:9a:08:0a:c6: 33:c2:18:f8:7b:c5:67:97:06:64:d3:b9:97:b8:72: 7c:1e:3b:12:4b:e9:95:1d:ff:c9:ac:ee:f5:0a:74: ff:3c:15:88:7c:7d:78:85:a0:1a:66:3f:4d:0b:4a: 50:da:53:08:91:60:01:6a:e2:95:21:72:f8:85:e1: 6e:f1:80:c7:1c:25:79:d5:d6:c8:20:c9:e1:30:21: c1:81:dd:e0:20:07:c1:5d:50:e5:93:53:f3:ea:2a: 13:4e:e5:e1:f8:32:46:b7:1f:f1:b1:30:9b:a2:35: 48:4a:56:37:d8:b2:30:57:ab:25:a7:9a:40:24:09: d0:00:d2:ec:49:75:5d:18:f7:73:e3:e2:cc:d4:d9: 0c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F1:EA:08:3B:C5:E8:67:31:0A:FC:7F:2A:46:E4:A9:56:D1:2D:7F X509v3 Authority Key Identifier: keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:63:57:ef:30:7a:76:4e:3d:19:8b:c2:74:da:06:b2:5c:80: b9:d8:9a:e0:3b:15:76:68:06:4f:42:dc:2f:59:47:fc:05:26: de:56:64:72:78:58:c6:8b:98:a9:33:51:37:35:92:1b:e1:43: f0:42:95:ed:82:b5:6e:12:16:83:53:e5:e9:cf:4d:97:a3:c1: 43:f6:88:1d:a4:35:5f:c9:54:df:07:40:9e:a8:dc:ad:7d:b8: 3f:e3:5a:98:6d:5c:a4:b7:1c:78:85:35:ff:9b:c9:b5:ec:8f: 5e:bc:b5:fa:10:ec:d5:ee:0a:cb:8e:a2:01:0b:9d:92:a1:9f: aa:8c:27:47:0d:6a:04:4c:89:25:cf:51:0f:1b:14:14:09:bf: d5:96:69:6f:91:ef:06:45:03:21:a0:6b:b4:9e:61:f8:22:2c: de:4e:7a:48:61:1b:c0:14:16:f6:6e:f0:1d:5e:7f:ae:6b:1e: 56:d9:bf:12:d0:d0:ef:04:99:b1:50:e2:61:e6:00:ab:84:eb: 9d:b4:97:00:09:e2:73:dd:ae:1e:17:e3:34:4f:09:09:4d:2c: d8:2f:89:4f:a9:fa:00:36:16:ec:6f:ba:57:a2:a5:09:c8:f7: 2a:69:61:40:30:36:b2:6d:7b:fa:f8:c5:fc:c7:0c:1d:12:1e: 62:44:cc:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkIXuFaslOpMk4LmOpMT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGUwMjk3M2RjMDVlYzNjNmJiZjZlNTdiN2Q2YTRjZWVm ODE4NWUwHhcNMjYwMjA5MTgwMTEwWhcNMjYwMjEwMTgwMTEwWjAzMTEwLwYDVQQD EyhkNGYxZWEwODNiYzVlODY3MzEwYWZjN2YyYTQ2ZTRhOTU2ZDEyZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9JnGI2MH0ez5KivXHblG355MiS3 1gVZ+SuYUGtd5GMIwPEheAQLcdH3qBZXk5oPH/eNMyHXe7fIPrFZBU1AuXcDknG4 hyMwZi2EUMO5jXCQhRTrsgx/qQyCNzYxeUeYe8Y3HaEDGCi+pGuTsyRftvnaXJoI CsYzwhj4e8VnlwZk07mXuHJ8HjsSS+mVHf/JrO71CnT/PBWIfH14haAaZj9NC0pQ 2lMIkWABauKVIXL4heFu8YDHHCV51dbIIMnhMCHBgd3gIAfBXVDlk1Pz6ioTTuXh +DJGtx/xsTCbojVISlY32LIwV6slp5pAJAnQANLsSXVdGPdz4+LM1NkMxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTx6gg7xehnMQr8fypG5KlW0S1/MB8GA1UdIwQY MBaAFJTeApc9wF7Dxrv25Xt9akzu+BheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2Qt ZDQ5ZDFmNTczOWVkLzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2QtZDQ5ZDFmNTczOWVk LzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGNX7zB6 dk49GYvCdNoGslyAudia4DsVdmgGT0LcL1lH/AUm3lZkcnhYxouYqTNRNzWSG+FD 8EKV7YK1bhIWg1Pl6c9Nl6PBQ/aIHaQ1X8lU3wdAnqjcrX24P+NamG1cpLcceIU1 /5vJteyPXry1+hDs1e4Ky46iAQudkqGfqownRw1qBEyJJc9RDxsUFAm/1ZZpb5Hv BkUDIaBrtJ5h+CIs3k56SGEbwBQW9m7wHV5/rmseVtm/EtDQ7wSZsVDiYeYAq4Tr nbSXAAnic92uHhfjNE8JCU0s2C+JT6n6ADYW7G+6V6KlCcj3KmlhQDA2sm17+vjF /McMHRIeYkTMkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:55 2026 by rpki-client