This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json) Hash identifier: quRW9V5hCLm/dC+5Nor49r5ohPYafYeKHk2uDmB5wLw= Subject key identifier: D9:16:5C:19:35:CE:29:80:67:28:17:68:14:D5:DB:18:E7:34:16:36 Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Certificate serial: 019C43FE5CDD5CC8E9A4EE8C9EC3F18F6DBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft Manifest number: 1273 Signing time: Mon 09 Feb 2026 20:01:09 +0000 Manifest this update: Mon 09 Feb 2026 20:01:09 +0000 Manifest next update: Tue 10 Feb 2026 20:01:09 +0000 Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: 94l++GZYzYcRsrQmXxn4hcU1i6GvaXctnV/s8RdU4Kk=) 2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:5c:dd:5c:c8:e9:a4:ee:8c:9e:c3:f1:8f:6d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Validity Not Before: Feb 9 20:01:09 2026 GMT Not After : Feb 10 20:01:09 2026 GMT Subject: CN=d9165c1935ce29806728176814d5db18e7341636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:e0:b8:67:cf:3a:6e:b9:4a:9e:2b:9e:02: 07:3c:a4:2f:d3:5e:14:64:bb:8d:8d:15:93:09:be: 4d:9a:6a:6f:2c:1f:6b:da:b8:54:58:4b:cb:d8:35: 0a:48:13:ce:c1:7d:02:ba:b6:e8:1a:94:31:37:a5: 20:09:67:a5:d6:0e:3d:5f:2a:d7:53:30:30:89:47: 43:09:d9:3c:b0:09:a2:cc:1a:c4:81:e0:c5:86:88: 66:62:af:4c:ee:18:9a:66:97:d4:21:10:13:7c:68: c8:a8:11:94:9d:b9:bf:b2:12:07:8c:c0:25:5e:e8: 85:d5:6f:7b:d9:3c:06:9b:2b:7e:b6:8c:45:b6:e2: 21:90:96:83:18:4a:4f:75:f4:c6:dc:c5:0d:19:df: 48:70:f9:fa:9f:e5:64:11:98:da:80:b2:e8:04:72: d1:b3:2d:9a:40:71:82:a8:4f:1c:f0:95:87:58:17: 3b:ad:b5:a6:eb:ed:84:e1:68:29:91:bd:09:84:05: 98:4e:dd:12:e9:c9:91:8c:9c:c8:27:6a:3e:e5:11: 81:96:ed:f3:0d:a0:42:eb:72:5b:5c:eb:f5:6d:01: e3:6c:b0:c2:b6:d5:07:30:64:59:97:57:9e:5e:c4: 46:3b:3b:e0:41:ab:d0:ed:90:3d:70:a2:5d:13:3d: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:16:5C:19:35:CE:29:80:67:28:17:68:14:D5:DB:18:E7:34:16:36 X509v3 Authority Key Identifier: keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:dd:92:4f:18:cb:62:89:c1:5e:85:5b:7e:92:88:aa:e4:33: a4:83:d4:83:1b:01:23:03:76:ed:ac:70:36:28:fb:52:62:60: 59:41:bb:94:23:73:65:64:0c:4f:57:7f:4c:6c:ae:31:55:02: f5:c5:f3:02:25:8b:50:c8:08:3a:e9:96:47:df:e0:9a:a6:32: 4e:f9:bc:35:0a:25:b4:63:ad:2f:8e:38:4c:e9:50:e6:2d:00: 45:54:24:ac:5e:b1:f7:1f:83:ed:b0:e1:f0:d9:54:28:fd:ea: 62:09:e8:22:27:32:ff:8c:c0:e5:e8:11:78:5d:49:f4:e3:c7: 82:f9:88:c6:9d:b1:8a:56:c5:29:db:ad:66:0b:5d:64:af:bf: b5:50:8a:65:63:71:ff:be:0d:06:92:96:ca:65:1b:cf:fa:ca: 60:fa:df:e5:63:05:99:1f:c9:64:f0:53:ae:83:3b:55:04:cc: cf:7c:7e:85:f8:5d:61:48:a6:b9:19:b7:22:e6:5b:84:c5:ac: 86:56:01:fc:3a:f2:ee:da:e9:a8:c5:35:5e:9d:82:74:77:88: 86:07:20:36:f9:b1:a6:ef:f8:fc:a5:37:34:97:91:5c:b7:69: 18:08:43:5f:38:79:e7:f7:12:93:36:a0:53:15:b2:6a:e4:a3: df:d8:4f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/lzdXMjppO6MnsPxj22/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4 MmE2YjQwHhcNMjYwMjA5MjAwMTA5WhcNMjYwMjEwMjAwMTA5WjAzMTEwLwYDVQQD EyhkOTE2NWMxOTM1Y2UyOTgwNjcyODE3NjgxNGQ1ZGIxOGU3MzQxNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA563guGfPOm65Sp4rngIHPKQv014U ZLuNjRWTCb5NmmpvLB9r2rhUWEvL2DUKSBPOwX0CurboGpQxN6UgCWel1g49XyrX UzAwiUdDCdk8sAmizBrEgeDFhohmYq9M7hiaZpfUIRATfGjIqBGUnbm/shIHjMAl XuiF1W972TwGmyt+toxFtuIhkJaDGEpPdfTG3MUNGd9IcPn6n+VkEZjagLLoBHLR sy2aQHGCqE8c8JWHWBc7rbWm6+2E4Wgpkb0JhAWYTt0S6cmRjJzIJ2o+5RGBlu3z DaBC63JbXOv1bQHjbLDCttUHMGRZl1eeXsRGOzvgQavQ7ZA9cKJdEz22NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkWXBk1zimAZygXaBTV2xjnNBY2MB8GA1UdIwQY MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ92STxjL YonBXoVbfpKIquQzpIPUgxsBIwN27axwNij7UmJgWUG7lCNzZWQMT1d/TGyuMVUC 9cXzAiWLUMgIOumWR9/gmqYyTvm8NQoltGOtL444TOlQ5i0ARVQkrF6x9x+D7bDh 8NlUKP3qYgnoIicy/4zA5egReF1J9OPHgvmIxp2xilbFKdutZgtdZK+/tVCKZWNx /74NBpKWymUbz/rKYPrf5WMFmR/JZPBTroM7VQTMz3x+hfhdYUimuRm3IuZbhMWs hlYB/Dry7trpqMU1Xp2CdHeIhgcgNvmxpu/4/KU3NJeRXLdpGAhDXzh55/cSkzag UxWyauSj39hPtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:12 2026 by rpki-client