This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json) Hash identifier: iEC/8YQA2QYUrZA0/l+ZhlbHI9ckl8quwEBygwGf6GU= Subject key identifier: 02:10:44:E9:CC:66:E5:E4:CA:B4:45:D0:33:DC:FF:81:25:D0:25:B3 Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Certificate serial: 019C36E7B6BCD38D6C8488204D505BCDB3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft Manifest number: 0C37 Signing time: Sat 07 Feb 2026 07:01:20 +0000 Manifest this update: Sat 07 Feb 2026 07:01:20 +0000 Manifest next update: Sun 08 Feb 2026 07:01:20 +0000 Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: 7ATfx1rcUiE+aXE/7JrCjGp5wbm5LvASuI/VFjVOEwM=) 2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:36:e7:b6:bc:d3:8d:6c:84:88:20:4d:50:5b:cd:b3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Validity Not Before: Feb 7 07:01:20 2026 GMT Not After : Feb 8 07:01:20 2026 GMT Subject: CN=021044e9cc66e5e4cab445d033dcff8125d025b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:b3:b4:60:31:76:50:91:28:d6:c1:20:b8: 40:4d:93:f4:01:25:b2:3f:7b:d1:df:69:f3:fb:1d: 84:5d:20:f3:c6:82:20:e4:84:08:6d:7d:9a:52:2f: 75:7b:27:b0:b8:5e:22:85:29:d1:45:04:f3:5a:f8: 85:fa:ef:d6:95:b7:50:c5:47:12:d7:b7:b0:b7:c1: bc:65:1d:8f:65:e9:37:be:9e:b5:dc:a3:e1:71:d5: 7b:c9:cc:9c:f5:c2:52:34:4c:7f:8a:22:34:c5:93: af:19:51:d2:c3:70:cc:52:00:5e:72:6c:9c:e5:4e: b5:21:00:5b:cb:89:7e:2e:ed:5d:3f:b0:01:37:b6: 0e:9e:45:f6:30:70:3d:a7:d0:c6:0a:31:aa:86:f9: fe:75:3a:36:77:52:02:0e:56:67:ec:af:f5:c5:ea: e1:1c:2a:c0:d2:0b:96:28:7c:82:b7:22:94:e9:05: 9a:bd:54:22:3a:e7:b6:c3:30:e4:aa:83:0a:c3:8b: 22:18:e5:a3:25:0b:3c:bd:af:0e:af:6c:bb:6a:c9: 1b:65:ee:13:aa:7f:ef:b2:42:e5:39:f5:a9:7b:7d: 1f:10:4b:f9:f5:b4:a0:69:cf:a5:0a:e3:13:e8:fe: 09:24:f6:5f:de:0d:90:df:15:6b:3f:ca:0d:f9:24: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:10:44:E9:CC:66:E5:E4:CA:B4:45:D0:33:DC:FF:81:25:D0:25:B3 X509v3 Authority Key Identifier: keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:de:d0:14:84:88:9c:7b:76:d2:9a:5f:d0:52:53:7b:67:06: 0c:c4:06:75:20:86:47:d0:4e:e8:1e:ce:3b:b1:df:0e:a8:9b: 0c:a7:56:ea:88:70:16:ff:94:35:9f:1e:44:5a:67:27:a5:00: a1:d9:88:52:ea:36:2b:6a:ca:5e:0e:c5:7f:db:c5:e8:e1:d6: fd:1b:fd:c4:91:43:90:a7:46:d8:3b:1b:6a:04:7e:8e:e8:ce: 55:e7:48:b8:90:9b:c7:9e:9a:23:03:89:2c:ce:64:7a:5b:58: 1b:89:fc:21:53:fd:d0:fd:20:ee:50:95:fc:c1:b7:85:0d:34: 9c:ee:06:02:83:c0:7a:01:14:21:e1:62:29:dd:11:a9:aa:f2: 4b:2b:ab:15:68:d4:0a:4f:b6:3e:c1:a3:57:52:a9:5f:f9:5e: cf:0b:65:bc:83:1b:79:ea:d0:c2:37:9d:3d:2f:05:e4:04:37: 43:2f:88:ec:57:8b:64:ac:13:a9:3f:8c:87:36:cc:06:1a:7b: 25:86:60:16:51:0b:f6:6d:3b:42:34:0f:17:8f:37:61:f7:9e: bc:f3:1a:0b:5f:27:52:cf:2d:93:d4:fe:fd:d4:2c:9e:09:24: f6:fe:bb:6b:6e:91:08:73:f1:a6:62:9a:28:3e:ad:8e:a2:b8: b7:08:ca:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw257a8041shIggTVBbzbPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw YmFlNTUwHhcNMjYwMjA3MDcwMTIwWhcNMjYwMjA4MDcwMTIwWjAzMTEwLwYDVQQD EygwMjEwNDRlOWNjNjZlNWU0Y2FiNDQ1ZDAzM2RjZmY4MTI1ZDAyNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl6ztGAxdlCRKNbBILhATZP0ASWy P3vR32nz+x2EXSDzxoIg5IQIbX2aUi91eyewuF4ihSnRRQTzWviF+u/WlbdQxUcS 17ewt8G8ZR2PZek3vp613KPhcdV7ycyc9cJSNEx/iiI0xZOvGVHSw3DMUgBecmyc 5U61IQBby4l+Lu1dP7ABN7YOnkX2MHA9p9DGCjGqhvn+dTo2d1ICDlZn7K/1xerh HCrA0guWKHyCtyKU6QWavVQiOue2wzDkqoMKw4siGOWjJQs8va8Or2y7askbZe4T qn/vskLlOfWpe30fEEv59bSgac+lCuMT6P4JJPZf3g2Q3xVrP8oN+STinwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIQROnMZuXkyrRF0DPc/4El0CWzMB8GA1UdIwQY MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN7QFISI nHt20ppf0FJTe2cGDMQGdSCGR9BO6B7OO7HfDqibDKdW6ohwFv+UNZ8eRFpnJ6UA odmIUuo2K2rKXg7Ff9vF6OHW/Rv9xJFDkKdG2DsbagR+jujOVedIuJCbx56aIwOJ LM5keltYG4n8IVP90P0g7lCV/MG3hQ00nO4GAoPAegEUIeFiKd0RqarySyurFWjU Ck+2PsGjV1KpX/lezwtlvIMbeerQwjedPS8F5AQ3Qy+I7FeLZKwTqT+MhzbMBhp7 JYZgFlEL9m07QjQPF483YfeevPMaC18nUs8tk9T+/dQsngkk9v67a26RCHPxpmKa KD6tjqK4twjK+A== -----END CERTIFICATE-----Generated at Sat Feb 7 12:48:12 2026 by rpki-client