This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json) Hash identifier: A9raoHQnb7yBRGlfSK4rPaSbcJuDCSTKlbXa5qdM9H0= Subject key identifier: 86:BB:6F:8F:28:71:8C:A5:80:DC:8C:99:BC:48:8D:BF:3C:85:96:08 Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2 Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2 Certificate serial: 019C4246892E36AAD3BCA1626F5E801DC4F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft Manifest number: 0992 Signing time: Mon 09 Feb 2026 12:00:44 +0000 Manifest this update: Mon 09 Feb 2026 12:00:44 +0000 Manifest next update: Tue 10 Feb 2026 12:00:44 +0000 Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: BVi1dF0jRkSAOphRuxOkNqGLoFCi1UMj5QQ+JBFybjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:89:2e:36:aa:d3:bc:a1:62:6f:5e:80:1d:c4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2 Validity Not Before: Feb 9 12:00:44 2026 GMT Not After : Feb 10 12:00:44 2026 GMT Subject: CN=86bb6f8f28718ca580dc8c99bc488dbf3c859608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:d3:e5:a4:c9:d1:1d:9e:fa:10:49:d0:fd: 49:09:5d:8d:93:63:57:79:a7:45:c8:0b:b0:ab:0c: cc:cd:99:4f:0d:6e:14:25:33:43:34:63:12:1e:64: 50:1e:20:f2:56:34:86:ef:59:11:7a:e9:5d:10:e1: a9:61:b6:31:46:d2:ba:f1:4c:77:ad:60:f6:29:7f: de:d2:3e:1d:33:7c:5c:d0:a1:6d:6e:43:d0:2c:c2: 64:2b:0e:e6:95:0e:03:94:06:1c:3d:77:3d:d3:07: c9:97:c7:fe:24:a7:f7:5d:27:de:69:b7:0d:b7:db: a9:3c:f6:58:dd:2e:66:6c:e9:6d:86:e2:54:fb:ed: a3:f9:c6:2f:c0:e2:52:30:0c:a2:c5:1e:8a:15:de: 4d:c1:ee:16:61:7c:f0:e8:9c:c4:14:e3:53:19:ea: cc:9d:b3:21:fc:4a:87:7a:8b:13:1e:2f:0d:57:0d: 23:80:98:09:4d:d7:6d:ab:a4:ab:8e:c7:42:e4:7d: c8:39:37:85:f8:60:0f:bc:8f:3a:bb:5a:f0:90:7a: 5e:4b:79:57:c5:2e:95:7e:a0:e3:04:7a:32:a6:09: de:34:76:96:dc:07:99:d0:07:9a:a2:86:2e:ec:c5: c2:45:8a:c9:80:59:c3:cd:18:31:87:dd:16:8b:72: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BB:6F:8F:28:71:8C:A5:80:DC:8C:99:BC:48:8D:BF:3C:85:96:08 X509v3 Authority Key Identifier: keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:dd:54:7c:5d:ae:ca:31:5d:ba:b3:64:6e:fa:ec:fc:27:ac: c2:59:3a:ff:86:59:d8:36:39:af:b6:cf:e1:2b:b9:b2:a0:e1: 78:32:f3:d1:09:6e:81:87:24:9f:a1:ed:03:53:12:9e:7e:9a: 8a:52:df:3b:86:06:4b:27:39:09:69:3f:00:bc:95:a1:1b:ba: 59:d1:14:21:47:b2:1b:36:8e:dc:04:83:07:89:b5:d2:9d:54: f9:98:d7:91:12:1d:bb:21:f6:8b:af:b6:34:4d:db:8b:e0:03: 58:0f:61:1c:4e:39:d2:b4:1b:2f:53:8e:87:e1:24:da:41:fb: 8b:97:b8:54:85:1a:4b:4b:37:7c:f0:38:9c:88:5e:17:05:ac: 70:f5:e9:a3:ca:ce:7c:cc:88:47:90:b4:6b:bb:73:e5:ba:8d: 26:7f:82:cd:e9:a9:ff:a9:3e:01:62:4a:77:8a:7a:31:19:9a: b3:d1:a0:35:52:3e:5c:e1:79:04:f1:23:64:eb:73:10:d8:37: 7f:db:05:13:94:d3:69:ba:45:df:f4:8c:26:c7:af:7a:fc:a7: 0c:75:48:13:93:ac:d2:36:73:df:5f:c9:05:8e:0f:fa:af:91: 15:4c:0c:70:53:54:1f:23:ff:96:72:4e:61:39:51:18:b9:8f: 1d:09:23:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRokuNqrTvKFib16AHcTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOGM3MThiNDVhNzc2NzU5MDlkN2ZkMWFmZWM2ZGFhYmFm ZTg4YjIwHhcNMjYwMjA5MTIwMDQ0WhcNMjYwMjEwMTIwMDQ0WjAzMTEwLwYDVQQD Eyg4NmJiNmY4ZjI4NzE4Y2E1ODBkYzhjOTliYzQ4OGRiZjNjODU5NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyHT5aTJ0R2e+hBJ0P1JCV2Nk2NX eadFyAuwqwzMzZlPDW4UJTNDNGMSHmRQHiDyVjSG71kReuldEOGpYbYxRtK68Ux3 rWD2KX/e0j4dM3xc0KFtbkPQLMJkKw7mlQ4DlAYcPXc90wfJl8f+JKf3XSfeabcN t9upPPZY3S5mbOlthuJU++2j+cYvwOJSMAyixR6KFd5Nwe4WYXzw6JzEFONTGerM nbMh/EqHeosTHi8NVw0jgJgJTddtq6SrjsdC5H3IOTeF+GAPvI86u1rwkHpeS3lX xS6VfqDjBHoypgneNHaW3AeZ0AeaooYu7MXCRYrJgFnDzRgxh90Wi3JW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa7b48ocYylgNyMmbxIjb88hZYIMB8GA1UdIwQY MBaAFOGMcYtFp3Z1kJ1/0a/sbaq6/oiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5Nzgt MDRmMDQ0YmI5OGMyLzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5NzgtMDRmMDQ0YmI5OGMy LzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXN1UfF2u yjFdurNkbvrs/Ceswlk6/4ZZ2DY5r7bP4Su5sqDheDLz0QlugYckn6HtA1MSnn6a ilLfO4YGSyc5CWk/ALyVoRu6WdEUIUeyGzaO3ASDB4m10p1U+ZjXkRIduyH2i6+2 NE3bi+ADWA9hHE450rQbL1OOh+Ek2kH7i5e4VIUaS0s3fPA4nIheFwWscPXpo8rO fMyIR5C0a7tz5bqNJn+Czemp/6k+AWJKd4p6MRmas9GgNVI+XOF5BPEjZOtzENg3 f9sFE5TTabpF3/SMJsevevynDHVIE5Os0jZz31/JBY4P+q+RFUwMcFNUHyP/lnJO YTlRGLmPHQkjyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:00 2026 by rpki-client