This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json) Hash identifier: sz09m6EAfBZPo3EKSkreFeLj8NdoXZVZZ4rWE+yCWww= Subject key identifier: D3:D2:8C:E0:B5:E2:97:7C:93:0B:D5:6F:77:7A:23:3F:CC:CC:03:19 Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6 Certificate serial: 019C44DA3507F87DECE7AD875F03FC592A40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft Manifest number: 180D Signing time: Tue 10 Feb 2026 00:01:16 +0000 Manifest this update: Tue 10 Feb 2026 00:01:16 +0000 Manifest next update: Wed 11 Feb 2026 00:01:16 +0000 Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: su5LiQSo6DlT04MgHwE4LNq74bYeeimD1Fl5ynrvlac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:35:07:f8:7d:ec:e7:ad:87:5f:03:fc:59:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6 Validity Not Before: Feb 10 00:01:16 2026 GMT Not After : Feb 11 00:01:16 2026 GMT Subject: CN=d3d28ce0b5e2977c930bd56f777a233fcccc0319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:11:f2:ad:d0:6f:e6:c8:ba:b9:cb:c0:c2: b2:62:d3:10:87:58:91:f7:44:31:7f:66:e5:4c:5f: df:d4:29:d1:49:77:44:a3:63:8c:af:c3:01:69:22: 41:37:3c:f5:1a:55:ca:79:8d:57:ac:1b:83:01:bd: 77:78:9d:6e:9c:35:aa:8d:d0:e5:c8:8b:23:85:d2: 4d:18:69:84:9c:3e:0a:6b:75:f3:ba:60:2a:8e:f9: 27:5e:8f:ef:f2:f6:d8:a5:7e:ae:bc:59:75:a0:15: b0:7e:3d:1f:a0:5d:d6:1c:99:df:90:ae:8e:dd:e5: c2:30:13:87:51:04:5f:cf:12:ea:fb:65:5b:c1:1e: fb:a3:88:1b:15:b5:3b:bc:d9:20:2a:f5:e6:b0:b1: fd:c0:8c:ec:fc:3a:27:76:65:f8:7f:ab:35:47:88: e8:10:5a:7a:a5:80:a7:59:3d:97:f3:9d:b9:28:84: 7e:f4:81:4a:38:35:30:5f:ab:ed:0b:b7:96:c9:bd: 5d:9e:7c:0a:6e:d7:0b:a1:4f:57:f3:9c:c3:e8:92: 21:44:ce:c5:79:f8:90:f2:2d:fb:dd:06:41:de:30: 9c:9f:f8:db:71:67:61:66:c4:1d:55:30:ba:0a:a8: f7:db:96:67:9a:77:b4:05:9c:f8:46:05:1f:4e:99: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D2:8C:E0:B5:E2:97:7C:93:0B:D5:6F:77:7A:23:3F:CC:CC:03:19 X509v3 Authority Key Identifier: keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:94:6f:89:e8:06:03:8e:6e:d2:d7:e2:ca:a6:f7:08:c5:07: 57:75:38:50:d4:1f:d8:fe:22:c9:da:fd:7a:28:10:6a:f3:66: bd:ba:18:4c:3b:f6:6b:0b:b9:f8:da:e6:0d:e4:ce:2e:53:33: f8:61:9f:35:0f:57:3d:e7:d6:90:4b:d9:94:fa:2b:6a:20:d7: 40:07:23:db:eb:12:b3:6d:23:dc:69:60:6c:11:09:43:51:6b: 20:10:11:3b:75:02:6e:c4:00:cf:6f:08:d3:fc:32:03:b2:2c: 6b:be:29:d2:06:e1:d5:f7:78:01:6d:dc:60:5e:0d:76:4c:9e: 97:13:28:10:59:b9:a5:a5:c3:f9:f8:35:ee:04:61:0b:df:7d: 8e:58:b1:99:b5:01:0c:c3:4b:00:a4:e1:bf:39:b3:75:52:21: 1e:b8:68:06:a8:00:cc:29:e7:4e:f9:c5:47:64:8f:f0:fc:fc: 62:98:68:7e:3b:4a:44:ee:2b:30:d5:7d:ea:2e:25:49:9e:5b: b4:e0:58:db:b2:f7:6b:c5:1c:35:b5:75:6c:22:8f:85:c7:27: 6b:12:ef:21:27:5b:20:7e:d3:ac:68:e1:d1:d2:a2:20:6e:e4: 45:c8:6e:ee:7a:53:55:51:a6:c7:37:ac:0b:b6:2d:99:ae:8b: 47:bc:fc:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2jUH+H3s562HXwP8WSpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh NTY3ZjYwHhcNMjYwMjEwMDAwMTE2WhcNMjYwMjExMDAwMTE2WjAzMTEwLwYDVQQD EyhkM2QyOGNlMGI1ZTI5NzdjOTMwYmQ1NmY3NzdhMjMzZmNjY2MwMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX0R8q3Qb+bIurnLwMKyYtMQh1iR 90Qxf2blTF/f1CnRSXdEo2OMr8MBaSJBNzz1GlXKeY1XrBuDAb13eJ1unDWqjdDl yIsjhdJNGGmEnD4Ka3XzumAqjvknXo/v8vbYpX6uvFl1oBWwfj0foF3WHJnfkK6O 3eXCMBOHUQRfzxLq+2VbwR77o4gbFbU7vNkgKvXmsLH9wIzs/DondmX4f6s1R4jo EFp6pYCnWT2X8525KIR+9IFKODUwX6vtC7eWyb1dnnwKbtcLoU9X85zD6JIhRM7F efiQ8i373QZB3jCcn/jbcWdhZsQdVTC6Cqj325Znmne0BZz4RgUfTpkqJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPSjOC14pd8kwvVb3d6Iz/MzAMZMB8GA1UdIwQY MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3 LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJRviegG A45u0tfiyqb3CMUHV3U4UNQf2P4iydr9eigQavNmvboYTDv2awu5+NrmDeTOLlMz +GGfNQ9XPefWkEvZlPoraiDXQAcj2+sSs20j3GlgbBEJQ1FrIBARO3UCbsQAz28I 0/wyA7Isa74p0gbh1fd4AW3cYF4NdkyelxMoEFm5paXD+fg17gRhC999jlixmbUB DMNLAKThvzmzdVIhHrhoBqgAzCnnTvnFR2SP8Pz8YphofjtKRO4rMNV96i4lSZ5b tOBY27L3a8UcNbV1bCKPhccnaxLvISdbIH7TrGjh0dKiIG7kRchu7npTVVGmxzes C7Ytma6LR7z8Zw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:13 2026 by rpki-client