This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json) Hash identifier: xFrNp756qrPQ2G+sE9lQ9noFPvOdCeoojwbYwg3MfNw= Subject key identifier: 3F:81:54:15:C7:19:F3:74:C0:FD:4D:12:66:6D:31:FB:EB:DE:BB:5A Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50 Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50 Certificate serial: 019C439035D82B08ED871921263104720674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft Manifest number: 0C88 Signing time: Mon 09 Feb 2026 18:00:50 +0000 Manifest this update: Mon 09 Feb 2026 18:00:50 +0000 Manifest next update: Tue 10 Feb 2026 18:00:50 +0000 Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=) 2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: ysnPJKs7h3TFtcWRYYl4hD4KrHN3CP+OyEDo2zupK9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:35:d8:2b:08:ed:87:19:21:26:31:04:72:06:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50 Validity Not Before: Feb 9 18:00:50 2026 GMT Not After : Feb 10 18:00:50 2026 GMT Subject: CN=3f815415c719f374c0fd4d12666d31fbebdebb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:28:33:a3:ee:1a:3d:5f:3e:c6:4c:02:8f: ce:87:ef:6a:69:e9:d5:58:26:8e:c8:d6:89:64:5b: 54:b5:ff:1a:6b:92:e2:fb:d5:32:4b:61:25:2c:95: d0:7f:41:df:63:f1:f0:7a:22:0e:1c:ca:c2:25:3a: cd:90:7c:f3:13:72:46:83:35:e8:4f:01:be:a2:68: db:3f:86:86:0c:ec:c2:ef:85:35:bd:02:27:05:76: 0d:2a:c3:bf:b2:4d:2c:55:dc:c0:16:a8:92:91:cc: 9a:30:a4:01:da:4d:94:15:54:00:cc:0e:6a:ba:7e: c5:96:55:ed:e1:22:55:01:59:70:9c:1e:cb:27:e0: 57:20:d1:83:7a:c5:f7:24:77:cc:e4:3e:92:e2:1e: a1:bd:ce:b4:9a:68:bd:aa:d7:5a:19:f4:d6:6f:c2: bd:7f:64:cc:0c:27:cd:48:83:25:0f:78:03:a3:e5: 8c:d3:a8:51:36:f2:5b:16:ab:b1:2a:d5:3b:b0:39: 4e:c9:cd:a4:74:5a:d1:1c:ee:cf:1e:b5:9f:9a:22: 10:42:03:c6:54:29:69:4a:5b:af:cd:00:41:18:f5: 66:79:e4:b7:07:6c:4f:80:ef:ef:18:fc:c3:f9:22: 60:a0:8e:ce:1e:4d:ce:c5:66:e4:78:35:11:bd:de: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:81:54:15:C7:19:F3:74:C0:FD:4D:12:66:6D:31:FB:EB:DE:BB:5A X509v3 Authority Key Identifier: keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:75:6e:ad:4a:71:4f:f0:b8:17:47:cc:c5:53:80:e3:96:42: 26:73:72:7f:be:c6:2c:6a:d6:9e:74:fe:06:8a:5b:68:21:90: 94:7d:97:88:8a:d2:30:e5:60:17:3a:d1:68:b2:53:3e:06:df: c0:7a:d9:5b:34:a1:6a:67:50:6d:73:20:52:b6:7e:aa:d3:2e: 4d:96:fd:e4:6c:8c:7c:0d:08:9c:36:82:c4:99:ac:86:3d:8c: 94:38:80:54:45:86:44:2f:2a:d3:ab:78:ca:18:71:74:87:d2: a8:5a:f8:41:15:57:d5:d9:fd:ac:b6:3f:dc:d1:a5:bb:36:0e: 5b:e3:70:1e:c3:14:17:65:9c:e1:6c:3a:d6:37:6a:60:21:86: ec:18:2d:3f:97:30:05:0c:15:98:6e:a0:95:f7:b7:8d:15:2f: 40:e2:d8:1d:0c:ab:b9:0a:6c:2f:3e:9a:9a:ed:f9:a8:68:21: 08:7f:cf:3d:fa:00:0d:3a:91:25:2a:db:11:4d:9e:e2:39:a5: b3:a4:9e:a6:84:64:a1:53:ac:01:12:dd:32:c8:91:24:fd:18: b5:53:89:74:ec:76:e7:36:c5:ee:2b:89:b1:2e:09:69:f6:ce: 88:41:18:bb:f4:6d:e2:9a:d5:17:63:84:35:00:bb:be:b7:93: f8:b6:c9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDXYKwjthxkhJjEEcgZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx YzFkNTAwHhcNMjYwMjA5MTgwMDUwWhcNMjYwMjEwMTgwMDUwWjAzMTEwLwYDVQQD EygzZjgxNTQxNWM3MTlmMzc0YzBmZDRkMTI2NjZkMzFmYmViZGViYjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0ooM6PuGj1fPsZMAo/Oh+9qaenV WCaOyNaJZFtUtf8aa5Li+9UyS2ElLJXQf0HfY/HweiIOHMrCJTrNkHzzE3JGgzXo TwG+omjbP4aGDOzC74U1vQInBXYNKsO/sk0sVdzAFqiSkcyaMKQB2k2UFVQAzA5q un7FllXt4SJVAVlwnB7LJ+BXINGDesX3JHfM5D6S4h6hvc60mmi9qtdaGfTWb8K9 f2TMDCfNSIMlD3gDo+WM06hRNvJbFquxKtU7sDlOyc2kdFrRHO7PHrWfmiIQQgPG VClpSluvzQBBGPVmeeS3B2xPgO/vGPzD+SJgoI7OHk3OxWbkeDURvd5IBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+BVBXHGfN0wP1NEmZtMfvr3rtaMB8GA1UdIwQY MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt ZmRlYmJjOTI3ZDQwLzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgtZmRlYmJjOTI3ZDQw LzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnVurUpx T/C4F0fMxVOA45ZCJnNyf77GLGrWnnT+BopbaCGQlH2XiIrSMOVgFzrRaLJTPgbf wHrZWzShamdQbXMgUrZ+qtMuTZb95GyMfA0InDaCxJmshj2MlDiAVEWGRC8q06t4 yhhxdIfSqFr4QRVX1dn9rLY/3NGluzYOW+NwHsMUF2Wc4Ww61jdqYCGG7BgtP5cw BQwVmG6glfe3jRUvQOLYHQyruQpsLz6amu35qGghCH/PPfoADTqRJSrbEU2e4jml s6SepoRkoVOsARLdMsiRJP0YtVOJdOx25zbF7iuJsS4JafbOiEEYu/Rt4prVF2OE NQC7vreT+LbJMg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:53 2026 by rpki-client