This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json) Hash identifier: mr3qgvK3SDf/P4PSjIs/Cjyey78by94SstaFfkCi3qI= Subject key identifier: 50:53:B6:B5:E0:F9:88:C0:2A:C7:98:A6:3D:D3:1F:A2:56:17:4C:B0 Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24 Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824 Certificate serial: 019C4358C74599677DCAF83B6B429FE5E678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft Manifest number: 0140 Signing time: Mon 09 Feb 2026 17:00:17 +0000 Manifest this update: Mon 09 Feb 2026 17:00:17 +0000 Manifest next update: Tue 10 Feb 2026 17:00:17 +0000 Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: YnrioxNDLzhBZmtEosWLKt24sxAj02/eux4uGVV9aXY=) 2: 4ypktVvAzfNV9xVobcyFTIbQDTY.roa (hash: gbFNuHiI6Q6GwECOCQ38Wty+z3M8uTYhivyQMeIFbAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c7:45:99:67:7d:ca:f8:3b:6b:42:9f:e5:e6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824 Validity Not Before: Feb 9 17:00:17 2026 GMT Not After : Feb 10 17:00:17 2026 GMT Subject: CN=5053b6b5e0f988c02ac798a63dd31fa256174cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:b6:60:74:01:14:a9:20:92:1a:9d:f3:e2: 8a:6f:dc:f1:ad:2b:c2:43:6a:76:cd:d4:e4:b4:de: d1:18:40:65:8b:42:6e:bd:e9:50:54:4b:c1:e4:ce: bd:7a:9f:d5:0e:57:be:9e:48:69:99:c0:80:cc:bd: fd:23:a6:e2:a2:28:0a:32:7c:f0:fe:d4:ac:4e:fb: 7d:16:bb:d5:59:c1:18:1c:08:0c:5b:90:ef:b0:21: 6c:70:79:ba:8b:84:6c:d7:5c:8e:cb:18:64:57:a1: 69:6b:50:59:04:57:bd:76:22:4b:7d:2d:19:8e:97: 33:ff:4b:3e:12:3a:53:62:5e:29:93:72:07:12:46: 33:38:fe:90:28:3f:bf:a7:1c:10:92:c4:4d:3b:6a: 63:d5:fb:a6:d9:04:07:7d:73:54:10:d6:79:f2:1f: 5e:df:6e:a6:af:ac:68:47:d1:a2:a1:7e:a8:41:b9: 09:ec:4d:9e:ca:49:14:2d:96:75:81:68:b8:dd:26: 69:34:a5:18:12:04:bd:e3:02:25:63:7a:5e:96:cc: 50:07:a0:67:2e:03:7c:6d:3f:6c:d8:a2:49:d9:96: a4:a9:56:98:d1:6f:07:0f:d3:8c:9d:6b:8e:8f:23: 9a:87:47:35:5e:6e:04:6e:fb:c8:fe:a1:89:b1:c7: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:53:B6:B5:E0:F9:88:C0:2A:C7:98:A6:3D:D3:1F:A2:56:17:4C:B0 X509v3 Authority Key Identifier: keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:eb:12:65:a3:de:3c:f4:83:e2:64:a0:fa:9d:41:37:b3:b9: 4c:19:d6:42:68:dd:eb:33:98:24:3b:d4:cf:59:38:7d:c4:a0: 94:c2:fe:8f:91:e0:a1:35:e0:8f:3f:f9:65:f3:17:a8:0b:f5: 8e:9a:3c:42:df:f6:21:e8:01:30:55:4e:13:ba:b1:42:e4:31: 97:35:0f:87:0e:2e:b4:2e:31:21:0e:20:70:2b:be:85:23:37: 6b:75:96:1f:d7:3a:93:67:3f:5a:a5:0b:f8:95:17:86:5e:60: a1:53:52:95:47:8b:15:1c:14:2e:5e:a7:cd:f7:bb:f0:64:b1: 13:c6:7a:37:30:ef:5f:37:1b:7c:25:e2:63:8f:37:1a:32:b5: 3b:4b:9c:03:82:84:d9:1d:9d:f0:e5:69:11:2e:45:28:47:71: e7:74:dc:29:1e:7b:93:2a:79:23:ce:d1:5b:aa:f1:6f:e7:d2: eb:a8:0b:91:6f:ff:2d:45:6c:02:26:24:5d:50:c1:00:68:b9: f3:54:0a:96:a9:d6:8b:d9:a8:17:a5:7d:36:5d:21:99:d5:d2: cf:9b:2b:de:5a:3f:cb:d2:37:fa:6c:27:d9:43:21:d8:f5:46: b3:96:b8:00:c6:c7:c5:fe:c1:28:6e:82:a8:24:10:9d:d7:01: 69:ec:f1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMdFmWd9yvg7a0Kf5eZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTA2YWMzZWE3NjBiMmQwMjQyYTllZmJhMmMyMTE2YjYy NmY4MjQwHhcNMjYwMjA5MTcwMDE3WhcNMjYwMjEwMTcwMDE3WjAzMTEwLwYDVQQD Eyg1MDUzYjZiNWUwZjk4OGMwMmFjNzk4YTYzZGQzMWZhMjU2MTc0Y2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvm2YHQBFKkgkhqd8+KKb9zxrSvC Q2p2zdTktN7RGEBli0JuvelQVEvB5M69ep/VDle+nkhpmcCAzL39I6bioigKMnzw /tSsTvt9FrvVWcEYHAgMW5DvsCFscHm6i4Rs11yOyxhkV6Fpa1BZBFe9diJLfS0Z jpcz/0s+EjpTYl4pk3IHEkYzOP6QKD+/pxwQksRNO2pj1fum2QQHfXNUENZ58h9e 326mr6xoR9GioX6oQbkJ7E2eykkULZZ1gWi43SZpNKUYEgS94wIlY3pelsxQB6Bn LgN8bT9s2KJJ2ZakqVaY0W8HD9OMnWuOjyOah0c1Xm4EbvvI/qGJsceD8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBTtrXg+YjAKseYpj3TH6JWF0ywMB8GA1UdIwQY MBaAFOMQasPqdgstAkKp77osIRa2JvgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUt ODQ5NzcxN2E0ZjYxLzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUtODQ5NzcxN2E0ZjYx LzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATusSZaPe PPSD4mSg+p1BN7O5TBnWQmjd6zOYJDvUz1k4fcSglML+j5HgoTXgjz/5ZfMXqAv1 jpo8Qt/2IegBMFVOE7qxQuQxlzUPhw4utC4xIQ4gcCu+hSM3a3WWH9c6k2c/WqUL +JUXhl5goVNSlUeLFRwULl6nzfe78GSxE8Z6NzDvXzcbfCXiY483GjK1O0ucA4KE 2R2d8OVpES5FKEdx53TcKR57kyp5I87RW6rxb+fS66gLkW//LUVsAiYkXVDBAGi5 81QKlqnWi9moF6V9Nl0hmdXSz5sr3lo/y9I3+mwn2UMh2PVGs5a4AMbHxf7BKG6C qCQQndcBaezxcw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:31 2026 by rpki-client