This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json) Hash identifier: aNzluHRB61GRsQM5juxS0u3DHoSmg23dX5J5y1HaVl0= Subject key identifier: 7B:3A:98:BE:B0:B6:00:D4:65:0F:1F:58:9C:32:4A:E4:FA:CB:AE:E0 Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54 Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154 Certificate serial: 019C4321E60E7062D689F6E9F7EB919E02C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft Manifest number: 0BFC Signing time: Mon 09 Feb 2026 16:00:20 +0000 Manifest this update: Mon 09 Feb 2026 16:00:20 +0000 Manifest next update: Tue 10 Feb 2026 16:00:20 +0000 Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: Cm9zk0mlW8yIHRiiYRm9o9TFMC5fwgIsKgz/EBhmhMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e6:0e:70:62:d6:89:f6:e9:f7:eb:91:9e:02:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154 Validity Not Before: Feb 9 16:00:20 2026 GMT Not After : Feb 10 16:00:20 2026 GMT Subject: CN=7b3a98beb0b600d4650f1f589c324ae4facbaee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:45:97:f1:58:31:a8:2a:98:2a:15:57:11: 44:e8:6e:ce:d5:c2:03:dc:60:85:88:c6:87:d3:83: 2b:d5:86:79:f1:cc:c7:fc:11:a8:02:62:a1:0f:0c: 17:ff:29:08:47:7e:e5:b3:cc:b8:09:b2:d6:6d:c5: c5:6e:ac:4b:9b:7d:f4:c8:d3:98:cd:ce:ef:a3:ae: c7:fc:89:1a:43:d3:cc:10:09:45:9d:75:9e:d9:30: 71:34:40:19:88:8c:b1:36:54:89:cd:1b:b4:15:0c: 67:61:2a:1f:93:3c:56:13:0e:73:3f:9e:6c:66:4e: 03:f2:6d:f0:a6:c0:b5:61:a6:99:21:3c:50:24:5c: 10:75:8c:bf:a5:84:93:de:7e:16:5a:cd:6b:d8:29: de:63:c4:8f:ce:be:39:d9:b6:98:ca:2b:71:74:19: b8:1a:09:81:84:56:32:96:13:d5:75:2a:af:1e:19: e3:d4:a2:9a:9d:0e:58:51:62:f7:32:d1:87:25:97: 08:6f:e4:c3:62:3a:7b:7f:eb:88:b0:3b:4d:14:b7: 13:8e:e8:c4:fe:ec:e1:26:a4:f8:67:c5:60:3b:fc: ac:dd:ed:c9:7d:4b:5d:eb:4e:73:37:94:5a:0b:21: 69:39:72:c3:74:0f:40:92:bc:c9:40:34:ce:6d:98: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3A:98:BE:B0:B6:00:D4:65:0F:1F:58:9C:32:4A:E4:FA:CB:AE:E0 X509v3 Authority Key Identifier: keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a8:7a:de:f9:82:5c:6b:c6:cc:23:46:7e:3b:14:66:62:5c: 6c:52:4d:5f:c8:94:e0:8d:a6:da:bd:2d:a7:cc:01:64:9f:1b: 67:e9:74:6d:a0:a4:8d:68:7b:cc:6e:cc:42:53:48:eb:68:ab: b2:69:34:d2:4d:76:bb:18:98:fc:f4:f9:35:61:e3:9a:ef:05: 7a:63:f8:6b:9b:66:67:00:f0:ea:69:19:f8:22:a6:96:86:64: 46:d1:ae:83:be:3e:e1:d9:5e:37:25:80:c9:d7:9d:42:4f:fe: c8:78:88:64:46:19:72:74:26:df:63:39:08:8e:a4:a9:2f:26: 8d:da:67:c2:f9:d7:84:49:df:d0:03:2b:b9:dc:a5:7c:af:15: cd:f1:ee:95:2c:0a:ef:ee:c5:81:50:df:b4:63:ea:87:21:1f: ca:96:56:6e:0c:5e:8d:ee:72:92:cc:8e:3b:78:4c:61:b4:88: 46:df:98:bd:16:f1:fe:80:b1:22:b8:4c:60:4b:f5:f8:77:09: 08:c9:0d:c1:46:7b:99:cc:53:44:38:39:ad:d3:d5:f4:74:ae: f9:e9:31:09:d7:ee:77:c8:fd:63:81:12:95:0a:de:6c:d8:c8: 56:62:b7:1b:3b:06:11:f8:69:6f:c2:e3:8f:c3:04:c4:ce:5e: 46:ce:3c:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeYOcGLWifbp9+uRngLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw YWQxNTQwHhcNMjYwMjA5MTYwMDIwWhcNMjYwMjEwMTYwMDIwWjAzMTEwLwYDVQQD Eyg3YjNhOThiZWIwYjYwMGQ0NjUwZjFmNTg5YzMyNGFlNGZhY2JhZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4ZFl/FYMagqmCoVVxFE6G7O1cID 3GCFiMaH04Mr1YZ58czH/BGoAmKhDwwX/ykIR37ls8y4CbLWbcXFbqxLm330yNOY zc7vo67H/IkaQ9PMEAlFnXWe2TBxNEAZiIyxNlSJzRu0FQxnYSofkzxWEw5zP55s Zk4D8m3wpsC1YaaZITxQJFwQdYy/pYST3n4WWs1r2CneY8SPzr452baYyitxdBm4 GgmBhFYylhPVdSqvHhnj1KKanQ5YUWL3MtGHJZcIb+TDYjp7f+uIsDtNFLcTjujE /uzhJqT4Z8VgO/ys3e3JfUtd605zN5RaCyFpOXLDdA9AkrzJQDTObZj30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHs6mL6wtgDUZQ8fWJwySuT6y67gMB8GA1UdIwQY MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKh63vmC XGvGzCNGfjsUZmJcbFJNX8iU4I2m2r0tp8wBZJ8bZ+l0baCkjWh7zG7MQlNI62ir smk00k12uxiY/PT5NWHjmu8FemP4a5tmZwDw6mkZ+CKmloZkRtGug74+4dleNyWA ydedQk/+yHiIZEYZcnQm32M5CI6kqS8mjdpnwvnXhEnf0AMrudylfK8VzfHulSwK 7+7FgVDftGPqhyEfypZWbgxeje5yksyOO3hMYbSIRt+YvRbx/oCxIrhMYEv1+HcJ CMkNwUZ7mcxTRDg5rdPV9HSu+ekxCdfud8j9Y4ESlQrebNjIVmK3GzsGEfhpb8Lj j8MExM5eRs480g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:32 2026 by rpki-client