This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json) Hash identifier: Nm5Jh5c+XMqgDap8ZZRtuxORrorXVxJJ5w5wXKYcMEs= Subject key identifier: 83:F0:BF:81:74:2B:4C:A7:75:F4:BE:60:B9:8E:22:3C:75:39:F3:F4 Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17 Certificate serial: 019C42B3F0F7CB3BBAC1300B247FF6138AC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 14:00:14 +0000 Manifest this update: Mon 09 Feb 2026 14:00:14 +0000 Manifest next update: Tue 10 Feb 2026 14:00:14 +0000 Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: xbNjaMjn5p+TAL91xCvFDgH5Ais/E6XxSwYLWmCfZRQ=) 2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f0:f7:cb:3b:ba:c1:30:0b:24:7f:f6:13:8a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17 Validity Not Before: Feb 9 14:00:14 2026 GMT Not After : Feb 10 14:00:14 2026 GMT Subject: CN=83f0bf81742b4ca775f4be60b98e223c7539f3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:cc:b3:b5:a9:db:9d:af:9e:57:77:02:89: 2d:35:a7:0f:bb:55:a3:79:77:d4:c9:1f:84:c4:68: 55:ed:0d:28:0c:d4:dc:e6:17:59:d3:36:0e:c0:00: cc:5d:01:5a:1c:7c:e6:32:b2:28:89:eb:e4:30:6e: fd:be:bd:41:21:49:72:49:bf:f0:91:26:58:84:65: f7:b2:f2:db:92:76:50:02:79:82:42:65:4d:00:4c: db:95:61:a4:57:2c:96:06:42:72:f2:5d:d6:db:bd: 0a:ad:a0:9d:af:62:fd:b2:53:c6:0d:e7:e2:cf:b4: d9:fc:10:f1:4d:f9:82:39:b5:28:19:fb:fc:d9:34: de:20:29:a0:4d:e6:71:4a:27:02:3a:9d:47:25:61: f4:c6:8e:d8:9a:6f:cb:c5:24:69:6a:f4:9f:d1:dd: e1:00:60:da:54:2a:0c:f5:8e:d4:bb:8d:1b:0c:d7: c2:68:14:72:30:0b:18:62:0d:b0:5d:05:9f:fc:63: 51:2c:23:92:c3:2e:5b:e1:3c:21:ec:0e:1e:61:ff: 50:60:72:19:b6:c4:5d:7e:63:0b:19:c2:89:ce:ef: 10:35:70:e0:2a:72:98:86:49:de:98:e0:50:57:dd: 86:4a:cd:f8:41:3c:70:1a:95:c5:b2:ea:4d:e6:9d: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F0:BF:81:74:2B:4C:A7:75:F4:BE:60:B9:8E:22:3C:75:39:F3:F4 X509v3 Authority Key Identifier: keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9f:22:d2:53:a8:a4:33:1d:e5:8a:8f:13:e3:c4:80:6b:01: 51:46:07:02:74:bc:85:96:e3:87:e2:0d:b4:33:75:ca:ed:98: ff:be:c4:c0:06:a4:17:91:c9:5b:47:2b:67:7b:43:46:2c:e4: da:cf:e7:7d:84:87:8d:91:de:33:ab:87:06:a1:ca:23:29:e5: 6e:04:f1:42:69:29:3c:88:cf:69:11:1b:32:b0:1a:a7:b0:39: 43:30:5c:8f:69:bb:8f:aa:db:de:59:2e:42:e0:65:49:f1:dd: c8:73:2e:67:43:b8:f2:2b:b4:b7:43:f3:b8:32:25:9f:a5:84: a1:4a:36:d0:34:0b:96:8c:36:bf:75:14:07:8c:08:4b:90:a2: f2:4b:f4:3d:23:fe:7f:2d:51:c8:20:87:df:f6:fd:9b:37:cc: e7:6b:36:a3:88:47:2f:e7:c4:cd:72:ed:64:29:16:43:3a:71: a7:55:a9:66:3f:67:e7:1f:ef:35:f1:91:5c:79:e4:92:0c:8b: 75:a2:f5:bd:e9:7d:cd:e6:9c:72:e3:bf:54:61:86:44:e9:a5: 7a:13:96:e7:59:19:38:32:ad:24:99:1c:8c:72:74:ec:80:df: 59:62:6e:21:a6:9d:40:03:6c:5e:20:22:60:4a:55:b2:5c:39: e5:11:66:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/D3yzu6wTALJH/2E4rEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2 OGVmMTcwHhcNMjYwMjA5MTQwMDE0WhcNMjYwMjEwMTQwMDE0WjAzMTEwLwYDVQQD Eyg4M2YwYmY4MTc0MmI0Y2E3NzVmNGJlNjBiOThlMjIzYzc1MzlmM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0DMs7Wp252vnld3AoktNacPu1Wj eXfUyR+ExGhV7Q0oDNTc5hdZ0zYOwADMXQFaHHzmMrIoievkMG79vr1BIUlySb/w kSZYhGX3svLbknZQAnmCQmVNAEzblWGkVyyWBkJy8l3W270KraCdr2L9slPGDefi z7TZ/BDxTfmCObUoGfv82TTeICmgTeZxSicCOp1HJWH0xo7Ymm/LxSRpavSf0d3h AGDaVCoM9Y7Uu40bDNfCaBRyMAsYYg2wXQWf/GNRLCOSwy5b4Twh7A4eYf9QYHIZ tsRdfmMLGcKJzu8QNXDgKnKYhknemOBQV92GSs34QTxwGpXFsupN5p1+4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPwv4F0K0yndfS+YLmOIjx1OfP0MB8GA1UdIwQY MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3 LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE58i0lOo pDMd5YqPE+PEgGsBUUYHAnS8hZbjh+INtDN1yu2Y/77EwAakF5HJW0crZ3tDRizk 2s/nfYSHjZHeM6uHBqHKIynlbgTxQmkpPIjPaREbMrAap7A5QzBcj2m7j6rb3lku QuBlSfHdyHMuZ0O48iu0t0PzuDIln6WEoUo20DQLlow2v3UUB4wIS5Ci8kv0PSP+ fy1RyCCH3/b9mzfM52s2o4hHL+fEzXLtZCkWQzpxp1WpZj9n5x/vNfGRXHnkkgyL daL1vel9zeaccuO/VGGGROmlehOW51kZODKtJJkcjHJ07IDfWWJuIaadQANsXiAi YEpVslw55RFmog== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:25 2026 by rpki-client