This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json) Hash identifier: NtxbLVKX3HOjMrNscWdTQaR2OyF9OoIKVTnI43YlL5Y= Subject key identifier: CB:37:CA:74:43:E6:65:6B:0F:06:8F:76:99:67:6C:DB:FB:17:C2:02 Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Certificate serial: 019C43FD8A96371C492A2A148210ED159D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 20:00:15 +0000 Manifest this update: Mon 09 Feb 2026 20:00:15 +0000 Manifest next update: Tue 10 Feb 2026 20:00:15 +0000 Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: LfjCECg8HBkmUZ5a30UjsbPdISmF+KJBTwwebY1WkPM=) 2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:8a:96:37:1c:49:2a:2a:14:82:10:ed:15:9d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Validity Not Before: Feb 9 20:00:15 2026 GMT Not After : Feb 10 20:00:15 2026 GMT Subject: CN=cb37ca7443e6656b0f068f7699676cdbfb17c202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1a:ae:33:be:28:53:82:47:b9:86:6a:b8:76: 31:1d:ab:ce:78:d9:94:e2:b6:54:af:ec:60:86:30: c5:04:aa:a8:3f:06:be:36:c2:7a:28:11:e3:ca:bb: 11:80:64:e5:c0:c2:c7:db:5d:14:f5:ea:6a:56:09: 13:5a:57:1c:2d:af:37:ca:97:ea:c4:80:7c:48:cb: 82:3f:6d:76:28:89:b6:97:50:d6:b5:50:40:0a:86: 67:e4:e3:a3:8f:59:cb:63:8e:a4:3b:fe:91:f6:ea: 78:fc:8b:c6:38:ce:b4:a3:3a:d7:7d:ea:7c:51:e9: 90:f2:96:6a:6b:85:8e:74:9c:d6:ba:00:ab:e0:5a: 5b:5c:41:8f:db:82:16:74:31:8e:58:44:1b:16:d6: 8a:10:46:86:f9:e6:cd:67:97:94:ff:58:9e:80:ab: d7:41:58:fb:9e:94:78:f6:de:6b:d9:ed:f4:9d:89: a2:c0:fe:0e:02:c1:65:0f:26:d9:61:ae:78:61:7f: cf:09:7b:00:04:6c:ae:1d:5f:fc:76:c0:57:2b:af: 61:65:a0:79:a2:46:c3:34:7a:f6:b7:2d:dc:c1:27: a2:a5:98:2a:2a:49:77:d9:51:2b:03:c6:5c:f5:c0: 9a:d6:2e:5d:f3:02:f2:b1:7d:48:a1:43:b7:82:8d: dd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:CA:74:43:E6:65:6B:0F:06:8F:76:99:67:6C:DB:FB:17:C2:02 X509v3 Authority Key Identifier: keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:62:58:84:08:b9:e5:c3:d6:99:78:bc:45:11:38:da:24:ab: 09:6c:16:fa:c1:44:2e:44:07:05:41:01:06:4e:b3:f7:7d:09: 15:dd:d7:31:4b:5e:da:ec:f5:95:51:00:87:d5:9c:9b:41:e7: 54:79:a0:53:0e:91:d0:91:10:53:11:b9:9b:55:e3:25:55:cf: c5:73:4a:8f:59:6a:ca:0c:d9:c3:4c:21:89:bd:ba:47:e1:04: da:51:77:5e:46:26:7d:96:22:b1:92:d0:c6:22:30:20:b2:aa: db:84:72:f3:55:99:e3:47:1c:88:bb:92:e6:47:9c:97:4b:0a: 8f:22:2a:2f:ea:ac:47:b4:80:e8:32:f6:aa:5f:17:75:4f:df: 89:a5:7c:f5:41:07:41:75:1c:20:30:4f:2b:5d:55:59:1c:bc: af:ee:37:ef:1c:42:23:ac:e4:b7:7e:ac:75:5b:0f:80:7b:5c: 43:6c:1a:47:1d:80:97:da:49:24:84:5c:78:e5:86:9e:a8:a4: 80:43:03:a0:5a:23:93:b2:e8:92:4e:d3:84:22:c3:65:b9:7d: 73:bf:fb:50:a9:6b:27:e1:c7:37:b5:c5:10:12:e1:4a:ca:3f: fb:24:c9:20:89:31:b1:09:cc:df:cb:50:9f:f9:50:21:60:12: b6:cc:d7:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/YqWNxxJKioUghDtFZ16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzNmYzE5OGM3NzJmNTliOGVkZTUyOTg1NmI1MmVhMTc5 YTRlMzgwHhcNMjYwMjA5MjAwMDE1WhcNMjYwMjEwMjAwMDE1WjAzMTEwLwYDVQQD EyhjYjM3Y2E3NDQzZTY2NTZiMGYwNjhmNzY5OTY3NmNkYmZiMTdjMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhquM74oU4JHuYZquHYxHavOeNmU 4rZUr+xghjDFBKqoPwa+NsJ6KBHjyrsRgGTlwMLH210U9epqVgkTWlccLa83ypfq xIB8SMuCP212KIm2l1DWtVBACoZn5OOjj1nLY46kO/6R9up4/IvGOM60ozrXfep8 UemQ8pZqa4WOdJzWugCr4FpbXEGP24IWdDGOWEQbFtaKEEaG+ebNZ5eU/1iegKvX QVj7npR49t5r2e30nYmiwP4OAsFlDybZYa54YX/PCXsABGyuHV/8dsBXK69hZaB5 okbDNHr2ty3cwSeipZgqKkl32VErA8Zc9cCa1i5d8wLysX1IoUO3go3dNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs3ynRD5mVrDwaPdplnbNv7F8ICMB8GA1UdIwQY MBaAFOLD/BmMdy9ZuO3lKYVrUuoXmk44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2Et NWYyOWM5ZjU0OWU4LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2EtNWYyOWM5ZjU0OWU4 LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamJYhAi5 5cPWmXi8RRE42iSrCWwW+sFELkQHBUEBBk6z930JFd3XMUte2uz1lVEAh9Wcm0Hn VHmgUw6R0JEQUxG5m1XjJVXPxXNKj1lqygzZw0whib26R+EE2lF3XkYmfZYisZLQ xiIwILKq24Ry81WZ40cciLuS5kecl0sKjyIqL+qsR7SA6DL2ql8XdU/fiaV89UEH QXUcIDBPK11VWRy8r+437xxCI6zkt36sdVsPgHtcQ2waRx2Al9pJJIRceOWGnqik gEMDoFojk7Lokk7ThCLDZbl9c7/7UKlrJ+HHN7XFEBLhSso/+yTJIIkxsQnM38tQ n/lQIWAStszXCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:49 2026 by rpki-client