This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json) Hash identifier: AH9tosjtHGeIubUIqzoq+xzeNtp4jPgL4pDg5BsN5Vs= Subject key identifier: 55:8D:78:AD:1E:96:C6:9D:11:32:82:01:DF:E6:AC:C1:56:0E:63:B0 Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89 Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489 Certificate serial: 019C424674FE681174037C6601A92D6326DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft Manifest number: 04E5 Signing time: Mon 09 Feb 2026 12:00:39 +0000 Manifest this update: Mon 09 Feb 2026 12:00:39 +0000 Manifest next update: Tue 10 Feb 2026 12:00:39 +0000 Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: uA2aJae+hD2JtOQ+oDPF7voXiVI+WNvKESG/LxhW+no=) 2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:74:fe:68:11:74:03:7c:66:01:a9:2d:63:26:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489 Validity Not Before: Feb 9 12:00:39 2026 GMT Not After : Feb 10 12:00:39 2026 GMT Subject: CN=558d78ad1e96c69d11328201dfe6acc1560e63b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:ec:d1:07:ea:34:d0:89:76:d4:7a:ee:ae: 21:86:3a:98:2a:4f:8b:cd:70:6f:8c:42:9a:e4:5f: 95:d3:9d:ce:03:04:7f:b8:71:3c:43:74:b7:b6:6c: 6c:97:04:63:6e:5e:3c:68:2c:4f:a8:14:c0:5d:36: ef:96:e4:7b:e0:65:79:dc:e6:de:74:c2:79:3c:c4: a3:c5:bd:db:71:9f:67:bb:60:c4:aa:89:21:7c:6e: 47:7e:a8:08:e7:7b:e7:61:cd:ac:8f:2c:cf:a0:e5: 45:a8:03:98:7a:e4:73:d1:d6:8d:27:26:31:30:16: 9b:1b:59:0f:03:da:df:23:cd:19:ad:55:9c:a2:9d: 15:50:dc:30:c1:7c:6b:0d:d8:25:41:0b:fd:6e:31: 54:7b:2b:70:91:93:81:5f:e6:5f:b2:13:c6:45:0e: 09:3a:bc:4b:7d:34:06:ab:0a:c6:21:83:91:c6:76: b4:dd:af:55:c1:cd:8d:17:19:9f:a0:11:d4:ef:de: d9:9a:36:20:2e:7e:bb:0a:f1:1e:c0:a5:f0:65:06: c2:25:ff:c1:fe:30:b1:64:e9:d1:1e:95:a8:6e:ef: 9d:f4:a2:b2:99:dc:23:ec:4a:f8:a8:cd:36:a4:76: dc:df:06:c4:84:92:30:90:83:95:c9:83:a1:06:62: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:78:AD:1E:96:C6:9D:11:32:82:01:DF:E6:AC:C1:56:0E:63:B0 X509v3 Authority Key Identifier: keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9c:3a:8b:3f:3a:e8:0f:43:46:52:57:a1:15:30:62:86:d9: 5b:61:0a:a8:ee:d7:0a:64:9e:8b:83:d1:48:61:fe:d4:4c:6c: b2:6e:c9:f1:e5:79:06:b8:20:95:75:5b:65:95:5c:45:e5:86: 1a:5a:db:d2:29:d8:33:ab:2f:b1:69:71:41:39:01:94:86:06: c5:3b:32:8a:22:1d:0f:d6:d7:45:b7:4e:5d:12:34:9f:2e:5b: 0d:5a:12:a6:78:e0:93:6f:ba:d6:de:02:bd:cc:39:f4:7b:ba: a1:4f:fe:b8:0b:9f:a2:bc:78:2a:f1:ac:d9:2b:78:42:64:c5: 7e:3c:44:ed:3a:3d:c4:63:16:ad:12:45:6a:31:76:c6:e0:85: 78:fd:20:e7:ae:d4:b3:b1:7c:a7:60:cb:c4:bf:76:06:4b:b5: 8e:18:b4:7f:27:26:13:df:f7:db:b0:b9:b3:80:04:d8:88:08: 34:63:99:ee:fb:af:61:48:da:85:4a:fe:c5:ed:bd:78:65:3b: f2:93:10:bc:ed:0d:ca:d3:97:a2:55:04:9c:09:1d:e7:82:5c: 91:81:e3:c8:e2:80:68:89:86:5e:a7:b8:dc:4d:24:d6:12:11: 25:ab:66:20:92:8a:65:a8:ae:8d:d9:4b:d2:66:c8:d7:44:60: 16:de:d8:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnT+aBF0A3xmAaktYybcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTIxZjg1ZjliZjE3YzAyMDk4N2VhMTMyMGQzZDYzYzU1 YWU0ODkwHhcNMjYwMjA5MTIwMDM5WhcNMjYwMjEwMTIwMDM5WjAzMTEwLwYDVQQD Eyg1NThkNzhhZDFlOTZjNjlkMTEzMjgyMDFkZmU2YWNjMTU2MGU2M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fDs0QfqNNCJdtR67q4hhjqYKk+L zXBvjEKa5F+V053OAwR/uHE8Q3S3tmxslwRjbl48aCxPqBTAXTbvluR74GV53Obe dMJ5PMSjxb3bcZ9nu2DEqokhfG5HfqgI53vnYc2sjyzPoOVFqAOYeuRz0daNJyYx MBabG1kPA9rfI80ZrVWcop0VUNwwwXxrDdglQQv9bjFUeytwkZOBX+ZfshPGRQ4J OrxLfTQGqwrGIYORxna03a9Vwc2NFxmfoBHU797ZmjYgLn67CvEewKXwZQbCJf/B /jCxZOnRHpWobu+d9KKymdwj7Er4qM02pHbc3wbEhJIwkIOVyYOhBmIwZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWNeK0elsadETKCAd/mrMFWDmOwMB8GA1UdIwQY MBaAFOGiH4X5vxfAIJh+oTINPWPFWuSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUt ODYyNjg0ZWNlYjQ2LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUtODYyNjg0ZWNlYjQ2 LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJw6iz86 6A9DRlJXoRUwYobZW2EKqO7XCmSei4PRSGH+1Exssm7J8eV5BrgglXVbZZVcReWG Glrb0inYM6svsWlxQTkBlIYGxTsyiiIdD9bXRbdOXRI0ny5bDVoSpnjgk2+61t4C vcw59Hu6oU/+uAuforx4KvGs2St4QmTFfjxE7To9xGMWrRJFajF2xuCFeP0g567U s7F8p2DLxL92Bku1jhi0fycmE9/327C5s4AE2IgINGOZ7vuvYUjahUr+xe29eGU7 8pMQvO0NytOXolUEnAkd54JckYHjyOKAaImGXqe43E0k1hIRJatmIJKKZaiujdlL 0mbI10RgFt7YMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:29 2026 by rpki-client