This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json) Hash identifier: Oty1nwZ5jmYwEV7P8OXaXyXSdSe4RB5HmA1ySsBY7Ho= Subject key identifier: 2C:C9:EA:87:AC:AC:ED:1D:2A:E2:D2:69:8E:D4:F6:EC:75:E7:77:CB Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11 Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611 Certificate serial: 019C43C6B6AABB2C284063F008AA92277525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 19:00:22 +0000 Manifest this update: Mon 09 Feb 2026 19:00:22 +0000 Manifest next update: Tue 10 Feb 2026 19:00:22 +0000 Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: 1MX3+wJNhCX0kCBn6/q3kvFfbCE36faoFHIv+a9hiI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b6:aa:bb:2c:28:40:63:f0:08:aa:92:27:75:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611 Validity Not Before: Feb 9 19:00:22 2026 GMT Not After : Feb 10 19:00:22 2026 GMT Subject: CN=2cc9ea87acaced1d2ae2d2698ed4f6ec75e777cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:c6:e8:97:33:94:03:8f:94:1a:c8:46:32: 05:e2:12:91:be:b9:51:33:a6:96:05:38:ae:7c:5c: cd:0b:ae:a9:ea:a3:77:68:b2:03:44:b3:9b:5e:bc: 51:ae:72:c5:fa:b3:13:7b:79:3a:16:1b:0d:60:77: 98:f5:c8:35:14:b2:a7:13:f6:41:53:a7:66:f9:75: 03:fe:7a:05:93:6b:aa:ed:3b:99:8b:bd:d5:0b:9c: 11:3f:11:08:cc:7b:53:aa:c9:97:80:9d:14:e6:d9: cf:7b:e3:dc:ed:39:05:bc:32:6e:88:da:fa:87:88: b1:4c:dd:f5:35:c4:61:5c:db:8e:79:c1:69:c7:49: 2a:db:0f:00:29:a5:c7:37:b3:86:2b:48:ac:40:d0: a8:50:48:0e:e9:b9:8d:35:8c:ec:c1:92:9f:60:b0: 78:6a:29:73:2e:72:68:d8:cd:56:ee:ef:48:34:88: 88:e0:05:21:4e:b9:48:2d:a6:40:31:89:29:12:eb: 75:7d:4c:ea:40:5c:16:cd:db:0a:d6:71:ea:93:e1: 62:02:92:01:a0:92:61:f6:ed:24:27:48:87:4f:32: 8c:3f:fe:24:6d:0f:93:01:44:c0:74:8a:c5:10:c9: a2:22:32:b4:40:04:8a:a7:43:53:e2:19:7b:63:05: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C9:EA:87:AC:AC:ED:1D:2A:E2:D2:69:8E:D4:F6:EC:75:E7:77:CB X509v3 Authority Key Identifier: keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:49:9f:72:1f:9f:17:8f:28:fe:ce:99:1b:19:33:fa:3b:ce: 81:5d:7d:d2:6f:28:80:e5:2c:ab:42:72:46:7f:50:0b:e4:bf: 7f:ec:e6:e7:91:86:74:a9:5c:46:0c:e1:dd:cf:00:48:83:47: 18:f7:45:d0:bd:3c:5a:fa:07:7f:7d:7f:87:46:c3:dc:08:6a: f5:f0:33:14:ef:88:57:83:90:52:40:70:34:71:5f:ce:94:bd: af:f6:02:d8:db:20:af:0e:f4:72:6b:b4:8f:9e:d0:37:dd:89: da:fe:d4:bd:12:37:e3:e4:3f:34:bd:99:35:09:f8:59:08:02: 13:24:ef:d3:fa:5f:b7:87:57:5b:c9:a0:86:73:af:0c:4b:ec: f0:bc:a6:e6:c4:91:1f:5a:ff:b3:3f:b0:96:96:e7:12:ee:9e: 08:3d:5d:94:43:3c:f1:2f:02:4e:20:e3:d2:58:97:f8:4f:f1: 25:f6:e8:d3:ec:4d:6c:07:f5:9f:77:1d:46:22:41:83:fd:10: e6:7f:fa:9f:87:36:85:2e:65:e2:58:5e:3b:90:f4:51:bf:cb: fb:b7:43:95:4a:83:15:8c:49:a8:cb:0d:f9:c5:9b:5e:76:3b: 28:70:19:f6:a0:64:b5:d1:61:b0:90:0b:4b:09:3f:0f:b4:d7: d4:76:be:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxraquywoQGPwCKqSJ3UlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODNkOTI4MWE3YTUwOGFiZmM0OTUzMDRhZTk5Yzk4YzA0 MmM2MTEwHhcNMjYwMjA5MTkwMDIyWhcNMjYwMjEwMTkwMDIyWjAzMTEwLwYDVQQD EygyY2M5ZWE4N2FjYWNlZDFkMmFlMmQyNjk4ZWQ0ZjZlYzc1ZTc3N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvrG6JczlAOPlBrIRjIF4hKRvrlR M6aWBTiufFzNC66p6qN3aLIDRLObXrxRrnLF+rMTe3k6FhsNYHeY9cg1FLKnE/ZB U6dm+XUD/noFk2uq7TuZi73VC5wRPxEIzHtTqsmXgJ0U5tnPe+Pc7TkFvDJuiNr6 h4ixTN31NcRhXNuOecFpx0kq2w8AKaXHN7OGK0isQNCoUEgO6bmNNYzswZKfYLB4 ailzLnJo2M1W7u9INIiI4AUhTrlILaZAMYkpEut1fUzqQFwWzdsK1nHqk+FiApIB oJJh9u0kJ0iHTzKMP/4kbQ+TAUTAdIrFEMmiIjK0QASKp0NT4hl7YwXzPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzJ6oesrO0dKuLSaY7U9ux153fLMB8GA1UdIwQY MBaAFGuD2SgaelCKv8SVMErpnJjAQsYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzct MDNmZWYzMmFmNzA2LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzctMDNmZWYzMmFmNzA2 LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUmfch+f F48o/s6ZGxkz+jvOgV190m8ogOUsq0JyRn9QC+S/f+zm55GGdKlcRgzh3c8ASINH GPdF0L08WvoHf31/h0bD3Ahq9fAzFO+IV4OQUkBwNHFfzpS9r/YC2Nsgrw70cmu0 j57QN92J2v7UvRI34+Q/NL2ZNQn4WQgCEyTv0/pft4dXW8mghnOvDEvs8Lym5sSR H1r/sz+wlpbnEu6eCD1dlEM88S8CTiDj0liX+E/xJfbo0+xNbAf1n3cdRiJBg/0Q 5n/6n4c2hS5l4lheO5D0Ub/L+7dDlUqDFYxJqMsN+cWbXnY7KHAZ9qBktdFhsJAL Swk/D7TX1Ha+Cg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:38 2026 by rpki-client