This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json) Hash identifier: OdxOvYkYfwku3UHDEecNZv+GVK4D+gUfuytMNnkl37g= Subject key identifier: 0A:4F:3D:37:A5:48:D8:F3:AA:B8:9C:3E:F3:E0:67:FA:3A:21:FD:66 Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0 Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0 Certificate serial: 019C427D948AD1B57777169903443F467D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft Manifest number: 0BFB Signing time: Mon 09 Feb 2026 13:00:52 +0000 Manifest this update: Mon 09 Feb 2026 13:00:52 +0000 Manifest next update: Tue 10 Feb 2026 13:00:52 +0000 Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: jimPgL8DqL4SZ6+YdXD7O8Wa2HkQVc/AT+SN87xCEg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:94:8a:d1:b5:77:77:16:99:03:44:3f:46:7d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0 Validity Not Before: Feb 9 13:00:52 2026 GMT Not After : Feb 10 13:00:52 2026 GMT Subject: CN=0a4f3d37a548d8f3aab89c3ef3e067fa3a21fd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:0d:de:ba:88:e0:c8:e6:3d:14:e1:43:1c: 39:ab:2f:cb:1d:82:1a:22:f4:7f:88:f6:52:60:e5: 9b:78:94:f2:3b:92:2a:8a:d1:8e:65:09:d5:2d:4e: ad:83:50:3a:0b:24:c5:5f:dd:49:3f:35:e3:21:b5: b5:59:8e:30:e0:bf:76:76:b1:06:a8:a4:c6:c7:5c: cf:2a:d6:2a:c6:bc:79:de:87:64:c6:9e:00:8b:4d: 01:eb:31:20:84:36:96:53:da:cb:f5:c1:79:ed:b4: 44:11:25:86:d3:1c:cf:d9:ba:b5:45:98:c4:c9:8f: 5f:f0:ab:be:d3:85:ae:fd:b0:c3:81:3b:3e:86:c9: 18:97:09:04:47:7b:a5:b7:01:e1:28:64:69:aa:91: 5d:e6:4f:eb:4f:08:e9:f8:54:d5:40:60:2d:19:d9: 91:18:c0:01:e6:69:ae:75:26:89:a9:56:00:d5:2c: 95:6b:7c:b3:c5:dd:f9:0a:9e:2e:19:f2:02:0a:5c: 71:9f:d4:ac:24:b8:c5:b9:ab:45:56:2d:fa:1e:ec: 5f:0c:80:a7:0c:ed:d8:e1:ee:a3:41:5c:08:d7:d1: 37:e7:96:97:db:10:94:69:fa:82:a1:07:cc:e9:f6: 56:fa:09:d4:4e:72:93:f3:a1:7a:ce:41:58:15:82: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4F:3D:37:A5:48:D8:F3:AA:B8:9C:3E:F3:E0:67:FA:3A:21:FD:66 X509v3 Authority Key Identifier: keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:30:f3:61:ed:aa:c7:11:c1:86:ca:89:5d:b7:54:a2:00:16: 10:3f:5a:56:8b:0b:eb:4e:aa:40:3a:a5:31:07:91:09:f4:c2: 00:c9:0d:e9:00:0b:ba:7c:d0:86:41:87:f9:3c:60:96:49:97: f2:ee:e6:ee:ac:ec:a3:6b:f0:13:d5:24:75:bb:22:c4:12:2d: d6:f4:90:10:27:ea:73:2a:14:25:2a:49:84:11:9b:ad:f5:92: e1:fe:ab:89:3c:40:49:d8:46:fe:9c:ab:93:3a:ca:30:37:9a: 33:7c:1d:f1:57:99:80:1b:97:e3:fb:e5:c9:90:5b:a7:81:1d: ee:1e:90:d9:05:71:65:c3:d0:ef:46:9e:e3:69:0b:7c:47:cf: d3:d8:56:06:6f:23:34:ba:7c:98:9d:95:f0:a3:54:d0:2f:14: d6:c2:f6:5f:0f:87:b8:5b:13:a8:f5:55:37:e3:b6:4c:e4:84: db:94:50:7f:42:5f:9a:d6:cc:95:94:f8:0d:7f:35:a8:e8:e8: f5:b2:6a:6c:a3:49:45:c2:6d:ef:bc:b8:f4:82:c7:fd:05:30: 59:7f:a3:52:85:db:f0:72:60:72:de:c6:78:db:ec:63:75:02: e4:42:d0:79:24:6d:1b:9d:f9:27:67:08:c2:ea:73:fa:78:43: 9a:87:07:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZSK0bV3dxaZA0Q/Rn1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOGZmMWM5NjY2ZmUxOTVmMjRhYTFmZThjMzQ1ZDc5YzQ4 ZTdiYzAwHhcNMjYwMjA5MTMwMDUyWhcNMjYwMjEwMTMwMDUyWjAzMTEwLwYDVQQD EygwYTRmM2QzN2E1NDhkOGYzYWFiODljM2VmM2UwNjdmYTNhMjFmZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1MN3rqI4MjmPRThQxw5qy/LHYIa IvR/iPZSYOWbeJTyO5IqitGOZQnVLU6tg1A6CyTFX91JPzXjIbW1WY4w4L92drEG qKTGx1zPKtYqxrx53odkxp4Ai00B6zEghDaWU9rL9cF57bREESWG0xzP2bq1RZjE yY9f8Ku+04Wu/bDDgTs+hskYlwkER3ultwHhKGRpqpFd5k/rTwjp+FTVQGAtGdmR GMAB5mmudSaJqVYA1SyVa3yzxd35Cp4uGfICClxxn9SsJLjFuatFVi36HuxfDICn DO3Y4e6jQVwI19E355aX2xCUafqCoQfM6fZW+gnUTnKT86F6zkFYFYJ4OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApPPTelSNjzqricPvPgZ/o6If1mMB8GA1UdIwQY MBaAFD+P8clmb+GV8kqh/ow0XXnEjnvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQt ZmJkMzYxY2I4MTkzLzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQtZmJkMzYxY2I4MTkz LzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjDzYe2q xxHBhsqJXbdUogAWED9aVosL606qQDqlMQeRCfTCAMkN6QALunzQhkGH+TxglkmX 8u7m7qzso2vwE9UkdbsixBIt1vSQECfqcyoUJSpJhBGbrfWS4f6riTxASdhG/pyr kzrKMDeaM3wd8VeZgBuX4/vlyZBbp4Ed7h6Q2QVxZcPQ70ae42kLfEfP09hWBm8j NLp8mJ2V8KNU0C8U1sL2Xw+HuFsTqPVVN+O2TOSE25RQf0JfmtbMlZT4DX81qOjo 9bJqbKNJRcJt77y49ILH/QUwWX+jUoXb8HJgct7GeNvsY3UC5ELQeSRtG535J2cI wupz+nhDmocHRA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:47 2026 by rpki-client