This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json) Hash identifier: +5F2awbfHSmM5sGuywfnheHA28SHRQbfPhKcj4nkdII= Subject key identifier: 86:0F:96:9E:33:0F:7C:7A:03:AD:F5:85:FB:4C:E3:86:4F:10:40:57 Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0 Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0 Certificate serial: 019C420FAEFDEBC603A27184938E763D76C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft Manifest number: 0A75 Signing time: Mon 09 Feb 2026 11:00:49 +0000 Manifest this update: Mon 09 Feb 2026 11:00:49 +0000 Manifest next update: Tue 10 Feb 2026 11:00:49 +0000 Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: rPDfGfrqcvbiZiC85hk4/xMQIEzf1rr7JrexKGInwLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ae:fd:eb:c6:03:a2:71:84:93:8e:76:3d:76:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0 Validity Not Before: Feb 9 11:00:49 2026 GMT Not After : Feb 10 11:00:49 2026 GMT Subject: CN=860f969e330f7c7a03adf585fb4ce3864f104057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:97:d6:7f:61:f7:df:3c:ea:8a:68:68:54: c9:f6:75:23:3b:ee:dd:fe:64:0d:d7:ff:a1:1a:7e: 39:35:7c:bc:ee:33:87:49:98:81:0c:72:46:be:61: 78:e2:5a:ca:0a:3d:c8:1e:31:05:18:fc:92:84:38: e6:22:46:18:26:0b:7f:f0:64:fc:fa:bf:86:f2:2d: 00:a3:be:8e:0f:29:9c:18:14:e8:4d:70:45:cf:8f: aa:cd:8a:79:eb:0d:50:56:d6:dd:77:26:8f:bf:37: f3:60:be:41:78:be:e6:b3:4c:4a:a8:6d:09:ed:8c: cd:ce:73:ee:b0:90:c1:7c:a6:ee:be:54:06:a4:77: af:5d:67:48:a6:b0:0f:9a:7e:32:f2:26:7b:c1:b9: ab:66:cc:03:02:9c:26:a2:d0:1c:e7:09:ce:6b:a2: f1:0e:8f:00:c3:4e:bc:83:1d:72:fd:f6:24:73:65: ce:d6:22:28:0c:8e:be:13:44:c6:cb:77:cf:00:e2: 78:1f:b4:b1:9b:74:6c:26:00:59:76:dd:6b:4d:ff: 5b:61:4b:74:31:72:d5:ad:6b:0b:97:98:4c:dc:91: d9:f5:eb:43:a6:b9:2b:99:2e:64:8b:5c:91:52:cc: 95:cd:1e:37:65:bd:5a:0c:c8:9c:5b:b9:35:8d:66: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0F:96:9E:33:0F:7C:7A:03:AD:F5:85:FB:4C:E3:86:4F:10:40:57 X509v3 Authority Key Identifier: keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:14:da:63:4a:32:71:b9:45:bc:3d:93:d3:d0:56:60:70:2b: 4e:9c:15:cb:4e:5d:31:62:95:b5:39:2e:84:b3:7f:76:00:ed: 80:49:6d:74:ab:2c:8e:88:19:72:09:55:20:78:39:fb:4d:7f: 1e:e1:2e:c6:ab:d3:91:31:be:2b:73:b9:2b:2d:41:6f:2a:09: 73:01:cf:e8:0d:f9:28:75:51:11:97:e7:99:7c:49:9e:a3:74: 97:08:f1:d6:15:c3:44:31:92:2b:b9:61:cb:af:8f:e7:bc:cd: d7:f9:d9:f1:71:a3:7b:0a:65:f9:76:96:8a:32:57:62:7d:66: af:19:2e:5a:b3:37:84:bc:e4:38:6f:b4:d2:47:db:54:0f:e5: e4:ec:8c:9e:e5:1d:84:c2:50:5b:2c:16:04:56:67:9c:25:15: dc:03:b9:8e:25:3c:bf:9c:33:ee:fb:14:0b:87:56:4e:6a:09: 25:ae:d6:15:45:0a:8d:c9:ff:98:b1:29:b2:98:9b:5b:11:ef: 9b:e4:54:4b:14:83:47:66:47:1c:3b:84:c0:d7:68:96:c4:b7: cb:f9:e6:c8:34:78:a5:f8:05:4f:7e:76:44:c3:1b:7b:2a:ab: 66:22:d9:2c:0d:0f:e0:89:7e:cd:10:c5:bd:36:49:19:90:03: 20:8a:f0:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD67968YDonGEk452PXbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTdmODkyMmFiODQ2YTI5ODE5ZWE4MjRiYjFjNjFiMDZl MzEzYjAwHhcNMjYwMjA5MTEwMDQ5WhcNMjYwMjEwMTEwMDQ5WjAzMTEwLwYDVQQD Eyg4NjBmOTY5ZTMzMGY3YzdhMDNhZGY1ODVmYjRjZTM4NjRmMTA0MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdKX1n9h99886opoaFTJ9nUjO+7d /mQN1/+hGn45NXy87jOHSZiBDHJGvmF44lrKCj3IHjEFGPyShDjmIkYYJgt/8GT8 +r+G8i0Ao76ODymcGBToTXBFz4+qzYp56w1QVtbddyaPvzfzYL5BeL7ms0xKqG0J 7YzNznPusJDBfKbuvlQGpHevXWdIprAPmn4y8iZ7wbmrZswDApwmotAc5wnOa6Lx Do8Aw068gx1y/fYkc2XO1iIoDI6+E0TGy3fPAOJ4H7Sxm3RsJgBZdt1rTf9bYUt0 MXLVrWsLl5hM3JHZ9etDprkrmS5ki1yRUsyVzR43Zb1aDMicW7k1jWYRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYPlp4zD3x6A631hftM44ZPEEBXMB8GA1UdIwQY MBaAFJvn+JIquEaimBnqgkuxxhsG4xOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2Qt YjUzOTY3YTJjOTM4LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2QtYjUzOTY3YTJjOTM4 LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBTaY0oy cblFvD2T09BWYHArTpwVy05dMWKVtTkuhLN/dgDtgEltdKssjogZcglVIHg5+01/ HuEuxqvTkTG+K3O5Ky1BbyoJcwHP6A35KHVREZfnmXxJnqN0lwjx1hXDRDGSK7lh y6+P57zN1/nZ8XGjewpl+XaWijJXYn1mrxkuWrM3hLzkOG+00kfbVA/l5OyMnuUd hMJQWywWBFZnnCUV3AO5jiU8v5wz7vsUC4dWTmoJJa7WFUUKjcn/mLEpspibWxHv m+RUSxSDR2ZHHDuEwNdolsS3y/nmyDR4pfgFT352RMMbeyqrZiLZLA0P4Il+zRDF vTZJGZADIIrwGg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:39 2026 by rpki-client