This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json) Hash identifier: 6o4WT0V3/S5d30PCuVRMvb4w6FuSLP9JM2KTe18FZ5A= Subject key identifier: 23:8E:A8:A5:79:76:81:19:07:5D:AC:9B:7E:15:C5:13:A0:54:00:93 Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Certificate serial: 019C4510D5253140A00770753E5607725A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft Manifest number: 10AF Signing time: Tue 10 Feb 2026 01:00:56 +0000 Manifest this update: Tue 10 Feb 2026 01:00:56 +0000 Manifest next update: Wed 11 Feb 2026 01:00:56 +0000 Files and hashes: 1: 7syofHXFJmPSL6BJ-29lF-gFfeM.roa (hash: NO9XiETKh7e/kgh6aR14rNQhQwpTu97o6Yw7GN8zhwk=) 2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: s8Z4m9YNQ7ocFr1ddcMSvePF9n0KDvVRo4noInaEl/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:d5:25:31:40:a0:07:70:75:3e:56:07:72:5a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Validity Not Before: Feb 10 01:00:56 2026 GMT Not After : Feb 11 01:00:56 2026 GMT Subject: CN=238ea8a579768119075dac9b7e15c513a0540093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:cd:12:d7:cc:41:ba:2e:b7:3b:0f:eb:4b: 1b:a5:df:30:30:8e:9b:39:03:4a:60:25:dd:92:e5: 21:09:14:f9:0b:5c:c3:e5:ac:73:65:cf:12:df:d2: d4:69:a0:91:af:22:7a:2d:0c:54:72:5d:64:67:8d: 4d:ba:71:8a:57:3f:c7:7e:da:df:0f:c8:05:36:f8: 72:c7:e8:a6:ee:6b:4c:44:1c:94:89:58:cb:0a:a5: c4:89:c6:ed:10:82:f5:b0:fb:8c:ce:ad:ed:9b:f0: e7:11:1f:13:1e:da:58:f0:e3:d3:82:1e:4f:73:6d: b4:01:ad:f9:b5:73:66:65:1d:73:f5:74:33:33:60: 06:4f:e5:a0:b5:2b:96:e7:29:23:1d:18:26:62:22: 85:ae:6a:8c:f9:c1:ab:e1:d2:03:57:04:9f:4e:f5: df:2c:5c:1a:93:ac:19:f5:65:b0:fa:ac:66:4d:1a: 40:6f:a1:dd:4f:b5:57:65:d2:7e:89:08:f4:18:43: 39:5d:6d:b7:3a:17:a4:b6:f7:55:01:2a:1c:f4:ef: 96:50:9a:dc:2c:cf:a3:b7:b4:24:5a:e8:06:c3:ac: 66:75:df:30:32:8e:41:4b:d1:30:c5:3e:12:07:4f: dd:e3:6f:64:57:f4:7e:b8:f2:b4:fe:1c:d4:20:8b: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8E:A8:A5:79:76:81:19:07:5D:AC:9B:7E:15:C5:13:A0:54:00:93 X509v3 Authority Key Identifier: keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3a:a4:f0:cd:f3:77:76:c8:68:be:ac:97:c6:85:a2:a0:31: 5c:50:9d:b7:a7:cf:f3:3c:d8:45:c9:40:44:cb:a1:d1:ea:e8: fb:8b:bd:d6:35:9e:3a:a3:d3:6e:ec:d5:2e:8f:48:ac:4b:99: 01:6d:f9:87:14:f7:c4:6a:9d:87:66:7b:a6:05:55:9d:9f:5e: e8:c0:55:89:0d:f9:1b:8f:45:2f:d9:ff:ab:27:31:0d:da:c1: 55:8a:02:24:d7:20:d9:91:eb:a9:80:c6:9a:bd:12:13:86:21: 9d:1b:18:9b:08:62:e1:8a:1b:f3:e2:ff:d3:d3:f9:03:84:12: b9:de:0c:a7:73:a4:29:99:de:b9:d9:9c:d6:9c:53:b5:99:d6: a8:8b:95:22:b7:43:ce:d5:47:d4:06:0d:9c:62:a8:52:29:df: c6:2a:7e:08:34:3c:4e:32:ce:1b:14:43:38:3e:15:39:57:37: e1:c1:94:ea:f5:31:6d:ab:b5:63:dd:47:8e:b0:2c:08:d3:d0: 12:7d:a9:90:0d:0e:78:a7:3f:ea:2a:26:d4:eb:e0:a8:b9:aa: 0d:39:71:f5:00:5a:00:a5:1a:f0:99:39:67:3f:76:58:71:c1: fa:bf:1a:08:de:5d:a0:75:d9:dd:70:39:e2:f6:ec:67:aa:3b: d1:85:42:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFENUlMUCgB3B1PlYHclqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzODQyNDFhZGU1ZjI2MWFjOGVjZTg0M2U1ZTdkYjdlZTEw OGUzM2MwHhcNMjYwMjEwMDEwMDU2WhcNMjYwMjExMDEwMDU2WjAzMTEwLwYDVQQD EygyMzhlYThhNTc5NzY4MTE5MDc1ZGFjOWI3ZTE1YzUxM2EwNTQwMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnjNEtfMQboutzsP60sbpd8wMI6b OQNKYCXdkuUhCRT5C1zD5axzZc8S39LUaaCRryJ6LQxUcl1kZ41NunGKVz/Hftrf D8gFNvhyx+im7mtMRByUiVjLCqXEicbtEIL1sPuMzq3tm/DnER8THtpY8OPTgh5P c220Aa35tXNmZR1z9XQzM2AGT+WgtSuW5ykjHRgmYiKFrmqM+cGr4dIDVwSfTvXf LFwak6wZ9WWw+qxmTRpAb6HdT7VXZdJ+iQj0GEM5XW23OhektvdVASoc9O+WUJrc LM+jt7QkWugGw6xmdd8wMo5BS9EwxT4SB0/d429kV/R+uPK0/hzUIIvkvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOOqKV5doEZB12sm34VxROgVACTMB8GA1UdIwQY MBaAFDOEJBreXyYayOzoQ+Xn237hCOM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYt YzdhYTE5ZWFiYmE3LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYtYzdhYTE5ZWFiYmE3 LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTqk8M3z d3bIaL6sl8aFoqAxXFCdt6fP8zzYRclARMuh0ero+4u91jWeOqPTbuzVLo9IrEuZ AW35hxT3xGqdh2Z7pgVVnZ9e6MBViQ35G49FL9n/qycxDdrBVYoCJNcg2ZHrqYDG mr0SE4YhnRsYmwhi4Yob8+L/09P5A4QSud4Mp3OkKZneudmc1pxTtZnWqIuVIrdD ztVH1AYNnGKoUinfxip+CDQ8TjLOGxRDOD4VOVc34cGU6vUxbau1Y91HjrAsCNPQ En2pkA0OeKc/6iom1OvgqLmqDTlx9QBaAKUa8Jk5Zz92WHHB+r8aCN5doHXZ3XA5 4vbsZ6o70YVCNw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:18:49 2026 by rpki-client