This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json) Hash identifier: xOziP0mtdZxaXE4GpTfYBoX9AgjxepeqpkF1hBGlxaI= Subject key identifier: 62:98:99:0F:0A:2C:4A:0C:DC:4D:33:B1:16:00:42:CF:E9:C8:77:93 Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Certificate serial: 019C2E51EA40FA8ED2EDF908334C8EC4CC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft Manifest number: 1686 Signing time: Thu 05 Feb 2026 15:00:46 +0000 Manifest this update: Thu 05 Feb 2026 15:00:46 +0000 Manifest next update: Fri 06 Feb 2026 15:00:46 +0000 Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: XSf/sEvx/4rXBMF7OAZpav9EqhT3J8PjmM70usVOIWs=) 2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:51:ea:40:fa:8e:d2:ed:f9:08:33:4c:8e:c4:cc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Validity Not Before: Feb 5 15:00:46 2026 GMT Not After : Feb 6 15:00:46 2026 GMT Subject: CN=6298990f0a2c4a0cdc4d33b1160042cfe9c87793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bc:1a:44:57:31:21:f9:bb:56:99:ed:c7:ca: a1:22:e4:ca:d0:e9:e2:32:b5:be:d6:43:2f:58:57: 9c:19:97:4d:b4:da:b2:3c:86:c7:e8:91:06:b3:7b: 8a:79:d1:6a:4c:93:7c:ec:fb:92:85:1f:94:1f:73: eb:38:c0:30:8b:1d:6d:9c:55:cb:d6:d6:32:ad:e4: 6c:6e:bc:95:87:0e:3b:52:4d:07:c9:e2:6e:10:24: af:0e:43:df:38:ee:f6:50:ad:99:80:64:65:94:90: 2a:7b:65:4d:d4:e8:b8:a1:61:e1:18:0f:2a:1c:c2: 96:ee:07:c7:88:f3:a4:56:c0:6a:c3:c7:6f:3e:ee: f3:b9:6f:6f:fa:cc:e2:4c:50:5f:85:87:ff:22:e6: 5e:08:0a:09:33:c8:02:68:fa:89:f2:ad:14:c5:27: af:76:4e:c7:c7:fc:98:6e:d2:7c:5c:d1:16:cf:1f: 5c:80:5e:3e:86:07:00:ec:f6:e3:ce:da:fb:34:68: a8:d2:d7:62:9f:a7:f5:3c:62:6e:1c:bd:6c:d4:96: 15:93:42:4e:b5:f0:85:26:bc:e6:8b:64:d8:7a:c1: f8:25:45:fb:de:28:4c:f9:74:95:0b:5c:48:ba:ed: 3c:2e:5f:c0:af:1a:68:ab:31:c3:be:5f:c1:88:83: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:98:99:0F:0A:2C:4A:0C:DC:4D:33:B1:16:00:42:CF:E9:C8:77:93 X509v3 Authority Key Identifier: keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:a4:fb:da:1a:c3:fc:35:70:fa:dc:bd:f2:ff:26:28:c2: 18:07:c8:d3:3a:6a:7c:be:d7:44:74:c3:67:a2:da:1c:a9:ea: e9:61:c8:c5:2b:ce:d7:72:94:67:64:b4:3e:a1:a7:22:47:69: ff:0d:61:7c:18:b7:5e:13:8e:a2:47:18:06:38:b1:13:60:96: 26:2c:85:41:fe:92:a3:55:56:c4:91:7b:72:87:50:f6:59:91: 20:3f:83:81:26:0f:57:37:62:50:c7:78:b8:d5:ce:9e:6b:6f: 05:e9:8b:02:05:e1:bd:ed:a3:3f:2d:ed:96:a9:52:37:6e:d9: b3:ba:ec:a5:c1:ae:7f:47:46:a8:56:d8:18:69:90:5c:96:9a: c1:5d:c8:3c:9a:83:5f:39:2d:e1:f6:71:b0:8f:67:d5:98:88: 90:59:43:3a:73:b5:20:0b:ed:2c:08:b1:41:0a:36:92:5e:7c: 28:31:c1:d6:04:4e:09:c9:ec:f4:a4:07:d1:c4:2e:eb:83:34: f2:f8:79:cc:03:9c:98:28:65:a2:95:eb:40:01:fb:35:64:6d: ec:81:bf:f2:00:f3:44:53:fc:4b:bf:ec:39:84:91:3f:c9:00: ee:14:6f:3f:64:2b:ba:3a:44:55:e4:61:5e:87:20:d5:1c:a6: 8f:f1:6a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwuUepA+o7S7fkIM0yOxMybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2M0NWU4NGIwNzhkNDU4YWRmOGQ4Njc0NDVjNDZmOGM4 ZDBmYWUwHhcNMjYwMjA1MTUwMDQ2WhcNMjYwMjA2MTUwMDQ2WjAzMTEwLwYDVQQD Eyg2Mjk4OTkwZjBhMmM0YTBjZGM0ZDMzYjExNjAwNDJjZmU5Yzg3NzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47waRFcxIfm7Vpntx8qhIuTK0Oni MrW+1kMvWFecGZdNtNqyPIbH6JEGs3uKedFqTJN87PuShR+UH3PrOMAwix1tnFXL 1tYyreRsbryVhw47Uk0HyeJuECSvDkPfOO72UK2ZgGRllJAqe2VN1Oi4oWHhGA8q HMKW7gfHiPOkVsBqw8dvPu7zuW9v+sziTFBfhYf/IuZeCAoJM8gCaPqJ8q0UxSev dk7Hx/yYbtJ8XNEWzx9cgF4+hgcA7Pbjztr7NGio0tdin6f1PGJuHL1s1JYVk0JO tfCFJrzmi2TYesH4JUX73ihM+XSVC1xIuu08Ll/ArxpoqzHDvl/BiIP4VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKYmQ8KLEoM3E0zsRYAQs/pyHeTMB8GA1UdIwQY MBaAFOHMRehLB41Fit+NhnRFxG+MjQ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQt NjMyMGM0NjBhM2Y4LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQtNjMyMGM0NjBhM2Y4 LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHek+9oa w/w1cPrcvfL/JijCGAfI0zpqfL7XRHTDZ6LaHKnq6WHIxSvO13KUZ2S0PqGnIkdp /w1hfBi3XhOOokcYBjixE2CWJiyFQf6So1VWxJF7codQ9lmRID+DgSYPVzdiUMd4 uNXOnmtvBemLAgXhve2jPy3tlqlSN27Zs7rspcGuf0dGqFbYGGmQXJaawV3IPJqD Xzkt4fZxsI9n1ZiIkFlDOnO1IAvtLAixQQo2kl58KDHB1gROCcns9KQH0cQu64M0 8vh5zAOcmChlopXrQAH7NWRt7IG/8gDzRFP8S7/sOYSRP8kA7hRvP2QrujpEVeRh Xocg1Rymj/FqLA== -----END CERTIFICATE-----Generated at Thu Feb 5 20:32:16 2026 by rpki-client