This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json) Hash identifier: iT/3jzC98Sga5r99MhKMI2kO67ojxty8cSlZUMkFgxE= Subject key identifier: A5:71:77:51:A7:A2:7F:2A:6C:06:8C:78:C7:54:04:72:BD:E5:C9:40 Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77 Certificate serial: 019C44A25A1177D009A7F52A78FFD55B4EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft Manifest number: 0EFA Signing time: Mon 09 Feb 2026 23:00:16 +0000 Manifest this update: Mon 09 Feb 2026 23:00:16 +0000 Manifest next update: Tue 10 Feb 2026 23:00:16 +0000 Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: 2bubB7g5Ma1/dOgDRAvMAauewLXOL/Kr0iH0XmyvVRI=) 2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:5a:11:77:d0:09:a7:f5:2a:78:ff:d5:5b:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77 Validity Not Before: Feb 9 23:00:16 2026 GMT Not After : Feb 10 23:00:16 2026 GMT Subject: CN=a5717751a7a27f2a6c068c78c7540472bde5c940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:e1:20:ef:90:bc:c6:1f:9e:72:7a:02:05: 21:e8:2a:e9:18:98:8a:f4:9f:55:31:80:3a:df:1c: 28:8a:33:88:34:6d:78:66:30:84:90:c0:71:3d:1e: 44:4b:b4:0d:06:94:f1:a9:6e:07:d3:8c:52:77:ab: 62:fa:1e:1e:ac:33:02:68:8b:51:4f:bd:8d:1d:0d: 2f:ac:7b:27:01:63:80:0b:9d:c1:3a:ea:ec:9c:20: f6:21:36:67:ac:c9:62:e5:6e:4f:73:81:17:12:7c: b3:4e:e9:99:c0:f2:3e:84:05:02:63:3c:64:a9:d3: 66:1a:14:c1:6b:01:2c:05:9b:32:0b:a6:60:96:28: 09:d6:89:10:3d:22:dc:0c:75:16:27:78:a9:8a:9c: 64:9f:d8:61:8d:49:bd:26:a6:22:36:be:e4:74:63: 79:4d:8d:69:f1:2c:6c:8d:77:15:a9:77:0b:1f:c6: 65:c9:5c:f2:d8:5d:be:10:6a:8b:a5:47:97:ce:83: 55:20:86:5c:00:ec:73:8b:43:c1:2f:e3:17:5e:c4: 43:a2:42:51:b3:36:29:c0:b1:c3:e1:92:43:31:71: f8:f6:b1:95:15:5d:eb:e8:16:bd:2f:5a:fc:70:ee: c2:9e:87:2a:db:d9:67:e1:49:07:16:ab:ed:34:da: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:71:77:51:A7:A2:7F:2A:6C:06:8C:78:C7:54:04:72:BD:E5:C9:40 X509v3 Authority Key Identifier: keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d7:5e:ac:ec:74:3f:5e:c7:05:9f:db:bd:1b:07:24:96:76: b4:bf:07:4e:1f:ac:23:d8:03:a0:8f:eb:b1:de:37:4f:e9:48: f4:e2:19:55:9e:e8:14:25:94:a6:fb:97:83:26:6f:8d:e3:c9: af:de:32:96:92:1b:9a:d9:13:f2:a1:61:dc:4a:fe:cd:ca:1e: 9f:96:99:58:bd:72:2b:c8:2d:ed:84:91:ad:3d:8d:20:d9:40: 2a:9e:26:d9:0c:c0:d8:ff:19:e3:a3:3a:7d:c2:56:ba:d5:8f: c7:56:99:7a:4b:16:bd:8f:d2:16:74:2f:74:c9:dd:12:40:7f: 6c:43:3d:b6:72:54:c6:46:08:f1:a6:82:6d:e6:22:1e:eb:e7: 07:d1:4d:cf:a8:5e:ec:03:6b:9a:d2:3e:f6:d9:33:db:db:a4: 62:cf:63:c5:41:8e:82:13:cd:ec:b2:75:33:b5:99:41:a9:93: 9d:6a:18:e1:4d:b5:d1:e0:4b:de:8e:ae:e9:78:2a:78:93:20: f0:19:a9:27:f3:dc:2a:91:7d:04:9b:d8:4f:d5:da:98:4b:b3: a4:bf:2e:5e:f8:b3:a0:31:e4:31:25:62:a4:a1:49:51:e6:1c: e4:1b:9b:31:52:dc:ab:12:53:aa:79:1c:6f:02:f9:ab:4b:8b: 54:c2:3a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEoloRd9AJp/UqeP/VW07aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGM5YzUwY2Y0ZTJkYWMwNWUxZjA0MzI4MjI0ZTIwYTQ2 MDVkNzcwHhcNMjYwMjA5MjMwMDE2WhcNMjYwMjEwMjMwMDE2WjAzMTEwLwYDVQQD EyhhNTcxNzc1MWE3YTI3ZjJhNmMwNjhjNzhjNzU0MDQ3MmJkZTVjOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUfhIO+QvMYfnnJ6AgUh6CrpGJiK 9J9VMYA63xwoijOING14ZjCEkMBxPR5ES7QNBpTxqW4H04xSd6ti+h4erDMCaItR T72NHQ0vrHsnAWOAC53BOursnCD2ITZnrMli5W5Pc4EXEnyzTumZwPI+hAUCYzxk qdNmGhTBawEsBZsyC6ZgligJ1okQPSLcDHUWJ3ipipxkn9hhjUm9JqYiNr7kdGN5 TY1p8SxsjXcVqXcLH8ZlyVzy2F2+EGqLpUeXzoNVIIZcAOxzi0PBL+MXXsRDokJR szYpwLHD4ZJDMXH49rGVFV3r6Ba9L1r8cO7Cnocq29ln4UkHFqvtNNo8NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVxd1Gnon8qbAaMeMdUBHK95clAMB8GA1UdIwQY MBaAFOJMnFDPTi2sBeHwQygiTiCkYF13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGIt MGJmYjg2ODg0NDA0LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGItMGJmYjg2ODg0NDA0 LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtderOx0 P17HBZ/bvRsHJJZ2tL8HTh+sI9gDoI/rsd43T+lI9OIZVZ7oFCWUpvuXgyZvjePJ r94ylpIbmtkT8qFh3Er+zcoen5aZWL1yK8gt7YSRrT2NINlAKp4m2QzA2P8Z46M6 fcJWutWPx1aZeksWvY/SFnQvdMndEkB/bEM9tnJUxkYI8aaCbeYiHuvnB9FNz6he 7ANrmtI+9tkz29ukYs9jxUGOghPN7LJ1M7WZQamTnWoY4U210eBL3o6u6XgqeJMg 8BmpJ/PcKpF9BJvYT9XamEuzpL8uXvizoDHkMSVipKFJUeYc5BubMVLcqxJTqnkc bwL5q0uLVMI6Ig== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:50 2026 by rpki-client