This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json) Hash identifier: saxWwjfwyU+Zz2ae6jgyx/XSI7Nu1hv+3+RiLiJPUDg= Subject key identifier: 3A:CA:06:8B:BA:68:53:DE:AC:F0:FC:60:C2:E8:B8:14:BE:05:E1:A5 Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0 Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0 Certificate serial: 019C41A258AFD44BBB6895E7A36E73F46775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 09:01:24 +0000 Manifest this update: Mon 09 Feb 2026 09:01:24 +0000 Manifest next update: Tue 10 Feb 2026 09:01:24 +0000 Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=) 2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: t5/9O8431lI1knYRy0TXDaSrsOAiGhdr+qXddkPpieM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:58:af:d4:4b:bb:68:95:e7:a3:6e:73:f4:67:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0 Validity Not Before: Feb 9 09:01:24 2026 GMT Not After : Feb 10 09:01:24 2026 GMT Subject: CN=3aca068bba6853deacf0fc60c2e8b814be05e1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:b9:b7:ed:62:17:db:bc:aa:a2:a6:f1:38: b2:67:8e:b3:d2:0a:9c:d6:84:1e:be:c0:d1:b7:bc: 3a:57:83:01:e0:de:3c:1c:db:d1:65:08:43:ce:dd: 43:44:99:28:14:36:0f:79:33:72:6b:f5:3a:ed:ea: 1f:bd:56:d3:ad:4e:db:86:31:82:f3:d3:83:11:1c: 94:80:c4:7e:b2:0d:85:26:92:a4:68:50:20:e5:b5: 70:06:3f:1a:e6:65:7a:6c:e8:61:37:f6:d4:65:a0: 71:cd:e1:d2:2d:6a:36:04:d1:b6:07:5d:5f:30:b5: b6:8f:45:e8:d7:ea:74:5c:6c:56:94:5f:5a:f1:37: 3c:e2:57:4b:69:8c:52:74:17:43:06:18:46:99:73: e0:06:ef:2a:cf:84:98:09:59:b5:68:5c:b5:16:c1: 82:77:63:9a:9c:86:06:44:6a:e3:7c:d1:90:3e:1e: ac:2d:11:42:c0:9a:de:25:d2:49:56:3d:15:00:48: dd:40:8b:57:bd:23:ca:fb:76:6a:c4:19:5b:dc:43: a6:9c:0d:52:ad:15:1e:ad:e0:a3:6d:35:3a:42:fd: 34:78:da:62:6e:56:f1:04:6d:23:8c:f8:9f:4a:d7: 66:3b:82:e7:bc:f7:98:3e:22:90:a9:67:7b:bb:72: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CA:06:8B:BA:68:53:DE:AC:F0:FC:60:C2:E8:B8:14:BE:05:E1:A5 X509v3 Authority Key Identifier: keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:6e:29:08:c3:3c:2e:78:d8:f6:4f:30:0b:f9:e7:85:61: 25:0e:0b:ab:fe:c4:7c:69:fa:17:01:b7:2e:11:d1:ad:92:b5: 37:cd:af:16:75:9b:fa:8c:8e:62:d2:e4:a9:59:10:41:70:fe: 46:33:5c:a4:2f:1b:f3:67:2f:dc:bc:7c:81:ec:96:de:92:b6: be:02:f0:fd:52:1f:9c:4f:d3:27:c0:01:5d:2f:d4:a7:ac:86: 82:c0:53:96:27:98:0f:62:e3:bb:c7:c7:1d:4b:5c:44:27:ae: 95:f4:ad:6c:0f:a5:8d:40:ca:04:68:c4:3c:56:65:65:b1:ac: c8:34:73:6e:c5:ab:fc:d6:f4:66:fa:b0:9a:d3:ff:60:12:05: f9:92:f1:58:39:28:46:3d:0c:1c:93:ce:2f:2a:a3:c5:cd:1f: e8:1b:e4:35:88:6d:5d:54:58:15:c2:cb:25:f2:3e:90:ae:a0: 28:a4:64:7b:fc:14:88:55:bf:49:55:d2:7c:64:e3:be:e0:72: ab:19:93:78:a6:bc:66:52:c2:8c:8a:59:54:33:94:9b:eb:c2: 8a:bc:82:d4:5b:df:50:0b:e1:70:0d:bf:b5:9b:2b:6a:df:ee: 31:be:aa:ba:23:f4:5b:0c:57:47:c0:0f:5e:bb:a9:cd:78:44: 1b:8d:22:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoliv1Eu7aJXno25z9Gd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGNlZDNiMDlhOTA1ZWI5Njg2OWM1OGY2NmI0ZjhiNTkx NTAzYjAwHhcNMjYwMjA5MDkwMTI0WhcNMjYwMjEwMDkwMTI0WjAzMTEwLwYDVQQD EygzYWNhMDY4YmJhNjg1M2RlYWNmMGZjNjBjMmU4YjgxNGJlMDVlMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCe5t+1iF9u8qqKm8TiyZ46z0gqc 1oQevsDRt7w6V4MB4N48HNvRZQhDzt1DRJkoFDYPeTNya/U67eofvVbTrU7bhjGC 89ODERyUgMR+sg2FJpKkaFAg5bVwBj8a5mV6bOhhN/bUZaBxzeHSLWo2BNG2B11f MLW2j0Xo1+p0XGxWlF9a8Tc84ldLaYxSdBdDBhhGmXPgBu8qz4SYCVm1aFy1FsGC d2OanIYGRGrjfNGQPh6sLRFCwJreJdJJVj0VAEjdQItXvSPK+3ZqxBlb3EOmnA1S rRUereCjbTU6Qv00eNpiblbxBG0jjPifStdmO4LnvPeYPiKQqWd7u3ICGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrKBou6aFPerPD8YMLouBS+BeGlMB8GA1UdIwQY MBaAFP+M7TsJqQXrloacWPZrT4tZFQOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYt YmU1NjFjY2RlZDJjLzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYtYmU1NjFjY2RlZDJj LzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7huKQjD PC542PZPMAv554VhJQ4Lq/7EfGn6FwG3LhHRrZK1N82vFnWb+oyOYtLkqVkQQXD+ RjNcpC8b82cv3Lx8geyW3pK2vgLw/VIfnE/TJ8ABXS/Up6yGgsBTlieYD2Lju8fH HUtcRCeulfStbA+ljUDKBGjEPFZlZbGsyDRzbsWr/Nb0ZvqwmtP/YBIF+ZLxWDko Rj0MHJPOLyqjxc0f6BvkNYhtXVRYFcLLJfI+kK6gKKRke/wUiFW/SVXSfGTjvuBy qxmTeKa8ZlLCjIpZVDOUm+vCiryC1FvfUAvhcA2/tZsrat/uMb6quiP0WwxXR8AP XrupzXhEG40ing== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:24 2026 by rpki-client