This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json) Hash identifier: GfTrbPmgIFxot+FCB8qxrZVu8TrwVlV6YCC8tVnAlPk= Subject key identifier: 11:4B:FD:A9:A7:1D:EF:14:E6:FF:F6:8F:66:B2:AD:20:83:C0:50:CC Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69 Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69 Certificate serial: 019C432246DC7B7FE063D5DA8CEE647D78AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:45 +0000 Manifest this update: Mon 09 Feb 2026 16:00:45 +0000 Manifest next update: Tue 10 Feb 2026 16:00:45 +0000 Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: E8ADkzasmoYdf5WJdnQ/DeU52NtvR7l8+tpgcrAZ+60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:46:dc:7b:7f:e0:63:d5:da:8c:ee:64:7d:78:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69 Validity Not Before: Feb 9 16:00:45 2026 GMT Not After : Feb 10 16:00:45 2026 GMT Subject: CN=114bfda9a71def14e6fff68f66b2ad2083c050cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:0b:09:f4:fa:3e:0e:6c:36:2f:5a:1f:a3: 1c:ac:29:8e:b0:79:9e:b5:63:60:e8:5d:1e:60:55: 29:7c:2b:b6:e4:48:b4:8a:de:65:9f:6d:1b:15:dc: 4c:70:a4:1d:ec:df:d2:7b:85:90:31:81:1e:68:61: 63:45:e9:b6:e9:cd:03:e5:fe:33:83:a2:b0:45:60: 65:84:bb:1d:7c:65:81:d7:75:cb:f9:53:b7:c9:d7: 2a:45:d6:65:2c:ba:bf:fc:41:d0:be:01:a4:ac:29: ab:e0:6d:ef:9b:3d:49:24:63:38:6e:1a:72:5c:a9: d4:88:1a:68:c9:dd:01:8a:5a:33:e7:90:99:0c:ac: 38:df:51:4c:5e:b8:b7:c3:ab:b3:56:7a:e3:40:d8: b4:d1:28:6e:44:0e:51:58:fc:a3:c6:3e:00:d3:9f: 06:db:a8:46:8d:4a:cb:56:b8:8e:65:f5:58:ab:88: 30:53:09:f5:b8:05:68:67:43:1e:37:c6:99:a6:b2: fc:35:a6:c6:0d:c6:65:d3:80:e3:7a:cf:cb:bc:7d: 98:31:96:f2:a6:96:eb:86:e8:bc:b7:3e:8a:be:c4: 88:2c:9e:d6:af:41:ac:13:34:7e:4d:ba:f8:09:df: 1e:a6:c8:84:06:59:f6:4d:8b:bd:0e:cf:9d:83:54: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4B:FD:A9:A7:1D:EF:14:E6:FF:F6:8F:66:B2:AD:20:83:C0:50:CC X509v3 Authority Key Identifier: keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:65:04:d1:72:42:33:2d:14:83:b0:7f:1a:87:ee:3f:fd:a1: e2:97:e6:c4:4e:ab:c8:b3:5e:81:79:75:15:8b:b8:c4:e5:62: 0b:d2:fe:d3:5d:48:e2:51:d2:65:7f:ab:47:7c:67:ce:bd:60: f0:eb:f6:47:62:0e:9a:d4:50:28:06:6b:95:a6:ac:f4:59:f1: 09:0d:ce:01:3a:cf:c1:81:bf:bf:02:ae:9a:2d:84:6a:86:6f: 80:15:71:16:9e:6c:4c:55:f9:17:86:1b:84:c3:8b:37:78:22: fb:b6:86:72:49:c9:0b:56:f2:69:f6:50:96:8a:75:0b:f7:a1: b3:7c:1f:d7:11:87:d6:8a:1b:f6:34:e4:7c:c3:25:31:b7:6d: f5:64:4f:e0:a8:82:47:e8:92:51:83:b3:46:35:3b:a9:e7:f4: 4e:21:6b:87:3a:51:2c:fb:7a:19:f4:a9:f5:13:d8:84:da:94: df:df:27:e7:c0:4d:ac:e0:f2:7b:ee:16:54:a1:a8:c0:74:3d: db:2b:67:9a:0b:5d:2a:f9:62:0c:0d:57:93:13:d3:50:4d:1e: ac:22:1e:fb:ff:93:9a:5d:93:c0:da:a9:76:c3:ac:41:cb:63: f0:ce:99:e7:59:2f:f5:60:42:6e:12:e8:d2:fb:c9:6b:52:7b: ca:6e:f1:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkbce3/gY9XajO5kfXiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTRkMTQ1ZWU4OWIyN2IxNTUzZDU1MWMyMGExNWJjNmJi ZjZkNjkwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD EygxMTRiZmRhOWE3MWRlZjE0ZTZmZmY2OGY2NmIyYWQyMDgzYzA1MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosULCfT6Pg5sNi9aH6McrCmOsHme tWNg6F0eYFUpfCu25Ei0it5ln20bFdxMcKQd7N/Se4WQMYEeaGFjRem26c0D5f4z g6KwRWBlhLsdfGWB13XL+VO3ydcqRdZlLLq//EHQvgGkrCmr4G3vmz1JJGM4bhpy XKnUiBpoyd0Biloz55CZDKw431FMXri3w6uzVnrjQNi00ShuRA5RWPyjxj4A058G 26hGjUrLVriOZfVYq4gwUwn1uAVoZ0MeN8aZprL8NabGDcZl04Djes/LvH2YMZby ppbrhui8tz6KvsSILJ7Wr0GsEzR+Tbr4Cd8epsiEBln2TYu9Ds+dg1TznQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFL/amnHe8U5v/2j2ayrSCDwFDMMB8GA1UdIwQY MBaAFOKk0UXuibJ7FVPVUcIKFbxrv21pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEt YzNiOWYyMDEzMzJlLzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEtYzNiOWYyMDEzMzJl LzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2UE0XJC My0Ug7B/GofuP/2h4pfmxE6ryLNegXl1FYu4xOViC9L+011I4lHSZX+rR3xnzr1g 8Ov2R2IOmtRQKAZrlaas9FnxCQ3OATrPwYG/vwKumi2EaoZvgBVxFp5sTFX5F4Yb hMOLN3gi+7aGcknJC1byafZQlop1C/ehs3wf1xGH1oob9jTkfMMlMbdt9WRP4KiC R+iSUYOzRjU7qef0TiFrhzpRLPt6GfSp9RPYhNqU398n58BNrODye+4WVKGowHQ9 2ytnmgtdKvliDA1XkxPTUE0erCIe+/+Tml2TwNqpdsOsQctj8M6Z51kv9WBCbhLo 0vvJa1J7ym7xIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:57 2026 by rpki-client