This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json) Hash identifier: b7aI5/fzRDQGr6Yp3jW2m0kD8wvHtq5jw+zEPFkAuYw= Subject key identifier: EA:2C:0B:D6:F9:42:03:34:98:06:38:96:33:99:0A:D4:77:70:51:47 Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88 Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288 Certificate serial: 019C41A217E4B2FB76690556DE6CDE728B9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft Manifest number: 0621 Signing time: Mon 09 Feb 2026 09:01:07 +0000 Manifest this update: Mon 09 Feb 2026 09:01:07 +0000 Manifest next update: Tue 10 Feb 2026 09:01:07 +0000 Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: MHbUyWbfv5PShijI33X4O34ZEUUOQB4rXDwurHvV8mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:17:e4:b2:fb:76:69:05:56:de:6c:de:72:8b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288 Validity Not Before: Feb 9 09:01:07 2026 GMT Not After : Feb 10 09:01:07 2026 GMT Subject: CN=ea2c0bd6f94203349806389633990ad477705147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:02:a5:60:05:ee:24:b7:e1:4e:8d:6f:ff: 49:31:16:70:ae:27:1c:6e:73:1f:96:c7:51:59:d6: fd:e9:ae:75:8a:36:f7:d7:bf:ae:a4:0a:d4:02:35: 8e:68:67:a8:f5:d4:6c:92:f1:a9:23:34:d9:3e:38: cc:c9:01:d2:af:1e:99:56:d5:c9:48:bf:92:33:23: 03:4e:fe:a5:7a:d8:76:3d:32:b1:77:cd:b2:a9:fb: 1d:05:12:7a:a2:05:92:00:96:ab:6a:30:29:44:b4: 4f:94:16:9e:42:bb:4c:cc:28:a8:49:ff:2f:8e:20: d2:c6:54:96:f5:af:e6:e5:fd:65:90:db:c7:1f:32: 2f:cf:69:7a:f7:eb:bf:7e:1d:f5:90:af:0a:64:cb: 2b:ed:4f:a6:27:d3:ba:66:06:91:50:ac:f6:33:48: 95:ca:e4:db:85:22:06:92:d4:af:67:1d:1b:6a:ba: e0:03:e9:28:1e:c3:dc:48:df:46:34:4f:c9:31:67: 67:60:45:99:f9:04:8b:cb:16:81:62:fa:c6:c2:49: a5:73:b4:43:97:98:9a:e9:9b:ea:ae:2c:97:c2:6d: aa:41:01:05:c6:0a:57:44:d0:b5:61:da:dc:ad:db: a0:59:83:11:db:0e:a3:f6:fa:1d:98:9c:45:6c:d4: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2C:0B:D6:F9:42:03:34:98:06:38:96:33:99:0A:D4:77:70:51:47 X509v3 Authority Key Identifier: keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:84:54:40:bf:5d:a3:af:26:c9:ab:7e:2f:02:b8:91:f0:df: 66:bc:53:98:85:99:a0:7c:d0:fe:b5:8a:bd:28:6f:a8:a3:6c: 6e:fb:3c:15:17:6b:7f:6b:4f:7a:25:6f:b7:62:87:e8:61:ad: 80:45:28:52:e9:57:f3:83:ea:c4:cc:18:70:51:3c:e6:c5:10: 5c:37:0f:d9:b8:d4:7c:e0:f5:a7:fe:e2:59:10:10:bb:85:90: 59:87:58:1b:96:93:06:a8:86:c1:2e:f7:fd:fd:ce:9d:28:7c: c4:b7:26:04:ac:d8:da:fb:a3:86:a8:51:a4:56:da:0c:26:a1: 7a:d2:3a:94:91:cb:ae:c8:0d:a6:bd:db:f3:b3:87:03:44:8d: c5:aa:fa:86:c5:e8:8b:de:e5:14:e9:a2:ef:ec:aa:23:95:b3: f0:eb:93:2b:35:32:2e:5f:26:57:18:53:ff:a3:81:35:68:67: 89:7e:18:95:bb:41:c4:37:6e:4a:80:6a:95:ba:70:0a:9c:35: 75:a5:62:02:94:0e:91:6e:2e:64:6e:58:03:4c:71:6e:05:37: f5:62:62:58:d7:3e:25:ce:bc:21:8d:a1:f3:0d:a2:da:93:24: f7:71:09:83:7b:89:f6:e4:e4:35:ce:d2:06:88:47:5d:f1:c5: d3:aa:c5:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohfksvt2aQVW3mzecoudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOGM4MTk2NDcyNjZmYmNiMTM5ZTY3MmE4ZmI5YTU3Y2Y1 OGIyODgwHhcNMjYwMjA5MDkwMTA3WhcNMjYwMjEwMDkwMTA3WjAzMTEwLwYDVQQD EyhlYTJjMGJkNmY5NDIwMzM0OTgwNjM4OTYzMzk5MGFkNDc3NzA1MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FcCpWAF7iS34U6Nb/9JMRZwricc bnMflsdRWdb96a51ijb317+upArUAjWOaGeo9dRskvGpIzTZPjjMyQHSrx6ZVtXJ SL+SMyMDTv6leth2PTKxd82yqfsdBRJ6ogWSAJarajApRLRPlBaeQrtMzCioSf8v jiDSxlSW9a/m5f1lkNvHHzIvz2l69+u/fh31kK8KZMsr7U+mJ9O6ZgaRUKz2M0iV yuTbhSIGktSvZx0barrgA+koHsPcSN9GNE/JMWdnYEWZ+QSLyxaBYvrGwkmlc7RD l5ia6ZvqriyXwm2qQQEFxgpXRNC1YdrcrdugWYMR2w6j9vodmJxFbNR15QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOosC9b5QgM0mAY4ljOZCtR3cFFHMB8GA1UdIwQY MBaAFK+MgZZHJm+8sTnmcqj7mlfPWLKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmU3YWYtOTdiOC00Nzc3LWJiZGQt MzAxMTdjMjBiZjQyLzEvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82YmU3YWYtOTdiOC00Nzc3LWJiZGQtMzAxMTdjMjBiZjQy LzEvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4RUQL9d o68myat+LwK4kfDfZrxTmIWZoHzQ/rWKvShvqKNsbvs8FRdrf2tPeiVvt2KH6GGt gEUoUulX84PqxMwYcFE85sUQXDcP2bjUfOD1p/7iWRAQu4WQWYdYG5aTBqiGwS73 /f3OnSh8xLcmBKzY2vujhqhRpFbaDCahetI6lJHLrsgNpr3b87OHA0SNxar6hsXo i97lFOmi7+yqI5Wz8OuTKzUyLl8mVxhT/6OBNWhniX4YlbtBxDduSoBqlbpwCpw1 daViApQOkW4uZG5YA0xxbgU39WJiWNc+Jc68IY2h8w2i2pMk93EJg3uJ9uTkNc7S BohHXfHF06rFKg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:39 2026 by rpki-client