This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json) Hash identifier: HksZoLK7K4w2cOrgDQzDJF3zhKzx2Hpd6mt71VSP9As= Subject key identifier: 12:17:B1:89:6D:15:49:8F:1E:09:9B:55:4B:71:FA:22:72:A5:75:53 Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940 Certificate serial: 019C41A24F7E61ABB2001A1432A021A8431E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft Manifest number: 181A Signing time: Mon 09 Feb 2026 09:01:21 +0000 Manifest this update: Mon 09 Feb 2026 09:01:21 +0000 Manifest next update: Tue 10 Feb 2026 09:01:21 +0000 Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=) 2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: AQPW0/BeiPeubw+dB+zFUS13mm9Z5rYqLVdoIaIjHgE=) 3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:4f:7e:61:ab:b2:00:1a:14:32:a0:21:a8:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940 Validity Not Before: Feb 9 09:01:21 2026 GMT Not After : Feb 10 09:01:21 2026 GMT Subject: CN=1217b1896d15498f1e099b554b71fa2272a57553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:88:41:65:83:78:64:39:48:24:c1:9c:18:64: 33:0b:12:68:34:75:54:54:c4:33:50:cd:69:60:38: 84:ff:8c:dd:20:2c:70:b3:fb:2f:b5:9a:5c:fe:f1: 45:cf:be:0f:9e:d8:41:41:2f:1a:c2:d3:bd:d2:8e: 37:6c:31:3d:57:82:7e:b1:f3:a6:00:9f:91:98:1e: b8:93:ba:8d:84:65:14:c1:a7:b5:01:24:7f:74:52: 4b:b2:74:e5:92:f4:72:e9:c7:1f:d0:87:da:9a:b8: 04:a8:1d:82:34:50:f5:25:e9:4e:55:5b:b0:d2:89: 1b:5b:0c:f8:57:9f:58:ea:83:9d:81:52:ef:3e:29: c9:5d:c5:be:76:73:f2:8a:83:be:41:fe:a6:16:e2: b3:f8:08:16:48:1a:6c:d4:84:25:10:7d:29:02:b2: 3f:b5:79:b7:06:38:12:02:a5:2d:dd:ac:9b:c3:ac: cd:a8:ed:7b:cd:7d:6d:d3:a9:0f:a4:1b:3b:17:6f: 51:6b:6a:4f:27:2f:c4:d5:7b:58:8e:34:70:74:39: 67:37:6f:1c:0d:35:7f:65:01:3a:a9:de:c6:06:83: ef:46:ef:fe:e6:91:91:b0:25:39:41:dc:e5:58:cd: 56:37:99:32:e8:68:bf:08:b7:ac:af:b4:cd:7b:e9: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:B1:89:6D:15:49:8F:1E:09:9B:55:4B:71:FA:22:72:A5:75:53 X509v3 Authority Key Identifier: keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a1:53:2b:c1:6c:80:52:d0:ad:15:99:93:ff:88:6e:64:38: f5:40:c4:91:8a:71:4a:5f:61:b0:03:b9:14:83:d8:24:32:c0: 4b:c0:33:60:b5:63:74:06:f0:69:a6:b1:3e:be:00:2f:ed:f4: d4:56:09:d1:c5:bf:14:80:6b:70:02:5a:f7:43:e1:51:5d:bb: 9a:c4:35:0e:0c:2c:a9:5b:69:c5:63:ad:1d:83:be:aa:9f:fd: 41:76:8d:58:c6:df:e5:d0:eb:a9:5c:5d:7e:b3:9b:59:ef:a4: 7f:f9:ab:d7:36:4c:be:c4:46:2a:35:78:ce:3b:50:82:20:54: cd:67:12:2d:b7:23:d5:e3:0c:48:7f:23:3c:2a:91:6d:d3:83: 77:23:54:80:cd:f6:3d:27:73:5f:99:67:a3:e7:ed:d4:06:ae: 2c:0d:2b:0d:2a:40:22:67:39:a4:94:fa:db:29:8e:6e:56:bf: 49:3a:ef:f3:b7:b0:0f:f6:97:91:b6:12:a1:ed:5a:ab:3a:f6: 42:dc:4e:2b:12:85:7e:9e:e1:da:cc:0d:06:aa:ce:48:c6:b0: 3a:ea:01:b7:fc:98:59:34:31:f7:05:40:34:cf:e4:9e:0b:9a: c0:7e:20:75:88:e5:c3:8a:96:a0:d9:1c:43:45:91:95:3f:1c: 41:af:c1:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBok9+YauyABoUMqAhqEMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1 M2Q5NDAwHhcNMjYwMjA5MDkwMTIxWhcNMjYwMjEwMDkwMTIxWjAzMTEwLwYDVQQD EygxMjE3YjE4OTZkMTU0OThmMWUwOTliNTU0YjcxZmEyMjcyYTU3NTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YhBZYN4ZDlIJMGcGGQzCxJoNHVU VMQzUM1pYDiE/4zdICxws/svtZpc/vFFz74PnthBQS8awtO90o43bDE9V4J+sfOm AJ+RmB64k7qNhGUUwae1ASR/dFJLsnTlkvRy6ccf0IfamrgEqB2CNFD1JelOVVuw 0okbWwz4V59Y6oOdgVLvPinJXcW+dnPyioO+Qf6mFuKz+AgWSBps1IQlEH0pArI/ tXm3BjgSAqUt3aybw6zNqO17zX1t06kPpBs7F29Ra2pPJy/E1XtYjjRwdDlnN28c DTV/ZQE6qd7GBoPvRu/+5pGRsCU5QdzlWM1WN5ky6Gi/CLesr7TNe+lr5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIXsYltFUmPHgmbVUtx+iJypXVTMB8GA1UdIwQY MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1 LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKFTK8Fs gFLQrRWZk/+IbmQ49UDEkYpxSl9hsAO5FIPYJDLAS8AzYLVjdAbwaaaxPr4AL+30 1FYJ0cW/FIBrcAJa90PhUV27msQ1DgwsqVtpxWOtHYO+qp/9QXaNWMbf5dDrqVxd frObWe+kf/mr1zZMvsRGKjV4zjtQgiBUzWcSLbcj1eMMSH8jPCqRbdODdyNUgM32 PSdzX5lno+ft1AauLA0rDSpAImc5pJT62ymObla/STrv87ewD/aXkbYSoe1aqzr2 QtxOKxKFfp7h2swNBqrOSMawOuoBt/yYWTQx9wVANM/knguawH4gdYjlw4qWoNkc Q0WRlT8cQa/BZw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:02 2026 by rpki-client