This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json) Hash identifier: xmKympzmCk5GirGvYZqIIDSYtSpZ+3C/1HxahXnqOKg= Subject key identifier: 53:32:8A:E0:D1:0E:56:99:C0:EF:E1:FF:63:2F:94:AF:D7:1F:47:FB Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8 Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8 Certificate serial: 019C4321EFA6CF0B1CE7ECF343A9A9E4C5DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 16:00:23 +0000 Manifest this update: Mon 09 Feb 2026 16:00:23 +0000 Manifest next update: Tue 10 Feb 2026 16:00:23 +0000 Files and hashes: 1: 1_CArV4y8iJiwF-qVbyr6lB9z1M.roa (hash: sgMm20YcGzVkjGjRqisERD3t8QppN0pvoO75EGB83sY=) 2: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: gKXYFCJDI5TY1a4QWr4XEvgtbpqOYQKWQVSHEgLwOvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ef:a6:cf:0b:1c:e7:ec:f3:43:a9:a9:e4:c5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8 Validity Not Before: Feb 9 16:00:23 2026 GMT Not After : Feb 10 16:00:23 2026 GMT Subject: CN=53328ae0d10e5699c0efe1ff632f94afd71f47fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:3a:04:9e:2a:42:04:dc:bb:44:e3:06:92: 5a:e1:b7:fe:f8:d4:0e:35:52:26:ba:92:b1:e7:e8: 84:18:16:dd:2f:1d:9c:9c:73:1b:9a:68:71:38:e4: 91:fa:73:69:c8:26:20:68:c8:b5:9d:79:1e:18:02: 14:9b:a3:cb:aa:f4:25:2b:4a:3a:2c:fc:1a:cd:a2: a1:06:a2:20:ef:b8:97:05:a1:33:34:84:23:1c:9a: 6a:71:17:73:b2:29:49:9c:7e:99:40:48:c1:36:0e: f3:f6:6d:07:b4:28:e8:dd:77:1d:01:d1:33:39:44: 31:23:dd:58:02:10:40:c8:04:07:03:0d:e5:41:97: 0d:47:ba:c4:31:27:df:3e:e2:b2:f7:86:d2:35:e3: c2:3e:01:82:a0:97:d1:f8:a6:66:ea:8f:50:61:b3: cb:05:49:4d:ef:0d:10:71:7a:6c:77:81:9d:c3:5b: e1:35:f7:6c:c2:38:9f:4b:c8:69:8f:16:10:d4:ad: 7d:46:b9:87:a6:b3:33:ab:3a:28:06:7b:65:59:9a: aa:05:e4:b5:23:1f:c9:35:be:3e:4a:4a:4d:ce:04: 03:63:a6:c4:02:e9:47:80:29:fe:36:49:aa:b4:ef: 9a:61:cb:55:15:85:ec:70:dc:88:48:f8:6c:06:a5: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:32:8A:E0:D1:0E:56:99:C0:EF:E1:FF:63:2F:94:AF:D7:1F:47:FB X509v3 Authority Key Identifier: keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e4:3b:82:f3:3d:a9:e7:e9:92:38:46:88:38:aa:b1:88:09: 17:a3:98:b8:19:a2:1f:25:20:c9:a6:c9:d5:59:1a:37:12:6b: 15:9b:ac:b7:84:d1:81:ee:8d:81:c6:cc:7d:36:a1:73:f7:a3: 40:11:50:8a:7a:c6:a1:fb:50:7f:e3:a1:73:81:b6:c2:b3:bc: 6d:ee:0e:41:43:9d:b7:9e:29:ab:c8:99:ee:57:f6:53:e5:e1: 8a:c0:6d:9b:87:eb:c0:7b:13:7d:06:94:ed:86:94:8c:50:b2: fa:d5:51:5c:78:8d:c9:05:9e:31:04:32:01:6a:d8:8e:97:68: 9a:ed:33:8c:1d:82:b4:b1:f4:a7:61:36:3d:fb:16:f2:ae:7e: a1:ce:1b:3e:9d:23:66:45:49:ef:ff:53:52:5d:bc:f7:0a:0e: 33:dc:e5:7b:9b:35:c3:02:b5:0a:ed:fd:45:cd:28:ee:13:d3: c6:bc:b1:6e:ce:a9:a2:01:3f:6e:55:c7:19:97:be:08:45:3f: 56:fc:d3:7c:fc:3b:f3:66:60:00:79:18:da:8f:09:7e:fd:99: 96:8f:b1:f2:10:f4:74:7a:de:12:e1:8a:1b:78:c5:6d:fc:93: 86:0f:4c:85:9a:17:65:f7:06:83:ba:61:7c:e4:57:29:93:6b: e6:f6:0b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIe+mzwsc5+zzQ6mp5MXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3 YTY1ZTgwHhcNMjYwMjA5MTYwMDIzWhcNMjYwMjEwMTYwMDIzWjAzMTEwLwYDVQQD Eyg1MzMyOGFlMGQxMGU1Njk5YzBlZmUxZmY2MzJmOTRhZmQ3MWY0N2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM86BJ4qQgTcu0TjBpJa4bf++NQO NVImupKx5+iEGBbdLx2cnHMbmmhxOOSR+nNpyCYgaMi1nXkeGAIUm6PLqvQlK0o6 LPwazaKhBqIg77iXBaEzNIQjHJpqcRdzsilJnH6ZQEjBNg7z9m0HtCjo3XcdAdEz OUQxI91YAhBAyAQHAw3lQZcNR7rEMSffPuKy94bSNePCPgGCoJfR+KZm6o9QYbPL BUlN7w0QcXpsd4Gdw1vhNfdswjifS8hpjxYQ1K19RrmHprMzqzooBntlWZqqBeS1 Ix/JNb4+SkpNzgQDY6bEAulHgCn+NkmqtO+aYctVFYXscNyISPhsBqUWyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMyiuDRDlaZwO/h/2MvlK/XH0f7MB8GA1UdIwQY MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt MjhlNzczZGI5MWMyLzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOQ7gvM9 qefpkjhGiDiqsYgJF6OYuBmiHyUgyabJ1VkaNxJrFZust4TRge6NgcbMfTahc/ej QBFQinrGoftQf+Ohc4G2wrO8be4OQUOdt54pq8iZ7lf2U+XhisBtm4frwHsTfQaU 7YaUjFCy+tVRXHiNyQWeMQQyAWrYjpdomu0zjB2CtLH0p2E2PfsW8q5+oc4bPp0j ZkVJ7/9TUl289woOM9zle5s1wwK1Cu39Rc0o7hPTxryxbs6pogE/blXHGZe+CEU/ VvzTfPw782ZgAHkY2o8Jfv2Zlo+x8hD0dHreEuGKG3jFbfyThg9MhZoXZfcGg7ph fORXKZNr5vYLzg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:46 2026 by rpki-client