This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json) Hash identifier: FKYTi4ij4nbGl0wnPGSmGy0J/yzMQLFwlhn/dimOZpk= Subject key identifier: FC:54:BB:76:F3:53:5A:D1:6C:94:EE:A7:86:6B:67:CB:EB:45:A5:8C Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Certificate serial: 019C2E888249AD89C130A3E2D55D4CFF9D73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft Manifest number: 056C Signing time: Thu 05 Feb 2026 16:00:23 +0000 Manifest this update: Thu 05 Feb 2026 16:00:23 +0000 Manifest next update: Fri 06 Feb 2026 16:00:23 +0000 Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: Y+mmgWRSNj/O6vOErVFSib+jaIK4iHXmyiHXbumaZzg=) 2: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (hash: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:88:82:49:ad:89:c1:30:a3:e2:d5:5d:4c:ff:9d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Validity Not Before: Feb 5 16:00:23 2026 GMT Not After : Feb 6 16:00:23 2026 GMT Subject: CN=fc54bb76f3535ad16c94eea7866b67cbeb45a58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:40:25:51:d8:ba:58:7b:6a:d6:a6:15:e7: 56:78:6e:dd:f3:78:91:6a:3a:06:26:4d:54:7f:3b: 05:60:53:b9:a6:2a:e6:79:66:02:08:8c:fe:8c:bf: a0:0f:fc:02:f5:6b:cb:50:1a:69:cc:fe:8d:80:c7: 9b:90:8e:03:0a:8d:4b:19:d0:c8:3b:4f:59:41:29: bb:15:e9:76:41:1e:de:a4:df:97:1b:f9:52:a3:20: ad:b6:a6:69:e3:36:0f:e6:6f:20:4d:80:b4:4e:f7: 36:66:6c:db:cd:34:5d:09:a2:aa:16:6e:55:28:f3: f6:2e:e7:1c:d3:1f:53:b6:bd:23:29:5f:97:c1:09: b7:3c:8c:91:69:d1:5b:87:1f:cc:4f:70:c3:19:9f: 6e:ea:73:20:2c:73:0c:f7:6a:68:95:ff:cb:46:ee: 1f:4a:3f:b7:71:64:13:f4:96:fe:a4:4c:e2:5b:c7: a9:c1:7a:b9:32:ec:45:57:aa:8e:4f:78:cf:00:ca: 02:ef:a8:c9:cd:ae:63:41:da:d0:e4:34:7f:2c:eb: 71:ab:10:2b:27:79:e6:ad:0a:82:ad:f3:40:0f:b6: 44:2b:e3:75:a2:2c:9f:eb:05:2e:12:c6:01:a5:89: e7:98:12:5c:b5:d2:83:0c:cc:17:e6:a7:c1:67:ca: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:54:BB:76:F3:53:5A:D1:6C:94:EE:A7:86:6B:67:CB:EB:45:A5:8C X509v3 Authority Key Identifier: keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b7:98:45:ee:3b:a6:1c:71:16:3c:d4:a2:16:d9:f2:5c:08: 00:9c:90:62:1a:21:0f:00:10:69:55:15:d3:47:85:4a:a8:90: 42:40:9f:88:31:02:65:2b:74:68:82:03:e4:2c:7b:73:52:9d: ad:ea:94:d5:eb:bc:fc:ff:a7:32:89:3d:68:3a:2e:85:b8:65: c4:4d:93:80:6a:23:b9:fe:ad:ce:c2:cc:cb:7f:f5:7f:7d:bb: 6f:70:e6:0d:52:eb:f5:8e:ba:b1:00:17:2b:55:6b:38:94:d4: e3:2b:be:98:50:2e:0f:9f:55:9f:78:56:83:c7:95:b3:7d:d7: 78:6a:9e:f7:af:e5:58:8a:18:85:88:75:45:2c:de:9a:0f:7c: f9:52:97:94:ac:25:2a:96:18:c3:6b:25:51:dd:61:a1:04:dc: af:ef:06:f4:b0:9a:3b:d1:4d:ce:e0:d3:1c:5b:7d:9e:90:f8: 56:ba:90:45:3c:25:bb:89:6b:46:d4:99:a7:d0:8d:00:96:79: a7:49:17:f6:09:45:c1:69:31:b2:c0:16:2e:8e:46:6d:1d:8d: 7e:87:2b:1e:8a:d7:28:a5:5d:e9:0b:99:b2:67:41:32:b1:e9: be:0e:eb:88:f2:ea:0e:63:cf:cd:ab:3e:d2:18:d0:fb:e7:bf: 94:75:2f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwuiIJJrYnBMKPi1V1M/51zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz Mzg2YzAwHhcNMjYwMjA1MTYwMDIzWhcNMjYwMjA2MTYwMDIzWjAzMTEwLwYDVQQD EyhmYzU0YmI3NmYzNTM1YWQxNmM5NGVlYTc4NjZiNjdjYmViNDVhNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsdAJVHYulh7atamFedWeG7d83iR ajoGJk1UfzsFYFO5pirmeWYCCIz+jL+gD/wC9WvLUBppzP6NgMebkI4DCo1LGdDI O09ZQSm7Fel2QR7epN+XG/lSoyCttqZp4zYP5m8gTYC0Tvc2ZmzbzTRdCaKqFm5V KPP2Lucc0x9Ttr0jKV+XwQm3PIyRadFbhx/MT3DDGZ9u6nMgLHMM92polf/LRu4f Sj+3cWQT9Jb+pEziW8epwXq5MuxFV6qOT3jPAMoC76jJza5jQdrQ5DR/LOtxqxAr J3nmrQqCrfNAD7ZEK+N1oiyf6wUuEsYBpYnnmBJctdKDDMwX5qfBZ8r+/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxUu3bzU1rRbJTup4ZrZ8vrRaWMMB8GA1UdIwQY MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLeYRe47 phxxFjzUohbZ8lwIAJyQYhohDwAQaVUV00eFSqiQQkCfiDECZSt0aIID5Cx7c1Kd reqU1eu8/P+nMok9aDouhbhlxE2TgGojuf6tzsLMy3/1f327b3DmDVLr9Y66sQAX K1VrOJTU4yu+mFAuD59Vn3hWg8eVs33XeGqe96/lWIoYhYh1RSzemg98+VKXlKwl KpYYw2slUd1hoQTcr+8G9LCaO9FNzuDTHFt9npD4VrqQRTwlu4lrRtSZp9CNAJZ5 p0kX9glFwWkxssAWLo5GbR2NfocrHorXKKVd6QuZsmdBMrHpvg7riPLqDmPPzas+ 0hjQ++e/lHUv8Q== -----END CERTIFICATE-----Generated at Thu Feb 5 19:27:26 2026 by rpki-client