This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: IoPg+KWLhgXGASK1EmRlOi0ZLgER4gfmiWI5xydLdrY=
Subject key identifier: 31:8E:BE:C6:01:44:5B:2A:67:AE:C1:8B:A5:9F:70:8E:B1:BD:00:49
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 018D7CBAC6F36CB9367201CFC324B8E000FB2D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 4A
Signing time: Wed 11 Feb 2026 11:47:41 +0000
Manifest this update: Wed 11 Feb 2026 11:42:41 +0000
Manifest next update: Thu 12 Feb 2026 14:56:41 +0000
Files and hashes: 1: AS216299.asa (hash: X6AXlCP9HIyHTXbg3649O81EGxBI70CVhawZpaYBepA=)
2: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: DkSz5r2BUfeWFeeyGwH7+IVWD5DOLzK7owFZ1ZHIedU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Feb 2026 14:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7c:ba:c6:f3:6c:b9:36:72:01:cf:c3:24:b8:e0:00:fb:2d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Feb 11 11:42:41 2026 GMT
Not After : Feb 12 14:56:41 2026 GMT
Subject: CN=318EBEC601445B2A67AEC18BA59F708EB1BD0049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:ca:55:f0:19:f7:0b:4d:1d:f6:55:e1:b0:
ea:64:28:90:61:b7:e7:49:8d:e3:fa:51:81:fb:a6:
c2:db:50:1b:16:0b:18:1d:2f:69:ef:f1:c4:2d:76:
85:75:d6:b5:1b:dd:8f:1f:c0:ab:61:3f:3d:60:df:
56:92:de:54:36:c5:9e:77:9b:30:4a:50:3b:29:49:
9c:6b:55:b7:80:a0:fd:17:a2:86:8f:05:5b:30:c7:
6b:4b:a5:84:c8:fd:8b:1d:1d:d1:6a:be:3e:df:e8:
fe:66:2b:32:95:e2:d7:9d:e0:8f:94:d8:c3:cb:50:
0a:cf:bd:75:fc:fc:f4:ed:d4:d0:22:aa:c6:b8:b5:
0c:22:5e:0c:c4:57:9d:85:26:ed:66:1d:58:c9:ab:
67:52:06:06:0e:ab:ed:f1:60:32:25:d7:93:cf:6c:
f2:08:fc:1c:db:2e:27:b1:77:72:a7:62:2b:42:28:
73:77:a6:e8:74:fb:67:e7:6c:61:c4:c8:7e:8c:87:
4f:8a:ca:3f:03:01:3e:5e:80:c1:83:63:be:31:c7:
cc:86:66:07:a1:86:d5:90:9f:01:08:b5:6a:69:05:
c3:12:28:83:88:c3:b2:11:51:6f:45:e1:40:b0:49:
3f:84:11:d8:00:2b:c1:6a:62:1e:ba:c0:ae:f0:01:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:BE:C6:01:44:5B:2A:67:AE:C1:8B:A5:9F:70:8E:B1:BD:00:49
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:73:05:b3:9a:be:a8:b9:5a:00:8e:95:a5:d8:47:ad:42:c7:
c7:2b:61:d4:4e:de:5b:17:bd:61:f4:5c:43:fd:b0:84:ab:58:
08:15:ed:30:7e:d1:6d:11:dc:4b:88:61:2d:eb:1a:9c:de:42:
e4:75:9d:90:85:bb:2e:16:a0:63:70:98:48:eb:2c:65:92:0a:
33:ad:f2:53:86:4a:93:c8:d8:e2:3b:84:3b:8d:4b:12:9d:36:
40:c0:92:90:23:f7:eb:7d:01:cb:ee:f7:3c:30:f6:d2:1c:cd:
39:db:bb:d3:12:65:1d:d0:0d:eb:40:4c:f9:d4:34:80:01:c2:
22:99:ec:13:9c:f5:28:32:6a:84:e7:a1:fe:f8:87:7c:ee:dc:
69:b4:4c:ec:23:74:5d:01:c0:bb:4e:b2:af:48:50:e6:51:83:
04:c0:ff:71:8a:f9:9d:30:0c:a5:a3:e4:2a:c2:9f:b3:b5:85:
61:d2:ed:ee:bc:e5:72:6d:71:5e:78:90:3e:4d:4e:12:cb:d4:
d4:2c:63:41:da:b8:09:2b:45:43:ba:85:88:4c:36:5e:a0:4a:
55:2b:6a:93:d2:92:37:a2:b4:3f:b4:68:f2:a6:ba:ab:31:6f:
bd:ba:6e:7a:31:53:30:8a:e9:9e:b7:77:22:a9:f5:28:f7:e8:
38:39:e6:12
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAY18usbzbLk2cgHPwyS44AD7LY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh
YWVjNDk0ZjAeFw0yNjAyMTExMTQyNDFaFw0yNjAyMTIxNDU2NDFaMDMxMTAvBgNV
BAMTKDMxOEVCRUM2MDE0NDVCMkE2N0FFQzE4QkE1OUY3MDhFQjFCRDAwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HMpV8Bn3C00d9lXhsOpkKJBh
t+dJjeP6UYH7psLbUBsWCxgdL2nv8cQtdoV11rUb3Y8fwKthPz1g31aS3lQ2xZ53
mzBKUDspSZxrVbeAoP0XooaPBVswx2tLpYTI/YsdHdFqvj7f6P5mKzKV4ted4I+U
2MPLUArPvXX8/PTt1NAiqsa4tQwiXgzEV52FJu1mHVjJq2dSBgYOq+3xYDIl15PP
bPII/BzbLiexd3KnYitCKHN3puh0+2fnbGHEyH6Mh0+Kyj8DAT5egMGDY74xx8yG
ZgehhtWQnwEItWppBcMSKIOIw7IRUW9F4UCwST+EEdgAK8FqYh66wK7wAVPlAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMY6+xgFEWypnrsGLpZ9wjrG9AEkwHwYDVR0j
BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy
c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC
REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3MFs5q+qLlaAI6VpdhH
rULHxyth1E7eWxe9YfRcQ/2whKtYCBXtMH7RbRHcS4hhLesanN5C5HWdkIW7Lhag
Y3CYSOssZZIKM63yU4ZKk8jY4juEO41LEp02QMCSkCP3630By+73PDD20hzNOdu7
0xJlHdAN60BM+dQ0gAHCIpnsE5z1KDJqhOeh/viHfO7cabRM7CN0XQHAu06yr0hQ
5lGDBMD/cYr5nTAMpaPkKsKfs7WFYdLt7rzlcm1xXniQPk1OEsvU1CxjQdq4CStF
Q7qFiEw2XqBKVStqk9KSN6K0P7Ro8qa6qzFvvbpuejFTMIrpnrd3Iqn1KPfoODnm
Eg==
-----END CERTIFICATE-----
Generated at Wed Feb 11 19:18:41 2026 by rpki-client