This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json) Hash identifier: iRm8EYIViyqLniL6QIXA0Tt3pAI2GEpjU9vDqLIT+lA= Subject key identifier: 87:27:32:CA:8C:CD:2C:17:E0:F8:FF:EF:B1:5E:4E:F1:97:43:3B:B8 Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Certificate serial: 019BF462C8906A154B8D7AC50940E2DB3885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft Manifest number: 08A4 Signing time: Sun 25 Jan 2026 09:01:13 +0000 Manifest this update: Sun 25 Jan 2026 09:01:13 +0000 Manifest next update: Mon 26 Jan 2026 09:01:13 +0000 Files and hashes: 1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=) 2: E1CobbzuSopIQ25v8bXg7-wkG08.roa (hash: IoeE+7y8I3rHs6C9VTnXoHgwAPKPkZzWiNKhUaIZbC0=) 3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=) 4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=) 5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: ipy1Jbwi3F6xR+DY4o9egjP9UbOVmUKTt6bqIQLwoT0=) 6: lR8if6ppIPbhohYi1ZftYsaVivM.roa (hash: tWsT29WceBlnruoO07mkklZjKl8F3YK8Bj14J12SHEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:c8:90:6a:15:4b:8d:7a:c5:09:40:e2:db:38:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Validity Not Before: Jan 25 09:01:13 2026 GMT Not After : Jan 26 09:01:13 2026 GMT Subject: CN=872732ca8ccd2c17e0f8ffefb15e4ef197433bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:cb:79:5e:d9:5c:91:f0:ca:98:c8:cd:22: 29:02:49:c4:3e:d2:21:ee:88:bb:d7:86:5c:41:c9: 1a:42:e3:86:96:72:e6:7a:57:a5:0e:3b:c6:3e:77: ca:ce:90:f6:ae:16:80:3f:33:52:c9:d3:31:1c:d3: a5:2c:65:b9:d8:ae:8d:ec:a7:11:20:46:bf:ef:00: 0d:5b:ed:d2:a2:97:6f:17:26:dd:b6:2a:0e:a0:c5: fe:a7:63:2d:ef:aa:c2:b8:2e:be:1d:d3:b9:d5:7d: 81:d5:62:fe:cc:38:f6:24:70:b1:c1:c8:12:9e:7f: dd:35:39:a8:6b:e7:ce:94:23:c9:36:0c:8c:4e:a7: a7:e9:81:5b:0f:94:14:1f:6c:78:96:9c:fb:4e:56: db:70:4f:55:97:99:98:64:7b:0a:e2:bc:90:0f:97: 6f:68:89:4b:1d:f1:1a:da:81:e8:7e:54:47:85:89: bf:67:60:93:7f:4b:79:c7:a4:6c:46:90:f7:71:67: 5a:0f:d6:83:68:20:a3:09:2d:be:67:d0:78:29:f9: c7:76:f5:3f:09:99:c3:52:28:4f:9f:83:d1:01:1f: da:bf:b1:9f:b1:f6:52:b1:b8:2d:9a:11:1b:7e:cb: 97:04:a6:53:cb:7c:92:fc:19:8a:f0:98:7c:9d:5c: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:27:32:CA:8C:CD:2C:17:E0:F8:FF:EF:B1:5E:4E:F1:97:43:3B:B8 X509v3 Authority Key Identifier: keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:5e:4b:51:43:4b:86:b8:45:d8:ce:7b:cc:c8:c8:2a:1e: 09:db:8d:20:43:b9:94:5a:8e:e8:ff:27:cc:c6:c2:ca:49:e9: 33:22:0c:d6:1d:34:eb:d0:d6:43:ba:e1:b4:01:38:8e:87:cf: ed:3f:72:0d:9c:33:db:96:57:f2:d1:17:e5:85:14:89:90:69: 97:4f:98:57:0a:93:37:a7:45:e3:47:d9:8b:a4:2a:81:92:8f: ff:57:1f:ed:91:88:a3:e3:9c:17:40:6b:35:a0:c7:ce:b0:54: 2a:29:a3:3c:9e:c4:79:07:a4:a3:dd:81:fb:bb:ed:3f:18:50: 01:ec:37:fe:76:02:67:44:b2:1e:05:d2:1b:96:d0:d7:6f:4c: 69:a7:c6:a3:7a:3d:b3:a0:c3:3a:67:ba:82:e8:6c:41:79:e8: e8:c0:04:56:40:e9:ed:7b:0a:1f:d5:85:ce:09:15:12:0a:03: 71:aa:de:b4:47:34:99:11:66:69:df:3a:cb:84:b4:92:92:17: 48:f1:8f:e5:7a:72:b9:76:4c:11:fc:88:75:2f:f2:50:66:dd: 07:0d:8a:b7:95:54:89:3f:9d:45:5c:64:9c:2a:32:ce:24:0f: 88:6b:1c:cb:76:c5:2b:68:4a:39:d1:67:68:cd:ec:0f:86:76: 8a:95:7a:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YsiQahVLjXrFCUDi2ziFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3 N2M2M2QwHhcNMjYwMTI1MDkwMTEzWhcNMjYwMTI2MDkwMTEzWjAzMTEwLwYDVQQD Eyg4NzI3MzJjYThjY2QyYzE3ZTBmOGZmZWZiMTVlNGVmMTk3NDMzYmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVvLeV7ZXJHwypjIzSIpAknEPtIh 7oi714ZcQckaQuOGlnLmelelDjvGPnfKzpD2rhaAPzNSydMxHNOlLGW52K6N7KcR IEa/7wANW+3SopdvFybdtioOoMX+p2Mt76rCuC6+HdO51X2B1WL+zDj2JHCxwcgS nn/dNTmoa+fOlCPJNgyMTqen6YFbD5QUH2x4lpz7TlbbcE9Vl5mYZHsK4ryQD5dv aIlLHfEa2oHoflRHhYm/Z2CTf0t5x6RsRpD3cWdaD9aDaCCjCS2+Z9B4KfnHdvU/ CZnDUihPn4PRAR/av7GfsfZSsbgtmhEbfsuXBKZTy3yS/BmK8Jh8nVzVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcnMsqMzSwX4Pj/77FeTvGXQzu4MB8GA1UdIwQY MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgdeS1FD S4a4RdjOe8zIyCoeCduNIEO5lFqO6P8nzMbCyknpMyIM1h0069DWQ7rhtAE4jofP 7T9yDZwz25ZX8tEX5YUUiZBpl0+YVwqTN6dF40fZi6QqgZKP/1cf7ZGIo+OcF0Br NaDHzrBUKimjPJ7EeQeko92B+7vtPxhQAew3/nYCZ0SyHgXSG5bQ129MaafGo3o9 s6DDOme6guhsQXno6MAEVkDp7XsKH9WFzgkVEgoDcaretEc0mRFmad86y4S0kpIX SPGP5XpyuXZMEfyIdS/yUGbdBw2Kt5VUiT+dRVxknCoyziQPiGscy3bFK2hKOdFn aM3sD4Z2ipV67w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:36 2026 by rpki-client