This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json) Hash identifier: 0h9ZyUwW/s+HarQ1rEF5cGiQ5Q/XY9sxRoBpWAJaUy8= Subject key identifier: 1A:E8:F1:7F:AB:1B:35:81:02:60:05:3D:58:3A:92:CA:44:56:A1:94 Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Certificate serial: 019BF5E3631FFA5B6B3E60415C99D89DC9F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft Manifest number: 15A4 Signing time: Sun 25 Jan 2026 16:01:18 +0000 Manifest this update: Sun 25 Jan 2026 16:01:18 +0000 Manifest next update: Mon 26 Jan 2026 16:01:18 +0000 Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: WRem9ksoqDvWZStBr52h3k3GmQi6Jit8eY1wxX1q+pA=) 2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:63:1f:fa:5b:6b:3e:60:41:5c:99:d8:9d:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Validity Not Before: Jan 25 16:01:18 2026 GMT Not After : Jan 26 16:01:18 2026 GMT Subject: CN=1ae8f17fab1b35810260053d583a92ca4456a194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:bc:b9:fa:47:e6:5e:38:38:cf:e2:0a:bb: 53:ab:95:f3:41:48:96:f7:64:8d:23:44:ab:19:6f: 3a:d5:ed:af:6d:f8:d9:61:5d:52:b4:8c:e1:2f:5b: 83:a2:6d:b6:80:11:59:a0:37:a0:60:4b:77:2d:19: 1c:fd:ed:cd:eb:34:9c:57:13:da:84:96:f8:8b:f7: 40:9c:7b:a3:c5:e4:49:bf:75:54:48:af:75:26:81: b4:8f:ca:c9:9d:01:e1:0a:05:fc:95:48:d7:69:fc: 09:20:66:cb:c0:80:84:c0:8f:ea:25:f4:e2:45:27: e1:a0:80:4f:53:55:48:c9:c6:38:2f:49:a0:cf:bb: e4:41:90:6d:1a:e7:b1:db:0a:55:3a:fb:e9:df:3c: 2e:d7:f5:1d:97:f2:45:69:85:54:61:71:a8:38:6d: 0b:f2:12:5d:f5:ae:19:ec:69:18:8a:35:9e:20:68: 9f:01:fc:e8:1a:69:cc:bd:31:da:75:6b:d8:67:6c: 83:ad:97:ef:26:4b:ef:88:57:0c:e7:4a:18:fb:0d: 51:e0:4e:53:f2:97:94:8b:d8:99:79:7f:7d:16:a3: 75:4a:f9:b6:be:7b:b1:49:47:fe:3f:3f:36:4d:44: 25:a9:ed:ad:e8:2b:f0:b9:b7:92:bd:d0:20:35:aa: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E8:F1:7F:AB:1B:35:81:02:60:05:3D:58:3A:92:CA:44:56:A1:94 X509v3 Authority Key Identifier: keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0e:c9:df:84:0a:9f:b6:f2:54:7c:64:8f:df:38:05:d8:2a: be:08:5e:15:1a:f3:21:35:a9:cb:c2:5c:9a:6b:eb:24:13:9d: 57:1a:9b:03:65:54:8d:85:d2:cd:ab:c7:4d:e3:20:fa:ae:32: 39:82:56:ac:a5:d0:3d:d7:c5:ba:05:c7:28:12:6c:16:fe:99: 90:27:4d:4a:e4:c2:1c:37:a0:33:d5:85:71:24:c6:9d:6a:a8: e8:1e:3f:68:52:75:0f:0b:5e:9d:18:8d:41:20:d4:3f:bc:31: 09:ec:5c:3b:10:25:dd:8b:3e:cc:cc:88:01:e1:74:83:10:65: 65:b2:c0:91:43:1a:7e:1f:a0:c2:fe:28:41:a6:e9:9b:06:a4: 1d:59:c6:de:ff:2d:d0:ee:92:a8:01:c4:14:74:4b:30:2a:8e: c6:c2:77:11:90:e5:1f:15:71:fd:0e:47:f6:b8:99:f9:3d:c8: 14:59:6f:97:db:1f:c0:4f:2e:57:3e:f6:64:a2:3c:fb:af:06: 72:69:52:b4:ec:59:c5:5b:2b:82:65:f8:f0:eb:7b:28:29:6f: 19:84:eb:f3:b5:5b:57:fa:8a:25:32:08:e5:a2:ce:57:e5:07: 04:e7:40:1d:bb:8f:c4:3e:dd:58:18:8e:8b:95:f1:8f:82:ca: 75:9b:16:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv142Mf+ltrPmBBXJnYncnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw OWVkMjcwHhcNMjYwMTI1MTYwMTE4WhcNMjYwMTI2MTYwMTE4WjAzMTEwLwYDVQQD EygxYWU4ZjE3ZmFiMWIzNTgxMDI2MDA1M2Q1ODNhOTJjYTQ0NTZhMTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn68ufpH5l44OM/iCrtTq5XzQUiW 92SNI0SrGW861e2vbfjZYV1StIzhL1uDom22gBFZoDegYEt3LRkc/e3N6zScVxPa hJb4i/dAnHujxeRJv3VUSK91JoG0j8rJnQHhCgX8lUjXafwJIGbLwICEwI/qJfTi RSfhoIBPU1VIycY4L0mgz7vkQZBtGuex2wpVOvvp3zwu1/Udl/JFaYVUYXGoOG0L 8hJd9a4Z7GkYijWeIGifAfzoGmnMvTHadWvYZ2yDrZfvJkvviFcM50oY+w1R4E5T 8peUi9iZeX99FqN1Svm2vnuxSUf+Pz82TUQlqe2t6CvwubeSvdAgNapDQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBro8X+rGzWBAmAFPVg6kspEVqGUMB8GA1UdIwQY MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA7J34QK n7byVHxkj984BdgqvgheFRrzITWpy8JcmmvrJBOdVxqbA2VUjYXSzavHTeMg+q4y OYJWrKXQPdfFugXHKBJsFv6ZkCdNSuTCHDegM9WFcSTGnWqo6B4/aFJ1DwtenRiN QSDUP7wxCexcOxAl3Ys+zMyIAeF0gxBlZbLAkUMafh+gwv4oQabpmwakHVnG3v8t 0O6SqAHEFHRLMCqOxsJ3EZDlHxVx/Q5H9riZ+T3IFFlvl9sfwE8uVz72ZKI8+68G cmlStOxZxVsrgmX48Ot7KClvGYTr87VbV/qKJTII5aLOV+UHBOdAHbuPxD7dWBiO i5Xxj4LKdZsWkw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:37 2026 by rpki-client