This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json) Hash identifier: DCWkPgUBKSNnC8zaBnxOfP+qVdCxxFitjy1dC4mLp8c= Subject key identifier: 5B:2C:52:D2:43:05:EB:8D:AD:57:CE:B5:9C:F5:93:EA:D1:9F:E5:98 Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38 Certificate serial: 019BF83F2FD91780640214846A88E2F744AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft Manifest number: 0E01 Signing time: Mon 26 Jan 2026 03:00:49 +0000 Manifest this update: Mon 26 Jan 2026 03:00:49 +0000 Manifest next update: Tue 27 Jan 2026 03:00:49 +0000 Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=) 2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: oou33rJnp0giNuAvVKM6GdBGIwf3K1yClBQ/NWQy3rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:2f:d9:17:80:64:02:14:84:6a:88:e2:f7:44:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38 Validity Not Before: Jan 26 03:00:49 2026 GMT Not After : Jan 27 03:00:49 2026 GMT Subject: CN=5b2c52d24305eb8dad57ceb59cf593ead19fe598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:9c:1d:49:00:bb:81:e6:59:56:49:df:93: b6:27:e2:c7:ff:a1:ff:47:30:21:74:3a:7d:f1:60: e2:19:1f:ce:2a:7d:2b:9a:33:c1:77:c2:b6:e4:e8: 58:23:30:51:f2:86:92:12:4e:2c:5e:4e:9f:f4:fa: bb:fe:e5:26:42:2e:79:2e:45:1e:b5:f3:54:cc:c1: 4b:6e:08:7a:e5:25:8a:83:a9:16:e8:c6:af:e6:f9: 5f:c4:ca:5a:d7:19:3d:fd:7a:f8:7b:09:f9:a8:71: af:db:d5:38:a1:3e:4f:01:ee:03:3c:f4:fb:bb:3b: c5:5c:df:aa:c9:6a:f7:24:ea:59:6b:9d:65:70:50: b2:5d:86:5e:0e:fb:d8:6a:a2:54:47:10:72:be:20: 70:97:81:58:48:29:3e:53:30:08:2b:41:be:4f:eb: a4:e5:bd:cd:1b:0e:5e:bc:a0:cb:37:72:62:c2:22: fa:34:9f:9b:de:f0:f0:ae:5c:59:04:83:42:d3:8e: 18:6d:12:dc:9f:1a:ec:d6:c2:e1:58:95:ce:79:a0: b7:0d:5b:0c:8b:40:d0:f6:b5:ec:1f:fd:89:1f:dc: 43:53:15:12:9e:4c:09:56:8a:12:f8:b2:33:80:82: eb:31:3d:88:8a:8d:f2:0f:4c:20:60:65:ec:64:a9: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2C:52:D2:43:05:EB:8D:AD:57:CE:B5:9C:F5:93:EA:D1:9F:E5:98 X509v3 Authority Key Identifier: keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:39:a8:c7:90:99:5e:02:c1:84:4c:e2:b8:26:29:ea:8c:99: 17:27:21:60:54:15:df:47:1f:9e:60:e6:87:a4:a4:54:53:ca: 59:f0:7b:90:b3:1d:62:b3:1c:8c:78:55:e4:ee:f6:e1:e5:26: 21:c8:f3:37:fb:6f:68:07:5c:16:4f:ca:63:64:03:6c:3b:b3: 1a:99:ae:43:43:de:ad:96:7f:96:02:5f:0d:06:b8:66:7d:f4: 9d:f4:08:4f:c7:ef:e1:db:22:17:97:7e:71:2b:63:97:41:65: a0:9a:84:40:f6:6a:31:c7:38:1e:cf:ab:c5:e0:b1:d7:20:f5: 8a:e2:48:43:6c:9f:fe:8f:fa:a8:75:3e:47:7e:42:ad:cb:87: a9:9d:04:e2:4c:05:57:4a:84:8e:59:68:2f:98:a5:99:78:ba: e7:95:de:7a:a3:ab:ba:1c:84:ab:65:30:fb:37:62:67:f1:6f: 87:1c:48:58:06:9a:8b:ad:ca:88:78:61:c6:e1:01:e8:2b:48: 44:87:c8:82:8e:14:76:94:ce:f4:4c:58:b7:c5:24:d1:49:fe: 2f:2e:dd:ed:26:66:b2:cc:35:89:ba:a7:c0:0d:50:6a:51:5f: 65:99:3e:4c:55:d7:4e:a2:d4:ef:60:26:a8:2b:80:a7:ef:0c: 05:c0:5b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Py/ZF4BkAhSEaoji90SqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk ODFkMzgwHhcNMjYwMTI2MDMwMDQ5WhcNMjYwMTI3MDMwMDQ5WjAzMTEwLwYDVQQD Eyg1YjJjNTJkMjQzMDVlYjhkYWQ1N2NlYjU5Y2Y1OTNlYWQxOWZlNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWicHUkAu4HmWVZJ35O2J+LH/6H/ RzAhdDp98WDiGR/OKn0rmjPBd8K25OhYIzBR8oaSEk4sXk6f9Pq7/uUmQi55LkUe tfNUzMFLbgh65SWKg6kW6Mav5vlfxMpa1xk9/Xr4ewn5qHGv29U4oT5PAe4DPPT7 uzvFXN+qyWr3JOpZa51lcFCyXYZeDvvYaqJURxByviBwl4FYSCk+UzAIK0G+T+uk 5b3NGw5evKDLN3JiwiL6NJ+b3vDwrlxZBINC044YbRLcnxrs1sLhWJXOeaC3DVsM i0DQ9rXsH/2JH9xDUxUSnkwJVooS+LIzgILrMT2Iio3yD0wgYGXsZKm8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFssUtJDBeuNrVfOtZz1k+rRn+WYMB8GA1UdIwQY MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3 LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzmox5CZ XgLBhEziuCYp6oyZFychYFQV30cfnmDmh6SkVFPKWfB7kLMdYrMcjHhV5O724eUm IcjzN/tvaAdcFk/KY2QDbDuzGpmuQ0PerZZ/lgJfDQa4Zn30nfQIT8fv4dsiF5d+ cStjl0FloJqEQPZqMcc4Hs+rxeCx1yD1iuJIQ2yf/o/6qHU+R35CrcuHqZ0E4kwF V0qEjlloL5ilmXi655XeeqOruhyEq2Uw+zdiZ/FvhxxIWAaai63KiHhhxuEB6CtI RIfIgo4UdpTO9ExYt8Uk0Un+Ly7d7SZmssw1ibqnwA1QalFfZZk+TFXXTqLU72Am qCuAp+8MBcBbTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:05 2026 by rpki-client