This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json) Hash identifier: J45HlUgonfSkgRNf1XMqUSs70CzPyfGTRk2ILic+y2c= Subject key identifier: D5:25:07:F5:44:D7:81:AD:BD:A8:1C:39:7E:4A:6A:A4:DD:A3:3A:50 Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00 Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900 Certificate serial: 019BF619FE752F5E3388341520600936A051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 17:00:57 +0000 Manifest this update: Sun 25 Jan 2026 17:00:57 +0000 Manifest next update: Mon 26 Jan 2026 17:00:57 +0000 Files and hashes: 1: 1-ZObGXZbr8QMqAx61fUCBd3oEIk.roa (hash: mNfBmy+QZavj44C/mg50P1ETt/knXxq4fEIaA8TAW1A=) 2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: Yq1j46jFQ4kcNQCOW3cOMsGJwVqhY7Fz0aFs9PCnoZs=) 3: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:fe:75:2f:5e:33:88:34:15:20:60:09:36:a0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900 Validity Not Before: Jan 25 17:00:57 2026 GMT Not After : Jan 26 17:00:57 2026 GMT Subject: CN=d52507f544d781adbda81c397e4a6aa4dda33a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:f3:82:e0:43:0b:de:c7:2b:dd:11:c1:86: 87:b7:7b:dd:ea:bb:c9:6e:fd:2b:12:25:6b:72:f9: 52:33:12:6d:80:7a:00:82:bb:ff:04:e1:6e:ee:b4: 34:f3:28:99:62:3d:8b:fb:1a:f8:f9:3c:99:00:1f: 84:44:5c:1f:ae:c8:5c:a6:ca:51:1f:e3:23:37:eb: ba:da:0f:96:ec:88:0d:cf:d3:27:31:2a:fa:d0:8b: 6a:20:f9:5b:f2:83:8f:9b:c8:a8:2b:c7:85:24:74: f6:8a:b9:d5:6c:53:73:79:58:ff:51:1e:18:8d:dc: aa:b8:34:52:52:de:91:63:a5:5c:e1:1b:c9:da:f3: d9:03:a1:b0:1d:5c:e4:df:4b:4a:9d:67:35:54:5e: cd:59:fb:0a:96:9a:a0:e8:26:03:0b:48:d0:dd:c0: c3:18:d6:4a:41:02:8a:be:3d:58:22:00:07:4f:45: a8:29:e8:15:62:d1:63:3e:78:ed:07:84:ff:5f:f3: 2e:2d:c6:e4:84:45:bc:57:0d:83:fd:d0:d7:b1:79: 11:b4:22:59:cb:94:04:bb:f7:0d:d4:2d:65:7b:4b: f5:16:3e:21:1c:44:05:da:76:75:29:dd:5c:dc:05: ea:c3:74:7e:97:7b:af:c9:c3:ce:f3:33:d6:75:f7: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:25:07:F5:44:D7:81:AD:BD:A8:1C:39:7E:4A:6A:A4:DD:A3:3A:50 X509v3 Authority Key Identifier: keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c7:b5:e3:f3:c3:2f:fe:97:8f:7d:bc:76:6d:0a:de:d3:95: 30:24:5f:33:ee:0c:c1:3b:ac:b4:a2:b9:0e:9b:7d:65:7b:75: 3b:52:50:6d:02:8f:06:2d:10:78:68:a1:96:f5:98:ba:e2:05: 4a:b3:87:06:aa:f4:ff:4c:c7:b5:52:06:09:46:b4:19:6d:be: 06:0e:8a:35:41:cf:d7:f6:dc:68:bc:90:ad:8f:d2:a9:a1:a3: 02:ba:a4:d8:2a:79:51:5d:c8:37:3a:27:8e:99:6e:18:60:7d: a5:69:24:72:fd:64:e9:ec:6b:14:61:26:de:fc:23:ba:a1:c5: 65:b2:23:35:07:0a:10:d3:1f:7c:a9:27:1d:2e:93:06:c8:66: 39:c4:19:7f:24:15:80:66:c8:00:63:86:3e:fd:75:82:94:3e: 4a:60:3e:e3:23:64:73:f1:c8:9b:77:98:a5:d9:21:43:f8:78: ac:26:51:b7:99:07:77:0a:0a:1b:bd:d1:3f:25:e1:09:bd:c9: 21:81:cc:be:9b:07:a7:65:5c:86:83:37:20:a3:01:b2:69:61: 87:3f:a6:b0:68:3d:8e:82:32:dd:bd:37:6c:4c:77:e1:3e:6f: a9:1d:7c:93:13:ab:7e:7d:6b:10:f4:de:40:af:a9:14:34:55: 0b:ab:8a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gf51L14ziDQVIGAJNqBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZGEyM2QzYjkzMGQ0YzFmM2FjNzMwNjVkNzFhNjA3YzM1 ZDI5MDAwHhcNMjYwMTI1MTcwMDU3WhcNMjYwMTI2MTcwMDU3WjAzMTEwLwYDVQQD EyhkNTI1MDdmNTQ0ZDc4MWFkYmRhODFjMzk3ZTRhNmFhNGRkYTMzYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi/zguBDC97HK90RwYaHt3vd6rvJ bv0rEiVrcvlSMxJtgHoAgrv/BOFu7rQ08yiZYj2L+xr4+TyZAB+ERFwfrshcpspR H+MjN+u62g+W7IgNz9MnMSr60ItqIPlb8oOPm8ioK8eFJHT2irnVbFNzeVj/UR4Y jdyquDRSUt6RY6Vc4RvJ2vPZA6GwHVzk30tKnWc1VF7NWfsKlpqg6CYDC0jQ3cDD GNZKQQKKvj1YIgAHT0WoKegVYtFjPnjtB4T/X/MuLcbkhEW8Vw2D/dDXsXkRtCJZ y5QEu/cN1C1le0v1Fj4hHEQF2nZ1Kd1c3AXqw3R+l3uvycPO8zPWdffPSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUlB/VE14GtvagcOX5KaqTdozpQMB8GA1UdIwQY MBaAFOLaI9O5MNTB86xzBl1xpgfDXSkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzIt ODI3YTBhYzA0YTlkLzEvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzItODI3YTBhYzA0YTlk LzEvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMe14/PD L/6Xj328dm0K3tOVMCRfM+4MwTustKK5Dpt9ZXt1O1JQbQKPBi0QeGihlvWYuuIF SrOHBqr0/0zHtVIGCUa0GW2+Bg6KNUHP1/bcaLyQrY/SqaGjArqk2Cp5UV3INzon jpluGGB9pWkkcv1k6exrFGEm3vwjuqHFZbIjNQcKENMffKknHS6TBshmOcQZfyQV gGbIAGOGPv11gpQ+SmA+4yNkc/HIm3eYpdkhQ/h4rCZRt5kHdwoKG73RPyXhCb3J IYHMvpsHp2VchoM3IKMBsmlhhz+msGg9joIy3b03bEx34T5vqR18kxOrfn1rEPTe QK+pFDRVC6uK+w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:58 2026 by rpki-client