This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json) Hash identifier: dumMvBuhGVKpfmfeCWZeN3K06VgARj7JL53nPkIrqlc= Subject key identifier: B1:E3:3F:EB:91:A1:56:7F:0D:FA:94:C7:24:92:05:7D:EA:CA:91:FD Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083 Certificate serial: 019BF619B84B0B4EAD3D3639D1ED0128DAFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 17:00:39 +0000 Manifest this update: Sun 25 Jan 2026 17:00:39 +0000 Manifest next update: Mon 26 Jan 2026 17:00:39 +0000 Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: OU7tZsOfE1ala5SDqH6cel+W6ROBym3V1+Gf4EWB3L4=) 2: GBj2xnkuHNgnAUINodxwL8rUWI8.roa (hash: Hvt6O7hlsMwc4JJYGSfH5m3V5DBbM1bLZ9uAWK2548s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b8:4b:0b:4e:ad:3d:36:39:d1:ed:01:28:da:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083 Validity Not Before: Jan 25 17:00:39 2026 GMT Not After : Jan 26 17:00:39 2026 GMT Subject: CN=b1e33feb91a1567f0dfa94c72492057deaca91fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:d6:6c:db:39:17:b0:c2:a9:fe:55:75:7e: 23:1a:4e:36:1c:5e:dc:9c:9e:30:a8:1d:52:31:e1: e4:70:38:90:35:49:ad:a1:a7:f3:d0:93:7a:30:23: 7e:77:17:f9:8b:bd:34:0f:a1:26:9b:8d:53:63:dc: 56:fd:d4:6f:50:c1:4b:29:2f:05:4d:36:96:36:a4: a8:49:e6:6c:5e:51:fa:be:b1:ef:35:a7:02:40:6c: 28:93:ad:a6:be:c8:62:c3:40:cf:fa:3c:ad:28:5c: a3:f3:75:5c:54:1e:7a:31:97:26:b6:0c:b2:1d:f3: 0e:0a:02:81:e4:2a:4e:6e:9a:bb:22:32:28:a3:98: 72:c6:8e:1c:c2:ce:2c:1c:c2:e7:62:f1:5e:15:16: 87:d6:89:fd:b5:25:05:c6:bf:f9:06:0c:44:2b:ef: 49:ca:de:70:f4:48:b6:8b:14:b0:63:41:58:e3:49: b1:f4:5e:90:5a:21:27:67:e2:e7:bb:56:1f:68:ae: ad:79:5b:3c:be:00:38:26:77:31:6f:02:d2:8e:f8: 75:3b:3a:a5:ea:2e:08:e0:9b:5f:a1:b4:41:3b:05: 84:b4:73:c7:ea:eb:d7:8b:b9:84:a9:2b:8a:1d:a4: 40:36:2c:7d:16:ed:6b:cb:96:26:71:3e:e9:48:64: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E3:3F:EB:91:A1:56:7F:0D:FA:94:C7:24:92:05:7D:EA:CA:91:FD X509v3 Authority Key Identifier: keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e6:7f:b9:6d:52:58:73:09:6f:99:0a:f9:03:48:be:99:4f: 41:d4:17:65:16:62:ba:8c:54:12:cc:3b:07:fe:32:5a:22:0b: c4:e7:75:3f:d4:59:b9:e3:68:89:80:ce:c5:e5:c9:ae:24:e4: d8:36:31:b7:97:98:15:60:0e:23:4e:a5:c5:fd:79:51:7e:5b: e0:b3:eb:34:41:a8:d1:02:9b:52:a3:50:5a:ff:43:61:6c:77: fa:dc:bd:47:6a:14:66:ac:8a:8e:60:e9:f0:55:9d:dd:95:f0: 94:b5:d7:b7:76:55:b7:26:91:21:f6:3c:9d:7b:be:e4:6d:56: 14:1e:78:89:ef:c1:db:7f:30:90:dc:3a:ed:dd:a9:7b:b4:80: 6c:17:a0:6e:21:d1:8f:a7:30:5a:6c:f3:8f:42:ca:de:c8:da: 75:4b:b5:c1:ca:a0:8a:33:cc:da:ad:b9:0e:41:ca:9f:8c:5c: db:eb:85:a2:ee:45:ff:bf:89:bf:da:48:41:35:ec:3e:07:99: 85:09:65:fd:9d:72:d0:a6:37:44:fb:bb:a9:33:9c:d9:7a:24: e0:46:f7:52:d1:d7:d2:c9:2d:93:35:b8:7c:3e:71:2f:69:fd: 79:6b:34:7d:ef:ac:ed:63:53:3c:40:69:46:33:f6:16:c3:44: 9a:da:e2:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GbhLC06tPTY50e0BKNr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWJmNmQzZGY1MzliYjdjMTY4NGZiNGY0NjE3OWQwZGEw NmIwODMwHhcNMjYwMTI1MTcwMDM5WhcNMjYwMTI2MTcwMDM5WjAzMTEwLwYDVQQD EyhiMWUzM2ZlYjkxYTE1NjdmMGRmYTk0YzcyNDkyMDU3ZGVhY2E5MWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG/WbNs5F7DCqf5VdX4jGk42HF7c nJ4wqB1SMeHkcDiQNUmtoafz0JN6MCN+dxf5i700D6Emm41TY9xW/dRvUMFLKS8F TTaWNqSoSeZsXlH6vrHvNacCQGwok62mvshiw0DP+jytKFyj83VcVB56MZcmtgyy HfMOCgKB5CpObpq7IjIoo5hyxo4cws4sHMLnYvFeFRaH1on9tSUFxr/5BgxEK+9J yt5w9Ei2ixSwY0FY40mx9F6QWiEnZ+Lnu1YfaK6teVs8vgA4JncxbwLSjvh1Ozql 6i4I4JtfobRBOwWEtHPH6uvXi7mEqSuKHaRANix9Fu1ry5YmcT7pSGTZCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHjP+uRoVZ/DfqUxySSBX3qypH9MB8GA1UdIwQY MBaAFOKr9tPfU5u3wWhPtPRhedDaBrCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQt YjdhMWI0YWUxNTExLzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQtYjdhMWI0YWUxNTEx LzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOZ/uW1S WHMJb5kK+QNIvplPQdQXZRZiuoxUEsw7B/4yWiILxOd1P9RZueNoiYDOxeXJriTk 2DYxt5eYFWAOI06lxf15UX5b4LPrNEGo0QKbUqNQWv9DYWx3+ty9R2oUZqyKjmDp 8FWd3ZXwlLXXt3ZVtyaRIfY8nXu+5G1WFB54ie/B238wkNw67d2pe7SAbBegbiHR j6cwWmzzj0LK3sjadUu1wcqgijPM2q25DkHKn4xc2+uFou5F/7+Jv9pIQTXsPgeZ hQll/Z1y0KY3RPu7qTOc2Xok4Eb3UtHX0sktkzW4fD5xL2n9eWs0fe+s7WNTPEBp RjP2FsNEmtriFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:31 2026 by rpki-client