This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json) Hash identifier: 8Ob/XtHGD+PmxhWth+A25luctU1LUP9YRTERKx1qmVU= Subject key identifier: EA:4D:38:57:58:A6:F6:90:C0:4D:95:0D:FA:3A:43:DC:13:4C:73:72 Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Certificate serial: 019BF83FFC67BA3AFE93D130B185352A9FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft Manifest number: CA Signing time: Mon 26 Jan 2026 03:01:41 +0000 Manifest this update: Mon 26 Jan 2026 03:01:41 +0000 Manifest next update: Tue 27 Jan 2026 03:01:41 +0000 Files and hashes: 1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: O21coKojxCX85PfvNb4fosRdevdXJC1QXlYkYZ1i3Ew=) 2: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:fc:67:ba:3a:fe:93:d1:30:b1:85:35:2a:9f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Validity Not Before: Jan 26 03:01:41 2026 GMT Not After : Jan 27 03:01:41 2026 GMT Subject: CN=ea4d385758a6f690c04d950dfa3a43dc134c7372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:c9:37:61:89:40:91:83:da:98:86:06:5e: 65:ec:fb:63:8c:a9:bc:a2:45:9a:06:fd:38:30:77: 0f:b8:a5:0d:8b:45:23:25:57:59:6a:ac:8b:6f:d3: b5:b9:a9:e6:8e:49:a5:66:b2:06:cf:4b:ab:2e:0a: cb:1a:02:3f:0c:35:84:c0:02:47:7e:79:ca:2a:f1: 98:b5:7a:7a:6c:7b:a5:d6:4f:46:74:b4:4d:77:df: d9:f5:bf:3e:a9:90:de:3a:9f:2e:41:fd:b2:c9:a3: e1:8b:09:73:91:db:45:37:18:81:bc:43:c9:d0:31: 43:25:c6:0c:88:8d:b9:ef:28:32:85:7a:8a:89:7e: 10:e7:6e:78:e0:b3:8b:4a:05:74:bb:6b:b3:f2:7a: 56:c6:9e:17:f9:08:8a:fe:4f:b1:db:fd:3d:c7:6a: d5:54:a4:bd:a3:59:ad:82:92:27:e2:7f:48:95:e8: 21:9d:ea:67:b7:a4:7d:a0:4f:99:19:55:e7:ee:d7: 9a:ad:c9:89:ae:56:ad:31:e4:50:02:2b:56:4c:71: ed:13:33:97:01:cb:7d:b1:c2:87:49:ae:0d:c9:f3: 87:fb:c5:81:35:9a:6c:9a:0e:7d:d2:61:dc:5f:4c: c1:37:e2:84:19:3c:b0:ab:de:bd:0d:a8:fd:6d:2e: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:38:57:58:A6:F6:90:C0:4D:95:0D:FA:3A:43:DC:13:4C:73:72 X509v3 Authority Key Identifier: keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:54:89:f6:33:c3:fe:45:6f:68:8e:a1:6b:1f:2c:72:ab: 48:ae:d1:a0:f5:ea:05:a8:4e:c3:e9:fe:b5:9c:33:97:2e:97: 27:aa:a4:98:d5:ac:6b:9d:29:3f:74:9e:ed:c1:95:7f:c1:fe: 75:64:bb:10:43:36:3d:83:bf:76:75:13:6b:e2:7c:b7:2e:96: a5:f6:84:1e:f8:73:06:76:71:db:f8:00:16:a0:39:3f:f5:e2: 0f:13:87:d6:80:27:b8:d3:91:64:a0:0e:60:2f:eb:93:8c:02: 76:88:10:d9:6c:f1:12:9f:a3:7e:53:63:f5:78:49:37:bd:b1: 54:49:41:62:48:9d:30:17:61:18:fc:cf:f1:06:dc:19:d8:79: e8:62:74:d0:63:48:cd:dc:09:27:8a:cd:3f:0a:49:c2:09:ad: 8b:9c:21:18:20:d3:6c:4d:c1:d9:37:fd:46:11:89:27:7e:71: a3:fe:f8:15:16:9d:5a:fe:d4:01:23:93:d2:7f:a7:5b:9f:41: 50:28:78:42:67:31:01:e6:dc:5d:9f:40:05:39:38:81:f5:21: 79:c2:99:5d:8c:ba:c4:65:69:8b:3f:72:db:ad:2a:c7:7a:56: d3:6a:37:0a:f0:46:ca:67:13:60:83:ac:f4:e2:02:16:a9:76: a2:d8:c4:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P/xnujr+k9EwsYU1Kp+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDE1ZTM2Y2RiMzg4Mjc2ZjA0YTYwNmIwMjI2NjI2MGUy YTE5ZjgwHhcNMjYwMTI2MDMwMTQxWhcNMjYwMTI3MDMwMTQxWjAzMTEwLwYDVQQD EyhlYTRkMzg1NzU4YTZmNjkwYzA0ZDk1MGRmYTNhNDNkYzEzNGM3MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw7JN2GJQJGD2piGBl5l7PtjjKm8 okWaBv04MHcPuKUNi0UjJVdZaqyLb9O1uanmjkmlZrIGz0urLgrLGgI/DDWEwAJH fnnKKvGYtXp6bHul1k9GdLRNd9/Z9b8+qZDeOp8uQf2yyaPhiwlzkdtFNxiBvEPJ 0DFDJcYMiI257ygyhXqKiX4Q52544LOLSgV0u2uz8npWxp4X+QiK/k+x2/09x2rV VKS9o1mtgpIn4n9Ileghnepnt6R9oE+ZGVXn7tearcmJrlatMeRQAitWTHHtEzOX Act9scKHSa4NyfOH+8WBNZpsmg590mHcX0zBN+KEGTywq969Daj9bS7sUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpNOFdYpvaQwE2VDfo6Q9wTTHNyMB8GA1UdIwQY MBaAFOHRXjbNs4gnbwSmBrAiZiYOKhn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMt MjM0NDJhMTRhNWY3LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMtMjM0NDJhMTRhNWY3 LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIBUifYz w/5Fb2iOoWsfLHKrSK7RoPXqBahOw+n+tZwzly6XJ6qkmNWsa50pP3Se7cGVf8H+ dWS7EEM2PYO/dnUTa+J8ty6WpfaEHvhzBnZx2/gAFqA5P/XiDxOH1oAnuNORZKAO YC/rk4wCdogQ2WzxEp+jflNj9XhJN72xVElBYkidMBdhGPzP8QbcGdh56GJ00GNI zdwJJ4rNPwpJwgmti5whGCDTbE3B2Tf9RhGJJ35xo/74FRadWv7UASOT0n+nW59B UCh4QmcxAebcXZ9ABTk4gfUhecKZXYy6xGVpiz9y260qx3pW02o3CvBGymcTYIOs 9OICFql2otjEeQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:07:07 2026 by rpki-client