This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json) Hash identifier: vkeZ3cWPrEtggacfwFCQauo8bSzDqxMwH0qNT307v7Y= Subject key identifier: 22:60:47:AC:30:DB:A9:96:BD:8F:3F:43:FA:24:EA:0A:1F:B9:75:44 Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Certificate serial: 019BF6BF25B5E92B31BF60EB9FEBEC072CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft Manifest number: 0E31 Signing time: Sun 25 Jan 2026 20:01:20 +0000 Manifest this update: Sun 25 Jan 2026 20:01:20 +0000 Manifest next update: Mon 26 Jan 2026 20:01:20 +0000 Files and hashes: 1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=) 2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: /F3Mak/ec1BKX4cdIHtmQCbZEMruqPKXJJ34V2M1H+U=) 3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=) 4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:25:b5:e9:2b:31:bf:60:eb:9f:eb:ec:07:2c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Validity Not Before: Jan 25 20:01:20 2026 GMT Not After : Jan 26 20:01:20 2026 GMT Subject: CN=226047ac30dba996bd8f3f43fa24ea0a1fb97544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:0c:67:a7:2a:77:51:a7:84:5e:d7:3b:ff: ea:47:5a:a8:0e:14:92:cf:38:ac:2e:75:c3:12:eb: 80:b2:11:31:1f:c4:b6:3d:1e:7a:e7:c5:45:09:be: f9:ac:bc:cc:a7:d1:23:31:52:32:6b:c0:fd:e8:b0: 8b:13:4e:60:f9:f3:ee:77:45:09:c2:f1:96:9f:8a: a6:15:6b:35:0f:86:a2:20:54:92:23:7d:18:7f:ec: 70:11:b2:89:73:02:9e:1b:0f:83:e5:a3:5e:51:63: fb:da:dc:32:f7:75:92:99:a3:fe:56:18:94:b1:f5: 59:0b:c6:cc:f8:d8:ac:84:41:6b:65:3b:d0:58:9f: d3:bf:c4:21:f8:4b:f3:7e:bd:6e:dd:c4:f8:eb:f4: 6f:65:68:6d:6b:3b:34:ce:a6:16:40:00:17:2d:47: 22:f1:9d:73:9a:ca:e5:66:ba:3d:40:94:da:e1:15: 8e:e1:cb:8a:6f:1e:9b:f9:28:11:37:1f:f0:9b:95: c3:c4:84:4e:1c:4a:28:4e:92:f0:42:9a:69:90:b6: 76:e6:0a:22:f2:e6:d8:22:23:97:d6:7c:9c:b7:2f: ef:87:56:dd:29:37:2a:91:6e:02:c6:3c:6f:ff:2e: 65:1a:36:b5:ca:3d:9b:b7:9f:25:fc:f4:34:25:89: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:60:47:AC:30:DB:A9:96:BD:8F:3F:43:FA:24:EA:0A:1F:B9:75:44 X509v3 Authority Key Identifier: keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:79:71:2a:be:f3:bd:cb:0d:59:2d:1f:97:77:73:37:45:83: 04:30:3d:40:4c:87:26:c4:f1:e4:34:d5:1f:81:18:74:23:fa: d6:86:41:92:b0:fe:ae:33:93:94:4c:8b:32:ef:7b:0b:e2:ba: a3:b2:a6:00:7c:e6:57:af:0c:92:25:1e:b2:e7:e1:ae:c5:eb: b2:4b:fe:8c:3d:c9:73:be:53:01:2a:c6:ad:22:ab:eb:b1:03: 82:29:ef:4c:36:20:c3:61:02:46:16:92:4f:3f:bd:7f:12:b0: cf:2a:d0:2d:1c:17:af:4e:5a:10:34:3e:11:f1:34:95:46:7d: bf:d8:9c:de:94:f4:e0:7d:4a:90:48:d6:a2:b3:e8:6d:74:c6: 4c:1c:d1:3f:65:52:be:e8:e3:89:e3:53:03:2b:a2:a1:2a:ec: fc:b6:6e:6b:24:67:c0:12:19:3c:c8:ce:79:0b:19:2a:e2:8a: 57:42:dd:12:47:77:2e:56:21:8b:79:f5:44:be:10:37:76:5d: c0:54:ad:a2:50:5d:94:3a:75:13:70:7d:08:77:36:61:e6:09: 13:22:44:03:72:f6:7d:1c:e1:ca:57:ff:ea:41:7a:77:aa:72: 82:77:85:62:33:df:fd:22:0e:7f:14:a7:b9:0a:5f:2a:6f:8a: 0a:11:33:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vyW16Ssxv2Drn+vsByy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2 YTI0ZjUwHhcNMjYwMTI1MjAwMTIwWhcNMjYwMTI2MjAwMTIwWjAzMTEwLwYDVQQD EygyMjYwNDdhYzMwZGJhOTk2YmQ4ZjNmNDNmYTI0ZWEwYTFmYjk3NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOoMZ6cqd1GnhF7XO//qR1qoDhSS zzisLnXDEuuAshExH8S2PR5658VFCb75rLzMp9EjMVIya8D96LCLE05g+fPud0UJ wvGWn4qmFWs1D4aiIFSSI30Yf+xwEbKJcwKeGw+D5aNeUWP72twy93WSmaP+VhiU sfVZC8bM+NishEFrZTvQWJ/Tv8Qh+Evzfr1u3cT46/RvZWhtazs0zqYWQAAXLUci 8Z1zmsrlZro9QJTa4RWO4cuKbx6b+SgRNx/wm5XDxIROHEooTpLwQpppkLZ25goi 8ubYIiOX1nycty/vh1bdKTcqkW4Cxjxv/y5lGja1yj2bt58l/PQ0JYl2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJgR6ww26mWvY8/Q/ok6gofuXVEMB8GA1UdIwQY MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt OWNhZjI1YTQ5OWQ3LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3 LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3XlxKr7z vcsNWS0fl3dzN0WDBDA9QEyHJsTx5DTVH4EYdCP61oZBkrD+rjOTlEyLMu97C+K6 o7KmAHzmV68MkiUesufhrsXrskv+jD3Jc75TASrGrSKr67EDginvTDYgw2ECRhaS Tz+9fxKwzyrQLRwXr05aEDQ+EfE0lUZ9v9ic3pT04H1KkEjWorPobXTGTBzRP2VS vujjieNTAyuioSrs/LZuayRnwBIZPMjOeQsZKuKKV0LdEkd3LlYhi3n1RL4QN3Zd wFStolBdlDp1E3B9CHc2YeYJEyJEA3L2fRzhylf/6kF6d6pygneFYjPf/SIOfxSn uQpfKm+KChEz4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:21 2026 by rpki-client