This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json) Hash identifier: vNB2fQNCxvUXDtg++Il3twX9dlY2kQD24tTMxvsfx34= Subject key identifier: 89:56:04:B7:F5:51:B9:82:CB:C1:58:DD:2F:57:FE:82:62:AA:53:43 Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Certificate serial: 019BF507315BB18D8943FA6DE745745DE22D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft Manifest number: 084E Signing time: Sun 25 Jan 2026 12:00:47 +0000 Manifest this update: Sun 25 Jan 2026 12:00:47 +0000 Manifest next update: Mon 26 Jan 2026 12:00:47 +0000 Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=) 2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: vMBnSZJV08SjlqKB7Q7CWO8XvKTeIhSWqWpLetzpojU=) 3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:31:5b:b1:8d:89:43:fa:6d:e7:45:74:5d:e2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Validity Not Before: Jan 25 12:00:47 2026 GMT Not After : Jan 26 12:00:47 2026 GMT Subject: CN=895604b7f551b982cbc158dd2f57fe8262aa5343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:78:b7:9d:69:bc:a9:bd:36:06:b8:d3:6a: d7:ff:21:64:31:98:48:b8:d1:6a:92:14:b9:38:b2: 45:2e:0c:f0:ff:8d:f9:76:3e:c3:7f:4d:bb:14:61: df:c9:f9:31:cb:1a:2c:42:74:bc:12:bc:0c:40:28: 94:13:39:40:33:7f:a3:a7:1f:3c:73:0b:f7:78:60: e1:03:98:de:68:5e:7e:e1:cb:81:8f:fd:bd:bc:6e: d7:ee:3a:35:c8:65:e4:04:d6:af:56:3f:1f:56:ad: 66:98:03:7a:a2:f2:36:de:c5:fb:1b:32:98:85:ab: e9:ae:d4:b7:55:8d:87:fc:e1:a1:8a:1e:1c:a9:3c: 71:66:bf:6f:5d:19:10:0a:61:d4:45:ef:bb:50:a9: 77:54:43:cd:16:6f:55:04:e5:14:dc:5a:90:82:d3: 9b:10:b3:b3:db:7f:4a:db:07:c9:f7:eb:84:e1:3d: 3f:04:fd:02:4b:22:54:04:fd:b3:02:3d:ee:49:01: 72:20:47:37:d2:b8:b1:32:5a:e1:ca:ca:b9:1d:2a: 4e:28:7f:22:2e:50:de:99:5d:f6:40:f1:ac:c5:92: fb:36:d7:99:77:8b:f4:40:e2:83:62:f3:81:0c:4e: 56:53:fd:20:fe:1f:d7:29:70:93:ec:56:8f:1c:18: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:56:04:B7:F5:51:B9:82:CB:C1:58:DD:2F:57:FE:82:62:AA:53:43 X509v3 Authority Key Identifier: keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b7:e1:8b:fd:61:bb:be:9d:97:fd:f9:95:33:c1:65:c1:b9: d0:7f:45:5c:8b:b5:b7:bd:54:51:b9:f4:06:34:db:ef:a0:7e: 99:b8:e3:cf:b6:4f:27:07:56:af:35:f9:c0:35:49:9d:3b:1e: e1:5e:9e:13:b9:bc:f6:b1:fe:c0:04:61:fc:59:9f:08:6e:d2: 7e:40:e8:b7:78:03:9c:66:32:38:91:d7:5d:18:8a:01:9e:06: 28:e7:bf:fe:c7:e5:72:4f:be:2a:65:d5:c2:c5:8b:39:0b:d7: 8e:ca:02:0b:0e:85:36:30:d6:a4:20:e3:c7:b5:a0:96:9d:d4: b5:2f:fa:bb:fb:b2:f6:e0:f8:bd:42:bf:60:79:6e:5c:36:da: d5:45:29:4d:d0:69:d9:72:2c:3d:99:bd:bb:3d:3a:df:10:b5: 29:2d:f1:4c:4e:d3:d9:b3:4d:fb:fe:df:fd:a3:f5:bc:09:4c: cb:da:5d:66:0f:73:2e:d3:15:e8:47:49:09:ee:30:8b:62:12: 4b:c7:b5:e0:a0:51:6a:14:0c:c5:66:68:42:98:42:02:97:20: b2:c5:40:41:f3:20:2f:98:6f:6d:b2:81:4e:4a:cd:60:57:71: 81:1c:ae:9d:77:8a:80:28:cf:0a:6a:87:85:4b:6c:5d:69:e4: 32:a5:b2:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzFbsY2JQ/pt50V0XeItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4 MjBhZDkwHhcNMjYwMTI1MTIwMDQ3WhcNMjYwMTI2MTIwMDQ3WjAzMTEwLwYDVQQD Eyg4OTU2MDRiN2Y1NTFiOTgyY2JjMTU4ZGQyZjU3ZmU4MjYyYWE1MzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG14t51pvKm9Nga402rX/yFkMZhI uNFqkhS5OLJFLgzw/435dj7Df027FGHfyfkxyxosQnS8ErwMQCiUEzlAM3+jpx88 cwv3eGDhA5jeaF5+4cuBj/29vG7X7jo1yGXkBNavVj8fVq1mmAN6ovI23sX7GzKY havprtS3VY2H/OGhih4cqTxxZr9vXRkQCmHURe+7UKl3VEPNFm9VBOUU3FqQgtOb ELOz239K2wfJ9+uE4T0/BP0CSyJUBP2zAj3uSQFyIEc30rixMlrhysq5HSpOKH8i LlDemV32QPGsxZL7NteZd4v0QOKDYvOBDE5WU/0g/h/XKXCT7FaPHBgXGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlWBLf1UbmCy8FY3S9X/oJiqlNDMB8GA1UdIwQY MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLfhi/1h u76dl/35lTPBZcG50H9FXIu1t71UUbn0BjTb76B+mbjjz7ZPJwdWrzX5wDVJnTse 4V6eE7m89rH+wARh/FmfCG7SfkDot3gDnGYyOJHXXRiKAZ4GKOe//sflck++KmXV wsWLOQvXjsoCCw6FNjDWpCDjx7Wglp3UtS/6u/uy9uD4vUK/YHluXDba1UUpTdBp 2XIsPZm9uz063xC1KS3xTE7T2bNN+/7f/aP1vAlMy9pdZg9zLtMV6EdJCe4wi2IS S8e14KBRahQMxWZoQphCApcgssVAQfMgL5hvbbKBTkrNYFdxgRyunXeKgCjPCmqH hUtsXWnkMqWy5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:19 2026 by rpki-client