This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json) Hash identifier: da/L6CM7I7w0azaHhN6Kbvm1Soz65MHgSqyqCnqoHKQ= Subject key identifier: 97:25:96:F1:5A:39:91:4C:CE:52:25:6C:B2:71:B9:DC:AF:6E:1E:29 Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903 Certificate serial: 019BF763B510B3BF35E217D33D7D6FAEB121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft Manifest number: 10A4 Signing time: Sun 25 Jan 2026 23:01:05 +0000 Manifest this update: Sun 25 Jan 2026 23:01:05 +0000 Manifest next update: Mon 26 Jan 2026 23:01:05 +0000 Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: ju4byvlnEidTm8hb6G0xMxlucmoN/J8JwAaNBbb3VO4=) 2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:b5:10:b3:bf:35:e2:17:d3:3d:7d:6f:ae:b1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2834429775e6555e5742492286254b1da9f1903 Validity Not Before: Jan 25 23:01:05 2026 GMT Not After : Jan 26 23:01:05 2026 GMT Subject: CN=972596f15a39914cce52256cb271b9dcaf6e1e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a1:be:c3:c5:67:3a:4d:55:08:f7:94:4f:1b: d7:81:d1:3e:24:69:e2:3d:5e:fa:0b:a4:25:f0:e6: d6:d0:06:0b:1b:9b:e8:3d:ad:d3:26:3f:d1:1c:6a: 71:34:f8:21:f8:51:d7:33:e8:8c:0d:5a:4f:9f:97: 04:a2:3b:ad:9c:49:49:0c:0f:59:4f:1e:f0:6a:f6: 44:80:64:fc:c4:34:5a:00:6a:47:07:c8:f1:1a:41: 55:77:2a:18:41:89:a4:a3:ac:0c:77:43:ea:b4:5d: 72:0c:23:2c:ac:29:26:71:cc:bc:88:b9:2a:fa:dd: 0e:9f:54:92:bc:10:7b:ce:20:28:56:61:3b:36:3e: 2e:b8:55:4a:02:9d:b8:66:13:ef:79:b9:a3:55:2a: cb:ba:2c:34:95:52:ab:44:b1:3a:92:df:62:0f:6c: 62:6a:6e:10:05:91:5d:63:9c:43:77:e4:4f:00:38: 50:99:b9:3c:cf:58:29:8c:e0:9c:7b:d1:73:8f:22: 98:be:46:24:2e:35:0e:a9:ff:6d:b0:26:96:3a:6c: a4:de:88:eb:15:d0:44:c9:2e:a3:14:06:15:62:56: 54:6c:e7:b2:f0:49:ae:c1:88:db:07:5a:93:42:99: 02:4b:6d:59:e8:a6:c1:97:40:5b:3e:9a:e8:e7:8c: 9b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:96:F1:5A:39:91:4C:CE:52:25:6C:B2:71:B9:DC:AF:6E:1E:29 X509v3 Authority Key Identifier: keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7f:31:dc:e2:b6:d0:d9:2d:ed:9b:e8:76:b2:45:e4:e7:5b: 4e:85:76:91:ba:56:88:da:9f:42:56:eb:80:b8:38:32:8f:93: dc:82:9b:08:6c:a0:d8:82:6c:de:5a:4b:39:10:5b:e2:2c:b4: 84:98:1b:ee:f6:b4:5c:4e:f6:55:a5:75:ce:65:19:21:0f:01: b3:f5:48:9f:40:29:21:0a:6d:32:af:96:b6:b5:d6:87:f1:26: 68:41:33:76:15:7a:f2:c9:c8:ef:52:d2:28:ed:d6:3d:39:ae: 90:a1:8f:9d:b7:d4:1f:ca:17:e9:46:47:78:b9:0f:7f:8a:52: b8:2a:f2:e3:a5:66:d4:52:cc:f3:a0:91:3c:da:34:10:a1:35: ea:f5:46:25:e0:76:23:6b:a0:d0:63:a8:dc:9c:89:5e:9d:11: 94:ca:eb:d1:e7:c2:a8:6c:e9:ef:61:39:97:d7:06:bd:d6:2d: 42:0e:dc:94:d0:7f:ca:5c:01:4c:a9:a0:42:e2:7a:8a:74:13: d0:4b:90:12:2b:f3:79:64:ad:3f:94:57:e4:1a:c3:9f:e2:87: 61:f8:b3:6b:1f:1b:5e:37:fe:0d:12:a3:7d:52:b9:16:9d:c0: 73:18:d7:1b:1e:ca:43:3d:b0:ad:b1:a0:2a:28:9a:47:72:9a: c7:7d:64:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7UQs7814hfTPX1vrrEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODM0NDI5Nzc1ZTY1NTVlNTc0MjQ5MjI4NjI1NGIxZGE5 ZjE5MDMwHhcNMjYwMTI1MjMwMTA1WhcNMjYwMTI2MjMwMTA1WjAzMTEwLwYDVQQD Eyg5NzI1OTZmMTVhMzk5MTRjY2U1MjI1NmNiMjcxYjlkY2FmNmUxZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qG+w8VnOk1VCPeUTxvXgdE+JGni PV76C6Ql8ObW0AYLG5voPa3TJj/RHGpxNPgh+FHXM+iMDVpPn5cEojutnElJDA9Z Tx7wavZEgGT8xDRaAGpHB8jxGkFVdyoYQYmko6wMd0PqtF1yDCMsrCkmccy8iLkq +t0On1SSvBB7ziAoVmE7Nj4uuFVKAp24ZhPvebmjVSrLuiw0lVKrRLE6kt9iD2xi am4QBZFdY5xDd+RPADhQmbk8z1gpjOCce9FzjyKYvkYkLjUOqf9tsCaWOmyk3ojr FdBEyS6jFAYVYlZUbOey8EmuwYjbB1qTQpkCS21Z6KbBl0BbPpro54yb7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcllvFaOZFMzlIlbLJxudyvbh4pMB8GA1UdIwQY MBaAFOKDRCl3XmVV5XQkkihiVLHanxkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2Mt ZWE5NzY2NWMxM2RmLzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2Rm LzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtn8x3OK2 0Nkt7ZvodrJF5OdbToV2kbpWiNqfQlbrgLg4Mo+T3IKbCGyg2IJs3lpLORBb4iy0 hJgb7va0XE72VaV1zmUZIQ8Bs/VIn0ApIQptMq+WtrXWh/EmaEEzdhV68snI71LS KO3WPTmukKGPnbfUH8oX6UZHeLkPf4pSuCry46Vm1FLM86CRPNo0EKE16vVGJeB2 I2ug0GOo3JyJXp0RlMrr0efCqGzp72E5l9cGvdYtQg7clNB/ylwBTKmgQuJ6inQT 0EuQEivzeWStP5RX5BrDn+KHYfizax8bXjf+DRKjfVK5Fp3AcxjXGx7KQz2wrbGg KiiaR3Kax31kqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:53 2026 by rpki-client