This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json) Hash identifier: 4NEHqxW/V1ILtiJ57Z9hU+RyJHv4qiBnLx8WyQVJt2Q= Subject key identifier: 6F:6D:F0:6D:AF:D8:3E:41:1A:F0:60:68:26:7A:9C:2F:27:9C:C5:8F Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Certificate serial: 019BF318F0DEA08886177E73CEBBDB221B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 03:00:56 +0000 Manifest this update: Sun 25 Jan 2026 03:00:56 +0000 Manifest next update: Mon 26 Jan 2026 03:00:56 +0000 Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: Ip4SfJ3b3NE+6R9GS7HKN4Xtst8wt1jbhOay4r2ZTjg=) 2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:f0:de:a0:88:86:17:7e:73:ce:bb:db:22:1b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Validity Not Before: Jan 25 03:00:56 2026 GMT Not After : Jan 26 03:00:56 2026 GMT Subject: CN=6f6df06dafd83e411af06068267a9c2f279cc58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:e7:96:f7:89:c6:63:88:01:2e:0d:78:be: ec:1d:f7:fc:db:d1:cc:ce:f3:58:45:dc:4a:e1:04: f9:bc:2b:e6:45:bf:90:ca:41:aa:22:1d:8b:09:68: 37:36:a7:0a:f4:7c:ad:4b:3f:82:43:e2:3e:cf:40: 05:fc:9e:97:db:9a:44:c4:df:c1:ab:87:34:21:7d: f7:4c:a9:94:10:9c:92:71:6b:6e:c7:38:35:3f:00: a8:4d:af:34:06:53:97:c2:8a:f8:c5:9d:cf:96:88: 6e:26:bb:17:4e:7b:e8:18:a1:e5:ae:72:2f:42:42: bd:ec:b2:8c:2a:2b:11:09:6f:8a:01:7c:f5:c5:5f: ba:f6:c8:46:63:7d:e2:6d:3c:7b:cb:a6:dc:5e:1d: a3:ef:88:f9:7d:ad:02:aa:29:d9:1f:54:f8:02:0b: 4a:5e:31:4b:e3:a9:e2:c1:c0:03:85:20:48:9c:67: 22:1d:87:8a:32:5f:97:c4:b5:bf:a1:95:24:ef:ac: a6:e9:02:04:40:0f:6e:c2:b3:56:3d:ce:21:58:cf: af:d0:3f:40:40:fc:68:61:20:cd:75:ec:20:49:d4: 3f:0e:14:ba:c8:c2:24:b7:0f:e5:aa:81:26:8e:34: cb:66:14:d6:1e:9e:69:ab:64:c2:86:fa:25:a8:f2: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6D:F0:6D:AF:D8:3E:41:1A:F0:60:68:26:7A:9C:2F:27:9C:C5:8F X509v3 Authority Key Identifier: keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:23:07:c5:fe:42:a1:c0:4d:10:02:e0:ee:78:e4:4d:f1:e9: b6:45:6e:e7:0f:06:05:f1:75:13:a1:94:58:cd:07:16:7e:5f: 82:26:a9:24:43:52:fb:0d:16:be:03:b9:be:89:d3:f1:d8:fd: 74:95:44:ba:82:50:a9:4c:2b:5a:45:75:a2:c3:00:40:15:fc: b4:a4:45:a1:09:1d:3d:e2:b8:a6:d9:b3:d4:70:da:b3:4b:ca: ac:80:48:3d:db:26:a4:2a:34:12:a9:90:0a:e8:89:43:c6:61: fe:3c:8f:0c:f0:09:49:da:0a:54:64:1f:99:5a:8d:94:2f:1d: 54:0d:55:db:cd:bb:46:c2:82:d1:eb:61:c8:41:d3:11:83:57: aa:2a:ab:72:5e:5b:53:ec:f6:cb:3b:86:ce:78:77:4e:26:0e: d3:36:26:f0:77:23:80:9e:6a:54:82:21:03:14:ee:48:ed:4e: a1:56:e3:d1:c1:bf:37:7c:06:a6:c9:7b:53:56:04:d4:b3:eb: 67:a8:6d:9e:38:83:26:f0:c5:33:ef:45:98:48:54:08:3c:d0: a2:86:a8:d9:22:b7:49:6d:44:c0:06:71:9c:ff:b8:44:d3:76: cb:43:09:f9:f9:ab:6d:dc:d4:3e:90:7c:81:49:04:63:05:75: b5:13:b5:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGPDeoIiGF35zzrvbIhslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2 MTNiYzUwHhcNMjYwMTI1MDMwMDU2WhcNMjYwMTI2MDMwMDU2WjAzMTEwLwYDVQQD Eyg2ZjZkZjA2ZGFmZDgzZTQxMWFmMDYwNjgyNjdhOWMyZjI3OWNjNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRjnlveJxmOIAS4NeL7sHff829HM zvNYRdxK4QT5vCvmRb+QykGqIh2LCWg3NqcK9HytSz+CQ+I+z0AF/J6X25pExN/B q4c0IX33TKmUEJyScWtuxzg1PwCoTa80BlOXwor4xZ3PlohuJrsXTnvoGKHlrnIv QkK97LKMKisRCW+KAXz1xV+69shGY33ibTx7y6bcXh2j74j5fa0CqinZH1T4AgtK XjFL46niwcADhSBInGciHYeKMl+XxLW/oZUk76ym6QIEQA9uwrNWPc4hWM+v0D9A QPxoYSDNdewgSdQ/DhS6yMIktw/lqoEmjjTLZhTWHp5pq2TChvolqPISswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9t8G2v2D5BGvBgaCZ6nC8nnMWPMB8GA1UdIwQY MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4 LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiMHxf5C ocBNEALg7njkTfHptkVu5w8GBfF1E6GUWM0HFn5fgiapJENS+w0WvgO5vonT8dj9 dJVEuoJQqUwrWkV1osMAQBX8tKRFoQkdPeK4ptmz1HDas0vKrIBIPdsmpCo0EqmQ CuiJQ8Zh/jyPDPAJSdoKVGQfmVqNlC8dVA1V2827RsKC0ethyEHTEYNXqiqrcl5b U+z2yzuGznh3TiYO0zYm8HcjgJ5qVIIhAxTuSO1OoVbj0cG/N3wGpsl7U1YE1LPr Z6htnjiDJvDFM+9FmEhUCDzQooao2SK3SW1EwAZxnP+4RNN2y0MJ+fmrbdzUPpB8 gUkEYwV1tRO1mA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:01 2026 by rpki-client