This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json) Hash identifier: uapbYrgjYPfsezAinz6YlBFFWXp+TU4F8f5GIKX4ZRM= Subject key identifier: BD:2F:EF:DE:57:13:1C:3D:EB:A2:A6:47:66:3D:C1:AC:33:5C:C6:43 Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Certificate serial: 019BF3F4AD5ED0FA4C51CE0CDF2A865D3D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft Manifest number: 7B Signing time: Sun 25 Jan 2026 07:00:57 +0000 Manifest this update: Sun 25 Jan 2026 07:00:57 +0000 Manifest next update: Mon 26 Jan 2026 07:00:57 +0000 Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=) 2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: 3e9Hw1FYIbsV9/1xtTmdUiCAFnnfhffDlurscyy8ufs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:ad:5e:d0:fa:4c:51:ce:0c:df:2a:86:5d:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Validity Not Before: Jan 25 07:00:57 2026 GMT Not After : Jan 26 07:00:57 2026 GMT Subject: CN=bd2fefde57131c3deba2a647663dc1ac335cc643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b6:e0:85:41:f5:f4:ac:d3:11:64:d6:54:1b: f8:8e:ff:97:34:bf:41:ed:2a:4f:60:a9:41:52:ac: 24:a4:39:dc:6e:83:2b:df:64:96:a3:08:45:6b:4b: 76:83:88:92:13:dd:7a:32:e3:5d:93:dd:c4:14:9c: 48:33:aa:86:9f:ff:90:e8:62:a1:49:9a:4e:54:9c: 5d:09:b6:84:e8:d3:49:eb:b7:41:c7:26:79:04:8b: 5b:15:94:9b:06:77:78:19:2b:7e:89:d9:d8:ba:3a: ac:10:b8:cb:99:3a:2c:43:13:a6:2b:fd:01:b0:78: 32:c3:aa:78:b7:25:4c:54:fb:ed:e7:2c:40:89:c5: 97:c5:c3:37:ed:84:c8:81:96:8d:89:37:d0:5e:64: 4a:2f:73:12:69:a4:e3:25:62:63:89:fa:76:d3:e4: 8d:83:00:b9:70:66:f2:38:0b:52:04:9c:67:05:f3: 07:86:63:99:77:0d:65:ff:0b:54:89:0d:66:da:8f: 92:f9:55:67:21:d6:e4:c2:81:d0:e7:cd:b1:2b:98: 4c:7b:f0:af:a2:06:4e:e0:4f:51:d0:68:63:e3:01: e5:ba:5e:f6:0a:91:75:3e:21:12:6f:ff:a6:1c:0d: 00:bc:1c:7e:fc:30:a9:bc:79:bb:38:8e:90:19:72: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2F:EF:DE:57:13:1C:3D:EB:A2:A6:47:66:3D:C1:AC:33:5C:C6:43 X509v3 Authority Key Identifier: keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:94:66:c6:28:ab:f1:51:10:e6:83:e7:f8:ec:64:dd:4e:6c: 8b:17:96:fe:01:dd:b2:42:b9:cb:f4:ba:5d:8d:c4:99:a9:1d: be:c6:ad:84:2d:a9:c6:84:c5:27:a9:45:c1:6c:4b:73:da:ac: 97:5c:8c:44:82:b7:50:10:1e:dc:e4:92:57:1d:70:91:2f:88: b2:97:f4:39:23:55:6c:c4:45:76:70:60:ee:57:4b:b5:1b:b6: 66:9b:9f:c5:19:89:4b:ed:10:64:0f:b9:41:58:15:9f:8c:f1: 18:5f:3d:6a:97:90:42:36:40:9d:63:59:52:be:0a:c3:e3:1d: 9d:a4:e3:b7:fc:ac:01:be:c5:0c:59:75:9e:40:af:6c:e3:af: 76:7e:9c:85:b7:e7:4c:71:12:31:e4:c3:77:33:7a:ca:dd:f1: 9f:95:42:25:25:1a:8f:c7:cd:85:8b:33:40:85:a9:b9:5a:32: e9:c4:c3:fb:74:71:c2:87:91:d3:64:49:39:46:32:f6:2a:3b: a8:86:ab:9e:b1:22:10:b1:30:e1:50:12:a6:a2:24:c3:a0:ba: db:83:2d:45:95:82:7e:fc:06:16:ae:ba:6c:9e:ac:30:03:4c: 25:08:5d:82:34:15:b2:3b:ce:15:d2:8e:99:d5:49:21:f2:69: d9:92:09:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9K1e0PpMUc4M3yqGXT1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1 YWQwMTgwHhcNMjYwMTI1MDcwMDU3WhcNMjYwMTI2MDcwMDU3WjAzMTEwLwYDVQQD EyhiZDJmZWZkZTU3MTMxYzNkZWJhMmE2NDc2NjNkYzFhYzMzNWNjNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97bghUH19KzTEWTWVBv4jv+XNL9B 7SpPYKlBUqwkpDncboMr32SWowhFa0t2g4iSE916MuNdk93EFJxIM6qGn/+Q6GKh SZpOVJxdCbaE6NNJ67dBxyZ5BItbFZSbBnd4GSt+idnYujqsELjLmTosQxOmK/0B sHgyw6p4tyVMVPvt5yxAicWXxcM37YTIgZaNiTfQXmRKL3MSaaTjJWJjifp20+SN gwC5cGbyOAtSBJxnBfMHhmOZdw1l/wtUiQ1m2o+S+VVnIdbkwoHQ582xK5hMe/Cv ogZO4E9R0Ghj4wHlul72CpF1PiESb/+mHA0AvBx+/DCpvHm7OI6QGXL/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0v795XExw966KmR2Y9wawzXMZDMB8GA1UdIwQY MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZRmxiir 8VEQ5oPn+Oxk3U5sixeW/gHdskK5y/S6XY3EmakdvsathC2pxoTFJ6lFwWxLc9qs l1yMRIK3UBAe3OSSVx1wkS+Ispf0OSNVbMRFdnBg7ldLtRu2ZpufxRmJS+0QZA+5 QVgVn4zxGF89apeQQjZAnWNZUr4Kw+MdnaTjt/ysAb7FDFl1nkCvbOOvdn6chbfn THESMeTDdzN6yt3xn5VCJSUaj8fNhYszQIWpuVoy6cTD+3RxwoeR02RJOUYy9io7 qIarnrEiELEw4VASpqIkw6C624MtRZWCfvwGFq66bJ6sMANMJQhdgjQVsjvOFdKO mdVJIfJp2ZIJNw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:54 2026 by rpki-client