This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json) Hash identifier: Q24AziGp/spLsjhzyhPccjW/UPYSe9CP8kWsmWpGGSQ= Subject key identifier: 9F:21:EB:28:B7:FE:E7:D0:A9:66:4C:2A:FC:B4:C7:87:6C:F5:26:94 Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Certificate serial: 019BF5AC5FB04DD1D67D83894CC504A6B107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft Manifest number: 019B Signing time: Sun 25 Jan 2026 15:01:12 +0000 Manifest this update: Sun 25 Jan 2026 15:01:12 +0000 Manifest next update: Mon 26 Jan 2026 15:01:12 +0000 Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=) 2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: AD4bpWkAfMMKkMvYFchJObJw1U2tggpvXti0C7l3/hY=) 3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:5f:b0:4d:d1:d6:7d:83:89:4c:c5:04:a6:b1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Validity Not Before: Jan 25 15:01:12 2026 GMT Not After : Jan 26 15:01:12 2026 GMT Subject: CN=9f21eb28b7fee7d0a9664c2afcb4c7876cf52694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:0a:fb:bd:35:00:50:e1:c9:35:3e:be:07: 65:64:f1:2d:e4:06:a0:08:c4:1f:e1:f6:bb:78:ed: 58:58:74:1b:14:65:a7:55:8d:64:2b:18:15:f1:5c: 5e:51:fa:0c:4c:d2:a9:0c:74:74:a4:ef:a4:d8:1f: 6e:b3:f5:a5:d1:e6:b7:b1:d7:5c:8e:97:b2:d7:72: cb:92:1f:b6:cc:bb:c1:c4:12:73:74:b7:76:c0:77: 22:0c:d1:86:10:92:45:1a:9a:6f:8f:f4:3d:4c:fe: ca:96:7b:da:6e:ce:d1:f1:cb:e9:7b:0d:b5:4d:17: 29:32:22:6f:8b:8c:98:f5:59:1d:b2:39:fb:e3:17: 0c:b8:5e:0d:dd:3b:30:0a:ae:c0:d6:95:23:0e:a9: cd:15:2b:4f:98:a5:5f:21:58:99:40:da:cb:db:c9: ce:30:d9:cc:ca:db:af:dc:29:05:fb:87:f6:35:08: 4a:b1:62:f9:22:ec:53:b9:06:88:af:83:50:27:f7: cc:c0:6c:b6:10:99:f7:4e:68:69:68:b4:44:82:4a: cd:44:d8:46:4d:75:41:5b:85:ca:35:40:d5:cc:da: 6f:8f:21:84:f8:3a:e6:19:c7:fe:0a:e4:50:6e:6a: 27:da:c0:f1:a8:ab:b8:5d:e4:fd:72:1c:10:58:fc: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:21:EB:28:B7:FE:E7:D0:A9:66:4C:2A:FC:B4:C7:87:6C:F5:26:94 X509v3 Authority Key Identifier: keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:67:60:a0:e5:66:7c:da:42:80:f3:33:12:91:7c:12:b9:96: f1:25:00:2d:9b:81:27:2a:c9:18:20:13:bd:08:fb:07:7c:cd: fa:c6:4d:9c:cd:e6:b8:40:ee:4c:b2:ed:71:6e:ea:07:8e:f1: 38:cd:26:b9:6d:52:33:29:b9:b3:f3:39:93:29:72:cf:97:f2: 0c:84:2a:83:84:0e:af:54:80:15:d1:7c:c2:79:04:cf:91:d9: ed:b7:fa:e1:de:77:92:bb:27:d0:5c:38:6b:ed:1a:2f:6b:91: f6:4e:98:4a:94:76:88:ab:61:5b:e3:c2:76:14:f8:2b:eb:1a: ca:96:6b:0f:f2:e0:cd:9d:54:30:a0:3f:5f:54:9a:f1:92:de: d7:3f:25:da:a3:5f:54:02:3c:7d:05:dc:11:b1:d1:9a:86:5a: e3:6a:a2:b5:9b:39:f8:ae:98:25:2b:4b:87:fd:93:0b:04:38: a6:c2:f5:a7:2f:ba:f3:e2:38:de:5e:45:1b:6c:71:4c:5c:f8: c4:a9:b2:2d:26:c1:fa:d3:c4:65:60:18:11:02:f4:e2:71:33: c2:49:a4:ed:a4:61:6c:37:02:08:40:92:d6:db:25:2f:1a:57: 57:61:4c:6b:19:58:cd:f8:eb:b3:bc:3e:0d:cd:65:53:76:eb: 86:d1:35:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rF+wTdHWfYOJTMUEprEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwM2Y1NTAwYWVmZTZhYjRkYmRlMTI0MDczYTM3YmMwZGMz MzFlODAwHhcNMjYwMTI1MTUwMTEyWhcNMjYwMTI2MTUwMTEyWjAzMTEwLwYDVQQD Eyg5ZjIxZWIyOGI3ZmVlN2QwYTk2NjRjMmFmY2I0Yzc4NzZjZjUyNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopMK+701AFDhyTU+vgdlZPEt5Aag CMQf4fa7eO1YWHQbFGWnVY1kKxgV8VxeUfoMTNKpDHR0pO+k2B9us/Wl0ea3sddc jpey13LLkh+2zLvBxBJzdLd2wHciDNGGEJJFGppvj/Q9TP7Klnvabs7R8cvpew21 TRcpMiJvi4yY9Vkdsjn74xcMuF4N3TswCq7A1pUjDqnNFStPmKVfIViZQNrL28nO MNnMytuv3CkF+4f2NQhKsWL5IuxTuQaIr4NQJ/fMwGy2EJn3TmhpaLREgkrNRNhG TXVBW4XKNUDVzNpvjyGE+DrmGcf+CuRQbmon2sDxqKu4XeT9chwQWPyvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8h6yi3/ufQqWZMKvy0x4ds9SaUMB8GA1UdIwQY MBaAFOA/VQCu/mq0294SQHOje8DcMx6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDct M2FjNTY1ZGNkZjczLzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDctM2FjNTY1ZGNkZjcz LzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmdgoOVm fNpCgPMzEpF8ErmW8SUALZuBJyrJGCATvQj7B3zN+sZNnM3muEDuTLLtcW7qB47x OM0muW1SMym5s/M5kylyz5fyDIQqg4QOr1SAFdF8wnkEz5HZ7bf64d53krsn0Fw4 a+0aL2uR9k6YSpR2iKthW+PCdhT4K+saypZrD/LgzZ1UMKA/X1Sa8ZLe1z8l2qNf VAI8fQXcEbHRmoZa42qitZs5+K6YJStLh/2TCwQ4psL1py+68+I43l5FG2xxTFz4 xKmyLSbB+tPEZWAYEQL04nEzwkmk7aRhbDcCCECS1tslLxpXV2FMaxlYzfjrs7w+ Dc1lU3brhtE1Gg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:54 2026 by rpki-client