This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json) Hash identifier: paeG+wNN/PC5u4G7UypE6E+igTiq2cC4wv/Pqbse2GU= Subject key identifier: A1:FB:26:DC:1F:68:2F:62:FB:33:77:1F:31:DD:17:F1:8D:BE:0D:3E Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019BF49948921DD816EE5CFEBE931097886B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 10:00:44 +0000 Manifest this update: Sun 25 Jan 2026 10:00:44 +0000 Manifest next update: Mon 26 Jan 2026 10:00:44 +0000 Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: 3bPuMgYLhptmH04krdaJP1YACvzeIw87zIg9ptfd/y8=) 2: Wi5MJkqvObCqrjZBlo0JDmeXkfI.roa (hash: 99QCRcjIbmAy7NXYDozY/LitcvyDVNBk3XTYfLTEqtM=) 3: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (hash: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo=) 4: bRn03FRlSzZThZNkviNVTHKQJGs.roa (hash: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M=) 5: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (hash: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs=) 6: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (hash: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk=) 7: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (hash: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:48:92:1d:d8:16:ee:5c:fe:be:93:10:97:88:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Jan 25 10:00:44 2026 GMT Not After : Jan 26 10:00:44 2026 GMT Subject: CN=a1fb26dc1f682f62fb33771f31dd17f18dbe0d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:ea:8c:e3:5f:69:bc:2b:9f:e7:57:3f:01: 46:53:f8:f0:3e:52:5a:d0:80:ed:f9:20:c2:d2:c2: 0a:1f:63:83:ba:4d:98:ae:0f:5d:7f:10:c7:e7:67: 93:bc:c8:39:60:b3:93:2f:43:c6:a7:29:b2:81:e8: af:31:89:24:31:89:61:6b:47:fa:36:d1:9b:45:14: de:e3:d1:7c:d5:94:fa:11:99:a8:b6:3c:62:4e:87: ff:c3:12:af:9a:fe:2b:b4:3d:0c:0a:9d:e5:d2:2b: 59:2b:d4:19:b5:ea:af:fe:d5:eb:d2:3a:3d:5c:1d: ad:01:3d:61:66:6e:86:75:e8:eb:82:fe:d8:0e:90: 27:c6:9c:bf:78:0b:17:c0:c1:e6:31:d6:54:d0:37: 28:ac:78:93:7c:7c:70:ab:a1:3b:54:8f:ee:30:cd: 63:74:94:a3:58:b3:67:cd:a9:2f:72:26:f5:e6:21: ac:d0:41:a9:6b:dc:c2:27:ba:c3:1d:89:08:2a:0b: 86:90:4a:b1:0e:79:a8:a3:5a:e0:59:ec:66:28:c2: 84:be:ba:bf:7e:d0:2a:c4:37:ef:6f:66:35:dc:4e: 73:f9:30:62:d5:96:87:b4:74:17:26:9a:8e:3c:2e: 2c:a6:6d:12:18:56:3f:af:8a:80:52:84:74:49:3a: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:26:DC:1F:68:2F:62:FB:33:77:1F:31:DD:17:F1:8D:BE:0D:3E X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e2:47:ba:2f:79:d6:75:fa:81:ce:52:4a:97:95:bc:48:f9: 1a:fb:8e:0e:57:bb:49:4e:88:b7:68:22:a2:d3:9e:02:f4:a2: 76:83:99:d5:35:c6:2b:4d:ea:07:a2:c8:50:d3:0b:8b:5e:24: eb:c6:9c:75:74:67:83:34:cf:0c:ba:0f:4f:99:1f:87:5b:69: 54:ca:7e:51:6c:ad:87:9c:bf:37:fc:7e:dd:2d:15:1b:34:77: 81:50:1d:49:3c:09:c6:51:22:08:0e:18:dd:63:4d:7d:34:9e: 33:5f:15:51:70:ac:eb:15:aa:f6:a8:a8:ac:d1:9b:ec:8f:7f: 09:02:ca:c8:2f:83:6e:75:7d:48:80:87:ee:3e:83:4f:a8:5a: 38:a2:a1:0c:f3:76:e7:21:45:e7:a2:22:0c:ac:1a:63:11:11: 67:9f:e7:80:3f:df:64:de:03:79:c8:59:97:44:fa:bb:dc:1c: ef:cb:e3:62:d2:19:77:e2:e1:3e:87:97:bf:2f:10:73:5a:fc: 06:db:ca:30:0b:cb:05:25:bf:d3:1c:43:7a:28:29:a3:81:99: 9a:f8:33:1e:cf:01:e4:f9:38:4e:c9:82:7c:ba:83:36:f8:6c: 25:fa:67:ab:23:a3:d9:9d:77:13:f4:66:98:40:e4:03:2d:e7: 50:ac:93:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mUiSHdgW7lz+vpMQl4hrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjYwMTI1MTAwMDQ0WhcNMjYwMTI2MTAwMDQ0WjAzMTEwLwYDVQQD EyhhMWZiMjZkYzFmNjgyZjYyZmIzMzc3MWYzMWRkMTdmMThkYmUwZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSHqjONfabwrn+dXPwFGU/jwPlJa 0IDt+SDC0sIKH2ODuk2Yrg9dfxDH52eTvMg5YLOTL0PGpymygeivMYkkMYlha0f6 NtGbRRTe49F81ZT6EZmotjxiTof/wxKvmv4rtD0MCp3l0itZK9QZteqv/tXr0jo9 XB2tAT1hZm6Gdejrgv7YDpAnxpy/eAsXwMHmMdZU0DcorHiTfHxwq6E7VI/uMM1j dJSjWLNnzakvcib15iGs0EGpa9zCJ7rDHYkIKguGkEqxDnmoo1rgWexmKMKEvrq/ ftAqxDfvb2Y13E5z+TBi1ZaHtHQXJpqOPC4spm0SGFY/r4qAUoR0STrb2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKH7JtwfaC9i+zN3HzHdF/GNvg0+MB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOJHui95 1nX6gc5SSpeVvEj5GvuODle7SU6It2giotOeAvSidoOZ1TXGK03qB6LIUNMLi14k 68acdXRngzTPDLoPT5kfh1tpVMp+UWyth5y/N/x+3S0VGzR3gVAdSTwJxlEiCA4Y 3WNNfTSeM18VUXCs6xWq9qiorNGb7I9/CQLKyC+DbnV9SICH7j6DT6haOKKhDPN2 5yFF56IiDKwaYxERZ5/ngD/fZN4DechZl0T6u9wc78vjYtIZd+LhPoeXvy8Qc1r8 BtvKMAvLBSW/0xxDeigpo4GZmvgzHs8B5Pk4TsmCfLqDNvhsJfpnqyOj2Z13E/Rm mEDkAy3nUKyTvA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:26 2026 by rpki-client