This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json) Hash identifier: eXPv/4tzKU8dNCM4BlNldb0dI8oVraNGyZlHdXcSwZU= Subject key identifier: FA:42:DC:53:A1:30:D7:1A:BA:1B:C8:DC:DE:4C:32:A4:07:5A:3F:34 Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Certificate serial: 019BF499BEB7ACDEF36D0FFCC74FE281E537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft Manifest number: 0A9D Signing time: Sun 25 Jan 2026 10:01:15 +0000 Manifest this update: Sun 25 Jan 2026 10:01:15 +0000 Manifest next update: Mon 26 Jan 2026 10:01:15 +0000 Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: cXSGPeaBh6aqvuzbXzIh5CH2WotXbzurkugtl/QQXec=) 2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:be:b7:ac:de:f3:6d:0f:fc:c7:4f:e2:81:e5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Validity Not Before: Jan 25 10:01:15 2026 GMT Not After : Jan 26 10:01:15 2026 GMT Subject: CN=fa42dc53a130d71aba1bc8dcde4c32a4075a3f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:cd:01:64:f3:0e:1f:d0:62:af:a9:9a:52: 55:ef:82:d5:f8:47:28:f0:a0:eb:b8:65:46:90:16: af:2b:52:5d:58:31:74:9c:ba:c9:11:7f:2e:1e:e9: 82:d4:a3:d1:bc:1d:96:39:65:7f:13:71:17:2a:fa: 45:47:77:0a:fe:b1:43:b7:cf:6c:c9:78:e6:c4:a5: 5f:20:f7:df:12:6f:f8:75:df:58:09:1e:05:41:4a: 8d:8c:20:4f:3b:97:c7:85:18:ee:f8:4d:aa:a7:6e: 2c:00:2b:32:b3:5f:62:15:9b:d9:59:8e:1a:b4:ad: 2b:a3:bc:99:10:6c:42:91:61:fa:6e:8b:c9:c1:a8: 59:fc:e7:31:75:69:d1:dd:89:b8:af:f4:a7:8f:8d: 6a:2f:b4:9c:29:39:ef:ba:da:5f:9d:92:d3:14:e8: 8f:34:bf:f8:e3:7a:b2:a6:96:14:61:cf:a4:17:9b: ce:5a:9b:fc:49:40:47:f3:98:b0:3f:06:8e:0e:b6: c3:4e:d3:36:ea:5d:ac:4d:94:33:fd:b7:7b:6a:1b: 17:38:26:1c:b3:82:02:0a:48:bc:00:81:ff:f6:5f: aa:6c:e5:6f:e2:27:b3:7c:86:32:6a:2e:84:d0:0d: 69:93:48:52:ec:c3:f7:9c:f9:87:1a:e9:61:fc:b6: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:42:DC:53:A1:30:D7:1A:BA:1B:C8:DC:DE:4C:32:A4:07:5A:3F:34 X509v3 Authority Key Identifier: keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:76:77:2b:de:5a:3f:3b:a2:77:43:02:90:43:f9:27:07:a3: 12:9d:e0:70:3f:62:72:87:7a:24:28:70:5f:77:f8:a0:84:4a: 4d:98:86:a8:19:54:ed:fa:7a:42:99:b6:ef:51:9d:1a:37:7f: 3a:ff:a8:e8:a9:28:8c:30:a5:93:d4:d4:34:d2:9d:73:c5:f2: 74:08:29:0a:74:45:51:b4:ac:70:e7:cc:3b:5f:96:a9:60:38: 54:21:23:bc:cc:a7:2b:5f:5b:1f:4d:92:95:d1:2f:e4:c5:22: ac:82:ff:86:98:ae:bb:d8:c1:91:cd:f7:48:e9:7a:7a:48:6a: 4b:99:82:be:8f:59:ea:10:44:6c:3e:55:00:1f:cd:72:47:4a: 04:dc:ce:39:fd:97:e1:a6:57:7d:b9:a2:c6:04:6c:6b:f9:26: 5b:da:60:25:ec:b2:93:47:9a:84:c5:f8:35:2e:9f:80:8d:cd: 2c:1d:ad:49:ae:b3:92:5c:8a:f3:67:79:44:ef:3a:0d:46:0a: 39:58:2c:85:3d:c0:d2:58:fb:81:6d:4d:6c:c5:1e:8f:e1:ac: 2d:9d:f1:b1:9f:3a:d7:17:b0:30:47:de:64:74:da:84:57:de: 9f:9c:76:e2:3e:8e:e7:e7:f3:01:a5:82:09:01:b7:e4:ef:6e: 89:4e:43:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mb63rN7zbQ/8x0/igeU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy YjQ4NWEwHhcNMjYwMTI1MTAwMTE1WhcNMjYwMTI2MTAwMTE1WjAzMTEwLwYDVQQD EyhmYTQyZGM1M2ExMzBkNzFhYmExYmM4ZGNkZTRjMzJhNDA3NWEzZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CbNAWTzDh/QYq+pmlJV74LV+Eco 8KDruGVGkBavK1JdWDF0nLrJEX8uHumC1KPRvB2WOWV/E3EXKvpFR3cK/rFDt89s yXjmxKVfIPffEm/4dd9YCR4FQUqNjCBPO5fHhRju+E2qp24sACsys19iFZvZWY4a tK0ro7yZEGxCkWH6bovJwahZ/OcxdWnR3Ym4r/Snj41qL7ScKTnvutpfnZLTFOiP NL/443qyppYUYc+kF5vOWpv8SUBH85iwPwaODrbDTtM26l2sTZQz/bd7ahsXOCYc s4ICCki8AIH/9l+qbOVv4iezfIYyai6E0A1pk0hS7MP3nPmHGulh/LYapwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpC3FOhMNcauhvI3N5MMqQHWj80MB8GA1UdIwQY MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHZ3K95a Pzuid0MCkEP5JwejEp3gcD9icod6JChwX3f4oIRKTZiGqBlU7fp6Qpm271GdGjd/ Ov+o6KkojDClk9TUNNKdc8XydAgpCnRFUbSscOfMO1+WqWA4VCEjvMynK19bH02S ldEv5MUirIL/hpiuu9jBkc33SOl6ekhqS5mCvo9Z6hBEbD5VAB/NckdKBNzOOf2X 4aZXfbmixgRsa/kmW9pgJeyyk0eahMX4NS6fgI3NLB2tSa6zklyK82d5RO86DUYK OVgshT3A0lj7gW1NbMUej+GsLZ3xsZ861xewMEfeZHTahFfen5x24j6O5+fzAaWC CQG35O9uiU5DwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:12 2026 by rpki-client