This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json) Hash identifier: xw2ALelq7k42J33u6dBcI+9fkuVfQg2JwEG+41AUgAw= Subject key identifier: B2:25:C0:F8:69:C6:2B:D6:46:45:39:97:A8:94:90:24:C0:E5:72:04 Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a Certificate serial: 019BF651733045C9B2E43022A72EEE00BB79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 18:01:31 +0000 Manifest this update: Sun 25 Jan 2026 18:01:31 +0000 Manifest next update: Mon 26 Jan 2026 18:01:31 +0000 Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=) 2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=) 3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: NZ4q5DxDm18a4dAZ5gb/37zdTOO1RszEMCjvuOPtZ+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:73:30:45:c9:b2:e4:30:22:a7:2e:ee:00:bb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a Validity Not Before: Jan 25 18:01:31 2026 GMT Not After : Jan 26 18:01:31 2026 GMT Subject: CN=b225c0f869c62bd646453997a8949024c0e57204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:17:8e:43:e7:fa:de:15:be:df:19:fe:0a: 81:7a:bf:29:6f:9c:a1:37:fd:16:32:8b:00:8f:4a: 32:d5:58:42:43:47:94:ba:ad:32:9d:48:d7:ab:da: 29:d8:bc:19:09:a4:82:ac:5a:97:59:e7:18:ff:b0: 46:ae:c8:4d:76:6f:79:b9:e4:7f:ae:fd:46:e3:4b: 40:e8:02:1c:ed:b4:fd:5f:ea:20:5f:4c:1b:cd:e8: 44:46:14:b6:b0:f1:4f:51:3c:c9:7d:68:e6:a7:0a: 74:d6:8c:5f:c5:15:24:fe:f5:5f:20:a2:f8:cf:fc: bb:18:b1:0c:1b:94:d7:fb:54:97:4d:ca:52:51:6b: 5a:51:52:be:9b:eb:84:eb:b7:ff:ea:2d:95:46:c2: 69:20:eb:ae:80:b8:38:53:32:49:9e:f0:c1:37:7e: c0:de:c2:f3:3a:8d:48:3f:d1:9c:e2:bf:b9:c4:b6: 4c:f1:38:f3:0b:84:1e:a7:f8:c2:ad:e1:21:1a:8d: b8:72:1a:4b:08:4f:1d:2c:62:cc:18:75:35:d8:e1: cc:16:5f:af:85:db:85:7b:c3:86:3e:fa:f2:ca:02: 2f:b2:91:5c:77:11:48:3d:57:d9:92:96:0c:ad:80: c4:80:40:09:1d:83:22:d0:fd:9f:df:e8:c9:33:21: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:25:C0:F8:69:C6:2B:D6:46:45:39:97:A8:94:90:24:C0:E5:72:04 X509v3 Authority Key Identifier: keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e6:24:e8:3d:ce:6f:9c:c1:ec:64:dc:a9:9f:29:5a:80:ca: 57:e0:2c:71:08:32:5e:23:9a:db:69:d1:15:1f:b5:d0:2a:19: 9f:b4:54:5b:40:7d:2d:cf:e7:f7:e7:eb:22:c8:bd:c6:25:6e: 6f:e4:5b:1d:08:8e:bc:14:4d:b1:7b:dc:4f:9a:86:ee:db:34: 2d:9f:7b:6b:43:cc:82:7b:9f:c7:f8:75:5a:29:6c:25:73:27: 9e:d5:8a:35:b5:57:99:ad:ed:d3:e3:e8:c0:a8:c5:95:dc:a7: c9:80:5f:2d:29:21:2f:eb:b8:04:bf:cb:48:a6:62:da:bb:20: 72:ef:3b:57:bb:43:30:13:39:26:d3:ce:d5:5a:27:db:44:f8: 42:28:f3:de:ec:40:27:49:4f:8c:64:bf:fa:87:ed:af:ba:46: dd:0d:9f:2a:10:80:59:34:37:10:96:92:16:e7:e6:b7:d0:1f: 80:75:50:8f:e9:a0:1a:fe:e2:2b:9d:92:92:18:7f:1c:6d:9b: cd:f9:7c:eb:1e:ce:2a:d5:ba:2b:03:a6:31:2b:6a:1b:fa:a4: f9:2f:26:8a:21:d8:e6:6d:21:e4:36:7e:58:fc:02:74:69:e4: b4:20:7b:3a:e9:3f:81:be:71:02:a7:47:ba:99:f6:cd:ac:b7: 39:ec:2f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXMwRcmy5DAipy7uALt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi MmMyNWEwHhcNMjYwMTI1MTgwMTMxWhcNMjYwMTI2MTgwMTMxWjAzMTEwLwYDVQQD EyhiMjI1YzBmODY5YzYyYmQ2NDY0NTM5OTdhODk0OTAyNGMwZTU3MjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUEXjkPn+t4Vvt8Z/gqBer8pb5yh N/0WMosAj0oy1VhCQ0eUuq0ynUjXq9op2LwZCaSCrFqXWecY/7BGrshNdm95ueR/ rv1G40tA6AIc7bT9X+ogX0wbzehERhS2sPFPUTzJfWjmpwp01oxfxRUk/vVfIKL4 z/y7GLEMG5TX+1SXTcpSUWtaUVK+m+uE67f/6i2VRsJpIOuugLg4UzJJnvDBN37A 3sLzOo1IP9Gc4r+5xLZM8TjzC4Qep/jCreEhGo24chpLCE8dLGLMGHU12OHMFl+v hduFe8OGPvryygIvspFcdxFIPVfZkpYMrYDEgEAJHYMi0P2f3+jJMyFYBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIlwPhpxivWRkU5l6iUkCTA5XIEMB8GA1UdIwQY MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt ZWMwM2ViZDE5MDAwLzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+Yk6D3O b5zB7GTcqZ8pWoDKV+AscQgyXiOa22nRFR+10CoZn7RUW0B9Lc/n9+frIsi9xiVu b+RbHQiOvBRNsXvcT5qG7ts0LZ97a0PMgnufx/h1WilsJXMnntWKNbVXma3t0+Po wKjFldynyYBfLSkhL+u4BL/LSKZi2rsgcu87V7tDMBM5JtPO1Von20T4Qijz3uxA J0lPjGS/+oftr7pG3Q2fKhCAWTQ3EJaSFufmt9AfgHVQj+mgGv7iK52Skhh/HG2b zfl86x7OKtW6KwOmMStqG/qk+S8miiHY5m0h5DZ+WPwCdGnktCB7Ouk/gb5xAqdH upn2zay3Oewv8w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:21 2026 by rpki-client