This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: cdfq1Nvz6/FcaAzONAVGRh/5nwiK1eNo5pxI/jJqRnI= Subject key identifier: 78:1C:EA:47:C2:71:C7:3F:98:12:C4:82:53:B9:72:9C:08:A1:C6:E2 Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 019BF4D0A84B2E2BE9E3BDDB84F84D0B99A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 03BD Signing time: Sun 25 Jan 2026 11:01:13 +0000 Manifest this update: Sun 25 Jan 2026 11:01:13 +0000 Manifest next update: Mon 26 Jan 2026 11:01:13 +0000 Files and hashes: 1: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: CXZdAzPi0tWALjPHsItXWdqVIkTCEQrIhsrHu19dmv4=) 2: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:a8:4b:2e:2b:e9:e3:bd:db:84:f8:4d:0b:99:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Jan 25 11:01:13 2026 GMT Not After : Jan 26 11:01:13 2026 GMT Subject: CN=781cea47c271c73f9812c48253b9729c08a1c6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:1f:a0:9a:df:c2:3f:e5:f6:75:40:cc:79: fc:12:66:66:dc:36:bf:8f:5e:5d:17:c2:0c:1a:51: d6:da:ff:c3:ae:c8:e3:94:5d:dd:f2:48:6e:26:c8: 0d:de:4f:e5:cd:38:eb:b5:62:4b:6f:93:62:22:c1: d2:19:eb:bd:52:f4:7a:b0:7c:1b:29:79:79:34:d6: 6b:9d:82:2f:10:19:53:65:d6:65:18:55:9f:91:ed: 63:e5:3b:84:f2:3c:9c:55:a3:37:d4:ca:ca:ea:09: f9:28:62:a7:a0:53:9e:9f:6d:a0:73:cc:7d:de:81: df:f8:8a:7d:93:2c:64:8a:98:f7:7d:7b:9b:2a:b4: eb:96:b2:d5:38:e4:92:34:5c:cf:24:bf:f8:c1:6e: d2:99:b2:97:f3:8f:3d:7e:ef:82:2b:b0:70:10:dd: 47:48:9f:f4:d6:08:88:ee:5a:e0:6d:fa:70:bb:83: 77:61:10:f7:55:4b:5a:e9:3f:3c:fb:0a:df:92:c5: 39:70:b4:27:48:e5:2a:c3:0c:e2:27:6b:75:f2:fc: 93:32:4d:64:05:cf:16:75:f6:22:ad:e6:6d:d0:01: 6c:62:2d:f1:74:7d:2b:62:f4:0d:f1:41:7b:f2:bd: 9a:4c:26:da:a5:55:4b:ea:ef:f9:fb:10:5f:4e:32: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:EA:47:C2:71:C7:3F:98:12:C4:82:53:B9:72:9C:08:A1:C6:E2 X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:49:59:76:df:c8:90:51:c6:a3:76:90:cb:73:6c:1a:38:91: 6a:04:d2:81:d9:f3:ac:e5:b3:a9:f0:33:44:a9:c3:5d:f0:d9: 5a:38:d4:fd:81:5c:58:a2:cb:16:9c:61:2f:93:32:51:95:26: 28:f4:82:05:75:0e:fd:d3:b3:c8:71:88:48:48:22:43:a1:3c: 35:89:79:fd:84:ec:7f:b5:07:b2:b6:16:2b:54:6a:56:68:b5: bb:8f:2f:0c:0f:17:2a:5d:28:96:e7:29:ff:3f:4d:bd:e4:ca: 2b:28:c7:75:3f:5d:79:63:0d:43:e3:3c:bb:23:6e:87:8a:2e: 21:6d:53:ca:a2:29:23:84:d5:64:d2:29:50:96:84:07:ce:0b: 84:a3:cf:d2:01:58:83:57:ef:a1:14:08:47:8f:75:0b:ef:9d: 1e:0f:21:fe:e1:9c:0e:cb:67:e7:f2:0b:82:0c:22:e5:bf:f3: 12:f3:ef:49:db:83:73:6b:3b:43:c7:a6:46:de:d5:f9:39:f3: 5b:be:ba:85:8b:59:58:c1:26:db:6a:f4:90:c9:04:9b:51:ac: 37:e1:ab:20:8e:f6:91:01:4e:34:00:bc:88:31:ac:44:46:2e: 09:01:3f:e7:e0:18:71:53:eb:16:58:b5:cb:4d:dd:78:8d:a2: 09:c1:a1:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00KhLLivp473bhPhNC5mjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjYwMTI1MTEwMTEzWhcNMjYwMTI2MTEwMTEzWjAzMTEwLwYDVQQD Eyg3ODFjZWE0N2MyNzFjNzNmOTgxMmM0ODI1M2I5NzI5YzA4YTFjNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC4foJrfwj/l9nVAzHn8EmZm3Da/ j15dF8IMGlHW2v/DrsjjlF3d8khuJsgN3k/lzTjrtWJLb5NiIsHSGeu9UvR6sHwb KXl5NNZrnYIvEBlTZdZlGFWfke1j5TuE8jycVaM31MrK6gn5KGKnoFOen22gc8x9 3oHf+Ip9kyxkipj3fXubKrTrlrLVOOSSNFzPJL/4wW7SmbKX8489fu+CK7BwEN1H SJ/01giI7lrgbfpwu4N3YRD3VUta6T88+wrfksU5cLQnSOUqwwziJ2t18vyTMk1k Bc8WdfYireZt0AFsYi3xdH0rYvQN8UF78r2aTCbapVVL6u/5+xBfTjJ1lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgc6kfCccc/mBLEglO5cpwIocbiMB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaElZdt/I kFHGo3aQy3NsGjiRagTSgdnzrOWzqfAzRKnDXfDZWjjU/YFcWKLLFpxhL5MyUZUm KPSCBXUO/dOzyHGISEgiQ6E8NYl5/YTsf7UHsrYWK1RqVmi1u48vDA8XKl0olucp /z9NveTKKyjHdT9deWMNQ+M8uyNuh4ouIW1TyqIpI4TVZNIpUJaEB84LhKPP0gFY g1fvoRQIR491C++dHg8h/uGcDstn5/ILggwi5b/zEvPvSduDc2s7Q8emRt7V+Tnz W766hYtZWMEm22r0kMkEm1GsN+GrII72kQFONAC8iDGsREYuCQE/5+AYcVPrFli1 y03deI2iCcGheA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:46 2026 by rpki-client