This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json) Hash identifier: VxTyH7HOO0FA9npXZGAWtzWsytEUUkepL/qquyamQbE= Subject key identifier: D2:F9:F1:A6:E8:92:08:B4:62:B2:BE:37:99:1C:71:99:28:F8:D6:2A Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Certificate serial: 019BF8ADD466941DCB35D421A160A211415B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft Manifest number: 11D9 Signing time: Mon 26 Jan 2026 05:01:40 +0000 Manifest this update: Mon 26 Jan 2026 05:01:40 +0000 Manifest next update: Tue 27 Jan 2026 05:01:40 +0000 Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=) 2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=) 3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: GCXyo2PksSX+Y3JbE7/Iyh8iQiYP8WbL2lE2/W6Ir6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:d4:66:94:1d:cb:35:d4:21:a1:60:a2:11:41:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Validity Not Before: Jan 26 05:01:40 2026 GMT Not After : Jan 27 05:01:40 2026 GMT Subject: CN=d2f9f1a6e89208b462b2be37991c719928f8d62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:4a:e4:c9:5d:08:f5:92:29:43:a9:3e:71: cf:2a:ca:8c:a0:7d:20:9f:3a:c1:7a:35:89:f8:7f: 3c:e5:4e:d6:35:a4:28:a3:54:5d:52:ab:74:41:a7: 66:42:dc:c4:60:67:ed:26:88:03:ba:5c:4d:1e:7a: 3b:67:24:56:d4:07:f6:ce:4d:d6:51:e6:16:7a:88: 37:86:12:3a:b5:29:82:e1:7f:bd:7f:b8:9b:e8:ca: e3:93:dc:ec:5d:22:7f:f5:bd:cd:96:ed:b1:7f:ae: 47:f8:e8:12:4e:c2:2a:5a:98:7d:be:08:c1:8d:95: 8a:a5:1f:f3:78:0a:05:55:64:ef:74:fe:c6:70:7b: 71:bd:cd:7d:2a:6d:23:55:4c:cf:04:d3:19:78:61: 42:43:bd:99:13:f6:b0:61:d8:84:b1:fd:3f:f5:d4: f2:bf:88:53:ac:fa:d6:f3:2d:ca:c6:92:b8:ec:ab: db:51:b0:cb:61:bd:4c:25:e6:0e:03:fa:ba:ea:35: b9:c1:ec:2f:8d:3f:b9:3b:63:9e:8a:c9:4c:7d:ca: 00:ec:b6:11:c9:49:e2:9a:d2:72:18:45:17:f3:35: ca:64:90:65:45:dc:dd:23:ba:59:ef:31:a0:ed:97: b0:9d:f2:18:2b:61:61:b6:f3:b8:09:5b:c8:9a:9e: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:F1:A6:E8:92:08:B4:62:B2:BE:37:99:1C:71:99:28:F8:D6:2A X509v3 Authority Key Identifier: keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ee:d3:5f:75:4c:f9:59:e8:ef:7d:0e:58:b0:01:5b:3a:68: 1e:87:4a:19:60:3e:b1:79:9e:e0:f1:af:06:a7:eb:c3:b3:85: 5e:86:a3:fa:f5:c6:2e:24:fe:91:ee:96:48:93:7d:d5:ba:5a: 18:ab:c0:c3:d4:ad:f0:10:4d:9e:93:c6:94:1e:d8:35:dd:c5: 39:d1:95:5a:66:86:2e:86:ad:eb:5c:81:8e:d0:92:6d:b1:6b: 33:60:0a:89:8e:ec:0f:e1:ed:61:96:2b:10:ff:91:c9:4f:ae: fd:0e:4a:8a:62:bf:af:39:90:ce:60:8a:d2:a7:5c:33:87:43: 80:7c:f1:dc:64:31:56:ed:ef:d7:12:ec:50:de:df:3e:0c:ea: f7:9c:bb:10:6c:b0:dc:a2:e8:53:62:e7:9a:e6:fd:50:03:3b: 42:f5:07:4c:18:db:77:53:0c:96:39:cb:1b:2d:5d:1b:c9:38: a2:b4:44:58:b2:31:06:14:88:68:c4:19:64:4c:ba:d2:77:0d: 8d:5b:f0:1c:e7:03:15:60:ec:66:a5:87:0e:5d:c9:aa:27:03: 2f:7f:32:40:86:ca:0d:f7:91:85:31:97:40:6a:0c:d2:cb:99: 39:70:e3:01:f9:29:fe:0f:65:5b:21:ef:5e:8c:e6:20:e2:74: 1d:a7:0b:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rdRmlB3LNdQhoWCiEUFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl OTVjYWYwHhcNMjYwMTI2MDUwMTQwWhcNMjYwMTI3MDUwMTQwWjAzMTEwLwYDVQQD EyhkMmY5ZjFhNmU4OTIwOGI0NjJiMmJlMzc5OTFjNzE5OTI4ZjhkNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5NK5MldCPWSKUOpPnHPKsqMoH0g nzrBejWJ+H885U7WNaQoo1RdUqt0QadmQtzEYGftJogDulxNHno7ZyRW1Af2zk3W UeYWeog3hhI6tSmC4X+9f7ib6Mrjk9zsXSJ/9b3Nlu2xf65H+OgSTsIqWph9vgjB jZWKpR/zeAoFVWTvdP7GcHtxvc19Km0jVUzPBNMZeGFCQ72ZE/awYdiEsf0/9dTy v4hTrPrW8y3KxpK47KvbUbDLYb1MJeYOA/q66jW5wewvjT+5O2OeislMfcoA7LYR yUnimtJyGEUX8zXKZJBlRdzdI7pZ7zGg7ZewnfIYK2FhtvO4CVvImp5AkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL58abokgi0YrK+N5kccZko+NYqMB8GA1UdIwQY MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3 LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+7TX3VM +Vno730OWLABWzpoHodKGWA+sXme4PGvBqfrw7OFXoaj+vXGLiT+ke6WSJN91bpa GKvAw9St8BBNnpPGlB7YNd3FOdGVWmaGLoat61yBjtCSbbFrM2AKiY7sD+HtYZYr EP+RyU+u/Q5KimK/rzmQzmCK0qdcM4dDgHzx3GQxVu3v1xLsUN7fPgzq95y7EGyw 3KLoU2Lnmub9UAM7QvUHTBjbd1MMljnLGy1dG8k4orREWLIxBhSIaMQZZEy60ncN jVvwHOcDFWDsZqWHDl3JqicDL38yQIbKDfeRhTGXQGoM0suZOXDjAfkp/g9lWyHv XozmIOJ0HacLUw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:00 2026 by rpki-client