This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json) Hash identifier: LLPXZcVVbV2hLvz8hUjhmwhrUiQGJSHaZ2UuZ14HpXo= Subject key identifier: CD:6D:BB:E9:B6:0F:67:D3:16:4F:EF:FD:FC:89:73:99:59:B4:05:77 Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Certificate serial: 019BF3F5A519372BA0C7EB86B6F700EB6458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft Manifest number: 048A Signing time: Sun 25 Jan 2026 07:02:00 +0000 Manifest this update: Sun 25 Jan 2026 07:02:00 +0000 Manifest next update: Mon 26 Jan 2026 07:02:00 +0000 Files and hashes: 1: 2FxreVqUv_iXTp_gEHHtX_RyDvE.roa (hash: 6tKnUYnu6mjtenIrBJhX9fiu65PwuGcfSqr4GAWWO5o=) 2: RKI3XSz6XZy96Ol-18QcP9FlH4c.roa (hash: g/j02qL/fofi4lQDzUhm/wqo/x+TAc1YiiXTTjZy7lA=) 3: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: 93KzKMyLpaUpa+bfIn2yZbiq6bT3LzEUPjYRu7efRPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:a5:19:37:2b:a0:c7:eb:86:b6:f7:00:eb:64:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Validity Not Before: Jan 25 07:02:00 2026 GMT Not After : Jan 26 07:02:00 2026 GMT Subject: CN=cd6dbbe9b60f67d3164feffdfc89739959b40577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:d3:e4:3c:30:ea:00:2f:e2:f0:f2:fb:12: 48:e8:54:e0:90:14:00:50:d0:14:db:3f:61:fd:58: 3f:e0:81:65:be:b0:f6:0d:11:77:57:b1:ca:c4:1e: 06:a0:60:71:29:fe:72:67:34:4b:37:5e:12:62:1b: 1c:03:40:b3:43:6c:ad:8a:ed:a6:d0:74:5c:2c:d2: f5:ce:1d:f0:a4:58:3e:92:7d:a3:f5:1d:9d:81:82: 11:25:9b:45:6f:54:c6:fb:75:bd:fb:65:85:0c:47: ec:f0:aa:a9:6e:36:b9:cf:6d:0a:b6:82:14:c7:d5: b6:e1:44:e2:42:f1:30:49:92:f7:55:01:78:16:52: 09:bf:e0:31:79:c3:b5:ad:9d:f3:2c:a6:82:9b:64: 4e:43:b4:89:d3:65:4d:09:d4:40:65:32:53:c6:84: d6:15:f4:17:31:de:84:17:05:02:1d:7d:6b:55:a3: 39:d8:4f:45:51:4d:ab:9b:0e:3f:ca:60:a3:84:2f: 41:4f:19:58:9e:1a:0b:08:95:c2:7a:21:8c:30:52: 56:7b:8b:d4:e7:dc:56:a1:2f:bf:9f:b2:14:a5:cd: 95:38:a3:06:44:ce:e3:90:ca:63:e0:82:15:82:6c: 12:14:c6:f4:32:2a:88:a2:7d:e1:d4:50:e3:82:c5: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6D:BB:E9:B6:0F:67:D3:16:4F:EF:FD:FC:89:73:99:59:B4:05:77 X509v3 Authority Key Identifier: keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:61:ac:0a:e4:6e:9e:29:c7:60:f4:55:1a:6c:19:f3:dd:fd: 28:35:e4:bd:2d:2d:bd:97:9e:fc:a8:87:e2:50:0e:4c:67:7d: 01:98:42:1e:5a:ce:f4:d1:14:c9:c3:7a:64:da:79:34:22:a3: 66:6d:82:18:97:68:f3:02:72:21:a7:24:d0:93:97:59:84:6e: 5a:ba:80:e7:89:0f:b7:f5:a3:13:ae:17:1c:cd:78:03:c2:ba: 92:6e:aa:51:5a:2c:af:85:88:56:16:b6:c3:b2:71:6f:60:6d: 8e:b8:ea:ec:ba:6e:f1:a3:93:4d:1b:90:ea:09:16:13:20:da: 6b:1a:50:4b:36:cc:29:3d:82:57:b3:e5:ed:0c:a5:b3:6e:89: 69:56:5e:86:47:1c:d8:14:bd:93:81:38:a1:ff:44:5a:ab:38: 46:ad:cc:02:f5:7f:b0:51:e7:40:fc:c3:2b:5b:6b:82:64:6c: 9e:1f:fd:44:a9:f2:11:bb:64:9b:38:fb:c9:9a:be:bf:57:25: 87:53:40:f7:4b:16:a3:1d:0c:5e:5b:45:54:b9:c2:59:45:99: 22:e5:cf:f7:ff:cb:f0:6d:cc:8d:b1:80:21:0a:77:df:72:13: 29:b3:9d:87:1c:1f:7a:63:82:8b:fd:21:04:e8:f7:b8:77:a1: 54:57:fa:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9aUZNyugx+uGtvcA62RYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk NGU4YzUwHhcNMjYwMTI1MDcwMjAwWhcNMjYwMTI2MDcwMjAwWjAzMTEwLwYDVQQD EyhjZDZkYmJlOWI2MGY2N2QzMTY0ZmVmZmRmYzg5NzM5OTU5YjQwNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+rT5Dww6gAv4vDy+xJI6FTgkBQA UNAU2z9h/Vg/4IFlvrD2DRF3V7HKxB4GoGBxKf5yZzRLN14SYhscA0CzQ2ytiu2m 0HRcLNL1zh3wpFg+kn2j9R2dgYIRJZtFb1TG+3W9+2WFDEfs8Kqpbja5z20KtoIU x9W24UTiQvEwSZL3VQF4FlIJv+AxecO1rZ3zLKaCm2ROQ7SJ02VNCdRAZTJTxoTW FfQXMd6EFwUCHX1rVaM52E9FUU2rmw4/ymCjhC9BTxlYnhoLCJXCeiGMMFJWe4vU 59xWoS+/n7IUpc2VOKMGRM7jkMpj4IIVgmwSFMb0MiqIon3h1FDjgsUURQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1tu+m2D2fTFk/v/fyJc5lZtAV3MB8GA1UdIwQY MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et YWM4NjQ3ZDA1NThhLzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGGsCuRu ninHYPRVGmwZ8939KDXkvS0tvZee/KiH4lAOTGd9AZhCHlrO9NEUycN6ZNp5NCKj Zm2CGJdo8wJyIack0JOXWYRuWrqA54kPt/WjE64XHM14A8K6km6qUVosr4WIVha2 w7Jxb2Btjrjq7Lpu8aOTTRuQ6gkWEyDaaxpQSzbMKT2CV7Pl7Qyls26JaVZehkcc 2BS9k4E4of9EWqs4Rq3MAvV/sFHnQPzDK1trgmRsnh/9RKnyEbtkmzj7yZq+v1cl h1NA90sWox0MXltFVLnCWUWZIuXP9//L8G3MjbGAIQp333ITKbOdhxwfemOCi/0h BOj3uHehVFf6OQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:03 2026 by rpki-client