This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: cPiwdXJ8gvjET7VwpfbS21irwH6YciIP5i936QQ7G2s= Subject key identifier: CE:DF:3C:4A:11:C4:F7:A7:47:61:DD:8C:7E:C1:83:7E:39:58:53:83 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019BF198C8D0D6C75FAEFDF24C79735E67A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0BB5 Signing time: Sat 24 Jan 2026 20:01:20 +0000 Manifest this update: Sat 24 Jan 2026 20:01:20 +0000 Manifest next update: Sun 25 Jan 2026 20:01:20 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: Xug4064KK6iB6jUT7o3avxms2s44H3l2guZumQkwzRM=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: M_dLbgwilq_hSffefuzS4hYJkMY.roa (hash: ss3Zxt7FFnwb8UIMdy11WZrQRJ0bX2kx0JTKoYq5opc=) 12: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 13: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 14: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 15: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 16: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 17: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 18: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 19: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 20: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 21: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:98:c8:d0:d6:c7:5f:ae:fd:f2:4c:79:73:5e:67:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 24 20:01:20 2026 GMT Not After : Jan 25 20:01:20 2026 GMT Subject: CN=cedf3c4a11c4f7a74761dd8c7ec1837e39585383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:68:b8:ad:75:f1:15:d1:1d:cf:60:0d:09: f0:fb:06:1d:a6:64:28:1a:ec:bd:1e:f3:1b:a9:db: 5d:7e:3d:05:d3:19:6b:24:91:a4:8f:c1:c8:24:37: 21:6d:c2:bc:25:1a:a2:80:c1:f3:41:0d:97:a5:74: 9b:c6:04:63:08:f1:3b:34:c8:9a:5f:16:57:06:05: 2a:7b:93:a3:d1:1a:b1:b7:af:f2:87:37:ab:98:6f: 8e:0c:fd:13:de:d3:ca:e9:14:3e:57:2b:8e:fb:8b: 58:7c:f5:66:71:b5:3b:b4:85:5f:fa:56:92:ae:fe: 32:c9:f9:ee:57:97:91:95:1f:fc:89:21:99:78:e0: 7d:68:c9:d1:63:23:73:f8:ac:12:4f:dd:fd:9c:5e: 67:f9:14:94:ea:06:16:4c:34:32:69:b0:f1:00:42: b9:c8:30:27:29:96:31:7b:dc:4c:08:5c:9e:1b:b2: d7:b4:b9:ab:23:cb:77:0b:aa:9f:c2:dc:eb:46:ed: 7a:f1:91:bb:b8:28:93:25:cd:d0:50:cc:aa:0d:7b: f9:5e:3e:50:9d:d9:5c:db:8d:27:fd:0b:7e:56:80: 45:5e:b5:b4:86:2a:f6:59:5b:9f:df:57:e2:a0:75: 51:62:0c:30:73:51:a1:5c:f3:16:7d:50:c5:68:85: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DF:3C:4A:11:C4:F7:A7:47:61:DD:8C:7E:C1:83:7E:39:58:53:83 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5f:29:ad:0c:d5:c4:34:60:76:06:71:21:e7:66:44:0e:f5: 78:ea:e0:56:ed:43:52:f0:2b:6d:7a:ea:b4:e5:aa:25:f8:10: 68:e1:ec:93:9c:3b:10:1c:3f:3b:d8:ee:f1:e5:04:22:e2:db: 83:1b:47:05:db:08:80:8c:7e:f0:f1:ba:58:a7:af:e3:ae:38: cc:ec:21:11:fe:81:3e:5c:52:89:cb:8d:4e:6b:1d:7a:47:47: 4b:75:d8:a7:e8:30:86:ca:0b:fc:09:6d:95:0b:b3:cf:d9:c9: 98:21:f8:99:b8:2a:c1:9d:1d:e2:27:1b:7e:14:21:7f:f9:2a: 6f:e3:a4:77:73:fd:15:9f:85:e4:25:a7:9c:82:c9:62:a6:b2: b5:44:0d:9f:6c:7d:69:bb:ce:60:8e:c4:cc:90:05:87:76:2b: 49:3b:f0:20:70:cf:c5:d5:dd:6e:fd:14:00:82:a7:6d:80:25: b5:03:48:06:96:35:ff:2f:af:f1:95:dc:10:97:c7:2c:fc:29: c4:f0:76:ca:03:2a:a9:b5:a8:ad:9d:6c:75:fb:cb:22:a0:e8: 6f:34:97:76:37:8f:9a:7e:3d:05:52:66:45:b8:95:e9:a5:99: c2:1e:76:81:2a:ca:c6:55:a1:6f:e5:43:b2:eb:09:71:98:42: 7d:36:e1:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxmMjQ1sdfrv3yTHlzXmeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTI0MjAwMTIwWhcNMjYwMTI1MjAwMTIwWjAzMTEwLwYDVQQD EyhjZWRmM2M0YTExYzRmN2E3NDc2MWRkOGM3ZWMxODM3ZTM5NTg1MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeBouK118RXRHc9gDQnw+wYdpmQo Guy9HvMbqdtdfj0F0xlrJJGkj8HIJDchbcK8JRqigMHzQQ2XpXSbxgRjCPE7NMia XxZXBgUqe5Oj0Rqxt6/yhzermG+ODP0T3tPK6RQ+VyuO+4tYfPVmcbU7tIVf+laS rv4yyfnuV5eRlR/8iSGZeOB9aMnRYyNz+KwST939nF5n+RSU6gYWTDQyabDxAEK5 yDAnKZYxe9xMCFyeG7LXtLmrI8t3C6qfwtzrRu168ZG7uCiTJc3QUMyqDXv5Xj5Q ndlc240n/Qt+VoBFXrW0hir2WVuf31fioHVRYgwwc1GhXPMWfVDFaIWv+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7fPEoRxPenR2HdjH7Bg345WFODMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkF8prQzV xDRgdgZxIedmRA71eOrgVu1DUvArbXrqtOWqJfgQaOHsk5w7EBw/O9ju8eUEIuLb gxtHBdsIgIx+8PG6WKev4644zOwhEf6BPlxSicuNTmsdekdHS3XYp+gwhsoL/Alt lQuzz9nJmCH4mbgqwZ0d4icbfhQhf/kqb+Okd3P9FZ+F5CWnnILJYqaytUQNn2x9 abvOYI7EzJAFh3YrSTvwIHDPxdXdbv0UAIKnbYAltQNIBpY1/y+v8ZXcEJfHLPwp xPB2ygMqqbWorZ1sdfvLIqDobzSXdjePmn49BVJmRbiV6aWZwh52gSrKxlWhb+VD susJcZhCfTbhmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:48 2026 by rpki-client