This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft File: 4MW7PaU0Nb9B4X997EfUSE5_MSk.mft (raw, json) Hash identifier: hJVhonaLz99RlZb6aukFJN8/aMhei50QizWpbzPUvPE= Subject key identifier: B5:2B:AF:0C:30:93:78:F0:BA:49:1F:5B:69:C3:E9:BE:18:36:BA:F2 Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019BF2E1AA89B624076D59E9C05C964EA885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft Manifest number: 01B5 Signing time: Sun 25 Jan 2026 02:00:34 +0000 Manifest this update: Sun 25 Jan 2026 02:00:34 +0000 Manifest next update: Mon 26 Jan 2026 02:00:34 +0000 Files and hashes: 1: 4MW7PaU0Nb9B4X997EfUSE5_MSk.crl (hash: sBnwIO6pnku1tr9a0ptqcxATB5/VwwJOZ5lnn1S5IzU=) 2: 6CkXD84pke9k3M4G741F2bkK36U.roa (hash: W5UgpdGLKX1sz4JtCaw9TLFL+VAMoIT+vGJMM59xCmY=) 3: 7JRXJdqq0quI6VLheZDVHGBGYz4.roa (hash: zht/JvnIioKlRWL/1Q3IwXr569wZITbnh/lEFG9dvRk=) 4: 9u2DZc6_t39AXh0hNQyl49GQcrA.roa (hash: upTRBVGB5NItiTNl9OAPzE1F31sUOeznk1tVJmk+yGA=) 5: RTTvZ91An04BzsZrcK7X2zCFClc.roa (hash: kCKXhl0NYkaUuNNKlZZSKElx8syewh/z7QdIGywZE+c=) 6: VNLKS-pNZk5YJ26vbOoNAKp2U2w.roa (hash: NTY/vgG8CnozUkg7LalMOYtygnJJQiS7TOtc3cYLXpI=) 7: nacKkZ_RzNV2zE3WKspS3-HlFXU.roa (hash: ze+QdgGOYq7DqvrwPTJyra//9o0vJyW5oNH5TT0oWWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:aa:89:b6:24:07:6d:59:e9:c0:5c:96:4e:a8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Jan 25 02:00:34 2026 GMT Not After : Jan 26 02:00:34 2026 GMT Subject: CN=b52baf0c309378f0ba491f5b69c3e9be1836baf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:63:e2:3e:1a:08:23:28:a2:5e:2b:fb:8c: be:ed:5f:13:ac:94:ca:34:1a:d9:69:0b:b7:cf:13: 6a:a6:69:bd:32:d4:2c:eb:5f:c8:50:56:1b:57:50: bb:ab:85:3b:40:7e:b7:c0:ba:ec:8c:ef:ea:91:c8: b7:0a:55:ba:96:4f:cd:56:7b:95:6e:65:2e:52:62: d0:a3:a0:85:b8:f8:0c:3a:d8:b8:92:54:e5:83:38: 7c:db:e0:00:88:ff:07:fb:9e:a1:6e:d9:20:48:48: b1:70:6d:51:62:59:c4:b8:cd:3e:db:83:2e:55:4f: fd:95:f1:ba:d7:d1:fb:91:81:b0:b4:91:3b:44:40: 86:49:e8:51:0f:d2:06:7a:48:d3:4d:9f:34:8b:db: 51:a6:05:52:c4:9c:c9:c8:97:ac:11:fa:c0:2b:77: 56:5d:5e:dd:f2:57:de:79:4f:97:a6:1d:a5:3f:6c: 8d:b1:99:6a:ea:84:9e:be:22:a8:ba:6b:ed:8a:0d: 82:c6:a1:e8:e9:c4:da:9c:3d:56:a6:b7:fb:20:d4: e3:54:59:d3:3f:03:a8:e2:80:f5:01:83:25:4a:5e: ff:5d:59:27:b6:8f:c6:0d:22:f4:72:7b:42:ec:a0: aa:b8:9c:13:c8:28:a8:c1:20:3b:21:e2:84:6b:74: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2B:AF:0C:30:93:78:F0:BA:49:1F:5B:69:C3:E9:BE:18:36:BA:F2 X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:04:1d:44:7b:83:28:cf:96:0c:8c:1c:2f:17:07:09:1c:ee: ac:4d:40:e9:8a:b7:43:08:d0:68:69:02:ed:ed:a3:69:dc:23: 80:61:83:8f:4c:8f:bf:cc:44:58:0b:d7:86:bb:fb:90:64:c1: d5:4e:7b:9b:7f:de:f7:f8:ad:e6:d2:05:53:2c:b2:9d:ae:a5: 0b:2e:f2:2f:fd:31:d5:a3:00:2f:c7:dd:1c:c0:cf:ce:6d:4d: 48:ee:61:a8:6e:67:a8:b7:63:76:61:c4:fd:50:d7:00:04:33: 02:da:2c:9a:87:55:40:52:c9:2e:98:d0:a9:a5:82:de:d5:e8: ee:9d:79:d5:8e:ff:9b:6b:6d:36:e0:9f:60:47:66:bb:b2:30: 01:d7:e6:12:dd:9b:8b:71:2c:77:e0:74:81:3d:6f:a1:a4:08: 56:6e:f3:c7:24:df:1b:5c:4c:54:7d:cf:9b:71:ba:f2:be:ee: 60:2e:78:84:ad:8c:e2:e3:29:ce:d9:09:64:26:b4:bc:bf:c2: 26:2c:83:a9:36:72:30:14:2e:ce:c7:3a:c2:ae:7b:66:eb:3c: 8a:09:9f:52:3a:d0:5a:1f:d8:39:3a:47:d7:29:01:cb:75:27: 45:af:df:01:05:ce:b7:68:22:6e:d2:c2:75:63:f8:76:42:85: 5c:53:a5:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4aqJtiQHbVnpwFyWTqiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjYwMTI1MDIwMDM0WhcNMjYwMTI2MDIwMDM0WjAzMTEwLwYDVQQD EyhiNTJiYWYwYzMwOTM3OGYwYmE0OTFmNWI2OWMzZTliZTE4MzZiYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsdj4j4aCCMool4r+4y+7V8TrJTK NBrZaQu3zxNqpmm9MtQs61/IUFYbV1C7q4U7QH63wLrsjO/qkci3ClW6lk/NVnuV bmUuUmLQo6CFuPgMOti4klTlgzh82+AAiP8H+56hbtkgSEixcG1RYlnEuM0+24Mu VU/9lfG619H7kYGwtJE7RECGSehRD9IGekjTTZ80i9tRpgVSxJzJyJesEfrAK3dW XV7d8lfeeU+Xph2lP2yNsZlq6oSeviKoumvtig2CxqHo6cTanD1Wprf7INTjVFnT PwOo4oD1AYMlSl7/XVknto/GDSL0cntC7KCquJwTyCiowSA7IeKEa3TWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUrrwwwk3jwukkfW2nD6b4YNrryMB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAQdRHuD KM+WDIwcLxcHCRzurE1A6Yq3QwjQaGkC7e2jadwjgGGDj0yPv8xEWAvXhrv7kGTB 1U57m3/e9/it5tIFUyyyna6lCy7yL/0x1aMAL8fdHMDPzm1NSO5hqG5nqLdjdmHE /VDXAAQzAtosmodVQFLJLpjQqaWC3tXo7p151Y7/m2ttNuCfYEdmu7IwAdfmEt2b i3Esd+B0gT1voaQIVm7zxyTfG1xMVH3Pm3G68r7uYC54hK2M4uMpztkJZCa0vL/C JiyDqTZyMBQuzsc6wq57Zus8igmfUjrQWh/YOTpH1ykBy3UnRa/fAQXOt2gibtLC dWP4dkKFXFOlsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:56 2026 by rpki-client