This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json) Hash identifier: WoT8yHLqg1eWbkaLnNJxXNkDRYGwVCgjIYqtcFBnbFs= Subject key identifier: FB:CB:D5:75:F2:17:28:4F:97:72:3B:7F:58:8E:EF:69:2F:54:45:BE Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Certificate serial: 019BF6BEA1E64045208BA8D277EAA1AB6F89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft Manifest number: 02CE Signing time: Sun 25 Jan 2026 20:00:46 +0000 Manifest this update: Sun 25 Jan 2026 20:00:46 +0000 Manifest next update: Mon 26 Jan 2026 20:00:46 +0000 Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: DKhh8vB7l+7kge1B431b1NQiTIp8LwIGsymTIJ830Pk=) 2: valzYXczYY3RJ6xb_g__yzBDYXU.roa (hash: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:a1:e6:40:45:20:8b:a8:d2:77:ea:a1:ab:6f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Validity Not Before: Jan 25 20:00:46 2026 GMT Not After : Jan 26 20:00:46 2026 GMT Subject: CN=fbcbd575f217284f97723b7f588eef692f5445be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:13:2c:b5:4b:9c:85:04:db:5e:bd:b7:14: b8:c3:ad:bf:13:6c:4c:f2:a6:3f:b1:93:65:f0:63: 09:58:34:6b:7e:62:d6:33:f5:cf:fd:ef:b4:96:83: 73:15:05:d3:6b:c4:87:f5:9b:f3:51:4b:71:e3:1b: 56:9f:1b:7f:34:05:20:52:69:cb:ea:71:53:bf:30: 2e:e4:b3:9a:5a:b7:4c:96:4e:85:f4:e2:6c:a1:fc: d1:5a:ed:a2:83:75:4e:01:63:35:1c:11:ef:23:00: 24:6c:50:2f:ff:4f:61:f6:34:bc:ec:28:4d:67:08: ec:64:30:bf:07:8b:16:df:74:e0:4a:8e:48:89:56: 91:5d:ea:cc:96:84:43:2f:9c:41:1a:a1:46:4e:c0: 74:a4:d2:dc:27:2e:94:0a:a8:91:44:91:3c:e6:07: 1b:87:66:fa:77:df:17:6f:b1:4b:51:e9:cc:0f:79: a3:f6:d0:bc:49:57:85:fe:c0:37:98:ea:21:b5:b4: 40:98:28:50:ef:fd:24:52:f0:93:f5:5a:cd:b5:bb: 14:a8:61:f8:eb:3b:41:fb:92:38:cc:84:16:b8:0d: 3a:56:71:30:9a:18:c7:8d:08:4e:0f:c3:9e:a4:12: 2a:b3:3c:bf:5d:cb:f8:c3:c5:36:1a:a6:72:90:dc: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CB:D5:75:F2:17:28:4F:97:72:3B:7F:58:8E:EF:69:2F:54:45:BE X509v3 Authority Key Identifier: keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b2:e2:56:34:03:18:13:7f:1a:e6:1c:29:ff:23:d2:6d:29: 23:69:b8:fe:4e:06:07:7e:f6:de:71:52:5c:ee:40:ef:19:4a: 98:86:59:e7:7d:fd:61:36:69:62:e5:9a:b8:f1:ac:dc:3f:4a: 6d:a3:a5:75:0e:fe:b4:97:ae:76:a2:c0:00:07:60:9b:ce:30: 46:40:92:ad:bd:c8:ed:e3:b1:0a:f0:2d:50:25:f6:02:90:9a: 31:c8:b4:f7:26:49:e3:8c:ea:b0:9a:cf:d6:2c:28:4b:b3:82: 4b:f7:a6:4e:dc:9a:2b:41:16:45:7e:9c:a3:73:69:6a:93:5f: c1:41:2b:be:a4:37:c9:b4:a1:ec:e9:e4:0b:ea:12:19:3a:92: 70:88:21:3d:c4:3f:04:de:68:de:80:50:6a:e4:83:fc:7b:ff: e0:dc:63:ea:8d:df:1d:57:16:51:ab:62:c1:c5:92:6e:b2:01: 33:4a:2d:db:8a:20:84:d8:29:51:5c:a3:9c:0e:22:8d:23:65: 1c:53:86:54:d0:ab:a4:a1:c8:c2:ba:78:78:b0:5b:93:01:dc: ed:3b:8f:fe:23:9a:9c:65:3e:67:ef:6c:d3:fc:24:d2:16:40: 2b:de:04:8e:3a:8f:5a:48:47:c6:b2:f2:93:ab:57:47:f3:d0: 62:ba:ae:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqHmQEUgi6jSd+qhq2+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx NDQxYWYwHhcNMjYwMTI1MjAwMDQ2WhcNMjYwMTI2MjAwMDQ2WjAzMTEwLwYDVQQD EyhmYmNiZDU3NWYyMTcyODRmOTc3MjNiN2Y1ODhlZWY2OTJmNTQ0NWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aATLLVLnIUE2169txS4w62/E2xM 8qY/sZNl8GMJWDRrfmLWM/XP/e+0loNzFQXTa8SH9ZvzUUtx4xtWnxt/NAUgUmnL 6nFTvzAu5LOaWrdMlk6F9OJsofzRWu2ig3VOAWM1HBHvIwAkbFAv/09h9jS87ChN ZwjsZDC/B4sW33TgSo5IiVaRXerMloRDL5xBGqFGTsB0pNLcJy6UCqiRRJE85gcb h2b6d98Xb7FLUenMD3mj9tC8SVeF/sA3mOohtbRAmChQ7/0kUvCT9VrNtbsUqGH4 6ztB+5I4zIQWuA06VnEwmhjHjQhOD8OepBIqszy/Xcv4w8U2GqZykNz3fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvL1XXyFyhPl3I7f1iO72kvVEW+MB8GA1UdIwQY MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4 LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7LiVjQD GBN/GuYcKf8j0m0pI2m4/k4GB3723nFSXO5A7xlKmIZZ5339YTZpYuWauPGs3D9K baOldQ7+tJeudqLAAAdgm84wRkCSrb3I7eOxCvAtUCX2ApCaMci09yZJ44zqsJrP 1iwoS7OCS/emTtyaK0EWRX6co3NpapNfwUErvqQ3ybSh7OnkC+oSGTqScIghPcQ/ BN5o3oBQauSD/Hv/4Nxj6o3fHVcWUatiwcWSbrIBM0ot24oghNgpUVyjnA4ijSNl HFOGVNCrpKHIwrp4eLBbkwHc7TuP/iOanGU+Z+9s0/wk0hZAK94EjjqPWkhHxrLy k6tXR/PQYrqumw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:28 2026 by rpki-client