This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json) Hash identifier: Y0oxGH9yJ4Y2G+oy238OR8hWtNT09OQlb2v3R2J5fqQ= Subject key identifier: 90:54:13:06:99:52:A9:46:2C:9F:00:C3:A7:F0:BD:6D:BD:E4:31:F0 Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98 Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498 Certificate serial: 019BF42BE634DF9E02C4A8D56BCD5E14871F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 08:01:16 +0000 Manifest this update: Sun 25 Jan 2026 08:01:16 +0000 Manifest next update: Mon 26 Jan 2026 08:01:16 +0000 Files and hashes: 1: 28-UkpXxAzZbO8vuIBQRnkr5eRE.roa (hash: YFs8JOoUa4SUku2tRg5QnVz5rp4j/Pv7WxhvaMnlFHg=) 2: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: yjBSaYeLOppU3JaEBLcqIemGg7MnL6AzxlnDNMF/JDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:e6:34:df:9e:02:c4:a8:d5:6b:cd:5e:14:87:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498 Validity Not Before: Jan 25 08:01:16 2026 GMT Not After : Jan 26 08:01:16 2026 GMT Subject: CN=905413069952a9462c9f00c3a7f0bd6dbde431f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:2b:ab:19:4e:7a:b9:8a:59:87:15:b4:c1: a1:b8:02:a3:30:ed:62:8d:e3:3b:59:e4:af:78:e5: 57:33:55:7d:c8:0d:20:84:f2:c0:60:2b:24:f2:9c: ba:00:cb:02:0d:bb:49:17:5c:82:34:24:7e:e1:8b: 1a:47:f8:69:3e:c1:10:83:e3:d2:13:61:7e:a9:fe: 05:3d:d4:98:53:e3:d3:97:e2:4e:e1:f0:33:1e:c8: c6:05:2f:05:3f:72:5a:42:b3:b7:a8:fe:22:09:ad: 17:e9:a8:43:6a:e9:a9:e7:e5:9b:b3:50:c7:60:34: 61:cc:87:b5:fe:a2:73:4d:16:85:e0:0f:b0:49:a5: ff:0a:29:63:97:b8:9d:d1:0d:d9:f7:7c:0f:fc:24: 31:d9:c9:b1:b5:e8:a8:25:c3:79:c2:aa:b2:f4:54: bf:65:9b:48:f2:58:3e:80:ca:e1:e5:d3:7d:a2:48: bb:f2:a8:49:a4:5a:bf:67:ee:9e:7d:6c:bf:85:f8: 15:7f:47:7b:d2:94:2f:a9:7d:9d:e5:93:1e:c5:12: 7a:55:4f:a7:6f:e1:99:9e:23:4f:94:c6:d4:1a:13: 7e:bc:2a:cf:b5:dd:87:a1:e8:dc:b3:d4:09:aa:bf: ca:35:03:99:0a:da:8d:9a:2f:20:cf:db:93:0e:2b: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:13:06:99:52:A9:46:2C:9F:00:C3:A7:F0:BD:6D:BD:E4:31:F0 X509v3 Authority Key Identifier: keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:99:70:e3:ed:ba:61:5b:a2:f5:cf:67:b7:7f:32:c5:91:72: c9:54:b6:ee:d1:6e:3b:e0:69:30:a4:15:85:12:08:b4:bd:6b: 76:1f:99:65:ee:30:f4:1e:63:c7:b0:d0:86:56:0f:6c:98:16: 51:87:d9:22:07:ff:86:f3:34:07:74:27:f2:57:99:52:da:1d: 54:d7:7b:1a:30:cb:b8:33:dd:7e:62:56:14:4c:22:d3:85:73: b9:d7:e5:cc:45:d4:70:b6:aa:90:ea:5d:60:a8:06:5a:15:7d: e0:dc:c7:ca:99:c9:11:1d:34:13:2e:67:4b:13:c9:96:aa:9d: 93:77:01:d4:cb:36:0b:01:dd:80:02:50:d3:58:88:d2:72:ca: 13:6b:d6:5b:ae:93:05:d7:2e:2c:21:3f:20:20:7f:02:8a:3e: fa:02:d0:11:df:bc:db:3d:15:87:76:0b:74:6b:ca:5f:8c:5b: 89:47:39:9b:bb:81:65:b6:9e:36:06:52:6c:de:6e:23:5b:e9: 75:42:19:6f:7d:b4:4d:ac:05:c0:12:b0:66:e9:c8:6b:d4:f9: 40:8f:c6:6b:e4:13:99:d3:81:fe:e3:ca:75:9a:b3:04:ba:76: 5c:84:00:e0:c3:ec:fe:c4:62:7b:1c:e5:b3:9e:aa:2a:1b:82: 92:16:93:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K+Y0354CxKjVa81eFIcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGYyNjRmYTRhNGM5MGRjYjRhOTljY2NlYzUwYzU1MDhm NDQ0OTgwHhcNMjYwMTI1MDgwMTE2WhcNMjYwMTI2MDgwMTE2WjAzMTEwLwYDVQQD Eyg5MDU0MTMwNjk5NTJhOTQ2MmM5ZjAwYzNhN2YwYmQ2ZGJkZTQzMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxkrqxlOermKWYcVtMGhuAKjMO1i jeM7WeSveOVXM1V9yA0ghPLAYCsk8py6AMsCDbtJF1yCNCR+4YsaR/hpPsEQg+PS E2F+qf4FPdSYU+PTl+JO4fAzHsjGBS8FP3JaQrO3qP4iCa0X6ahDaump5+Wbs1DH YDRhzIe1/qJzTRaF4A+wSaX/Ciljl7id0Q3Z93wP/CQx2cmxteioJcN5wqqy9FS/ ZZtI8lg+gMrh5dN9oki78qhJpFq/Z+6efWy/hfgVf0d70pQvqX2d5ZMexRJ6VU+n b+GZniNPlMbUGhN+vCrPtd2Hoejcs9QJqr/KNQOZCtqNmi8gz9uTDisK0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBUEwaZUqlGLJ8Aw6fwvW295DHwMB8GA1UdIwQY MBaAFOFPJk+kpMkNy0qZzM7FDFUI9ESYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1Mjct MTM5MDQzNzQ5YzQ4LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1MjctMTM5MDQzNzQ5YzQ4 LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZlw4+26 YVui9c9nt38yxZFyyVS27tFuO+BpMKQVhRIItL1rdh+ZZe4w9B5jx7DQhlYPbJgW UYfZIgf/hvM0B3Qn8leZUtodVNd7GjDLuDPdfmJWFEwi04VzudflzEXUcLaqkOpd YKgGWhV94NzHypnJER00Ey5nSxPJlqqdk3cB1Ms2CwHdgAJQ01iI0nLKE2vWW66T BdcuLCE/ICB/Aoo++gLQEd+82z0Vh3YLdGvKX4xbiUc5m7uBZbaeNgZSbN5uI1vp dUIZb320TawFwBKwZunIa9T5QI/Ga+QTmdOB/uPKdZqzBLp2XIQA4MPs/sRiexzl s56qKhuCkhaTbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:41 2026 by rpki-client