This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json) Hash identifier: tvh6Xk+VKWRoLepEuImEpghhHtpdraUSgsGKZr1pOnA= Subject key identifier: 07:B1:E6:55:E6:E5:37:1C:B1:67:E9:35:90:30:A6:60:1E:9F:CB:9D Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8 Certificate serial: 019BF83EFF55F4949B6F732D207B501AEB8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 03:00:36 +0000 Manifest this update: Mon 26 Jan 2026 03:00:36 +0000 Manifest next update: Tue 27 Jan 2026 03:00:36 +0000 Files and hashes: 1: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=) 2: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=) 3: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=) 4: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=) 5: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=) 6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: 4rz0NX4qK3OpuBp7k6xLkP3ISAcSeYNx/8YjIF8DNq8=) 7: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=) 8: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:ff:55:f4:94:9b:6f:73:2d:20:7b:50:1a:eb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8 Validity Not Before: Jan 26 03:00:36 2026 GMT Not After : Jan 27 03:00:36 2026 GMT Subject: CN=07b1e655e6e5371cb167e9359030a6601e9fcb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:d0:39:a3:6e:b5:ee:f2:95:32:37:11:a2: 27:c9:f2:0b:0e:13:bc:df:d7:bb:36:13:cd:4c:8c: 6d:b4:19:40:9c:d5:6c:2f:a5:3e:1d:5c:c0:57:b7: f3:f1:2f:11:81:d9:3a:b0:50:c8:da:47:ab:86:c5: 6e:28:e3:06:99:ae:98:98:78:73:cc:9f:c2:6f:b1: e4:dc:57:2e:35:1c:48:af:9b:4c:0a:76:a5:b2:21: b1:d0:92:a1:f7:7a:a9:2c:33:4d:02:ac:5a:5e:b0: ec:93:ef:c5:09:61:d3:12:a8:7d:01:df:ac:7f:e7: 6f:d2:b3:8e:30:9d:83:a0:3c:94:ea:f0:86:95:42: 6b:87:44:3f:90:a0:12:a6:81:50:57:53:3a:1d:dd: 06:6a:cf:19:e3:7e:30:03:23:26:1b:b5:c1:c2:b5: f4:20:b1:52:7b:fe:63:23:f5:8b:75:a4:6b:ec:ba: 9d:fb:98:d3:85:d1:eb:44:7c:98:dc:ef:81:8c:ca: a1:8d:79:a1:45:1d:8a:6d:07:c0:e9:6e:d5:55:97: de:f4:27:60:63:2f:5c:21:94:d8:08:66:66:e9:1f: c9:7e:36:1a:c5:6b:4d:56:79:8a:1b:a8:52:d0:3a: a4:3c:77:26:4e:f9:37:47:d5:a6:65:55:7a:d5:d0: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B1:E6:55:E6:E5:37:1C:B1:67:E9:35:90:30:A6:60:1E:9F:CB:9D X509v3 Authority Key Identifier: keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:06:3b:37:23:27:f8:20:2e:a3:1f:6b:a5:db:24:dd:ac:a4: f1:d7:3c:09:38:eb:a4:db:9b:b6:21:e9:65:20:26:ee:f1:f2: 17:27:d2:27:27:03:ca:a3:e0:b5:6d:7b:af:54:5c:5c:52:f4: ef:89:b7:7d:8e:be:33:7a:da:0a:1e:e1:24:b3:b2:0d:3d:19: 9c:50:94:28:0d:f3:5e:e9:b0:e4:88:43:94:1a:bd:d7:20:3c: ca:c5:12:b1:d3:ee:04:c8:7c:a7:17:33:d2:89:46:84:d9:e2: 28:90:8b:85:1d:3c:e8:4b:68:0f:c2:c3:86:79:9f:a6:00:0f: 01:92:45:0a:63:ec:3f:8c:b7:80:55:49:18:a5:c2:05:33:b0: 43:6d:7c:32:3d:5a:84:d8:7c:45:1d:81:14:4e:31:45:fd:46: 7e:2f:11:23:4e:95:4c:9f:11:7a:98:34:88:82:2e:ee:5e:7f: df:80:6d:f7:9d:ef:6f:57:33:ca:16:4a:fa:5d:24:8d:b6:2d: 5c:d2:75:16:23:01:ea:6c:5a:96:5f:12:8a:19:a1:20:69:c2: 8c:cb:5c:8e:90:35:47:65:20:38:9e:1e:f5:ad:eb:ec:d5:4e: a1:1c:b3:44:7c:ed:30:e1:0e:5c:a5:0a:0a:ba:9e:03:20:e5: 16:b9:c7:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Pv9V9JSbb3MtIHtQGuuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz OTM0YjgwHhcNMjYwMTI2MDMwMDM2WhcNMjYwMTI3MDMwMDM2WjAzMTEwLwYDVQQD EygwN2IxZTY1NWU2ZTUzNzFjYjE2N2U5MzU5MDMwYTY2MDFlOWZjYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlazQOaNute7ylTI3EaInyfILDhO8 39e7NhPNTIxttBlAnNVsL6U+HVzAV7fz8S8Rgdk6sFDI2kerhsVuKOMGma6YmHhz zJ/Cb7Hk3FcuNRxIr5tMCnalsiGx0JKh93qpLDNNAqxaXrDsk+/FCWHTEqh9Ad+s f+dv0rOOMJ2DoDyU6vCGlUJrh0Q/kKASpoFQV1M6Hd0Gas8Z434wAyMmG7XBwrX0 ILFSe/5jI/WLdaRr7Lqd+5jThdHrRHyY3O+BjMqhjXmhRR2KbQfA6W7VVZfe9Cdg Yy9cIZTYCGZm6R/JfjYaxWtNVnmKG6hS0DqkPHcmTvk3R9WmZVV61dCszwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAex5lXm5TccsWfpNZAwpmAen8udMB8GA1UdIwQY MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt MDI1M2QwNGZiOGZmLzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegY7NyMn +CAuox9rpdsk3ayk8dc8CTjrpNubtiHpZSAm7vHyFyfSJycDyqPgtW17r1RcXFL0 74m3fY6+M3raCh7hJLOyDT0ZnFCUKA3zXumw5IhDlBq91yA8ysUSsdPuBMh8pxcz 0olGhNniKJCLhR086EtoD8LDhnmfpgAPAZJFCmPsP4y3gFVJGKXCBTOwQ218Mj1a hNh8RR2BFE4xRf1Gfi8RI06VTJ8Repg0iIIu7l5/34Bt953vb1czyhZK+l0kjbYt XNJ1FiMB6mxall8SihmhIGnCjMtcjpA1R2UgOJ4e9a3r7NVOoRyzRHztMOEOXKUK CrqeAyDlFrnHvw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:22 2026 by rpki-client