This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json) Hash identifier: M4HoctLVdRhoTd8zBT0WianyCFFrKOmj7z0iLq+DYi8= Subject key identifier: AA:49:25:84:7A:27:78:4F:DE:6D:2C:5A:A7:EB:7C:F6:B2:AA:0E:AA Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155 Certificate serial: 019BF9C0E5BF8A0DE457084AC65F4DB836AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft Manifest number: 0257 Signing time: Mon 26 Jan 2026 10:02:07 +0000 Manifest this update: Mon 26 Jan 2026 10:02:07 +0000 Manifest next update: Tue 27 Jan 2026 10:02:07 +0000 Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: +gV1v7CS18Uu8SHJcA/2DBbWxYY2VKSqzlwHwPi9GpU=) 2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=) 3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:e5:bf:8a:0d:e4:57:08:4a:c6:5f:4d:b8:36:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155 Validity Not Before: Jan 26 10:02:07 2026 GMT Not After : Jan 27 10:02:07 2026 GMT Subject: CN=aa4925847a27784fde6d2c5aa7eb7cf6b2aa0eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:99:4f:d5:95:73:0b:1a:26:21:3e:24:5f: 27:43:cd:cd:41:f9:7b:21:9d:60:47:60:a3:25:34: 52:f5:1a:13:fe:bc:b9:aa:40:4d:88:6f:54:f9:d1: 67:9e:e3:5d:6d:56:9d:18:85:fd:ee:ba:ab:47:1f: 61:3a:f4:77:2c:85:46:fd:ec:58:bf:66:6e:e1:36: 6c:94:87:e2:7b:ff:92:67:7c:59:8d:d3:6a:fd:89: de:11:38:c2:db:2c:d9:29:31:bb:de:ac:b2:99:38: b5:2f:4e:2f:3e:f9:f2:87:a6:69:c4:d2:d1:8e:c9: 9c:7f:50:5b:4f:dc:44:ab:b0:42:d5:bc:75:e2:54: 96:27:69:2c:79:b5:d3:53:44:9d:e3:df:36:45:a4: a9:3e:70:62:c2:29:fa:d6:ff:61:44:06:2d:30:4e: 32:d4:fc:44:4f:d6:78:d2:5a:70:cd:57:c3:b3:fe: 52:62:8c:d7:7a:e0:eb:48:04:8f:81:7b:87:7d:31: 1c:1e:c3:2e:d2:80:7e:b8:a3:cd:9c:c6:e1:71:72: 0e:bc:03:cb:39:50:62:62:99:be:06:64:18:e5:86: 71:f5:e5:13:1c:3d:bd:05:26:69:65:f8:8f:38:e4: 9f:df:2b:c4:2d:5a:54:57:73:b5:54:63:7a:9b:1d: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:49:25:84:7A:27:78:4F:DE:6D:2C:5A:A7:EB:7C:F6:B2:AA:0E:AA X509v3 Authority Key Identifier: keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c5:b7:63:55:6e:fe:38:d0:b4:32:80:87:c9:d3:ac:89:e1: 09:95:d3:64:11:50:e6:b6:6e:09:a8:54:cb:5c:47:3b:76:ac: 6b:60:61:c2:f8:72:b7:13:7e:e3:89:88:5b:3d:86:0f:51:6b: e9:3e:fe:2d:cf:0f:a1:b6:8d:0b:e4:7a:a2:f2:6b:36:74:44: bf:d4:32:5a:b0:72:9f:a1:32:09:02:09:2e:3c:35:d3:94:25: 7f:be:32:92:fc:e6:68:fe:ad:21:2d:11:f7:65:6c:5f:a9:13: b0:9d:43:ee:3a:f5:73:73:a3:2f:be:a8:a2:e3:2f:87:c5:04: cf:41:b1:63:70:dc:e3:06:ef:77:d7:24:90:c3:fa:c0:e6:d9: 3c:ae:bd:09:e3:51:0a:d3:b1:78:16:6b:10:9a:7b:05:35:3d: ef:8d:20:de:e1:cb:99:e2:5d:b9:7d:bc:94:10:43:1e:dc:1d: 38:c0:32:3a:b8:3b:53:28:ba:57:b4:08:2c:57:cf:15:cd:c8: 85:a0:77:af:9e:8b:76:5a:43:67:50:43:67:98:a4:cf:9b:e3: 5e:ff:bc:d5:09:77:dc:fd:cf:62:af:dd:41:83:ea:a3:5e:5d: 4a:14:c0:4e:d4:3f:a2:35:cb:e7:fa:c1:45:f3:4c:c2:3f:9b: 6b:2d:83:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wOW/ig3kVwhKxl9NuDarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzQyYzU4NjM3MWQ0NjViY2YzNWY3OWUxNjYwZTExZTA4 MDUxNTUwHhcNMjYwMTI2MTAwMjA3WhcNMjYwMTI3MTAwMjA3WjAzMTEwLwYDVQQD EyhhYTQ5MjU4NDdhMjc3ODRmZGU2ZDJjNWFhN2ViN2NmNmIyYWEwZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTOZT9WVcwsaJiE+JF8nQ83NQfl7 IZ1gR2CjJTRS9RoT/ry5qkBNiG9U+dFnnuNdbVadGIX97rqrRx9hOvR3LIVG/exY v2Zu4TZslIfie/+SZ3xZjdNq/YneETjC2yzZKTG73qyymTi1L04vPvnyh6ZpxNLR jsmcf1BbT9xEq7BC1bx14lSWJ2ksebXTU0Sd4982RaSpPnBiwin61v9hRAYtME4y 1PxET9Z40lpwzVfDs/5SYozXeuDrSASPgXuHfTEcHsMu0oB+uKPNnMbhcXIOvAPL OVBiYpm+BmQY5YZx9eUTHD29BSZpZfiPOOSf3yvELVpUV3O1VGN6mx1kJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpJJYR6J3hP3m0sWqfrfPayqg6qMB8GA1UdIwQY MBaAFOM0LFhjcdRlvPNfeeFmDhHggFFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt ZDk1YTM4ZjBjMDZlLzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl LzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsW3Y1Vu /jjQtDKAh8nTrInhCZXTZBFQ5rZuCahUy1xHO3asa2BhwvhytxN+44mIWz2GD1Fr 6T7+Lc8PobaNC+R6ovJrNnREv9QyWrByn6EyCQIJLjw105Qlf74ykvzmaP6tIS0R 92VsX6kTsJ1D7jr1c3OjL76oouMvh8UEz0GxY3Dc4wbvd9ckkMP6wObZPK69CeNR CtOxeBZrEJp7BTU9740g3uHLmeJduX28lBBDHtwdOMAyOrg7Uyi6V7QILFfPFc3I haB3r56LdlpDZ1BDZ5ikz5vjXv+81Ql33P3PYq/dQYPqo15dShTATtQ/ojXL5/rB RfNMwj+bay2DHQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:47 2026 by rpki-client