This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json) Hash identifier: ubFhyfdohhPYxRu4W490qM5Mr2wEYYc2xcln12nD3kU= Subject key identifier: F4:2A:22:50:61:DE:66:7D:38:09:87:A0:22:6C:22:9C:B2:1E:B9:9B Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59 Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59 Certificate serial: 019BF5757E5F5AE02B6BC739EA2A97BD3668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 14:01:16 +0000 Manifest this update: Sun 25 Jan 2026 14:01:16 +0000 Manifest next update: Mon 26 Jan 2026 14:01:16 +0000 Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: ZO0qkgeYkBvahOci5ccwsqFUXh2PbCTd8PSnAdu70wk=) 2: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (hash: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4=) 3: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (hash: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:7e:5f:5a:e0:2b:6b:c7:39:ea:2a:97:bd:36:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59 Validity Not Before: Jan 25 14:01:16 2026 GMT Not After : Jan 26 14:01:16 2026 GMT Subject: CN=f42a225061de667d380987a0226c229cb21eb99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:e4:3e:25:fa:9a:87:d9:56:b4:42:b6:f8: a8:b6:e0:79:49:ef:7d:8f:02:2a:b9:79:8f:80:82: ec:8b:fb:1c:77:49:e4:e7:98:86:d4:ba:c9:46:62: 83:17:27:80:21:e9:49:32:70:1a:23:91:79:83:21: 8b:2f:90:a9:fb:b6:6c:b5:6c:20:1c:ec:19:a7:ae: bf:9f:bf:08:d3:f4:4b:76:af:0b:1e:82:39:8a:45: 97:c0:bd:79:50:a3:f1:f4:d7:a5:04:94:a8:9a:a8: b8:d2:e3:bd:c3:cc:7f:b2:4d:3a:79:e3:76:35:58: 33:66:17:56:70:16:ba:1c:7d:5a:5a:e1:78:6a:92: 43:9d:d4:00:54:5c:8f:97:4a:eb:5c:02:a0:69:5e: 65:60:65:4f:b0:6f:61:92:51:05:bf:d4:b1:c2:a8: e3:6c:85:1b:b7:9c:5c:ee:ad:2a:13:ed:0d:78:ae: f8:bc:66:b1:df:c1:ab:6f:51:07:38:82:fa:c9:0a: 51:45:89:cd:82:57:08:f7:45:f5:db:98:26:90:34: fe:48:88:90:ec:b1:b1:ca:e1:79:db:37:ba:be:7c: 57:32:46:7b:20:81:1f:79:f6:fd:21:8c:f0:d2:74: 36:3c:44:27:84:cc:ca:62:4b:f3:4c:77:ec:67:9f: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2A:22:50:61:DE:66:7D:38:09:87:A0:22:6C:22:9C:B2:1E:B9:9B X509v3 Authority Key Identifier: keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4b:c4:55:a8:a5:18:8d:68:30:76:c4:26:e5:e0:9a:17:58: 4d:30:58:79:f6:76:95:01:63:85:f9:14:5a:2e:13:17:77:43: 0c:c0:66:86:5c:06:05:8e:a1:f4:87:f0:47:9e:7f:37:f2:79: 2f:66:95:e4:64:de:24:44:29:41:92:fb:3c:ed:dc:d6:32:19: e8:87:4e:3f:28:bc:10:8a:f4:bb:91:41:0a:a2:58:b1:1f:03: 32:be:7e:4f:12:ff:af:49:06:50:d1:81:d8:ca:de:e8:a6:19: 9e:ec:39:12:8f:2f:4b:6c:38:59:d2:3b:26:09:96:ef:57:4d: ab:50:76:8b:7f:0c:1c:66:1a:97:f7:12:9f:48:d0:35:43:db: 37:14:11:35:15:80:70:de:5b:55:96:b8:90:c8:f8:a9:b3:98: 7f:b1:c0:a5:57:9d:d8:39:bf:a9:d4:05:f6:67:e2:17:e8:d0: 5e:5a:80:ff:d1:64:62:a8:c5:91:31:14:87:bb:a4:5a:a5:f9: a5:c6:50:36:d6:dc:c2:a8:ea:29:28:1c:5b:16:91:f3:f2:9f: 90:65:ab:af:8d:ff:b1:7d:52:07:8b:19:30:80:b5:fb:55:22: 70:91:41:ce:3b:35:ba:34:04:bb:67:a5:9d:ff:ea:0b:f1:91: d5:aa:4a:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dX5fWuAra8c56iqXvTZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGZiMWRlYjA5ZTcyNDI1YjMwOWExNDE0OTE3ZGFmODkz YmVmNTkwHhcNMjYwMTI1MTQwMTE2WhcNMjYwMTI2MTQwMTE2WjAzMTEwLwYDVQQD EyhmNDJhMjI1MDYxZGU2NjdkMzgwOTg3YTAyMjZjMjI5Y2IyMWViOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcjkPiX6mofZVrRCtviotuB5Se99 jwIquXmPgILsi/scd0nk55iG1LrJRmKDFyeAIelJMnAaI5F5gyGLL5Cp+7ZstWwg HOwZp66/n78I0/RLdq8LHoI5ikWXwL15UKPx9NelBJSomqi40uO9w8x/sk06eeN2 NVgzZhdWcBa6HH1aWuF4apJDndQAVFyPl0rrXAKgaV5lYGVPsG9hklEFv9Sxwqjj bIUbt5xc7q0qE+0NeK74vGax38Grb1EHOIL6yQpRRYnNglcI90X125gmkDT+SIiQ 7LGxyuF52ze6vnxXMkZ7IIEfefb9IYzw0nQ2PEQnhMzKYkvzTHfsZ59UkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQqIlBh3mZ9OAmHoCJsIpyyHrmbMB8GA1UdIwQY MBaAFAuPsd6wnnJCWzCaFBSRfa+JO+9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2Et Zjg3ODVhNTgxMDZjLzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2EtZjg3ODVhNTgxMDZj LzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEvEVail GI1oMHbEJuXgmhdYTTBYefZ2lQFjhfkUWi4TF3dDDMBmhlwGBY6h9IfwR55/N/J5 L2aV5GTeJEQpQZL7PO3c1jIZ6IdOPyi8EIr0u5FBCqJYsR8DMr5+TxL/r0kGUNGB 2Mre6KYZnuw5Eo8vS2w4WdI7JgmW71dNq1B2i38MHGYal/cSn0jQNUPbNxQRNRWA cN5bVZa4kMj4qbOYf7HApVed2Dm/qdQF9mfiF+jQXlqA/9FkYqjFkTEUh7ukWqX5 pcZQNtbcwqjqKSgcWxaR8/KfkGWrr43/sX1SB4sZMIC1+1UicJFBzjs1ujQEu2el nf/qC/GR1apKiA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:16 2026 by rpki-client