This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json) Hash identifier: TgZENZQiBdF3ifwPONExbeElSFFPSeH+dOUxKh15pi8= Subject key identifier: C0:38:4E:46:99:D8:35:B2:F9:60:2D:C3:CC:BA:3B:B3:44:3E:5F:45 Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02 Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402 Certificate serial: 019BF687A9BB2997CBC7D0BB9D671F09EA3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft Manifest number: 109A Signing time: Sun 25 Jan 2026 19:00:44 +0000 Manifest this update: Sun 25 Jan 2026 19:00:44 +0000 Manifest next update: Mon 26 Jan 2026 19:00:44 +0000 Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: 3kflqLi+09cKYp1sC7IV1diNNiz7Nb0MQOuB1kYeBCE=) 2: kVdVmGrwD_1QhMpmPtm5S0rHuLM.roa (hash: 5VG/dK7kZFbtMzo8Upi7dKEOdYrNjvX54ok+rFIDbeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:a9:bb:29:97:cb:c7:d0:bb:9d:67:1f:09:ea:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402 Validity Not Before: Jan 25 19:00:44 2026 GMT Not After : Jan 26 19:00:44 2026 GMT Subject: CN=c0384e4699d835b2f9602dc3ccba3bb3443e5f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:e7:51:88:f0:19:fc:8b:ff:36:af:a4:c8: 73:eb:a2:e5:a9:7e:cf:f8:9c:09:2e:7d:c9:65:8d: ff:22:6d:cb:7a:57:85:9f:4d:b2:d5:22:99:7e:d1: 87:bb:11:8c:90:ee:79:cc:1d:65:78:86:6b:ca:14: b7:16:93:f8:ea:c6:69:90:cc:b7:ff:63:81:9b:39: 2c:0c:e6:e9:4a:51:a6:cd:5a:df:3b:55:be:b8:5a: 1c:01:70:ff:42:06:8c:61:c9:88:8d:86:eb:1b:fa: f0:c5:c0:38:7c:e7:30:92:70:49:f6:b5:07:71:25: 07:76:e2:f6:9e:4c:73:18:80:6e:b0:d1:2b:91:9f: 71:95:1e:5f:b8:69:57:a1:fb:04:b7:83:16:0e:98: 29:dd:13:70:ca:33:89:b3:a7:49:47:07:c6:d1:2e: ec:df:c3:e5:0f:70:b7:9a:58:79:6e:32:3c:5e:ef: 79:22:ce:62:97:c4:66:99:c0:61:95:a0:4d:bc:a1: fd:bd:6b:19:ae:50:50:31:a3:03:dd:09:7b:c6:e9: 60:12:b8:c2:5b:9e:81:a0:8b:bc:9b:12:e8:1b:1e: 4a:b1:14:e8:9a:a5:9f:77:b5:6c:7b:c9:92:30:96: a9:2c:ef:07:05:7e:1f:22:e9:1e:3f:05:e8:d8:5b: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:38:4E:46:99:D8:35:B2:F9:60:2D:C3:CC:BA:3B:B3:44:3E:5F:45 X509v3 Authority Key Identifier: keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:41:b7:9a:c4:b7:7f:6c:40:0e:49:d1:e0:70:ce:62:aa:08: c3:5c:f5:58:35:02:73:25:f2:99:39:b6:9e:8f:1d:7c:67:dd: ab:b3:bc:7f:09:94:08:ed:86:2c:32:2e:ad:08:14:21:a1:62: ab:5b:79:1a:7a:10:a4:d7:0a:84:b4:e8:b8:e2:11:54:79:b2: e1:88:62:d6:54:28:91:96:09:95:36:fb:44:be:95:86:d8:79: d0:03:c4:3d:c0:fe:23:b4:1c:fc:85:b7:99:94:4c:58:13:1e: ff:70:7c:9f:a6:30:ec:18:57:1b:51:72:94:42:48:0f:65:b7: 2f:75:fe:cf:a6:e0:a7:ca:24:42:7d:c0:ce:38:83:31:1c:70: 63:e7:48:90:9f:4e:f6:07:6b:a5:e6:2f:05:ac:09:bc:63:92: 84:3c:2b:06:b2:6b:47:25:ee:5e:a4:cf:1d:9a:5b:86:4f:33: c1:2b:26:2f:94:ed:5d:01:46:b4:b9:6a:81:e6:ec:99:db:ab: 9e:a5:9b:4c:32:87:36:85:dd:d4:38:db:f5:11:84:50:68:40: 8c:bf:83:d8:49:50:d9:49:ad:b0:3f:88:1c:48:ed:4e:82:fe: 91:e5:be:cb:ca:6f:e2:86:30:0b:ca:94:7d:d4:fd:b6:80:e3: 2f:82:95:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h6m7KZfLx9C7nWcfCeo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjhiOWU0Nzg1NmNiYmEwODJiN2FmNDI5N2ExYjcyM2Rh ZmM0MDIwHhcNMjYwMTI1MTkwMDQ0WhcNMjYwMTI2MTkwMDQ0WjAzMTEwLwYDVQQD EyhjMDM4NGU0Njk5ZDgzNWIyZjk2MDJkYzNjY2JhM2JiMzQ0M2U1ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvHnUYjwGfyL/zavpMhz66LlqX7P +JwJLn3JZY3/Im3LeleFn02y1SKZftGHuxGMkO55zB1leIZryhS3FpP46sZpkMy3 /2OBmzksDObpSlGmzVrfO1W+uFocAXD/QgaMYcmIjYbrG/rwxcA4fOcwknBJ9rUH cSUHduL2nkxzGIBusNErkZ9xlR5fuGlXofsEt4MWDpgp3RNwyjOJs6dJRwfG0S7s 38PlD3C3mlh5bjI8Xu95Is5il8RmmcBhlaBNvKH9vWsZrlBQMaMD3Ql7xulgErjC W56BoIu8mxLoGx5KsRTomqWfd7Vse8mSMJapLO8HBX4fIukePwXo2FtJdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA4TkaZ2DWy+WAtw8y6O7NEPl9FMB8GA1UdIwQY MBaAFOD4ueR4Vsu6CCt69Cl6G3I9r8QCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUt YTU3OTY2MmYwOTUwLzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUtYTU3OTY2MmYwOTUw LzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEG3msS3 f2xADknR4HDOYqoIw1z1WDUCcyXymTm2no8dfGfdq7O8fwmUCO2GLDIurQgUIaFi q1t5GnoQpNcKhLTouOIRVHmy4Yhi1lQokZYJlTb7RL6Vhth50APEPcD+I7Qc/IW3 mZRMWBMe/3B8n6Yw7BhXG1FylEJID2W3L3X+z6bgp8okQn3AzjiDMRxwY+dIkJ9O 9gdrpeYvBawJvGOShDwrBrJrRyXuXqTPHZpbhk8zwSsmL5TtXQFGtLlqgebsmdur nqWbTDKHNoXd1Djb9RGEUGhAjL+D2ElQ2UmtsD+IHEjtToL+keW+y8pv4oYwC8qU fdT9toDjL4KV4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:26 2026 by rpki-client