This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json) Hash identifier: BOi4NvSyw2Qp9fH0VUSKTlH+JCiJt0Z+OANfsbeU9UY= Subject key identifier: C3:5E:80:B6:FA:6B:AF:2E:C0:E1:E2:9C:D0:AD:21:55:7A:93:41:9D Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Certificate serial: 019BF650FAADC7E02A7A1940FBEEEC7C56DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:01:00 +0000 Manifest this update: Sun 25 Jan 2026 18:01:00 +0000 Manifest next update: Mon 26 Jan 2026 18:01:00 +0000 Files and hashes: 1: 0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa (hash: FJlCbonLD9dF4g0EKnBAz84rCEY7Zmpte8ZXE9ooZuo=) 2: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: CVONXf+1CJCWGNMEDuc5zjlaTBkdxtTpoaAVHZ/Vo6Y=) 3: CwpxvpCjkjiVHLiVbQuAWgtQ54o.roa (hash: A9xtP47/NQPXNxopvGJvQs5ptoCe1VvA5rj1UqAT7fA=) 4: jl2G_Du7vY1XFmIxGhvnvFEWvcE.roa (hash: RFk3rcVrZLSmQvBNuxyGLTQ7ZkOHCUZDzMm3yZpbe5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:fa:ad:c7:e0:2a:7a:19:40:fb:ee:ec:7c:56:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Validity Not Before: Jan 25 18:01:00 2026 GMT Not After : Jan 26 18:01:00 2026 GMT Subject: CN=c35e80b6fa6baf2ec0e1e29cd0ad21557a93419d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:1b:d5:5d:be:cd:39:dc:76:bc:4a:e8:79: 11:ec:b9:d7:48:18:00:94:4f:40:19:41:69:ec:a8: c7:ce:09:9c:6b:e1:f8:c3:ef:29:86:d0:ff:06:94: ee:11:bc:fa:14:d3:cc:70:32:5a:16:ce:36:48:18: 54:79:30:04:ed:01:0d:1a:0f:25:f6:5c:44:15:b9: 65:a1:21:8d:cb:a9:f1:f5:31:d5:ec:9c:32:ea:82: ba:4e:b6:40:e5:21:72:9d:d7:ff:97:b6:0f:8f:6c: 4e:d9:40:76:7e:d7:8a:2a:f1:d1:49:f2:c2:a6:a7: 14:b5:bf:15:f4:00:05:6a:d7:8b:73:72:7f:35:1d: 5d:d1:38:1d:47:83:78:64:a7:e4:44:de:4c:0e:30: 98:71:c8:50:e2:85:18:52:a8:c2:c9:07:4f:e1:ca: f2:21:a1:c5:d3:14:1a:d7:f0:42:ad:f3:96:0a:99: d4:73:fe:5c:e3:c1:6a:67:43:f8:59:bb:e3:e9:ae: fb:91:66:07:d9:ce:d9:00:2c:9e:58:ab:4f:2d:a1: 7c:db:a4:02:03:13:97:4d:9a:2a:b8:c5:34:77:75: c2:fe:aa:6f:0d:ce:53:db:c3:c8:f5:88:ef:43:43: 43:9e:13:f0:f5:d4:b0:25:e1:bd:9e:ff:85:9c:26: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:80:B6:FA:6B:AF:2E:C0:E1:E2:9C:D0:AD:21:55:7A:93:41:9D X509v3 Authority Key Identifier: keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f6:cf:7b:93:b5:d2:f1:35:4c:57:f1:1c:9f:4d:15:09:c3: 36:2b:2f:24:21:60:0e:c7:5e:4c:f8:a9:c3:89:e3:f6:af:89: e1:97:6f:fe:9f:ca:0d:e5:17:eb:06:dc:5c:bf:c1:68:0c:90: de:c5:92:ba:ba:db:89:40:59:1a:95:33:26:98:56:1b:19:48: c8:ba:76:24:ba:f9:9d:14:64:d5:0d:46:9d:d1:33:7a:83:d9: 12:53:2e:da:f6:be:42:71:51:a0:a5:45:a2:bc:c6:c8:c9:4c: 0e:00:13:a5:18:8a:41:b2:73:63:6e:e5:ab:88:fa:7f:e0:b3: 1e:66:29:9d:cd:9f:15:83:09:9e:a2:51:7c:c6:db:d8:d8:d9: 00:76:c0:79:a9:3a:4d:58:02:82:06:81:a2:f6:8d:c2:42:48: 58:c9:cf:e7:d4:47:6f:b0:2e:e8:35:42:5b:b9:d3:29:1e:b9: fb:fe:46:f5:60:c4:7d:2c:b8:01:43:fa:5a:35:94:5f:52:6c: 65:fc:93:4a:df:4f:06:ba:e7:33:78:d8:9f:37:d9:43:a1:cc: 79:0e:5a:b7:19:0a:71:7f:7a:c6:e6:16:5e:27:d3:e7:09:a3: b8:cb:69:af:35:fa:20:4f:45:c4:6b:62:04:42:3f:67:70:f8: 4a:aa:d3:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UPqtx+AqehlA++7sfFbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwY2RlMmMxZmNlM2Q2ZmUyMTg1MzQ3ZGQ4OWRjZmQxM2Vi YmIxNTEwHhcNMjYwMTI1MTgwMTAwWhcNMjYwMTI2MTgwMTAwWjAzMTEwLwYDVQQD EyhjMzVlODBiNmZhNmJhZjJlYzBlMWUyOWNkMGFkMjE1NTdhOTM0MTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBUb1V2+zTncdrxK6HkR7LnXSBgA lE9AGUFp7KjHzgmca+H4w+8phtD/BpTuEbz6FNPMcDJaFs42SBhUeTAE7QENGg8l 9lxEFblloSGNy6nx9THV7Jwy6oK6TrZA5SFyndf/l7YPj2xO2UB2fteKKvHRSfLC pqcUtb8V9AAFateLc3J/NR1d0TgdR4N4ZKfkRN5MDjCYcchQ4oUYUqjCyQdP4cry IaHF0xQa1/BCrfOWCpnUc/5c48FqZ0P4Wbvj6a77kWYH2c7ZACyeWKtPLaF826QC AxOXTZoquMU0d3XC/qpvDc5T28PI9YjvQ0NDnhPw9dSwJeG9nv+FnCZilwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNegLb6a68uwOHinNCtIVV6k0GdMB8GA1UdIwQY MBaAFODN4sH849b+IYU0fdidz9E+u7FRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEt ZWNiMzEyNmZjOGVkLzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEtZWNiMzEyNmZjOGVk LzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfbPe5O1 0vE1TFfxHJ9NFQnDNisvJCFgDsdeTPipw4nj9q+J4Zdv/p/KDeUX6wbcXL/BaAyQ 3sWSurrbiUBZGpUzJphWGxlIyLp2JLr5nRRk1Q1GndEzeoPZElMu2va+QnFRoKVF orzGyMlMDgATpRiKQbJzY27lq4j6f+CzHmYpnc2fFYMJnqJRfMbb2NjZAHbAeak6 TVgCggaBovaNwkJIWMnP59RHb7Au6DVCW7nTKR65+/5G9WDEfSy4AUP6WjWUX1Js ZfyTSt9PBrrnM3jYnzfZQ6HMeQ5atxkKcX96xuYWXifT5wmjuMtprzX6IE9FxGti BEI/Z3D4SqrTWA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:40 2026 by rpki-client