This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json) Hash identifier: wnc/6xrVFZD3SLPr7gXwsqAEjtKq9YwLJsCUsV3xUtQ= Subject key identifier: 44:E4:7E:ED:0A:8F:1B:40:4C:4F:0E:5C:23:93:D2:34:2E:8A:D4:2D Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae Certificate serial: 019BF463451A10A127810F0E85825C614E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 09:01:45 +0000 Manifest this update: Sun 25 Jan 2026 09:01:45 +0000 Manifest next update: Mon 26 Jan 2026 09:01:45 +0000 Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: 5+nsNFWAtkjy91Dx635G1Hdk2/jM8uKTaQBZCsxEa+w=) 2: gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa (hash: b6VMFnv1cWNK34raB+2k08c62RJCIrNzmgwZP9swjd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:45:1a:10:a1:27:81:0f:0e:85:82:5c:61:4e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae Validity Not Before: Jan 25 09:01:45 2026 GMT Not After : Jan 26 09:01:45 2026 GMT Subject: CN=44e47eed0a8f1b404c4f0e5c2393d2342e8ad42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:e7:8e:d6:01:2c:3c:71:b4:87:b1:26:0d: 09:cd:4c:b9:a3:8a:a9:5d:e1:de:b5:56:2d:dd:6c: c7:c2:34:ed:85:6f:55:75:23:3d:8c:42:2d:e4:91: 80:37:60:ae:1c:99:4c:6a:2d:6a:4c:f2:86:e3:37: 96:38:73:62:a4:51:cc:fa:88:3e:ce:27:c6:ad:18: 1e:d8:f2:6e:28:0b:48:6f:67:e0:df:42:71:7d:40: a7:a5:71:4c:c2:70:d1:bb:4e:36:6c:3b:30:b8:d5: 37:33:ab:01:18:2c:ac:f2:48:0d:c5:86:5b:60:4c: f2:c0:40:c2:8a:1a:2f:16:0b:c8:c4:c3:c3:d2:63: 56:f9:d8:0b:3d:37:48:ba:f8:c9:8f:98:32:d4:cb: 95:cc:34:a2:18:a8:b0:db:12:17:27:37:53:2c:6e: 56:c0:44:1e:98:83:2f:a0:bb:e5:fb:81:c2:6b:e0: b4:12:35:57:06:ef:08:86:d7:ca:20:2c:04:fc:0b: 6d:68:b4:98:9f:ca:c8:6b:9a:89:c9:8b:1d:9a:bb: 07:53:80:5f:38:37:03:5e:2d:f7:c5:79:2e:59:59: 0f:79:f1:13:86:72:23:8a:d5:7b:0f:03:91:7c:dd: 6a:f5:2e:4d:35:e6:b2:51:86:94:9a:e1:73:68:4f: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E4:7E:ED:0A:8F:1B:40:4C:4F:0E:5C:23:93:D2:34:2E:8A:D4:2D X509v3 Authority Key Identifier: keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:60:75:54:60:59:52:cc:4c:01:38:9b:f1:6b:b7:97:44:44: 70:f0:2a:7a:2c:25:96:d9:04:81:2a:ed:1b:27:52:ee:5f:b9: ef:ec:82:fa:8a:6e:1e:e5:b1:93:ef:ba:4a:ee:c8:79:71:04: db:f0:f2:0e:46:8c:fc:dd:a2:b8:e6:b2:5d:f7:04:17:ef:32: 50:da:28:d6:e0:44:64:0d:11:28:9e:e2:81:b1:ef:69:fe:d6: 0e:c7:fc:01:d1:2b:b6:48:38:11:e8:b8:aa:98:21:72:0e:cf: 9b:50:a9:e2:5a:ce:0c:de:92:c0:84:dd:22:b7:4a:87:a0:c2: cd:2e:55:1f:fb:43:aa:1a:1f:fd:ff:41:47:d9:b5:2e:b7:28: 4b:e2:3f:05:55:d9:c9:12:67:7f:c0:0e:60:32:6a:a4:c1:6b: f0:f2:41:e9:ef:55:5b:75:29:ca:49:67:96:3c:eb:62:42:d2: a5:28:0d:ca:9f:4e:7d:05:1c:01:b0:bc:27:f0:40:33:45:72: 6e:00:26:c6:23:06:d9:b5:2c:a3:47:9d:cf:35:e5:18:a3:72: 3e:da:ea:cc:ca:1c:cc:73:0a:51:ae:91:cd:a2:9f:12:fa:c6: 5a:27:4e:8e:29:36:dc:14:03:c3:bd:b5:2e:bd:54:64:27:e4: a9:20:14:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Y0UaEKEngQ8OhYJcYU4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2M1ODliOTliYTQ5NDJjYWRlZGMxNzg5Mzg5NjQyOTYz YzQ4YWUwHhcNMjYwMTI1MDkwMTQ1WhcNMjYwMTI2MDkwMTQ1WjAzMTEwLwYDVQQD Eyg0NGU0N2VlZDBhOGYxYjQwNGM0ZjBlNWMyMzkzZDIzNDJlOGFkNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEnnjtYBLDxxtIexJg0JzUy5o4qp XeHetVYt3WzHwjTthW9VdSM9jEIt5JGAN2CuHJlMai1qTPKG4zeWOHNipFHM+og+ zifGrRge2PJuKAtIb2fg30JxfUCnpXFMwnDRu042bDswuNU3M6sBGCys8kgNxYZb YEzywEDCihovFgvIxMPD0mNW+dgLPTdIuvjJj5gy1MuVzDSiGKiw2xIXJzdTLG5W wEQemIMvoLvl+4HCa+C0EjVXBu8IhtfKICwE/AttaLSYn8rIa5qJyYsdmrsHU4Bf ODcDXi33xXkuWVkPefEThnIjitV7DwORfN1q9S5NNeayUYaUmuFzaE/ENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETkfu0KjxtATE8OXCOT0jQuitQtMB8GA1UdIwQY MBaAFOPMWJuZuklCyt7cF4k4lkKWPEiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzIt MWMyMjY3ZWJmNWQ1LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzItMWMyMjY3ZWJmNWQ1 LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGB1VGBZ UsxMATib8Wu3l0REcPAqeiwlltkEgSrtGydS7l+57+yC+opuHuWxk++6Su7IeXEE 2/DyDkaM/N2iuOayXfcEF+8yUNoo1uBEZA0RKJ7igbHvaf7WDsf8AdErtkg4Eei4 qpghcg7Pm1Cp4lrODN6SwITdIrdKh6DCzS5VH/tDqhof/f9BR9m1LrcoS+I/BVXZ yRJnf8AOYDJqpMFr8PJB6e9VW3UpyklnljzrYkLSpSgNyp9OfQUcAbC8J/BAM0Vy bgAmxiMG2bUso0edzzXlGKNyPtrqzMoczHMKUa6RzaKfEvrGWidOjik23BQDw721 Lr1UZCfkqSAU/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:07 2026 by rpki-client