This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json) Hash identifier: 1DjBBiOQDNuK4k1BezwtGB+C+S7voe+7T9XmVKlrGz4= Subject key identifier: 02:47:31:E6:12:D2:4E:9A:CC:C2:E9:26:5A:73:46:FD:8C:39:F9:72 Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0 Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0 Certificate serial: 019BF8AD4EF5211A7464AA7D6CB4237E3B85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft Manifest number: 0815 Signing time: Mon 26 Jan 2026 05:01:06 +0000 Manifest this update: Mon 26 Jan 2026 05:01:06 +0000 Manifest next update: Tue 27 Jan 2026 05:01:06 +0000 Files and hashes: 1: 4Ja60_Ob1qyQ36cA5voSc2uJesU.roa (hash: phe7oxYicIsE5Su+Fgz6QVulHqYmo2k2ps7HRljB/84=) 2: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: rqC6NP31PjCewBXdJcDwsEy8w/rGpKN1Fbho+nUpgok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:4e:f5:21:1a:74:64:aa:7d:6c:b4:23:7e:3b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0 Validity Not Before: Jan 26 05:01:06 2026 GMT Not After : Jan 27 05:01:06 2026 GMT Subject: CN=024731e612d24e9accc2e9265a7346fd8c39f972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c6:0b:10:37:30:d6:85:c5:2c:ef:bd:d6:f6: 69:2d:84:b2:8f:7e:cd:10:b0:71:05:4b:1b:8f:14: 82:56:d1:de:42:9f:07:ef:b6:dc:39:21:50:01:20: 52:9f:89:6a:d9:ea:d8:39:eb:32:c6:8b:c4:ba:bf: 04:de:d8:46:a6:fb:09:44:75:8d:4f:ca:3d:17:ab: f1:56:8d:a2:43:ff:8b:57:7d:34:db:8a:15:bd:9a: 7b:b4:c0:77:3a:0b:1b:cf:d0:22:f7:08:b6:05:bc: e0:0c:8f:15:91:d6:c4:ac:13:ea:5f:df:cb:1b:49: ae:17:a0:f0:99:75:f4:d1:60:18:81:30:01:80:e3: 47:fa:f2:cf:da:a6:4f:eb:b7:cc:10:f9:b3:2a:98: cb:61:b0:02:90:bd:c8:c9:75:ab:68:13:07:e9:82: c9:56:f8:e6:d7:70:48:23:99:6f:0e:f8:e5:ea:97: e0:37:26:47:5a:3b:34:1c:03:ad:01:09:ea:c2:dd: f5:b0:ad:3b:97:a5:42:e8:55:f7:b4:84:27:83:f9: 03:83:94:e6:d9:60:1c:0c:90:ed:d1:dd:7d:cd:ae: 5d:38:9d:46:f6:19:04:8e:56:a0:67:c4:24:f8:c0: 5b:a8:a7:ef:8c:8f:e4:72:2e:25:dc:1b:12:64:ca: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:47:31:E6:12:D2:4E:9A:CC:C2:E9:26:5A:73:46:FD:8C:39:F9:72 X509v3 Authority Key Identifier: keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c1:74:ea:bd:b4:b5:20:b5:67:74:f0:cc:84:e1:d4:ee:94: 62:67:50:22:7a:ba:de:57:78:e4:7b:85:47:2b:79:34:4f:e6: 24:c2:53:9c:62:aa:26:69:2d:7b:cc:f7:15:1f:5c:3f:28:e6: 62:fc:c0:16:ad:d8:6b:a5:42:31:65:e5:43:81:be:aa:d0:da: e4:8f:c0:1e:a9:69:aa:b3:4d:2e:58:d8:b8:43:e0:9f:eb:ba: 05:bb:5b:35:7c:1d:da:96:4a:73:20:65:a7:73:d6:03:04:23: 3f:fd:eb:52:fc:46:34:f3:a0:a6:f6:f1:51:49:f0:a8:f1:87: 5b:af:df:b4:f5:8a:95:38:5a:ba:aa:37:3f:9b:71:7f:92:2f: bb:2d:80:aa:da:9b:f9:5c:b0:40:c0:b8:b1:d4:4c:7d:8f:75: 46:77:ef:96:26:a6:72:ec:63:16:a9:25:64:0a:c6:66:00:f3: 1a:cb:51:37:a0:09:86:99:7e:e4:84:c2:c0:d5:d3:ec:68:e3: c4:f1:15:b4:88:1c:bd:ac:d3:98:59:d5:30:0f:0a:12:5f:95: 60:e7:cc:22:d4:e0:8b:d6:22:37:d4:ef:1c:2d:b5:b8:1d:8f: c1:b3:b2:fe:7b:e7:8b:78:3c:8f:8a:28:b3:77:fb:d9:cd:b4: 7d:7a:fa:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rU71IRp0ZKp9bLQjfjuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMTUxZDQ4OWIzNjY5NDE5MmFjYmZjYWE1ZTBiYjQ2ZmM5 ZTViZTAwHhcNMjYwMTI2MDUwMTA2WhcNMjYwMTI3MDUwMTA2WjAzMTEwLwYDVQQD EygwMjQ3MzFlNjEyZDI0ZTlhY2NjMmU5MjY1YTczNDZmZDhjMzlmOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sYLEDcw1oXFLO+91vZpLYSyj37N ELBxBUsbjxSCVtHeQp8H77bcOSFQASBSn4lq2erYOesyxovEur8E3thGpvsJRHWN T8o9F6vxVo2iQ/+LV30024oVvZp7tMB3Ogsbz9Ai9wi2BbzgDI8VkdbErBPqX9/L G0muF6DwmXX00WAYgTABgONH+vLP2qZP67fMEPmzKpjLYbACkL3IyXWraBMH6YLJ Vvjm13BII5lvDvjl6pfgNyZHWjs0HAOtAQnqwt31sK07l6VC6FX3tIQng/kDg5Tm 2WAcDJDt0d19za5dOJ1G9hkEjlagZ8Qk+MBbqKfvjI/kci4l3BsSZMpNNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJHMeYS0k6azMLpJlpzRv2MOflyMB8GA1UdIwQY MBaAFOEVHUibNmlBkqy/yqXgu0b8nlvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUt OTNiNTc4ZDE4YzhjLzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUtOTNiNTc4ZDE4Yzhj LzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcF06r20 tSC1Z3TwzITh1O6UYmdQInq63ld45HuFRyt5NE/mJMJTnGKqJmkte8z3FR9cPyjm YvzAFq3Ya6VCMWXlQ4G+qtDa5I/AHqlpqrNNLljYuEPgn+u6BbtbNXwd2pZKcyBl p3PWAwQjP/3rUvxGNPOgpvbxUUnwqPGHW6/ftPWKlThauqo3P5txf5Ivuy2Aqtqb +VywQMC4sdRMfY91RnfvliamcuxjFqklZArGZgDzGstRN6AJhpl+5ITCwNXT7Gjj xPEVtIgcvazTmFnVMA8KEl+VYOfMItTgi9YiN9TvHC21uB2PwbOy/nvni3g8j4oo s3f72c20fXr66w== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:55 2026 by rpki-client