This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json) Hash identifier: 4M8z1yCzhr5iC9yEQgDfJqtDc7Yq9gk7JMUVnG7bjoA= Subject key identifier: 35:BA:26:4E:ED:6D:A6:A4:00:21:A6:81:B2:B2:67:40:F3:6D:E6:EE Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Certificate serial: 019BF4991C4812E0E4DBDF5479357316C4AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 10:00:33 +0000 Manifest this update: Sun 25 Jan 2026 10:00:33 +0000 Manifest next update: Mon 26 Jan 2026 10:00:33 +0000 Files and hashes: 1: 0531BAkLXZV67nncfLvNCkjbh-k.roa (hash: euvg4/4Sr2jxjMgLytVs8+6OJsRY0QQOvsQOdksVnGQ=) 2: MgSoiC6Hu1yTUAZdbU-vK0dVtuc.roa (hash: a2ZSZdWNOxousuGf0RH1BivI79B+5I59lCuIYIMOr3Y=) 3: WwX0JTR-L90JZbPhPbc6WFq_tJM.roa (hash: W2cWm9/jLU8s1tVrrv8IZTosQohnszilkPH0YNaiEbE=) 4: rN2UtVdj6caj6yMxQCrHsSKZMvI.roa (hash: Z3x5j+qIaBAKVKD7voN6LPA49rIP+QJqgn0Mulf73dQ=) 5: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: EFQHfwehlJ/f1KqEn6dpNc8UxOdD4f7000J4KFDP0HM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:1c:48:12:e0:e4:db:df:54:79:35:73:16:c4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Validity Not Before: Jan 25 10:00:33 2026 GMT Not After : Jan 26 10:00:33 2026 GMT Subject: CN=35ba264eed6da6a40021a681b2b26740f36de6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:29:75:20:e5:ee:7a:a1:65:6b:77:d3:56: 03:4b:98:5e:ad:f2:2e:bf:e1:f1:4c:17:2d:e8:60: 92:34:9f:78:f2:d1:18:eb:3a:d6:36:7f:11:e2:9d: 72:2e:b7:49:51:f9:60:46:76:7b:dc:38:53:03:fe: d4:e8:d4:b1:df:c7:e7:49:0b:18:a5:c9:68:4c:71: 75:b3:ac:36:04:47:6c:a4:5f:5c:7c:b4:da:fc:7a: 7a:12:bd:6b:50:df:9a:2b:2e:1c:a3:f6:0b:3d:f0: 4f:66:c2:6a:df:0d:9a:ce:77:f2:48:e1:a0:6e:e1: 05:c5:53:09:db:67:13:ab:50:d9:91:b1:24:30:6e: 73:67:89:67:a5:35:fc:d5:96:24:1f:2d:f7:1e:46: 5d:80:a2:fe:cc:9f:bb:82:83:84:dd:bc:0f:cc:b2: 65:bc:62:43:f3:cf:a7:5d:d3:16:22:a7:56:ae:b2: f2:c1:b9:73:dc:20:9d:f6:b8:54:1b:c7:49:fa:3c: 15:64:f0:14:d7:c2:40:fc:91:e0:bc:d2:2f:f7:63: 50:d8:ce:8f:2e:1c:64:3a:21:5c:4a:f3:7d:0f:ea: 53:5f:9e:62:e1:a2:75:2f:71:1c:09:1a:7e:40:25: 12:86:79:3b:84:fc:76:86:58:6a:ae:28:88:f9:90: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BA:26:4E:ED:6D:A6:A4:00:21:A6:81:B2:B2:67:40:F3:6D:E6:EE X509v3 Authority Key Identifier: keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3f:6c:2c:b4:ed:d5:b2:62:61:12:3b:4d:37:5c:b8:89:45: 0e:4d:98:42:25:42:58:05:24:e7:d9:66:44:81:dd:99:da:64: 8a:c3:a1:cd:f9:76:3b:ca:17:1c:69:29:e5:a7:37:58:ff:31: d2:53:07:27:34:1b:05:b9:96:a7:ab:24:6b:ea:44:6f:d5:ab: 7a:34:5d:3b:16:ce:53:20:22:f9:64:54:a8:29:60:c4:b5:c3: 60:7b:47:6c:e9:4b:89:3a:e7:36:4f:03:4c:32:62:b8:e9:3b: c8:5a:ad:05:3b:4e:63:ab:12:3b:58:5c:34:a5:50:44:04:f2: fb:ac:86:bf:0d:4b:96:78:1f:40:8e:9f:47:65:1d:60:43:d9: 45:05:0d:1d:8a:dc:f0:9f:0a:d3:27:8a:f6:8e:9c:72:80:2b: 46:c6:f4:2b:d8:72:8c:ef:81:fc:16:8d:6b:f8:76:ac:2c:dc: 25:bf:21:05:da:85:a9:9e:b3:fc:f8:df:99:14:cf:ab:d8:2f: db:18:bb:16:02:74:0b:61:d6:b5:ee:6a:c4:27:85:51:49:2f: dd:68:6d:0c:70:b4:f9:af:81:66:65:07:d7:63:b6:67:19:30: d5:a7:9a:75:eb:e4:d0:c1:f9:47:8d:1a:69:12:13:d5:9f:27: 3b:02:d5:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mRxIEuDk299UeTVzFsSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODA5YTdlNmNhMTRkMGExYTk3NjY3M2UwMzE5ZTM0ZTk1 NmVkM2QwHhcNMjYwMTI1MTAwMDMzWhcNMjYwMTI2MTAwMDMzWjAzMTEwLwYDVQQD EygzNWJhMjY0ZWVkNmRhNmE0MDAyMWE2ODFiMmIyNjc0MGYzNmRlNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HspdSDl7nqhZWt301YDS5herfIu v+HxTBct6GCSNJ948tEY6zrWNn8R4p1yLrdJUflgRnZ73DhTA/7U6NSx38fnSQsY pcloTHF1s6w2BEdspF9cfLTa/Hp6Er1rUN+aKy4co/YLPfBPZsJq3w2aznfySOGg buEFxVMJ22cTq1DZkbEkMG5zZ4lnpTX81ZYkHy33HkZdgKL+zJ+7goOE3bwPzLJl vGJD88+nXdMWIqdWrrLywblz3CCd9rhUG8dJ+jwVZPAU18JA/JHgvNIv92NQ2M6P LhxkOiFcSvN9D+pTX55i4aJ1L3EcCRp+QCUShnk7hPx2hlhqriiI+ZC9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW6Jk7tbaakACGmgbKyZ0DzbebuMB8GA1UdIwQY MBaAFL+Amn5soU0KGpdmc+AxnjTpVu09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAt M2ZkZmI0MTQwZjI0LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAtM2ZkZmI0MTQwZjI0 LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz9sLLTt 1bJiYRI7TTdcuIlFDk2YQiVCWAUk59lmRIHdmdpkisOhzfl2O8oXHGkp5ac3WP8x 0lMHJzQbBbmWp6ska+pEb9WrejRdOxbOUyAi+WRUqClgxLXDYHtHbOlLiTrnNk8D TDJiuOk7yFqtBTtOY6sSO1hcNKVQRATy+6yGvw1LlngfQI6fR2UdYEPZRQUNHYrc 8J8K0yeK9o6ccoArRsb0K9hyjO+B/BaNa/h2rCzcJb8hBdqFqZ6z/PjfmRTPq9gv 2xi7FgJ0C2HWte5qxCeFUUkv3WhtDHC0+a+BZmUH12O2Zxkw1aeadevk0MH5R40a aRIT1Z8nOwLVrg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:24 2026 by rpki-client