This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json) Hash identifier: r16wx3sbPoSX3K8062Vl+DjIcOP8LCUhuyL6v2Fg7FU= Subject key identifier: A2:5D:E1:1A:DE:19:C5:EA:B8:8B:6E:41:A5:61:FD:F0:51:33:94:F3 Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2 Certificate serial: 019BF3F4E348FC972C28A7DE0859E8B523F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft Manifest number: 1008 Signing time: Sun 25 Jan 2026 07:01:10 +0000 Manifest this update: Sun 25 Jan 2026 07:01:10 +0000 Manifest next update: Mon 26 Jan 2026 07:01:10 +0000 Files and hashes: 1: 4pU4Hi16qrNHVn_1rifllsrc6Y8.roa (hash: mR247mxRKhNJXk38tq01y2ipgIYJK4mmk1Xm6Zsjrxo=) 2: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: l0O9DjvCMAfXTWnOieDDsSntp7Vi+M6mkY8kzEm9nEM=) 3: m4XAr0nFqrkR_Krsol9GLTXmNl4.roa (hash: KY0dlSwMBxLcB3P/BTz3b2ZIcHyY+gMZLw7H5DbRMcY=) 4: niWwJ70S55g4rP0yo6YBn3XoZ8g.roa (hash: ljucsy9pycOjqLq4VhNwYVUNxufmcBtCP5G41NfTLro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:e3:48:fc:97:2c:28:a7:de:08:59:e8:b5:23:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2 Validity Not Before: Jan 25 07:01:10 2026 GMT Not After : Jan 26 07:01:10 2026 GMT Subject: CN=a25de11ade19c5eab88b6e41a561fdf0513394f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:e1:cd:7d:ed:2a:9d:0b:42:13:7f:2a:30: a2:e1:70:e4:0e:1b:81:28:6b:8f:43:1e:a8:07:c5: 29:63:89:6f:51:be:bc:c7:5d:0c:82:3f:79:25:f9: fe:cc:fc:10:b1:14:99:a8:bd:64:76:94:2b:05:0a: 79:89:95:50:8c:0f:f8:da:3e:07:ab:ee:a8:61:cd: d1:04:6f:73:d9:2d:8f:cb:82:3d:6c:06:c5:62:66: a9:60:c4:15:92:39:d2:1c:38:44:6c:28:99:72:6b: 79:de:66:eb:0b:e0:52:54:39:c4:34:80:c8:ca:6e: 8d:9c:a9:59:a4:d8:ab:07:3b:c1:46:a9:33:8b:92: bf:b2:a4:e2:93:09:6f:a6:93:c5:71:20:54:d5:2d: 0e:3d:30:be:fb:8f:4b:24:a8:0c:f8:d3:1e:ed:c9: 77:44:9b:ea:dc:ea:17:43:33:a1:06:3c:b3:2a:4f: 44:5d:6d:1e:a8:10:e5:76:1b:d0:54:ad:e4:b0:a4: 5c:a1:34:66:69:ee:05:96:81:c9:ad:bc:1b:d1:44: 8c:97:34:6d:7e:1e:91:22:24:0b:d9:a5:15:0a:ef: 39:70:5e:9f:45:af:15:1b:01:3d:4a:0e:f9:8d:d8: 8f:16:91:16:0a:90:d8:d8:b1:38:d1:49:ab:4e:0f: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:E1:1A:DE:19:C5:EA:B8:8B:6E:41:A5:61:FD:F0:51:33:94:F3 X509v3 Authority Key Identifier: keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:56:fb:0b:a9:ff:fe:a8:20:ee:42:24:89:e3:cb:c1:61:06: 12:40:48:8a:3a:4e:c1:d1:a8:6d:56:b3:7a:b7:ac:9d:c5:b8: af:d2:c3:2b:13:3f:76:ab:15:8a:70:e8:3b:89:ac:6f:ee:99: 24:8b:af:97:bc:33:63:18:94:d1:22:8a:29:c2:d5:d3:c9:09: 2d:ce:83:69:f2:6e:3f:0c:3f:33:cf:8b:18:47:8b:42:e7:5e: 8f:5c:c9:74:8c:d0:4a:09:84:51:4a:8e:cb:00:92:06:e8:14: 2b:c3:27:34:e7:f5:cf:b3:2a:42:07:55:86:6c:b2:d5:84:e4: 9e:81:7b:a4:5a:36:a3:02:5f:12:2c:98:f6:71:cd:97:a3:3c: 5e:0b:67:be:04:fd:bf:f4:61:88:b9:12:54:a2:60:31:02:72: 82:cb:58:68:d1:19:02:82:f7:94:d5:19:3c:26:91:fa:c4:a7: 10:cc:95:98:a5:0d:57:d6:93:8c:87:ef:73:4a:a4:ba:4a:85: fd:5c:e3:07:a3:88:c1:b4:24:ab:28:b5:36:c2:8b:c4:8d:86: d4:2e:a6:63:93:ca:85:64:8d:13:7c:2d:d7:9a:31:c2:6e:92: da:2e:d4:7e:ce:e4:84:ca:ae:3b:c1:35:0d:cd:a2:ba:1a:b5: f0:9c:20:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9ONI/JcsKKfeCFnotSP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRi NDg2ZjIwHhcNMjYwMTI1MDcwMTEwWhcNMjYwMTI2MDcwMTEwWjAzMTEwLwYDVQQD EyhhMjVkZTExYWRlMTljNWVhYjg4YjZlNDFhNTYxZmRmMDUxMzM5NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYbhzX3tKp0LQhN/KjCi4XDkDhuB KGuPQx6oB8UpY4lvUb68x10Mgj95Jfn+zPwQsRSZqL1kdpQrBQp5iZVQjA/42j4H q+6oYc3RBG9z2S2Py4I9bAbFYmapYMQVkjnSHDhEbCiZcmt53mbrC+BSVDnENIDI ym6NnKlZpNirBzvBRqkzi5K/sqTikwlvppPFcSBU1S0OPTC++49LJKgM+NMe7cl3 RJvq3OoXQzOhBjyzKk9EXW0eqBDldhvQVK3ksKRcoTRmae4FloHJrbwb0USMlzRt fh6RIiQL2aUVCu85cF6fRa8VGwE9Sg75jdiPFpEWCpDY2LE40UmrTg8vYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJd4RreGcXquItuQaVh/fBRM5TzMB8GA1UdIwQY MBaAFOMWMYJH0hGEH5YgqaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYt ZWMyODdlMWQzN2U1LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1 LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1b7C6n/ /qgg7kIkiePLwWEGEkBIijpOwdGobVazeresncW4r9LDKxM/dqsVinDoO4msb+6Z JIuvl7wzYxiU0SKKKcLV08kJLc6DafJuPww/M8+LGEeLQudej1zJdIzQSgmEUUqO ywCSBugUK8MnNOf1z7MqQgdVhmyy1YTknoF7pFo2owJfEiyY9nHNl6M8XgtnvgT9 v/RhiLkSVKJgMQJygstYaNEZAoL3lNUZPCaR+sSnEMyVmKUNV9aTjIfvc0qkukqF /VzjB6OIwbQkqyi1NsKLxI2G1C6mY5PKhWSNE3wt15oxwm6S2i7Ufs7khMquO8E1 Dc2iuhq18Jwg3g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:56 2026 by rpki-client