This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json) Hash identifier: 5uuuUCKCVnPqeS9QEFQv9Eq5/rhBIK0BOY4091h2Nyc= Subject key identifier: 73:96:8E:0C:46:7B:51:94:2A:D7:BD:A9:71:9F:FD:F9:14:67:4A:72 Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f Certificate serial: 019BF57537491B52E16399CEAFAF6CC7AC21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft Manifest number: 03D9 Signing time: Sun 25 Jan 2026 14:00:58 +0000 Manifest this update: Sun 25 Jan 2026 14:00:58 +0000 Manifest next update: Mon 26 Jan 2026 14:00:58 +0000 Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: thniDZJs/Zn5ewOUpBIVQWlpv82/87ArM+kWg3wZ6KQ=) 2: 8J8jqfIBZIcDi5qcEjDOA-SS3uk.roa (hash: P2MosB3uZAItjOGMQglzm3PWOTUEZCA6IE9hN8uIIUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:37:49:1b:52:e1:63:99:ce:af:af:6c:c7:ac:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f Validity Not Before: Jan 25 14:00:58 2026 GMT Not After : Jan 26 14:00:58 2026 GMT Subject: CN=73968e0c467b51942ad7bda9719ffdf914674a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:dd:70:ff:44:11:62:7b:c7:15:c3:57:0f: 7b:f5:ce:e5:0b:1d:8d:ee:48:b2:cd:9f:43:1e:8c: 6a:b8:da:06:f3:72:b4:ce:1a:a4:bd:17:62:85:30: 46:8d:04:6e:ba:fa:b5:a4:8a:3d:f4:14:26:09:af: 69:4d:51:cb:28:18:a5:3c:9f:cc:e7:46:b2:4f:83: 76:52:4f:9b:c1:97:5d:90:1d:f7:de:3f:6f:f5:44: cf:fe:a5:41:6d:6f:c3:1b:55:fc:88:dc:44:e8:4d: 90:eb:8e:57:64:83:66:9c:76:d6:8d:26:87:57:08: c8:6e:90:9e:09:da:18:70:55:70:3b:bf:10:79:69: 8f:70:76:77:89:a7:aa:7a:42:68:d3:f7:f5:f5:49: d1:1f:20:b4:62:6b:69:2a:50:f6:27:24:36:6e:e5: 46:ca:1a:c4:82:fa:ae:e0:7a:a1:62:53:8e:9f:46: ec:61:19:24:e3:f6:a8:b9:31:7e:63:60:e3:41:2f: 84:3f:d8:da:66:55:57:12:15:0c:03:f0:3f:91:30: 2b:45:80:a4:5b:d6:8f:bc:e5:56:db:48:9a:e1:ce: 3f:8f:72:b0:af:15:7a:87:84:c7:a3:63:ea:43:c6: fa:f3:92:02:6e:61:cd:69:b4:48:f8:c8:8d:12:a3: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:96:8E:0C:46:7B:51:94:2A:D7:BD:A9:71:9F:FD:F9:14:67:4A:72 X509v3 Authority Key Identifier: keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9d:23:9a:d7:82:96:b1:63:bc:fe:1c:26:c0:a8:bb:cf:de: 6b:5d:2f:73:f3:2e:71:bd:9d:3d:e3:73:59:01:16:ed:c0:70: 4a:b7:7c:9a:e2:78:0b:d3:f1:37:06:1b:e2:00:09:ce:39:53: 76:1b:cf:50:a1:90:21:60:60:59:d6:10:51:55:86:48:2f:ab: 93:80:b9:5e:e8:14:73:8b:e4:7b:6f:b4:1f:6f:96:f4:bf:35: bb:1a:3a:a3:59:fd:1c:4d:ad:c2:d2:c8:82:60:3f:46:d9:8b: 28:f1:fa:63:d6:e6:77:fd:54:2d:32:86:45:5d:43:5f:5b:bd: a2:13:f6:8d:71:f8:36:ee:18:3e:49:fd:6b:93:fd:2b:8f:5f: e6:c0:c6:2e:81:20:28:4e:19:5d:41:4f:d2:43:42:0a:69:92: a6:47:60:f1:df:58:15:bf:19:0f:e6:e0:72:37:da:71:f2:3a: 21:0a:9c:27:29:68:9b:e6:da:6f:9a:f0:69:a7:b8:a8:19:bb: 2e:c5:63:4b:1b:95:92:eb:a0:1a:4a:ed:0a:2b:14:59:3f:7d: f6:e9:af:bc:30:cd:47:9f:6d:4b:ca:b0:72:b3:ec:94:4d:14: 3e:2b:01:e5:30:52:73:94:06:b1:d4:09:5e:53:3d:8d:40:72: f4:ff:01:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dTdJG1LhY5nOr69sx6whMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjBiYzQ2OTQ1MzlhMTUwMjZlYzU1YWFkMTlhMTJiYzIx NGMxNWYwHhcNMjYwMTI1MTQwMDU4WhcNMjYwMTI2MTQwMDU4WjAzMTEwLwYDVQQD Eyg3Mzk2OGUwYzQ2N2I1MTk0MmFkN2JkYTk3MTlmZmRmOTE0Njc0YTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwbdcP9EEWJ7xxXDVw979c7lCx2N 7kiyzZ9DHoxquNoG83K0zhqkvRdihTBGjQRuuvq1pIo99BQmCa9pTVHLKBilPJ/M 50ayT4N2Uk+bwZddkB333j9v9UTP/qVBbW/DG1X8iNxE6E2Q645XZINmnHbWjSaH VwjIbpCeCdoYcFVwO78QeWmPcHZ3iaeqekJo0/f19UnRHyC0YmtpKlD2JyQ2buVG yhrEgvqu4HqhYlOOn0bsYRkk4/aouTF+Y2DjQS+EP9jaZlVXEhUMA/A/kTArRYCk W9aPvOVW20ia4c4/j3KwrxV6h4THo2PqQ8b685ICbmHNabRI+MiNEqN8NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOWjgxGe1GUKte9qXGf/fkUZ0pyMB8GA1UdIwQY MBaAFOIgvEaUU5oVAm7FWq0ZoSvCFMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMt ZThkNTE1ZTRjZTU2LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMtZThkNTE1ZTRjZTU2 LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH50jmteC lrFjvP4cJsCou8/ea10vc/Mucb2dPeNzWQEW7cBwSrd8muJ4C9PxNwYb4gAJzjlT dhvPUKGQIWBgWdYQUVWGSC+rk4C5XugUc4vke2+0H2+W9L81uxo6o1n9HE2twtLI gmA/RtmLKPH6Y9bmd/1ULTKGRV1DX1u9ohP2jXH4Nu4YPkn9a5P9K49f5sDGLoEg KE4ZXUFP0kNCCmmSpkdg8d9YFb8ZD+bgcjfacfI6IQqcJylom+bab5rwaae4qBm7 LsVjSxuVkuugGkrtCisUWT999umvvDDNR59tS8qwcrPslE0UPisB5TBSc5QGsdQJ XlM9jUBy9P8B6g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:33 2026 by rpki-client