This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json) Hash identifier: 5YbVlpDLDXm8palvDsvRxe5RWNVFhpk9zWtTLO6wcRg= Subject key identifier: 91:52:FB:A7:12:17:61:0D:61:D8:5F:4F:30:FB:B3:47:8B:53:BF:04 Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18 Certificate serial: 019BF80835DE45094DD4F6B040BFE2EA0FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft Manifest number: 10D5 Signing time: Mon 26 Jan 2026 02:00:46 +0000 Manifest this update: Mon 26 Jan 2026 02:00:46 +0000 Manifest next update: Tue 27 Jan 2026 02:00:46 +0000 Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: HQhr+Mfrli5V2hUxdVX61xl/yHESaItnh5q0PZYaRlg=) 2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:35:de:45:09:4d:d4:f6:b0:40:bf:e2:ea:0f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18 Validity Not Before: Jan 26 02:00:46 2026 GMT Not After : Jan 27 02:00:46 2026 GMT Subject: CN=9152fba71217610d61d85f4f30fbb3478b53bf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:62:d3:a6:b1:9e:2d:c8:9f:b0:0f:aa:24: c8:88:c0:f2:96:72:77:e8:07:f3:89:df:33:75:05: c5:96:9a:7b:b0:c1:ac:55:bd:89:47:55:94:38:de: 9b:dd:9a:7e:ea:7d:8f:84:a7:28:46:f4:04:7c:7f: 89:54:b6:41:ed:9b:20:a8:b5:03:32:64:59:cb:3f: b2:d3:74:47:c3:e4:51:dd:8e:20:27:71:05:ad:42: da:ba:75:ad:87:5c:fa:9d:19:c5:60:96:59:d7:0f: 54:04:34:e5:30:69:48:8c:5a:8f:2b:fc:37:1e:77: dd:50:a4:d4:b6:44:d4:fe:0e:e7:fe:97:23:a2:9d: 38:59:20:3c:6a:54:d8:bf:89:f9:3b:04:14:07:6a: af:02:f2:98:fa:2a:1c:fd:d8:1c:df:69:46:48:09: 51:b5:5a:13:68:0c:c2:c0:73:e6:ee:bf:ff:dd:fb: 1a:a3:97:0d:c3:36:88:a3:7f:f1:3f:77:5f:aa:ac: ca:15:43:b3:da:84:73:c1:e1:94:b6:fe:39:3e:25: 7d:64:14:7f:0e:0a:ad:bc:34:16:40:b3:18:ef:a7: 47:9b:0a:c2:46:e0:94:32:33:0b:a6:82:8a:08:3f: e9:99:08:0d:81:46:4d:46:63:02:32:9d:15:c0:8e: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:FB:A7:12:17:61:0D:61:D8:5F:4F:30:FB:B3:47:8B:53:BF:04 X509v3 Authority Key Identifier: keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:07:b3:f9:a8:26:aa:d0:7e:37:14:a5:d1:b5:03:74:f5:9f: 12:a5:44:e8:74:b6:43:f2:e7:36:5e:74:16:35:04:d6:fe:6e: e0:7d:09:0d:fc:43:bd:23:84:ca:8b:0c:95:53:c1:15:2f:cb: 68:62:89:f9:ae:26:9a:40:f0:aa:09:2a:c3:1a:e1:05:9f:d7: b7:6b:36:11:46:2d:34:9f:6a:da:39:60:e5:80:12:59:66:4b: 7d:0b:4e:fa:55:8f:92:5f:2b:3b:b3:51:66:d8:af:4f:53:06: 37:1c:72:20:7b:53:9e:fa:eb:b4:2a:d9:77:9b:54:8e:4b:80: e7:52:53:e6:27:3e:01:40:fe:51:0b:54:2c:65:e4:ac:c8:fb: 2b:b9:80:af:0c:5d:43:3f:57:a2:5f:47:5d:ff:2e:a2:26:43: 73:69:d5:b6:f3:ea:49:da:24:7c:4e:74:3e:92:f3:10:0a:f9: b9:d1:07:ec:33:0b:76:a4:25:0a:61:18:4a:58:38:db:94:38: 6d:91:3c:10:ed:af:37:af:29:8f:29:1a:82:f4:f6:78:24:24: 00:d7:d3:8a:54:5a:ba:84:5d:17:80:f1:9d:ba:48:f8:70:d6: fd:13:72:4d:85:72:fa:c5:13:b4:75:90:34:ed:f0:fc:a7:5c: b1:c4:3e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDXeRQlN1PawQL/i6g/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj NDhjMTgwHhcNMjYwMTI2MDIwMDQ2WhcNMjYwMTI3MDIwMDQ2WjAzMTEwLwYDVQQD Eyg5MTUyZmJhNzEyMTc2MTBkNjFkODVmNGYzMGZiYjM0NzhiNTNiZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa5i06axni3In7APqiTIiMDylnJ3 6Afzid8zdQXFlpp7sMGsVb2JR1WUON6b3Zp+6n2PhKcoRvQEfH+JVLZB7ZsgqLUD MmRZyz+y03RHw+RR3Y4gJ3EFrULaunWth1z6nRnFYJZZ1w9UBDTlMGlIjFqPK/w3 HnfdUKTUtkTU/g7n/pcjop04WSA8alTYv4n5OwQUB2qvAvKY+ioc/dgc32lGSAlR tVoTaAzCwHPm7r//3fsao5cNwzaIo3/xP3dfqqzKFUOz2oRzweGUtv45PiV9ZBR/ DgqtvDQWQLMY76dHmwrCRuCUMjMLpoKKCD/pmQgNgUZNRmMCMp0VwI7PXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFS+6cSF2ENYdhfTzD7s0eLU78EMB8GA1UdIwQY MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt NWE0ZDhiNGUzZjBhLzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAez+agm qtB+NxSl0bUDdPWfEqVE6HS2Q/LnNl50FjUE1v5u4H0JDfxDvSOEyosMlVPBFS/L aGKJ+a4mmkDwqgkqwxrhBZ/Xt2s2EUYtNJ9q2jlg5YASWWZLfQtO+lWPkl8rO7NR ZtivT1MGNxxyIHtTnvrrtCrZd5tUjkuA51JT5ic+AUD+UQtULGXkrMj7K7mArwxd Qz9Xol9HXf8uoiZDc2nVtvPqSdokfE50PpLzEAr5udEH7DMLdqQlCmEYSlg425Q4 bZE8EO2vN68pjykagvT2eCQkANfTilRauoRdF4DxnbpI+HDW/RNyTYVy+sUTtHWQ NO3w/KdcscQ+Jw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:35 2026 by rpki-client