This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json) Hash identifier: 9iRibGeu+BRAaMKk0nXqOzy1F8XSpFCe3nh0rpZLvrw= Subject key identifier: 6B:36:B3:F7:4C:B8:E0:F3:9B:A7:5B:7F:33:26:8D:74:66:62:D5:F6 Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Certificate serial: 019BF3BD7663A750CA7116365F45A8F44BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 06:00:38 +0000 Manifest this update: Sun 25 Jan 2026 06:00:38 +0000 Manifest next update: Mon 26 Jan 2026 06:00:38 +0000 Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=) 2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: JHxSDdrtHhB4N2S2bt5XMFLLQVP/Mx6+FwVTAmiiGoE=) 3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:76:63:a7:50:ca:71:16:36:5f:45:a8:f4:4b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Validity Not Before: Jan 25 06:00:38 2026 GMT Not After : Jan 26 06:00:38 2026 GMT Subject: CN=6b36b3f74cb8e0f39ba75b7f33268d746662d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:56:25:6f:47:6e:10:5c:29:78:20:77:98: bc:96:cb:4f:68:86:a1:df:71:97:0e:2b:e5:27:09: fe:3a:10:26:be:63:9b:54:d5:bb:7d:81:e2:bd:25: d0:8c:cd:21:6f:c3:d5:87:b3:9b:ad:50:bb:76:5c: 33:f8:d0:25:13:ca:b3:8c:74:4f:f4:6a:0b:5d:39: fd:b6:47:96:ec:94:5f:e2:b6:8e:d0:d7:85:d1:40: 4b:5b:d6:42:fb:a2:10:96:4c:e2:81:ab:be:f7:2e: 83:b2:7e:8f:05:9c:12:16:2f:11:50:10:ff:32:24: 78:ce:d5:f2:c9:5e:4f:4a:bd:e3:68:f6:85:79:59: 84:80:59:df:2b:6b:b0:db:df:cd:81:9e:4c:34:c5: 54:03:0f:ee:25:8b:9b:e5:33:80:39:0f:07:35:86: f7:4d:c8:73:59:8a:9d:9c:e6:3b:37:e7:bc:d3:af: 7c:9e:05:9c:c6:0f:28:b8:e5:76:0a:ea:1f:a7:da: e4:cc:22:e8:54:1b:7f:2a:47:d1:a4:13:d9:1f:78: 4c:e3:c6:91:30:63:3a:17:b3:71:80:6d:d4:fd:72: 3f:63:dd:55:82:eb:eb:d4:0c:ef:35:b9:15:ba:6f: cc:83:4f:2a:9c:6e:5c:08:3d:6d:8c:3e:11:62:ed: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:36:B3:F7:4C:B8:E0:F3:9B:A7:5B:7F:33:26:8D:74:66:62:D5:F6 X509v3 Authority Key Identifier: keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:42:4b:e3:30:83:d5:9c:d6:86:5b:23:d0:72:fe:ea:8f:53: 5c:64:d0:f2:5e:59:3e:0c:a4:77:3d:6e:6d:65:0b:d6:bd:b3: 3c:00:bd:ec:c2:0e:ca:5f:5c:d8:b6:0b:b4:48:46:75:54:18: 1b:58:ff:c4:bc:c6:6e:01:12:14:61:d1:88:9c:8f:c4:d5:2e: fd:6d:2a:55:35:96:6b:38:b7:57:4e:e0:01:4b:6e:9f:d0:ef: 51:df:c2:8b:4f:3f:45:88:b5:f7:05:ac:c0:a0:74:1e:ce:77: d8:22:a6:6b:d5:2c:07:a0:5d:67:77:0b:7f:d6:7b:77:48:39: 43:af:b4:f1:56:ef:d4:c4:26:5a:7b:25:ae:7b:2d:5b:ef:82: 6b:d4:dc:72:9e:8b:d6:f9:45:90:20:07:6d:49:d5:83:54:ca: 56:75:13:a8:2b:19:e3:ff:0a:79:d4:31:f4:1d:d7:e2:7b:14: 73:92:04:08:4b:53:ff:db:40:59:b4:d0:fb:83:f8:c4:a5:62: 66:14:56:b4:17:92:b6:75:c8:e0:18:6b:43:5d:0f:f0:de:20: 21:7e:73:95:f8:d3:ea:89:10:a5:d7:2f:2f:5c:07:31:43:1d: 9c:38:a4:53:25:71:65:d1:4c:a5:31:71:24:5d:02:ec:8b:f8: 12:22:73:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvXZjp1DKcRY2X0Wo9EvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy ODRiYzQwHhcNMjYwMTI1MDYwMDM4WhcNMjYwMTI2MDYwMDM4WjAzMTEwLwYDVQQD Eyg2YjM2YjNmNzRjYjhlMGYzOWJhNzViN2YzMzI2OGQ3NDY2NjJkNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk5WJW9HbhBcKXggd5i8lstPaIah 33GXDivlJwn+OhAmvmObVNW7fYHivSXQjM0hb8PVh7ObrVC7dlwz+NAlE8qzjHRP 9GoLXTn9tkeW7JRf4raO0NeF0UBLW9ZC+6IQlkzigau+9y6Dsn6PBZwSFi8RUBD/ MiR4ztXyyV5PSr3jaPaFeVmEgFnfK2uw29/NgZ5MNMVUAw/uJYub5TOAOQ8HNYb3 TchzWYqdnOY7N+e80698ngWcxg8ouOV2Cuofp9rkzCLoVBt/KkfRpBPZH3hM48aR MGM6F7NxgG3U/XI/Y91Vguvr1AzvNbkVum/Mg08qnG5cCD1tjD4RYu3TRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGs2s/dMuODzm6dbfzMmjXRmYtX2MB8GA1UdIwQY MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4 LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkJL4zCD 1ZzWhlsj0HL+6o9TXGTQ8l5ZPgykdz1ubWUL1r2zPAC97MIOyl9c2LYLtEhGdVQY G1j/xLzGbgESFGHRiJyPxNUu/W0qVTWWazi3V07gAUtun9DvUd/Ci08/RYi19wWs wKB0Hs532CKma9UsB6BdZ3cLf9Z7d0g5Q6+08Vbv1MQmWnslrnstW++Ca9Tccp6L 1vlFkCAHbUnVg1TKVnUTqCsZ4/8KedQx9B3X4nsUc5IECEtT/9tAWbTQ+4P4xKVi ZhRWtBeStnXI4BhrQ10P8N4gIX5zlfjT6okQpdcvL1wHMUMdnDikUyVxZdFMpTFx JF0C7Iv4EiJzOw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:57 2026 by rpki-client