This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json) Hash identifier: Yjd87QDE2oYK9CZm5C/jBfEPBx5tK5d1EmYuqPXk4MI= Subject key identifier: EA:CB:59:08:A3:18:FB:51:81:54:62:65:BA:AE:9E:F6:99:0C:2C:01 Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Certificate serial: 019BF8ADCE14DEF051DD63F4F5E173AEDAED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft Manifest number: 022C Signing time: Mon 26 Jan 2026 05:01:38 +0000 Manifest this update: Mon 26 Jan 2026 05:01:38 +0000 Manifest next update: Tue 27 Jan 2026 05:01:38 +0000 Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: VqspFpBazFFZT7/BodzaPcprxr2KAzapArzOOZaiBf8=) 2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:ce:14:de:f0:51:dd:63:f4:f5:e1:73:ae:da:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Validity Not Before: Jan 26 05:01:38 2026 GMT Not After : Jan 27 05:01:38 2026 GMT Subject: CN=eacb5908a318fb5181546265baae9ef6990c2c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a9:5d:ce:81:d2:eb:db:9a:16:3e:82:59:d2: 8f:a7:bb:53:e6:fb:54:b6:54:d1:b8:6e:10:ab:82: e8:62:45:30:6a:c4:f7:fc:63:bc:37:a7:31:b2:64: 9e:c5:a7:84:7b:6b:ef:32:58:2b:bb:d2:77:b1:63: bb:01:98:44:78:d2:98:dd:de:c1:1c:ca:b7:27:9a: 71:50:b6:62:23:9d:b6:88:79:fa:42:03:bd:db:93: 82:4b:40:58:16:ad:3a:ab:77:a4:8a:85:31:9d:47: 57:86:5a:2d:8f:51:a9:3c:45:3d:3b:78:ad:eb:0d: e3:e6:95:f7:8e:eb:3e:b5:a8:ac:25:bd:af:fb:eb: d1:f6:11:38:ba:1b:38:3d:7e:fe:c1:b3:02:2b:4a: 55:ea:bf:c6:c5:c2:65:8e:6d:6d:00:95:b2:08:62: b7:c2:22:8a:5f:e9:1d:b7:e0:7c:e5:8e:f7:31:eb: 48:5c:3b:27:0b:0f:41:53:0f:96:fe:e2:e8:42:0c: a8:78:07:e4:96:41:2b:d9:48:95:11:c0:26:2e:ee: 58:46:07:d0:71:50:40:8e:2a:0f:81:2c:e9:3c:ad: 19:b1:32:03:ae:6e:59:1d:2c:ca:33:3b:dd:b3:1d: 9f:42:31:54:ab:86:00:b8:b7:d2:79:37:06:35:80: 00:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:59:08:A3:18:FB:51:81:54:62:65:BA:AE:9E:F6:99:0C:2C:01 X509v3 Authority Key Identifier: keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:77:54:c7:d0:5e:74:8a:2a:58:a3:42:6c:8d:ff:3a:1f:9e: d7:cf:51:f3:25:46:97:59:46:a7:52:c5:50:b0:40:b4:1a:92: 9a:1b:44:6d:8e:15:eb:b6:df:e2:be:2d:d3:46:a5:7a:21:b8: ce:9a:cc:ca:b6:61:df:a8:db:88:06:e5:53:2b:e7:7e:60:91: e6:74:ab:ee:bd:64:f7:be:9e:5c:04:0d:5c:31:77:17:46:b6: 04:3f:80:ea:27:ba:88:c5:19:a4:e9:5c:85:3c:f1:aa:16:d7: b7:66:ea:eb:ab:a5:5d:e6:e3:db:30:c2:66:e2:ac:fe:3f:bf: 3d:b8:9c:7a:e2:b3:3f:38:21:4d:80:51:bb:1a:80:5c:88:dc: fd:53:60:ac:89:8b:89:a1:d3:b9:39:b4:5f:3e:85:9c:e6:5c: 0d:97:77:45:a4:04:cf:3c:b8:6a:85:cb:c2:7f:17:b7:35:71: 87:67:df:4d:fa:0e:a5:c0:92:fa:2e:57:db:00:d2:4e:4c:1e: 4d:88:c5:85:31:6f:f8:ba:f2:91:93:39:d9:e7:cf:d7:20:10: 36:c6:e6:7c:db:76:62:11:58:79:7f:32:a9:dd:a8:1f:49:ec: cb:d3:3d:03:d9:59:ce:b3:08:b6:80:05:d2:9e:79:34:85:de: 71:6f:8d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rc4U3vBR3WP09eFzrtrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTFiZjUzZWJlZDdiNTQ4MDg2ZjRhZjY4MDM0NTQwZjIw YTc4ZWMwHhcNMjYwMTI2MDUwMTM4WhcNMjYwMTI3MDUwMTM4WjAzMTEwLwYDVQQD EyhlYWNiNTkwOGEzMThmYjUxODE1NDYyNjViYWFlOWVmNjk5MGMyYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qldzoHS69uaFj6CWdKPp7tT5vtU tlTRuG4Qq4LoYkUwasT3/GO8N6cxsmSexaeEe2vvMlgru9J3sWO7AZhEeNKY3d7B HMq3J5pxULZiI522iHn6QgO925OCS0BYFq06q3ekioUxnUdXhlotj1GpPEU9O3it 6w3j5pX3jus+taisJb2v++vR9hE4uhs4PX7+wbMCK0pV6r/GxcJljm1tAJWyCGK3 wiKKX+kdt+B85Y73MetIXDsnCw9BUw+W/uLoQgyoeAfklkEr2UiVEcAmLu5YRgfQ cVBAjioPgSzpPK0ZsTIDrm5ZHSzKMzvdsx2fQjFUq4YAuLfSeTcGNYAAsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrLWQijGPtRgVRiZbqunvaZDCwBMB8GA1UdIwQY MBaAFODhv1Pr7XtUgIb0r2gDRUDyCnjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUt MmM5Njc5YWNlOWIxLzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUtMmM5Njc5YWNlOWIx LzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3dUx9Be dIoqWKNCbI3/Oh+e189R8yVGl1lGp1LFULBAtBqSmhtEbY4V67bf4r4t00aleiG4 zprMyrZh36jbiAblUyvnfmCR5nSr7r1k976eXAQNXDF3F0a2BD+A6ie6iMUZpOlc hTzxqhbXt2bq66ulXebj2zDCZuKs/j+/PbiceuKzPzghTYBRuxqAXIjc/VNgrImL iaHTuTm0Xz6FnOZcDZd3RaQEzzy4aoXLwn8XtzVxh2ffTfoOpcCS+i5X2wDSTkwe TYjFhTFv+LrykZM52efP1yAQNsbmfNt2YhFYeX8yqd2oH0nsy9M9A9lZzrMItoAF 0p55NIXecW+NrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:38 2026 by rpki-client