This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json) Hash identifier: tCFiXTdLURhgpdaw7O+wFu3uvI+hIYii8YQB6ZHTLpU= Subject key identifier: FB:F2:B1:C4:B5:E7:12:93:B5:AA:77:25:06:7C:D5:6F:51:74:8D:82 Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b Certificate serial: 019BF687FB1A9FBE8265A85FF833FECAA01B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft Manifest number: 0EFB Signing time: Sun 25 Jan 2026 19:01:05 +0000 Manifest this update: Sun 25 Jan 2026 19:01:05 +0000 Manifest next update: Mon 26 Jan 2026 19:01:05 +0000 Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: P4gmWe+9Y+Yu/SCG5tZ7TUKToArPzT4cqgsYYpyDJUA=) 2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fb:1a:9f:be:82:65:a8:5f:f8:33:fe:ca:a0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b Validity Not Before: Jan 25 19:01:05 2026 GMT Not After : Jan 26 19:01:05 2026 GMT Subject: CN=fbf2b1c4b5e71293b5aa7725067cd56f51748d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:bb:c2:73:8b:9c:d1:a2:d9:9a:87:7a:e1: d7:ca:23:de:6f:a5:10:8c:a7:21:2f:8b:00:02:70: 5b:aa:0d:4b:6c:58:88:b9:e7:14:a8:93:dd:ca:1d: d4:27:7f:52:9f:e9:1d:05:5f:18:66:0e:e0:78:82: 4c:1b:bb:a2:f8:d8:b5:8e:7e:c8:f6:b8:34:53:72: 15:47:0b:26:4e:75:f2:4b:ef:12:80:e2:09:c7:57: 34:31:14:84:e0:59:63:84:2e:7a:7f:89:30:03:4f: 7b:9e:03:e0:27:cd:ee:b7:f0:b3:26:d2:e8:1a:54: 14:ef:5f:ec:72:d5:cb:fc:95:d6:30:86:1d:ae:a9: 87:2e:aa:ef:0d:a7:4a:a1:25:a5:d9:22:70:a5:a9: 0c:21:a0:15:25:cb:65:0a:14:7e:d7:44:4c:ce:fd: fd:5b:dc:52:ae:82:76:d0:ef:ee:ef:94:60:93:2c: ce:34:e0:36:19:74:3d:59:ad:cc:5d:e9:46:b6:b1: 0d:8e:f9:57:ac:4b:eb:06:69:9f:bb:a1:1c:fc:68: 0c:a0:f8:86:eb:5d:fd:68:e5:ce:8a:0d:8e:45:ca: ce:71:d4:3f:79:4d:6c:19:53:6a:91:5e:c5:7d:af: 47:62:e9:94:c9:51:39:ec:38:a3:31:0d:5c:85:27: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:B1:C4:B5:E7:12:93:B5:AA:77:25:06:7C:D5:6F:51:74:8D:82 X509v3 Authority Key Identifier: keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:79:03:74:f1:69:11:25:4a:74:a2:a3:77:68:c7:08:5c:0d: 41:08:c3:e6:1e:92:0a:f2:0d:09:cc:3f:f3:f9:8a:26:1c:f5: 46:ac:cb:d5:3e:1e:01:8a:0f:83:45:f7:81:de:76:38:ac:13: 53:65:79:e3:1e:a4:01:dd:25:89:e6:45:bd:e4:c4:1e:f4:f8: 93:16:a4:8d:ca:ad:6b:d7:46:4b:f5:91:4d:16:55:e6:94:dc: 8d:3e:44:06:b2:a8:67:38:fc:92:1f:99:50:d4:22:cf:c3:b3: 49:f6:60:3d:3c:99:ee:5d:cc:b9:61:3a:af:7e:9f:89:48:07: c2:11:95:f7:19:9c:c4:32:12:f2:c6:44:19:ca:5a:b7:e6:ca: d9:15:17:a7:b7:1a:96:a2:c9:7a:6d:28:b7:73:76:11:9b:ce: 1f:eb:a3:09:1d:2f:f0:f8:3d:86:03:84:60:e6:b2:56:16:e8: ea:b7:47:25:7a:26:8e:43:98:c6:c8:4b:50:9a:f6:18:5e:20: f3:a5:11:a0:44:9e:4b:40:39:d7:cd:96:4c:e7:17:c2:fe:e7: 74:bd:16:02:42:90:40:1b:82:fa:7e:c0:1f:f4:e6:99:70:38: 24:37:5e:06:8a:ef:ec:9f:75:1e:96:48:72:0c:8f:21:3f:45: d8:a3:f9:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/san76CZahf+DP+yqAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMGUzODA1YTFiNGY1YjYxY2ZlNzMwMTBlODM4YzJmMGQy NWI0NGIwHhcNMjYwMTI1MTkwMTA1WhcNMjYwMTI2MTkwMTA1WjAzMTEwLwYDVQQD EyhmYmYyYjFjNGI1ZTcxMjkzYjVhYTc3MjUwNjdjZDU2ZjUxNzQ4ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAq7wnOLnNGi2ZqHeuHXyiPeb6UQ jKchL4sAAnBbqg1LbFiIuecUqJPdyh3UJ39Sn+kdBV8YZg7geIJMG7ui+Ni1jn7I 9rg0U3IVRwsmTnXyS+8SgOIJx1c0MRSE4FljhC56f4kwA097ngPgJ83ut/CzJtLo GlQU71/sctXL/JXWMIYdrqmHLqrvDadKoSWl2SJwpakMIaAVJctlChR+10RMzv39 W9xSroJ20O/u75RgkyzONOA2GXQ9Wa3MXelGtrENjvlXrEvrBmmfu6Ec/GgMoPiG 6139aOXOig2ORcrOcdQ/eU1sGVNqkV7Ffa9HYumUyVE57DijMQ1chSdq6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvyscS15xKTtap3JQZ81W9RdI2CMB8GA1UdIwQY MBaAFOIOOAWhtPW2HP5zAQ6DjC8NJbRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEt YmQzZTdhZGRlOGRlLzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEtYmQzZTdhZGRlOGRl LzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHkDdPFp ESVKdKKjd2jHCFwNQQjD5h6SCvINCcw/8/mKJhz1RqzL1T4eAYoPg0X3gd52OKwT U2V54x6kAd0lieZFveTEHvT4kxakjcqta9dGS/WRTRZV5pTcjT5EBrKoZzj8kh+Z UNQiz8OzSfZgPTyZ7l3MuWE6r36fiUgHwhGV9xmcxDIS8sZEGcpat+bK2RUXp7ca lqLJem0ot3N2EZvOH+ujCR0v8Pg9hgOEYOayVhbo6rdHJXomjkOYxshLUJr2GF4g 86URoESeS0A5182WTOcXwv7ndL0WAkKQQBuC+n7AH/TmmXA4JDdeBorv7J91HpZI cgyPIT9F2KP59w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:45 2026 by rpki-client