This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json) Hash identifier: SPlFmG70xXQSLlipjG2dLqmDDce8y7ltFlI8bTfocEE= Subject key identifier: FE:20:DB:32:D9:1F:AE:2E:56:9E:3F:C6:1E:7F:0B:EE:29:5E:CF:95 Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Certificate serial: 019BF5750374397F571EB51FA5A0CA49EB50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft Manifest number: 137F Signing time: Sun 25 Jan 2026 14:00:45 +0000 Manifest this update: Sun 25 Jan 2026 14:00:45 +0000 Manifest next update: Mon 26 Jan 2026 14:00:45 +0000 Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: A5yzfT6a7NudmdKzGy3vBOecVURlGKlffWYsvwH24kU=) 2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:03:74:39:7f:57:1e:b5:1f:a5:a0:ca:49:eb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Validity Not Before: Jan 25 14:00:45 2026 GMT Not After : Jan 26 14:00:45 2026 GMT Subject: CN=fe20db32d91fae2e569e3fc61e7f0bee295ecf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:75:30:c5:88:87:fa:65:65:f4:2f:66:0a: db:c1:6f:4d:21:e7:03:55:35:47:77:a7:cc:d9:74: a7:75:f8:f0:6f:74:9b:ca:7a:e3:5a:d3:6e:f1:cd: ef:14:2d:e0:bd:66:e1:42:4a:0b:d8:4a:15:9d:eb: a8:4c:67:d7:69:e0:97:c4:c9:d7:c1:e2:59:6d:a8: 54:36:00:6f:ac:9d:f4:ea:9f:7d:f7:a0:ec:a8:e9: a9:4b:7a:19:5e:e2:0f:77:b7:ec:ea:4b:39:2f:b3: 46:8f:3a:4a:49:cb:22:4e:c6:57:84:24:65:e5:8d: 81:b4:6d:43:97:5e:84:65:7b:a4:b5:49:a2:4d:84: 7e:fe:41:90:98:51:6f:7b:50:8e:8e:ce:9b:06:8c: 27:be:8d:56:22:25:d0:5c:a8:4b:e8:6a:dc:28:0b: dc:6d:27:38:d8:77:8a:46:5a:ba:89:fa:91:50:e2: 88:e7:bc:56:71:10:ee:0b:75:91:83:09:7b:6b:22: 98:9a:b0:d8:a2:86:7f:c3:d9:cb:ef:b5:aa:32:c4: 8b:7a:f9:bc:43:8e:cf:b8:03:74:89:1a:f5:07:d9: fa:96:b4:46:7c:29:6e:c6:fb:e9:79:fd:00:b9:73: 14:6f:6d:3b:75:a5:6f:da:1f:bb:20:b6:72:aa:d2: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:20:DB:32:D9:1F:AE:2E:56:9E:3F:C6:1E:7F:0B:EE:29:5E:CF:95 X509v3 Authority Key Identifier: keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:e7:27:d8:8d:96:f5:74:5b:ed:fc:8d:dd:1a:43:13:cb: 08:62:0c:78:f1:60:32:1f:55:4a:01:99:41:8f:be:65:30:8b: 26:58:35:80:16:20:2b:e9:ed:57:f0:18:88:95:46:da:dc:c4: 50:fe:f4:be:cd:28:ab:c3:82:34:d2:c6:cd:9c:a6:43:46:c3: 73:95:cd:01:61:72:21:c0:29:8f:72:0c:47:2f:d0:28:68:cd: 14:53:55:95:f6:57:81:fb:d3:ca:bd:f6:d3:33:12:ff:7a:75: 0c:3b:e9:83:32:80:16:c6:85:3f:93:29:cc:b3:fb:06:45:e2: 17:c2:03:4f:47:f3:55:7b:5d:4f:04:75:cc:61:11:61:78:a3: 5d:33:f4:b3:0f:9e:6b:de:12:57:0f:84:63:a4:b9:fa:b0:44: 1f:ea:9a:aa:34:80:00:45:d9:e4:3b:37:77:eb:47:a1:15:1a: 42:77:50:b1:78:b3:81:f2:80:01:ef:bd:b3:21:89:dd:52:48: 5d:57:9a:f2:4f:1b:4b:6d:b7:7f:79:81:8e:cc:e1:f7:f3:2b: 55:2b:c1:c4:10:5c:9c:2b:9a:09:4f:0f:3c:3a:57:90:d5:24: ea:96:af:7a:6f:8a:3f:23:07:ba:3d:06:1b:61:98:01:ec:b4: 1e:0b:81:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQN0OX9XHrUfpaDKSetQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh OTgyMzEwHhcNMjYwMTI1MTQwMDQ1WhcNMjYwMTI2MTQwMDQ1WjAzMTEwLwYDVQQD EyhmZTIwZGIzMmQ5MWZhZTJlNTY5ZTNmYzYxZTdmMGJlZTI5NWVjZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs611MMWIh/plZfQvZgrbwW9NIecD VTVHd6fM2XSndfjwb3SbynrjWtNu8c3vFC3gvWbhQkoL2EoVneuoTGfXaeCXxMnX weJZbahUNgBvrJ306p9996DsqOmpS3oZXuIPd7fs6ks5L7NGjzpKScsiTsZXhCRl 5Y2BtG1Dl16EZXuktUmiTYR+/kGQmFFve1COjs6bBownvo1WIiXQXKhL6GrcKAvc bSc42HeKRlq6ifqRUOKI57xWcRDuC3WRgwl7ayKYmrDYooZ/w9nL77WqMsSLevm8 Q47PuAN0iRr1B9n6lrRGfCluxvvpef0AuXMUb207daVv2h+7ILZyqtKK4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4g2zLZH64uVp4/xh5/C+4pXs+VMB8GA1UdIwQY MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTnnJ9iN lvV0W+38jd0aQxPLCGIMePFgMh9VSgGZQY++ZTCLJlg1gBYgK+ntV/AYiJVG2tzE UP70vs0oq8OCNNLGzZymQ0bDc5XNAWFyIcApj3IMRy/QKGjNFFNVlfZXgfvTyr32 0zMS/3p1DDvpgzKAFsaFP5MpzLP7BkXiF8IDT0fzVXtdTwR1zGERYXijXTP0sw+e a94SVw+EY6S5+rBEH+qaqjSAAEXZ5Ds3d+tHoRUaQndQsXizgfKAAe+9syGJ3VJI XVea8k8bS223f3mBjszh9/MrVSvBxBBcnCuaCU8PPDpXkNUk6pavem+KPyMHuj0G G2GYAey0HguBwg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:44 2026 by rpki-client