This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json) Hash identifier: rGAyZ8fBoynr+3MzQNrELGXyQzLnw/ZSHj4+zr0DPOg= Subject key identifier: 28:8B:F5:4E:FC:C3:B4:FE:3A:00:86:A1:00:D3:0E:D8:9A:90:A9:4E Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Certificate serial: 019BF650EB41729F359E1168E445E3383FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft Manifest number: 153A Signing time: Sun 25 Jan 2026 18:00:56 +0000 Manifest this update: Sun 25 Jan 2026 18:00:56 +0000 Manifest next update: Mon 26 Jan 2026 18:00:56 +0000 Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: nRAb4aYti2ZrlHB5ZUlcAJ3M0q+5wM+ydxHK+MVdmb8=) 2: eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa (hash: WYeB62ZsHbPuqTvSpxGwefGN+P372Umh9fLZQeEfJRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:eb:41:72:9f:35:9e:11:68:e4:45:e3:38:3f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Validity Not Before: Jan 25 18:00:56 2026 GMT Not After : Jan 26 18:00:56 2026 GMT Subject: CN=288bf54efcc3b4fe3a0086a100d30ed89a90a94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:de:c0:23:2d:fe:b9:51:f8:aa:92:e4:af: 81:b7:9b:0c:05:ee:11:c8:47:f7:30:35:26:00:f2: 11:9f:67:77:22:5c:5d:fb:19:18:31:cd:2e:0f:2f: f9:7b:76:7c:ff:d5:ed:5e:63:0a:cc:61:69:7b:13: 23:ad:0c:e9:d0:9c:bb:7f:e3:a0:ce:e0:07:ef:30: 31:26:bb:f8:61:96:75:4f:27:f6:78:8d:88:eb:29: 86:92:3f:ea:e8:53:74:0d:e4:f6:8e:01:e5:1c:f5: 39:f8:d3:80:a9:ac:23:d4:e5:dc:cd:d1:2f:1f:56: 99:42:e1:3a:93:a2:7e:3d:20:23:23:8d:88:e2:13: 97:f9:72:04:e6:f1:e4:e2:17:10:88:96:a7:f1:6b: 25:6e:df:c1:f3:65:69:fb:83:a0:9f:0b:49:b7:5d: 27:76:9a:79:f7:9b:ba:0b:70:a4:c6:cb:19:e2:ca: 11:ed:d3:3f:ba:ec:eb:cb:53:45:1e:26:41:f6:85: 6c:6c:43:75:71:d5:e0:67:d0:36:2d:29:e5:65:67: 29:9f:e6:c7:dc:63:0e:8f:1f:25:94:a8:20:c4:1f: 00:e7:be:34:2a:e3:ff:0c:de:1c:8e:64:dd:39:3e: 4f:7b:62:72:08:a3:23:29:16:88:b1:1d:6a:f6:95: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8B:F5:4E:FC:C3:B4:FE:3A:00:86:A1:00:D3:0E:D8:9A:90:A9:4E X509v3 Authority Key Identifier: keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ef:ab:68:9a:55:e1:58:54:ea:e0:6f:b4:1b:d0:bc:b9:28: 13:18:74:af:ff:6d:b3:6e:f2:1d:37:9b:61:cb:fe:47:90:1b: b0:48:0a:41:f7:4c:ac:d2:7f:f3:e9:b8:86:87:8e:7f:ca:a1: be:36:59:5c:43:87:e0:04:b9:aa:17:2a:33:88:96:6d:16:8b: bc:97:a6:2a:1e:58:2b:6b:25:06:42:85:9b:a2:f5:0a:d3:d9: 04:67:60:d7:57:8c:70:2d:22:c9:a5:3a:25:b9:f6:c6:82:32: 4e:61:ea:d2:b7:81:fe:20:fc:5d:8e:93:96:cf:e5:4f:ca:07: 21:59:4c:5f:ec:14:d5:83:55:65:5d:b8:c7:82:d6:de:e4:d0: ca:6b:ac:ed:30:79:c7:4b:67:71:aa:79:e6:7e:df:ac:bf:f9: 91:0c:49:6e:22:0d:ca:79:91:a9:56:f4:15:cf:72:0b:97:84: 94:9b:af:eb:2f:2e:81:a3:bb:59:d5:5d:c2:0f:c7:52:41:8e: 82:19:af:d6:d0:3f:b5:a4:e9:c1:f1:80:cf:5e:fb:9d:c7:a7: 08:33:75:c9:9a:86:9e:b1:3c:1d:59:37:f8:03:2f:63:3a:23: b5:bd:2d:63:61:0f:a4:33:60:fa:1c:53:b4:58:58:18:fa:bf: fd:89:cc:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UOtBcp81nhFo5EXjOD+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5 YmMyMTMwHhcNMjYwMTI1MTgwMDU2WhcNMjYwMTI2MTgwMDU2WjAzMTEwLwYDVQQD EygyODhiZjU0ZWZjYzNiNGZlM2EwMDg2YTEwMGQzMGVkODlhOTBhOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvPewCMt/rlR+KqS5K+Bt5sMBe4R yEf3MDUmAPIRn2d3Ilxd+xkYMc0uDy/5e3Z8/9XtXmMKzGFpexMjrQzp0Jy7f+Og zuAH7zAxJrv4YZZ1Tyf2eI2I6ymGkj/q6FN0DeT2jgHlHPU5+NOAqawj1OXczdEv H1aZQuE6k6J+PSAjI42I4hOX+XIE5vHk4hcQiJan8Wslbt/B82Vp+4OgnwtJt10n dpp595u6C3CkxssZ4soR7dM/uuzry1NFHiZB9oVsbEN1cdXgZ9A2LSnlZWcpn+bH 3GMOjx8llKggxB8A5740KuP/DN4cjmTdOT5Pe2JyCKMjKRaIsR1q9pUXWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiL9U78w7T+OgCGoQDTDtiakKlOMB8GA1UdIwQY MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt NjJiYTNhNjg4NGM4LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4 LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeu+raJpV 4VhU6uBvtBvQvLkoExh0r/9ts27yHTebYcv+R5AbsEgKQfdMrNJ/8+m4hoeOf8qh vjZZXEOH4AS5qhcqM4iWbRaLvJemKh5YK2slBkKFm6L1CtPZBGdg11eMcC0iyaU6 Jbn2xoIyTmHq0reB/iD8XY6Tls/lT8oHIVlMX+wU1YNVZV24x4LW3uTQymus7TB5 x0tncap55n7frL/5kQxJbiINynmRqVb0Fc9yC5eElJuv6y8ugaO7WdVdwg/HUkGO ghmv1tA/taTpwfGAz177ncenCDN1yZqGnrE8HVk3+AMvYzojtb0tY2EPpDNg+hxT tFhYGPq//YnMTw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:31 2026 by rpki-client