This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json) Hash identifier: Ib+fjBIHFxxOsHUIrIpJo4ehFrsKb7FNzDYHuMuWN7A= Subject key identifier: A2:C7:87:B2:23:DE:60:BD:D8:0C:AE:BD:69:14:DA:6B:5C:F7:AB:F0 Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Certificate serial: 019BF83F4732E52AE6036E421699792D7A1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft Manifest number: 17F3 Signing time: Mon 26 Jan 2026 03:00:55 +0000 Manifest this update: Mon 26 Jan 2026 03:00:55 +0000 Manifest next update: Tue 27 Jan 2026 03:00:55 +0000 Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: j0Rq5uiJSMKSQocOHhlJNp4vaQOF685joC1hS9+HfeQ=) 2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=) 3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=) 4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=) 5: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=) 6: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:47:32:e5:2a:e6:03:6e:42:16:99:79:2d:7a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Validity Not Before: Jan 26 03:00:55 2026 GMT Not After : Jan 27 03:00:55 2026 GMT Subject: CN=a2c787b223de60bdd80caebd6914da6b5cf7abf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:38:e0:68:93:32:23:67:01:c8:99:2d:4f: b3:f6:4e:ee:e4:3c:19:8f:a6:ba:43:92:2b:de:70: 26:1f:a5:46:e8:6d:32:50:9d:f2:e4:55:c3:d2:9b: 04:e0:5f:fb:53:ea:ab:0c:5a:37:f9:77:f1:06:d7: f2:37:7a:97:a2:12:bd:a1:12:c6:18:6d:7a:f9:24: ee:8d:0f:98:d9:80:93:ad:30:37:b8:0f:5d:e3:15: df:ab:e9:2d:76:5b:d5:5b:44:9d:66:1a:f7:c7:4b: 50:78:69:1c:d3:f4:e7:e7:c5:fc:ce:c8:ae:c9:5b: f0:c4:df:80:60:bb:0b:5e:7d:71:dd:42:52:04:2c: fd:af:c1:d6:e2:1c:38:51:fc:de:c1:d7:cb:48:31: 17:e7:11:60:8d:c5:c4:a1:a5:66:3e:fe:ac:63:89: ee:2f:bb:08:68:8c:cb:6d:e6:9f:83:24:62:14:41: 57:88:73:40:d0:e5:00:fb:b3:9a:2c:87:0a:e1:6a: 30:34:a1:0a:61:9d:17:93:8e:5c:a1:0b:f1:7a:c8: 7d:0b:7d:e5:b9:42:8d:a6:25:b8:f2:84:99:f5:8c: c3:af:bc:b6:94:9e:e7:8e:bf:c7:df:09:e1:71:59: ea:1b:86:dd:13:3d:50:aa:98:11:3a:d1:bb:40:bf: 72:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C7:87:B2:23:DE:60:BD:D8:0C:AE:BD:69:14:DA:6B:5C:F7:AB:F0 X509v3 Authority Key Identifier: keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f8:e0:dd:0a:a7:33:fa:dd:da:0b:c0:9c:f6:ff:8a:5c:41: b2:61:e7:bb:74:b2:dd:b0:a6:26:35:d8:6d:e6:c3:77:b9:e6: 4f:fa:68:8b:be:63:0f:6f:41:2b:e7:15:be:b4:6d:38:e8:77: eb:53:6a:60:f4:2b:cf:5b:cf:c2:cc:7a:7b:e2:87:25:0c:98: d6:07:85:b5:8c:2d:a1:4e:6d:a3:ec:a8:db:74:cd:0a:f9:39: 5b:38:32:98:9d:9e:a1:70:03:5f:2a:96:c2:53:ad:41:e3:e5: 5b:f4:82:9a:f4:2c:ba:af:90:54:82:02:d8:48:e4:1c:9f:4e: 34:5d:9b:1b:3b:65:da:fd:81:51:f0:ff:06:c8:90:2a:18:cf: e2:ae:cd:b9:05:9e:bd:93:53:56:7c:ad:6d:46:aa:e8:66:1f: 99:24:2a:59:0b:59:9a:38:65:8d:e8:23:d2:33:2a:90:73:32: 08:a6:96:91:0e:c5:a4:54:64:2d:d4:ed:75:e6:7c:03:39:92: b6:b6:11:59:41:90:00:c2:9f:ca:e6:81:ae:9a:7e:ff:5a:a0: 80:ea:b9:26:85:c0:0b:9d:41:49:13:d5:4f:e8:88:7f:d5:20: 3e:e9:ef:8e:24:8a:42:4d:10:92:94:3c:64:37:a0:c2:f1:d9: 50:7f:81:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P0cy5SrmA25CFpl5LXodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi ZTFiMTEwHhcNMjYwMTI2MDMwMDU1WhcNMjYwMTI3MDMwMDU1WjAzMTEwLwYDVQQD EyhhMmM3ODdiMjIzZGU2MGJkZDgwY2FlYmQ2OTE0ZGE2YjVjZjdhYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdk44GiTMiNnAciZLU+z9k7u5DwZ j6a6Q5Ir3nAmH6VG6G0yUJ3y5FXD0psE4F/7U+qrDFo3+XfxBtfyN3qXohK9oRLG GG16+STujQ+Y2YCTrTA3uA9d4xXfq+ktdlvVW0SdZhr3x0tQeGkc0/Tn58X8zsiu yVvwxN+AYLsLXn1x3UJSBCz9r8HW4hw4UfzewdfLSDEX5xFgjcXEoaVmPv6sY4nu L7sIaIzLbeafgyRiFEFXiHNA0OUA+7OaLIcK4WowNKEKYZ0Xk45coQvxesh9C33l uUKNpiW48oSZ9YzDr7y2lJ7njr/H3wnhcVnqG4bdEz1QqpgROtG7QL9yGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLHh7Ij3mC92AyuvWkU2mtc96vwMB8GA1UdIwQY MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt NzQyZGMwYzk3MGMwLzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePjg3Qqn M/rd2gvAnPb/ilxBsmHnu3Sy3bCmJjXYbebDd7nmT/poi75jD29BK+cVvrRtOOh3 61NqYPQrz1vPwsx6e+KHJQyY1geFtYwtoU5to+yo23TNCvk5WzgymJ2eoXADXyqW wlOtQePlW/SCmvQsuq+QVIIC2EjkHJ9ONF2bGztl2v2BUfD/BsiQKhjP4q7NuQWe vZNTVnytbUaq6GYfmSQqWQtZmjhljegj0jMqkHMyCKaWkQ7FpFRkLdTtdeZ8AzmS trYRWUGQAMKfyuaBrpp+/1qggOq5JoXAC51BSRPVT+iIf9UgPunvjiSKQk0QkpQ8 ZDegwvHZUH+BIA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:57 2026 by rpki-client