This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json) Hash identifier: pIjQ7AhmPZ1StdopcUkaL5SBnxb7klk8RM//rArnSQ4= Subject key identifier: B0:CA:A0:9B:B8:B0:27:EB:DC:EB:73:87:45:5E:C6:C1:D9:DE:7D:96 Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Certificate serial: 019BF4D0327D6A676BB7B4D498550568B1B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft Manifest number: 124A Signing time: Sun 25 Jan 2026 11:00:43 +0000 Manifest this update: Sun 25 Jan 2026 11:00:43 +0000 Manifest next update: Mon 26 Jan 2026 11:00:43 +0000 Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: Roy+yJQQ0gc2nPDXUbJsw5pKugkM0aLFJ96b0HpTI1A=) 2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:32:7d:6a:67:6b:b7:b4:d4:98:55:05:68:b1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Validity Not Before: Jan 25 11:00:43 2026 GMT Not After : Jan 26 11:00:43 2026 GMT Subject: CN=b0caa09bb8b027ebdceb7387455ec6c1d9de7d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:00:03:56:d5:d4:2a:2d:2b:d8:79:87:5f: 8d:23:29:13:6a:44:21:87:28:75:59:86:3f:2f:61: d7:f9:81:20:ef:fd:d3:a1:ae:c2:a0:07:8a:79:97: dd:bb:4c:c6:98:87:fe:35:3a:1b:9b:7e:51:a7:fe: cb:6a:9c:2f:2b:9f:b2:a1:f4:8c:ca:75:05:2c:ec: 6b:3f:8f:1a:f4:92:6a:5b:b4:d7:27:b7:39:af:c3: 6f:c1:bc:a9:cf:72:98:ea:68:68:e8:ff:e4:49:c5: 95:0e:1e:bc:ad:fe:c1:ee:7d:7f:cb:78:b8:45:a6: b6:61:95:66:89:08:7e:04:32:c6:cf:00:8b:9c:19: 88:30:3a:58:e7:44:f1:b3:72:60:dd:d2:d0:22:70: cf:34:6d:ff:f8:33:ee:e5:85:4c:30:54:63:aa:e7: 9e:b8:5e:57:67:ba:2f:c4:9a:c4:5c:a7:92:07:ad: 6e:6c:a8:5d:56:89:a8:18:2c:6f:85:d2:ed:2a:57: 0f:14:4f:6e:80:88:17:5f:47:e4:d1:f5:8d:a6:53: 74:3a:5d:fc:42:49:92:8e:7e:a2:cc:22:f7:f5:84: 6b:bc:65:05:23:74:3f:7a:0c:f8:95:9a:0b:7d:76: ce:35:c2:0f:bc:96:50:f3:dd:d7:cf:68:9c:cd:3e: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CA:A0:9B:B8:B0:27:EB:DC:EB:73:87:45:5E:C6:C1:D9:DE:7D:96 X509v3 Authority Key Identifier: keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9f:c9:28:d0:de:90:9a:6a:ca:ff:10:32:a1:5e:8f:96:52: 87:bc:e9:45:b9:08:a7:e4:00:c6:d4:0d:f0:1a:ed:57:1e:ed: ad:9c:cd:25:b1:ae:2e:27:2f:21:fc:88:0f:3b:01:cc:cc:d3: 54:89:a8:5c:3f:bb:b5:e4:8c:a0:d4:6f:20:df:24:03:05:70: dc:5e:5c:bb:4d:97:0d:0c:97:4e:2f:a3:fe:e3:fc:1c:35:bf: e8:ae:f6:37:a5:c1:85:5d:83:31:31:62:b7:c9:fe:6c:05:30: b4:5d:3e:9a:f3:38:7a:17:ef:ae:1a:75:5e:4b:08:b7:55:1f: df:23:65:d5:82:42:4a:89:cf:7a:0e:34:58:bc:91:16:fe:73: b4:15:c0:da:94:6f:88:71:8f:70:a7:c6:94:11:a6:6b:08:82: 83:51:27:a3:e5:2c:7f:36:74:2b:40:d6:7a:65:27:b0:4a:aa: a7:1c:89:40:11:28:0f:9e:e0:19:8d:b1:ec:a9:88:56:f5:a6: 44:b2:12:81:2d:43:27:cb:c9:10:8d:b7:cf:ce:46:66:2d:4b: 36:ed:42:26:df:5b:19:c2:65:db:c5:02:25:96:74:c8:a8:57: 2d:ac:6e:8f:6e:c7:75:27:15:c8:5c:03:c5:7b:65:de:59:f1: 57:4c:39:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00DJ9amdrt7TUmFUFaLGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4 MmE2YjQwHhcNMjYwMTI1MTEwMDQzWhcNMjYwMTI2MTEwMDQzWjAzMTEwLwYDVQQD EyhiMGNhYTA5YmI4YjAyN2ViZGNlYjczODc0NTVlYzZjMWQ5ZGU3ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAsAA1bV1CotK9h5h1+NIykTakQh hyh1WYY/L2HX+YEg7/3Toa7CoAeKeZfdu0zGmIf+NTobm35Rp/7LapwvK5+yofSM ynUFLOxrP48a9JJqW7TXJ7c5r8Nvwbypz3KY6mho6P/kScWVDh68rf7B7n1/y3i4 Raa2YZVmiQh+BDLGzwCLnBmIMDpY50Txs3Jg3dLQInDPNG3/+DPu5YVMMFRjquee uF5XZ7ovxJrEXKeSB61ubKhdVomoGCxvhdLtKlcPFE9ugIgXX0fk0fWNplN0Ol38 QkmSjn6izCL39YRrvGUFI3Q/egz4lZoLfXbONcIPvJZQ893Xz2iczT5kXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDKoJu4sCfr3Otzh0VexsHZ3n2WMB8GA1UdIwQY MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5/JKNDe kJpqyv8QMqFej5ZSh7zpRbkIp+QAxtQN8BrtVx7trZzNJbGuLicvIfyIDzsBzMzT VImoXD+7teSMoNRvIN8kAwVw3F5cu02XDQyXTi+j/uP8HDW/6K72N6XBhV2DMTFi t8n+bAUwtF0+mvM4ehfvrhp1XksIt1Uf3yNl1YJCSonPeg40WLyRFv5ztBXA2pRv iHGPcKfGlBGmawiCg1Eno+UsfzZ0K0DWemUnsEqqpxyJQBEoD57gGY2x7KmIVvWm RLISgS1DJ8vJEI23z85GZi1LNu1CJt9bGcJl28UCJZZ0yKhXLaxuj27HdScVyFwD xXtl3lnxV0w5Ng== -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:44 2026 by rpki-client