This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json) Hash identifier: GxpR1uzZyKst28o87u2Dy6yAJ6Pf8R4ZFzPWdPEgU9g= Subject key identifier: 16:78:B9:35:13:CC:C9:21:17:5F:96:DF:92:88:AD:A4:8D:64:3D:10 Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Certificate serial: 019BF53E36F31DA1660DDAB3C212064B0205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft Manifest number: 0C15 Signing time: Sun 25 Jan 2026 13:00:53 +0000 Manifest this update: Sun 25 Jan 2026 13:00:53 +0000 Manifest next update: Mon 26 Jan 2026 13:00:53 +0000 Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: 5G1kk6X3r8uJMGrRSWJYEmli7nNMY5Psqm/1wJyqjoM=) 2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:36:f3:1d:a1:66:0d:da:b3:c2:12:06:4b:02:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Validity Not Before: Jan 25 13:00:53 2026 GMT Not After : Jan 26 13:00:53 2026 GMT Subject: CN=1678b93513ccc921175f96df9288ada48d643d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:41:ee:26:28:df:c6:9e:f2:c1:a5:64:28: aa:fa:41:27:b9:50:75:d0:2e:66:2e:5e:42:9a:3e: c3:a8:f3:90:87:49:a8:42:5f:e1:1e:59:10:44:96: a9:37:7c:3d:e4:35:f7:a0:50:4f:7c:0b:38:53:5e: 70:35:3c:b2:96:d7:31:bf:9a:e5:f2:03:a8:13:01: 7e:ff:b4:22:05:a9:0b:5f:21:85:cc:da:50:3c:98: 99:25:a2:c1:42:f0:3b:9c:f5:c5:30:1a:89:e8:45: 49:4a:eb:d8:f8:ee:a2:0f:64:00:47:2e:da:91:0b: 6d:d6:37:92:3a:8b:72:b0:96:21:77:3f:17:e7:07: 75:93:d4:97:6b:cf:4e:fa:b5:9c:a6:73:4c:82:4d: 88:bd:a5:88:6b:09:e4:bf:3e:27:19:c1:26:17:6b: fd:f7:44:80:d1:5e:91:7c:40:15:c1:5d:18:0f:51: b2:e3:9c:d4:18:09:9e:8a:82:98:0c:6e:92:dc:67: 8e:9f:e8:c5:04:ec:3c:d2:8e:90:8c:ba:7b:69:38: eb:44:52:a8:89:eb:d6:73:f9:9a:bb:d5:f1:2b:2a: 7b:2d:25:c3:b0:d4:8b:38:c4:df:45:1a:4e:40:15: 05:64:0e:68:fb:bc:49:3f:0a:46:00:5f:7c:a0:e8: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:78:B9:35:13:CC:C9:21:17:5F:96:DF:92:88:AD:A4:8D:64:3D:10 X509v3 Authority Key Identifier: keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8e:cb:e2:3e:bf:f9:55:46:47:a5:07:af:3f:ab:79:00:b1: a4:63:19:0d:d3:d9:e1:9f:d0:3a:b4:dd:17:41:d5:11:12:42: 09:cc:5a:87:8c:f5:56:ac:f6:8a:f6:c5:6a:b4:32:1b:dc:8a: f1:e0:06:8d:1d:60:36:24:1e:96:93:92:66:1f:01:5e:d1:fb: 0b:f5:11:1e:f9:36:a6:37:6d:7a:a6:ad:08:91:50:bc:06:fd: 41:23:91:14:5e:c9:91:8f:48:13:6b:2c:cd:b4:bb:0f:13:32: fc:84:90:35:57:f4:18:39:8e:7d:a7:f8:fe:c2:5e:65:a7:ae: 4a:48:cf:f9:41:d2:04:a2:ab:f4:68:ee:1b:47:37:58:33:86: 06:ee:ff:1b:d6:3b:32:af:4f:d6:e4:80:07:28:17:3e:a9:f2: aa:9c:5a:f4:c6:7f:3b:7d:cf:56:d8:04:a1:22:21:c6:8e:c5: b4:1c:5e:a3:ec:3b:be:6e:96:4c:3d:1c:43:2b:ca:0a:17:2d: a8:36:8e:f9:01:0b:41:fc:2e:6d:d9:7e:ad:66:99:47:0b:d9: b0:6a:e6:54:8c:ec:bc:29:05:94:04:45:79:e5:01:d0:b0:7a: d5:88:ff:5f:a2:e9:3d:b3:b2:46:4e:3f:0f:bc:ed:92:22:0d: 52:cb:39:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PjbzHaFmDdqzwhIGSwIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw YmFlNTUwHhcNMjYwMTI1MTMwMDUzWhcNMjYwMTI2MTMwMDUzWjAzMTEwLwYDVQQD EygxNjc4YjkzNTEzY2NjOTIxMTc1Zjk2ZGY5Mjg4YWRhNDhkNjQzZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xpB7iYo38ae8sGlZCiq+kEnuVB1 0C5mLl5Cmj7DqPOQh0moQl/hHlkQRJapN3w95DX3oFBPfAs4U15wNTyyltcxv5rl 8gOoEwF+/7QiBakLXyGFzNpQPJiZJaLBQvA7nPXFMBqJ6EVJSuvY+O6iD2QARy7a kQtt1jeSOotysJYhdz8X5wd1k9SXa89O+rWcpnNMgk2IvaWIawnkvz4nGcEmF2v9 90SA0V6RfEAVwV0YD1Gy45zUGAmeioKYDG6S3GeOn+jFBOw80o6QjLp7aTjrRFKo ievWc/mau9XxKyp7LSXDsNSLOMTfRRpOQBUFZA5o+7xJPwpGAF98oOguLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ4uTUTzMkhF1+W35KIraSNZD0QMB8GA1UdIwQY MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI7L4j6/ +VVGR6UHrz+reQCxpGMZDdPZ4Z/QOrTdF0HVERJCCcxah4z1Vqz2ivbFarQyG9yK 8eAGjR1gNiQelpOSZh8BXtH7C/URHvk2pjdteqatCJFQvAb9QSORFF7JkY9IE2ss zbS7DxMy/ISQNVf0GDmOfaf4/sJeZaeuSkjP+UHSBKKr9GjuG0c3WDOGBu7/G9Y7 Mq9P1uSABygXPqnyqpxa9MZ/O33PVtgEoSIhxo7FtBxeo+w7vm6WTD0cQyvKChct qDaO+QELQfwubdl+rWaZRwvZsGrmVIzsvCkFlARFeeUB0LB61Yj/X6LpPbOyRk4/ D7ztkiINUss58w== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:03 2026 by rpki-client