This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json) Hash identifier: BobtVVJLdOSxbMJo61Ev2lu9lcK9v4W30hu1Bb4aCns= Subject key identifier: CE:CF:07:11:F4:99:7F:95:BA:D5:37:43:C8:28:9C:FB:14:40:26:0A Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Certificate serial: 019BF98933EEC3D5E20D556FBABDC1305124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 09:01:16 +0000 Manifest this update: Mon 26 Jan 2026 09:01:16 +0000 Manifest next update: Tue 27 Jan 2026 09:01:16 +0000 Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=) 2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: +9IPiqpIUhpAcEkjC77kRtzX8Akv6I/erlHUtuT2kbM=) 3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:33:ee:c3:d5:e2:0d:55:6f:ba:bd:c1:30:51:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Validity Not Before: Jan 26 09:01:16 2026 GMT Not After : Jan 27 09:01:16 2026 GMT Subject: CN=cecf0711f4997f95bad53743c8289cfb1440260a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:ad:ca:6e:bb:ce:04:c4:63:59:99:29:0e: df:6e:3c:8c:9d:1c:ea:0f:b9:b2:e0:d3:e3:4d:b9: 1d:ac:93:b0:d2:98:40:8b:9a:f6:fa:93:2b:fd:4b: c3:42:9d:a4:23:10:c3:b9:01:e6:85:92:3d:d4:a2: 26:ba:10:f5:e9:8b:b8:01:ff:88:63:2a:83:d4:75: b8:14:3f:de:19:47:cd:1a:ff:c9:fd:53:39:c7:38: 5d:2f:e5:87:16:b0:08:ac:38:8f:e2:36:ec:71:a9: 64:e6:8f:d7:65:f4:8a:8c:25:85:0d:97:0e:7f:28: 2b:4f:ed:61:5a:42:da:87:f5:ad:95:ea:db:c2:04: 83:b6:08:c0:ca:95:e4:32:1f:0e:b8:f6:0e:ad:c8: d1:e1:d8:42:d4:8f:de:9e:5e:ba:37:0d:fe:0f:2c: dc:d9:98:86:98:a1:44:3d:77:a5:29:4a:89:f7:f7: 00:47:c8:1e:64:85:7e:09:ee:5f:fe:26:a2:03:ce: 28:e3:be:6c:5b:c7:5a:73:62:48:8a:3b:3a:e6:d9: 4d:69:58:5e:9f:a6:db:e6:83:89:17:bb:2e:b9:80: e1:e7:b9:ca:bb:d7:df:88:7c:1e:5a:5c:9a:e9:7a: 1f:fa:a4:7d:1d:ec:ca:af:29:34:ef:7b:91:47:19: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CF:07:11:F4:99:7F:95:BA:D5:37:43:C8:28:9C:FB:14:40:26:0A X509v3 Authority Key Identifier: keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:17:fe:9d:6a:81:eb:47:da:83:3f:94:49:fe:55:17:ab:b5: 04:a5:7d:86:9f:09:83:b2:ba:60:c0:11:c6:fb:89:60:1c:0a: 97:03:53:ab:8d:81:10:48:e4:aa:f4:2f:d4:bf:df:79:a6:36: 70:93:5d:a1:52:c7:c2:02:57:ed:53:f2:82:30:cb:88:da:93: a9:c1:11:77:98:8e:91:f1:70:a7:22:22:0c:51:91:99:47:30: f2:b8:ae:99:05:52:de:db:3b:91:fb:02:17:db:7c:73:64:17: 51:60:7e:a1:82:98:27:ab:e3:23:3d:31:b3:4d:52:27:71:dd: 58:46:0b:b9:f7:8e:c2:f0:4e:c2:99:45:de:a4:99:bb:a8:19: fe:80:af:9b:04:71:fe:ca:db:b2:84:7e:a1:3f:bf:56:7a:1c: 9a:b4:43:9d:ce:14:a0:01:ff:1b:56:0d:b8:60:07:2c:91:ec: 7c:89:8e:c6:e5:83:b2:a0:f9:f9:72:07:13:9c:71:a2:18:fe: c6:5e:db:bc:b9:bd:1b:ef:8c:d8:87:92:04:67:0e:e1:0e:c1: c4:b0:88:6b:fa:55:a9:bf:4b:c0:34:c5:db:e8:16:2d:14:5f: ec:33:19:67:47:71:26:45:ef:4b:84:86:7b:8e:50:5e:a1:8c: f6:6b:1f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iTPuw9XiDVVvur3BMFEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx YjljZmQwHhcNMjYwMTI2MDkwMTE2WhcNMjYwMTI3MDkwMTE2WjAzMTEwLwYDVQQD EyhjZWNmMDcxMWY0OTk3Zjk1YmFkNTM3NDNjODI4OWNmYjE0NDAyNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc6tym67zgTEY1mZKQ7fbjyMnRzq D7my4NPjTbkdrJOw0phAi5r2+pMr/UvDQp2kIxDDuQHmhZI91KImuhD16Yu4Af+I YyqD1HW4FD/eGUfNGv/J/VM5xzhdL+WHFrAIrDiP4jbscalk5o/XZfSKjCWFDZcO fygrT+1hWkLah/WtlerbwgSDtgjAypXkMh8OuPYOrcjR4dhC1I/enl66Nw3+Dyzc 2ZiGmKFEPXelKUqJ9/cAR8geZIV+Ce5f/iaiA84o475sW8dac2JIijs65tlNaVhe n6bb5oOJF7suuYDh57nKu9ffiHweWlya6Xof+qR9HezKryk073uRRxmrRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7PBxH0mX+VutU3Q8gonPsUQCYKMB8GA1UdIwQY MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1 LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBf+nWqB 60fagz+USf5VF6u1BKV9hp8Jg7K6YMARxvuJYBwKlwNTq42BEEjkqvQv1L/feaY2 cJNdoVLHwgJX7VPygjDLiNqTqcERd5iOkfFwpyIiDFGRmUcw8riumQVS3ts7kfsC F9t8c2QXUWB+oYKYJ6vjIz0xs01SJ3HdWEYLufeOwvBOwplF3qSZu6gZ/oCvmwRx /srbsoR+oT+/VnocmrRDnc4UoAH/G1YNuGAHLJHsfImOxuWDsqD5+XIHE5xxohj+ xl7bvLm9G++M2IeSBGcO4Q7BxLCIa/pVqb9LwDTF2+gWLRRf7DMZZ0dxJkXvS4SG e45QXqGM9msflQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:40 2026 by rpki-client