This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft File: 4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json) Hash identifier: Q2PGbU5A3pZYuZ4/sTjk+W2XKLatv6d4kcGqAybvZsM= Subject key identifier: C2:E3:53:96:49:EF:1F:90:A0:46:27:3A:4B:C9:59:43:F4:2B:9A:0A Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019BF6F564FC9585E80AC1E5B0EB2BE81C2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft Manifest number: 0CB4 Signing time: Sun 25 Jan 2026 21:00:35 +0000 Manifest this update: Sun 25 Jan 2026 21:00:35 +0000 Manifest next update: Mon 26 Jan 2026 21:00:35 +0000 Files and hashes: 1: 2YFl1nz6ibOdUXICM8EmCPLdQEU.roa (hash: e6z98KANzMTmyp6yuocLyiolXniFv4kx3RLaW4TSkDA=) 2: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: K3JtbBpsE1UNshDWx3B41Wu97hqTlDjKnxureYmyD1A=) 3: Xx27rFNzn0CKCl9qSt2PCELhh7M.roa (hash: lrSb36B35+cjoGY4fibEVUmY5+MNB48JzpR68OA81aQ=) 4: bjGLD3ovB-bfvIknnpZ0Lbe-TsE.roa (hash: 4P/0oP6KrZeB/0pCl0SqvxvPAOXuMv82h87HkIeA7+0=) 5: otd5V2cV1Ca3eD_CY3OTJoxda-o.roa (hash: q2udBVaxk+e2Vd86P+KK9uKGO31T3slWZ/u6JA3I8mc=) 6: u8jIlP-9sy1xmDDwt89PXIovv5w.roa (hash: e83kW8pSB5IhX9GGs940RM/rz2pGIWlSPel7ssIVenI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:64:fc:95:85:e8:0a:c1:e5:b0:eb:2b:e8:1c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Jan 25 21:00:35 2026 GMT Not After : Jan 26 21:00:35 2026 GMT Subject: CN=c2e3539649ef1f90a046273a4bc95943f42b9a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8a:ec:ab:0a:9a:8f:8f:6f:a9:e3:3b:ca:3a: b0:72:b2:43:51:8a:60:05:5e:8b:65:c0:8e:3c:e8: 73:f0:f7:ab:d4:22:80:a0:6a:ce:0e:c2:e6:28:04: 79:b8:3c:8f:db:e9:f7:be:54:73:1a:bc:aa:78:3e: 03:e1:ff:15:bc:68:85:c8:79:0c:cf:44:0e:ec:54: 32:80:cb:72:b0:9a:8b:8a:a5:cd:87:89:77:99:aa: ea:82:6d:31:42:06:f7:58:c7:b8:5e:85:2c:be:34: 57:6b:1f:f6:4c:d3:f4:0d:a4:3c:66:83:3b:6d:bd: 95:6a:56:fc:09:64:02:8b:45:80:42:42:66:ff:4e: 4e:aa:5e:1d:a1:32:67:ad:c6:9c:6a:fe:54:6a:c0: 92:f7:54:92:84:33:3e:d6:78:2f:a0:e5:59:00:24: af:8a:f4:64:86:09:ea:a4:d7:d6:52:2c:89:d7:d2: 95:71:f5:17:07:1d:5e:c0:31:38:17:db:24:6b:ac: 75:c3:bc:c5:16:76:69:2e:06:48:15:53:d2:d3:28: 68:cb:93:88:ee:d2:42:c2:fa:8c:72:03:65:61:66: 83:65:5b:03:54:b7:89:59:c8:9a:d8:39:7c:79:67: eb:03:0f:3a:22:c6:a0:c9:e8:7c:05:1f:89:43:5c: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E3:53:96:49:EF:1F:90:A0:46:27:3A:4B:C9:59:43:F4:2B:9A:0A X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:66:ec:f9:34:94:8c:e2:54:a0:d6:95:cf:07:78:70:c1:d8: b3:8a:13:85:25:7c:33:dc:c5:b5:fd:03:ec:13:bb:5f:c7:23: c9:76:6a:47:96:76:c8:99:36:8a:49:3f:1b:ef:64:d3:50:f4: d1:62:49:37:3f:46:07:2e:c1:07:5e:b8:77:00:b8:c8:77:94: 40:44:0f:e3:50:54:8a:b3:7d:47:9c:44:c4:4a:35:53:6e:bb: 64:97:d5:8a:6f:69:a6:3d:4e:28:5a:67:f5:e5:6a:03:a3:44: 80:1b:94:30:22:d3:8e:c4:d6:3c:c1:3a:37:40:f3:76:35:35: 47:be:dc:04:c2:4e:b4:8e:1b:2b:93:fe:c9:f0:a3:83:e3:14: 12:d5:d1:28:07:66:c5:0f:93:29:13:16:9d:9c:7d:97:77:ee: cf:36:e8:35:fd:22:7d:9c:16:da:1a:38:1e:76:16:13:0b:38: f9:4c:49:ac:71:3c:2b:04:4a:ea:ab:7e:ad:2b:0f:76:7b:17: 5d:2e:89:01:91:29:59:b0:9b:9b:20:d3:a4:e8:da:c1:a6:87: b7:ce:61:ca:e8:d9:a2:55:a6:a4:3a:8f:79:bd:9f:77:38:ab: 7f:e9:a3:54:e3:3c:a1:53:7f:a0:8a:61:4e:a9:ca:83:b1:9d: 6a:53:c8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WT8lYXoCsHlsOsr6BwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjYwMTI1MjEwMDM1WhcNMjYwMTI2MjEwMDM1WjAzMTEwLwYDVQQD EyhjMmUzNTM5NjQ5ZWYxZjkwYTA0NjI3M2E0YmM5NTk0M2Y0MmI5YTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYrsqwqaj49vqeM7yjqwcrJDUYpg BV6LZcCOPOhz8Per1CKAoGrODsLmKAR5uDyP2+n3vlRzGryqeD4D4f8VvGiFyHkM z0QO7FQygMtysJqLiqXNh4l3marqgm0xQgb3WMe4XoUsvjRXax/2TNP0DaQ8ZoM7 bb2Valb8CWQCi0WAQkJm/05Oql4doTJnrcacav5UasCS91SShDM+1ngvoOVZACSv ivRkhgnqpNfWUiyJ19KVcfUXBx1ewDE4F9ska6x1w7zFFnZpLgZIFVPS0yhoy5OI 7tJCwvqMcgNlYWaDZVsDVLeJWcia2Dl8eWfrAw86Isagyeh8BR+JQ1yM+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLjU5ZJ7x+QoEYnOkvJWUP0K5oKMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWbs+TSU jOJUoNaVzwd4cMHYs4oThSV8M9zFtf0D7BO7X8cjyXZqR5Z2yJk2ikk/G+9k01D0 0WJJNz9GBy7BB164dwC4yHeUQEQP41BUirN9R5xExEo1U267ZJfVim9ppj1OKFpn 9eVqA6NEgBuUMCLTjsTWPME6N0DzdjU1R77cBMJOtI4bK5P+yfCjg+MUEtXRKAdm xQ+TKRMWnZx9l3fuzzboNf0ifZwW2ho4HnYWEws4+UxJrHE8KwRK6qt+rSsPdnsX XS6JAZEpWbCbmyDTpOjawaaHt85hyujZolWmpDqPeb2fdzirf+mjVOM8oVN/oIph TqnKg7GdalPImQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:22 2026 by rpki-client