This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json) Hash identifier: Mfag7EEcrJb/kKRcOmYUHzH02Su6r+uHS9o1RgmMIdE= Subject key identifier: 27:7E:23:F1:A1:74:71:AC:D8:60:9D:A9:9E:0E:37:8C:4B:00:C0:AB Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Certificate serial: 019BF72D3A53B2A77214C30375D15DF7DF19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft Manifest number: 10AA Signing time: Sun 25 Jan 2026 22:01:34 +0000 Manifest this update: Sun 25 Jan 2026 22:01:34 +0000 Manifest next update: Mon 26 Jan 2026 22:01:34 +0000 Files and hashes: 1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=) 2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=) 3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: 6DTIdLWJQPBFCjiuPXasgNzVqI6SfsvvfJ9Op4ktm+w=) 4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:3a:53:b2:a7:72:14:c3:03:75:d1:5d:f7:df:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Validity Not Before: Jan 25 22:01:34 2026 GMT Not After : Jan 26 22:01:34 2026 GMT Subject: CN=277e23f1a17471acd8609da99e0e378c4b00c0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:39:d7:36:72:77:bb:3f:a1:11:8c:7d:40: 25:a8:b9:f4:f3:69:48:e7:c7:2c:bd:08:7c:29:4d: 1c:c7:31:e4:74:cd:22:d6:50:17:fa:86:c6:09:47: d6:89:96:34:b1:88:f1:9e:98:71:d0:2b:88:d3:d3: e2:91:c7:c7:4c:9c:0a:a6:81:f3:f3:63:fd:40:6d: 73:c0:b9:4a:54:09:b2:dc:c6:d3:32:d0:81:de:e6: 0f:e1:10:2d:f3:3e:f5:12:f3:7c:37:c0:96:9e:9b: 8a:e7:66:ff:9e:06:b2:28:2a:29:c6:75:ee:b5:ff: 05:f0:3e:87:9f:30:b4:2b:ff:4b:19:d8:d2:fa:12: 94:86:a5:5a:e1:3d:44:92:bd:c1:c1:bf:ec:5e:8f: bc:8a:30:64:df:ba:4d:a1:12:71:57:27:dd:73:ae: e8:e7:ad:5b:50:b9:c9:b5:bd:11:4b:ac:bf:53:dd: 4f:94:a7:47:03:f3:bc:d3:26:55:05:67:1b:4d:ec: c2:88:c7:40:21:81:b1:0b:bf:ea:ae:70:8b:76:a7: 92:12:56:fe:31:b8:d0:45:a2:37:90:0a:e3:1c:88: 6f:69:2b:01:c9:ab:a2:e3:9b:1f:09:5f:49:a0:9a: 48:3e:91:2a:58:07:53:c0:40:a5:24:f6:d0:93:95: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7E:23:F1:A1:74:71:AC:D8:60:9D:A9:9E:0E:37:8C:4B:00:C0:AB X509v3 Authority Key Identifier: keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:7f:2b:7c:b1:6d:2f:19:17:d0:26:7e:e0:6b:6f:9c:be:d0: db:b2:05:9c:78:bd:5b:3e:eb:e4:e8:61:d6:22:75:c9:61:21: ce:77:f7:e6:ac:9f:35:32:0d:b9:3b:61:f0:be:af:46:4c:61: 3f:25:68:e4:81:64:37:5e:cb:94:8e:2f:d9:d9:51:af:d7:70: 7f:5d:f1:69:de:ad:00:1c:a5:48:2a:ee:b3:5b:91:33:55:11: 92:4a:d3:eb:c7:bc:c3:81:2d:18:70:40:19:64:7e:dd:9f:21: 7c:2b:a5:af:a5:01:a2:d1:03:cd:56:d6:90:54:39:9f:d7:81: 6d:91:cd:eb:31:7a:07:8d:90:5c:f5:b1:c0:2a:34:01:eb:a1: 27:4d:5a:46:07:ed:38:e7:4b:50:e0:42:35:21:ea:78:cd:89: 8b:8b:74:11:2f:f5:94:d7:21:b4:b3:a1:02:8a:49:77:4e:f9: 54:86:26:5b:3a:ad:ba:15:9f:79:f9:93:9d:3d:fa:6e:28:7d: 7f:b6:fc:ad:55:1c:6d:60:33:d7:2f:46:e3:62:1e:66:05:7c: c1:e1:03:83:92:33:47:47:bd:f2:95:57:ff:c4:89:48:ce:98: ea:83:72:67:3d:b4:50:74:7c:de:88:05:63:20:e3:57:74:6a: d7:91:66:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LTpTsqdyFMMDddFd998ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx ZmI0ZjIwHhcNMjYwMTI1MjIwMTM0WhcNMjYwMTI2MjIwMTM0WjAzMTEwLwYDVQQD EygyNzdlMjNmMWExNzQ3MWFjZDg2MDlkYTk5ZTBlMzc4YzRiMDBjMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX851zZyd7s/oRGMfUAlqLn082lI 58csvQh8KU0cxzHkdM0i1lAX+obGCUfWiZY0sYjxnphx0CuI09PikcfHTJwKpoHz 82P9QG1zwLlKVAmy3MbTMtCB3uYP4RAt8z71EvN8N8CWnpuK52b/ngayKCopxnXu tf8F8D6HnzC0K/9LGdjS+hKUhqVa4T1Ekr3Bwb/sXo+8ijBk37pNoRJxVyfdc67o 561bULnJtb0RS6y/U91PlKdHA/O80yZVBWcbTezCiMdAIYGxC7/qrnCLdqeSElb+ MbjQRaI3kArjHIhvaSsByaui45sfCV9JoJpIPpEqWAdTwEClJPbQk5X4/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd+I/GhdHGs2GCdqZ4ON4xLAMCrMB8GA1UdIwQY MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvH8rfLFt LxkX0CZ+4GtvnL7Q27IFnHi9Wz7r5Ohh1iJ1yWEhznf35qyfNTINuTth8L6vRkxh PyVo5IFkN17LlI4v2dlRr9dwf13xad6tABylSCrus1uRM1URkkrT68e8w4EtGHBA GWR+3Z8hfCulr6UBotEDzVbWkFQ5n9eBbZHN6zF6B42QXPWxwCo0AeuhJ01aRgft OOdLUOBCNSHqeM2Ji4t0ES/1lNchtLOhAopJd075VIYmWzqtuhWfefmTnT36bih9 f7b8rVUcbWAz1y9G42IeZgV8weEDg5IzR0e98pVX/8SJSM6Y6oNyZz20UHR83ogF YyDjV3Rq15FmWw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:51:10 2026 by rpki-client