This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json) Hash identifier: HZVWsy3mGBfIexc5FA+Ss39u+gQbvkgq6sPmSqhqqvM= Subject key identifier: B3:D2:9A:FA:20:38:ED:3F:B8:50:3E:CC:59:79:3B:DF:B9:35:99:A1 Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90 Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390 Certificate serial: 019BF808914692BB49C9010DDD4113A5410F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft Manifest number: 10F8 Signing time: Mon 26 Jan 2026 02:01:09 +0000 Manifest this update: Mon 26 Jan 2026 02:01:09 +0000 Manifest next update: Tue 27 Jan 2026 02:01:09 +0000 Files and hashes: 1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=) 2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: ybqMkS5UGN4WvYA73+ugipJACF6dxT0bcuiAOhLu8cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:91:46:92:bb:49:c9:01:0d:dd:41:13:a5:41:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390 Validity Not Before: Jan 26 02:01:09 2026 GMT Not After : Jan 27 02:01:09 2026 GMT Subject: CN=b3d29afa2038ed3fb8503ecc59793bdfb93599a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c9:a7:45:17:c6:2c:b5:84:71:26:03:5b:d8: c6:c4:90:b5:5e:b6:39:8f:09:36:3a:31:8c:12:3a: 79:0a:4c:ce:22:57:49:d0:cf:19:01:28:e0:01:e8: dc:b0:32:2f:fe:dd:7b:d3:ea:eb:ea:61:09:9f:84: 22:67:87:4b:04:f6:88:35:86:08:f7:8f:77:8b:c9: 5f:db:a6:a9:a6:04:25:83:e5:a5:b1:0f:8c:f0:c8: e3:c3:58:39:3f:25:27:3c:9f:84:83:11:9e:84:42: ae:91:16:86:2a:16:9a:ca:53:2f:9b:2f:0c:00:06: 82:f1:e6:73:95:51:f0:4b:de:8a:0a:ac:04:94:ba: 62:fc:24:91:87:b8:6a:50:fd:a4:a9:0a:33:75:c1: 93:59:18:25:ad:8c:72:72:7f:1c:1e:1c:c5:0a:56: f1:0f:db:20:66:cd:a1:7e:c3:f5:e5:08:bb:4e:f8: e4:0f:e5:02:32:ad:05:18:d2:db:12:0e:f0:87:8e: fe:4f:e1:ab:83:94:2e:4e:06:b1:eb:29:ef:89:fd: e4:6b:b4:6c:ee:85:79:29:1d:58:cf:c4:9a:c2:c4: d4:14:23:a4:7c:cc:0d:18:30:6f:f6:86:50:91:44: a2:2d:da:97:c4:11:8c:4e:5a:a6:3c:d4:20:1d:5a: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D2:9A:FA:20:38:ED:3F:B8:50:3E:CC:59:79:3B:DF:B9:35:99:A1 X509v3 Authority Key Identifier: keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b0:f8:6c:aa:16:09:61:cd:c9:5e:ef:8b:6a:e6:96:ff:58: d9:ff:15:2c:91:07:03:32:56:48:ce:ff:67:47:b6:00:85:64: 49:1b:25:e3:37:92:65:d2:5a:dd:92:08:20:82:d5:a0:38:0b: aa:2d:e2:8e:b7:7a:36:0c:2f:f6:39:c3:de:04:2c:88:3f:e7: e9:82:b2:61:8c:c1:a4:1a:3c:92:a6:7a:73:a4:0f:0d:48:08: ce:14:5a:e3:ac:3e:c8:72:ca:69:d0:4a:2c:2f:06:6e:dc:e8: 4b:86:04:cf:91:4b:c8:bd:d5:c1:47:3f:b7:3c:58:22:25:db: 69:9b:51:ae:31:40:51:a6:2b:f1:92:6c:42:45:32:47:4d:cf: 9d:fc:52:b3:3e:20:a2:70:69:93:e1:2c:77:48:74:fa:c1:73: fa:b5:80:6a:3e:dc:30:af:4d:40:d9:de:45:67:1a:0e:53:9c: c0:a1:f4:4c:f1:56:bb:45:1a:61:92:f4:bd:39:49:bb:85:c9: dc:37:1a:46:a9:02:db:66:7c:3d:93:32:11:b1:99:65:43:29: 52:7c:54:13:93:dc:b4:5e:93:8e:bd:69:3e:5b:65:7e:7e:60: d0:f2:36:55:46:b2:66:46:50:04:5b:5f:a0:4f:16:1e:05:62: 51:f1:db:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJFGkrtJyQEN3UETpUEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIwOGIxMjljNTNlODdjM2YwZDBlZDFiY2E4NTczMDE0 MGYzOTAwHhcNMjYwMTI2MDIwMTA5WhcNMjYwMTI3MDIwMTA5WjAzMTEwLwYDVQQD EyhiM2QyOWFmYTIwMzhlZDNmYjg1MDNlY2M1OTc5M2JkZmI5MzU5OWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7smnRRfGLLWEcSYDW9jGxJC1XrY5 jwk2OjGMEjp5CkzOIldJ0M8ZASjgAejcsDIv/t170+rr6mEJn4QiZ4dLBPaINYYI 9493i8lf26appgQlg+WlsQ+M8Mjjw1g5PyUnPJ+EgxGehEKukRaGKhaaylMvmy8M AAaC8eZzlVHwS96KCqwElLpi/CSRh7hqUP2kqQozdcGTWRglrYxycn8cHhzFClbx D9sgZs2hfsP15Qi7TvjkD+UCMq0FGNLbEg7wh47+T+Grg5QuTgax6ynvif3ka7Rs 7oV5KR1Yz8SawsTUFCOkfMwNGDBv9oZQkUSiLdqXxBGMTlqmPNQgHVow1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPSmvogOO0/uFA+zFl5O9+5NZmhMB8GA1UdIwQY MBaAFP+CCLEpxT6Hw/DQ7RvKhXMBQPOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMt NDAxNTNjNWQwYTQ3LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMtNDAxNTNjNWQwYTQ3 LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrD4bKoW CWHNyV7vi2rmlv9Y2f8VLJEHAzJWSM7/Z0e2AIVkSRsl4zeSZdJa3ZIIIILVoDgL qi3ijrd6Ngwv9jnD3gQsiD/n6YKyYYzBpBo8kqZ6c6QPDUgIzhRa46w+yHLKadBK LC8GbtzoS4YEz5FLyL3VwUc/tzxYIiXbaZtRrjFAUaYr8ZJsQkUyR03PnfxSsz4g onBpk+Esd0h0+sFz+rWAaj7cMK9NQNneRWcaDlOcwKH0TPFWu0UaYZL0vTlJu4XJ 3DcaRqkC22Z8PZMyEbGZZUMpUnxUE5PctF6Tjr1pPltlfn5g0PI2VUayZkZQBFtf oE8WHgViUfHbsg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:53:23 2026 by rpki-client