This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json) Hash identifier: AHVozXNK3lEoeX/0c+SMxiu+2CGdS+m3qjPVXcAn2Ew= Subject key identifier: 7D:75:9D:3C:FE:DF:B6:BC:41:B9:81:68:09:D7:25:DD:5D:5A:23:51 Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Certificate serial: 019BF386E3BDBEEB57B860D177CA44BAAC6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft Manifest number: 09F9 Signing time: Sun 25 Jan 2026 05:01:02 +0000 Manifest this update: Sun 25 Jan 2026 05:01:02 +0000 Manifest next update: Mon 26 Jan 2026 05:01:02 +0000 Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: drTrkonanq7AOiLVOWOYbzG/H0GvwET2vzbaGwPAY64=) 2: FRaMmOwBTjIIfxBPwTcTpOC8yWc.roa (hash: +/2H7w7SpASfiSQI01UVF2TwrgFjuhQ5MMGsI9JlGrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:e3:bd:be:eb:57:b8:60:d1:77:ca:44:ba:ac:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Validity Not Before: Jan 25 05:01:02 2026 GMT Not After : Jan 26 05:01:02 2026 GMT Subject: CN=7d759d3cfedfb6bc41b9816809d725dd5d5a2351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:e5:d0:7c:72:15:b4:5b:83:55:42:3a:4e: f7:41:03:5d:4e:ae:88:15:51:36:08:b4:a0:15:72: a0:6b:29:1f:d8:96:a9:d7:43:47:ca:db:c1:b0:48: 61:ad:9a:dd:9c:90:c0:8e:52:4f:bb:7c:45:7c:b1: 4f:80:94:d1:9a:cd:6d:18:2f:da:d5:f5:45:7d:f7: ff:eb:69:5c:cf:d8:33:bc:9f:45:d1:23:d4:7c:ad: e0:b0:c6:9a:db:b5:43:2a:7e:ab:11:5c:c2:d7:93: 22:21:78:8d:c1:ca:a4:39:59:65:63:9d:15:15:8d: 2a:3d:c9:38:13:c0:12:79:38:8d:87:d2:02:cf:c5: 94:b4:84:0a:1d:72:59:86:e0:f9:9a:e0:f8:ab:a6: e4:ae:ee:34:f8:98:b5:59:1e:52:e6:a8:bd:2c:e5: f0:33:a3:14:ac:12:ae:d2:0d:6c:43:83:b5:88:97: 0d:16:bf:58:d4:8f:ce:47:45:d0:80:5f:86:89:16: fc:e2:19:a8:b1:ae:6c:c7:71:60:b5:a4:71:7e:19: a1:dc:78:83:59:c6:a9:3a:31:38:c9:18:44:9c:dd: fd:ec:8c:28:c1:b6:bb:b4:c6:96:2a:f4:d5:f2:15: 25:02:d4:bb:6e:af:4f:07:ca:a2:28:29:24:97:6f: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:9D:3C:FE:DF:B6:BC:41:B9:81:68:09:D7:25:DD:5D:5A:23:51 X509v3 Authority Key Identifier: keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:75:66:12:7c:aa:7e:f9:62:28:c9:69:08:d1:ca:79:62:bd: 46:f4:e3:13:70:f7:69:74:aa:64:1c:ec:4b:fd:19:1a:09:fd: c0:22:00:26:26:89:93:ff:70:d1:a9:ba:ae:51:d9:c4:27:6e: 9c:ae:ab:0c:8b:46:d6:bf:a9:13:a1:96:40:a0:5d:12:40:33: 09:04:13:f9:8c:8d:56:39:9f:c9:38:2f:66:85:7f:9d:9a:9b: 02:ad:b4:87:37:1f:97:90:4c:67:dd:cf:c4:44:80:60:4f:08: 64:b3:8d:ae:38:c6:a3:c9:64:cb:43:23:76:6e:77:ca:0b:33: f3:22:83:65:b6:eb:ca:5b:d1:35:ef:f1:78:c3:ed:70:9f:4e: c3:b7:54:4c:a1:12:b9:c4:1c:c1:c3:18:91:4d:cf:95:30:3f: 79:9d:83:49:2e:90:10:81:0e:f2:81:22:bd:a9:a2:e4:96:4f: 38:16:10:cb:fe:57:cf:59:be:cd:95:9e:c5:8f:78:20:e9:42: 4b:74:c6:37:50:bb:a7:c2:58:57:60:3f:11:27:93:e0:54:20: d8:17:5a:71:49:79:ec:9d:89:aa:ec:a5:7c:51:01:81:47:8f: a0:ec:29:fc:93:57:21:13:6f:1c:67:dd:2f:29:a7:68:96:f4: 13:1f:b6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhuO9vutXuGDRd8pEuqxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk NzJmODkwHhcNMjYwMTI1MDUwMTAyWhcNMjYwMTI2MDUwMTAyWjAzMTEwLwYDVQQD Eyg3ZDc1OWQzY2ZlZGZiNmJjNDFiOTgxNjgwOWQ3MjVkZDVkNWEyMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus3l0HxyFbRbg1VCOk73QQNdTq6I FVE2CLSgFXKgaykf2Jap10NHytvBsEhhrZrdnJDAjlJPu3xFfLFPgJTRms1tGC/a 1fVFfff/62lcz9gzvJ9F0SPUfK3gsMaa27VDKn6rEVzC15MiIXiNwcqkOVllY50V FY0qPck4E8ASeTiNh9ICz8WUtIQKHXJZhuD5muD4q6bkru40+Ji1WR5S5qi9LOXw M6MUrBKu0g1sQ4O1iJcNFr9Y1I/OR0XQgF+GiRb84hmosa5sx3FgtaRxfhmh3HiD WcapOjE4yRhEnN397Iwowba7tMaWKvTV8hUlAtS7bq9PB8qiKCkkl28FSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH11nTz+37a8QbmBaAnXJd1dWiNRMB8GA1UdIwQY MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt OGNhNmMzM2QxNGJiLzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnVmEnyq fvliKMlpCNHKeWK9RvTjE3D3aXSqZBzsS/0ZGgn9wCIAJiaJk/9w0am6rlHZxCdu nK6rDItG1r+pE6GWQKBdEkAzCQQT+YyNVjmfyTgvZoV/nZqbAq20hzcfl5BMZ93P xESAYE8IZLONrjjGo8lky0Mjdm53ygsz8yKDZbbrylvRNe/xeMPtcJ9Ow7dUTKES ucQcwcMYkU3PlTA/eZ2DSS6QEIEO8oEivami5JZPOBYQy/5Xz1m+zZWexY94IOlC S3TGN1C7p8JYV2A/ESeT4FQg2BdacUl57J2JquylfFEBgUePoOwp/JNXIRNvHGfd LymnaJb0Ex+2dg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:01 2026 by rpki-client