This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json) Hash identifier: tpypYxh7c3Mev7KgHGKTPYhJRkKE5jeqet/nl1524kU= Subject key identifier: 22:D8:1A:5A:44:50:5D:3E:9C:0B:2D:1A:E6:2A:3F:9C:EF:0B:93:6B Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8 Certificate serial: 019BF61A061F422131B5A1F6F8566150C358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft Manifest number: 153F Signing time: Sun 25 Jan 2026 17:00:59 +0000 Manifest this update: Sun 25 Jan 2026 17:00:59 +0000 Manifest next update: Mon 26 Jan 2026 17:00:59 +0000 Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: jBSDejDCda/8Wlcxe1JNxWnLxtadW4TKj6zwAn327nM=) 2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:06:1f:42:21:31:b5:a1:f6:f8:56:61:50:c3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8 Validity Not Before: Jan 25 17:00:59 2026 GMT Not After : Jan 26 17:00:59 2026 GMT Subject: CN=22d81a5a44505d3e9c0b2d1ae62a3f9cef0b936b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:47:db:15:7c:4c:9e:8a:c6:47:e1:43:97: 75:9e:5c:0c:11:06:38:71:62:84:c4:64:76:0c:72: 9d:50:25:7f:67:f1:9c:2d:b3:e1:83:9b:36:c2:6a: 66:bd:2e:0f:c8:a9:0e:ee:5a:31:63:54:76:40:70: bb:8e:f0:af:88:d6:69:31:4e:24:f3:09:6b:b7:39: c4:36:f0:70:ef:69:a1:4a:47:e0:e4:1d:36:b9:ea: 83:dc:10:b1:80:06:c1:ec:f5:49:86:5b:7c:d1:56: 76:68:a7:59:84:35:d2:d3:ad:da:a5:d4:e5:1f:8e: 28:c8:be:ba:97:e9:65:11:f7:64:0f:d2:77:40:6c: 30:73:60:54:0d:61:04:39:e3:83:3c:4f:db:04:35: fe:55:bd:1c:49:b1:62:60:ab:9c:30:c8:3b:04:9a: 3f:75:04:e4:61:2a:b4:ac:46:0e:48:e8:57:ea:0f: ca:57:25:a7:cb:b3:b6:fb:f3:f1:a2:bb:40:d9:0e: 04:1a:d8:8c:97:4a:5f:22:2b:16:57:47:74:b1:9c: 3c:3d:f9:e3:7c:e4:f4:52:c0:f9:f9:29:ef:a7:01: a3:9e:3e:1a:4a:39:34:6e:d4:0f:9a:00:09:83:fe: b5:df:55:1b:59:3c:a4:ca:2c:b3:9a:a4:71:7a:05: b3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:1A:5A:44:50:5D:3E:9C:0B:2D:1A:E6:2A:3F:9C:EF:0B:93:6B X509v3 Authority Key Identifier: keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e1:c8:1d:3a:7e:33:e2:65:c5:de:fd:b4:80:61:29:e6:8a: b1:0f:ec:95:ed:1c:42:38:a6:fc:da:c1:7c:dc:3c:02:6c:fd: 1a:e5:9e:d8:06:ba:a4:6d:42:02:97:76:71:6b:17:1f:f7:76: 8e:0c:2b:98:ef:c1:fe:5b:a4:dc:89:5b:f9:08:8e:20:72:cd: d5:74:71:37:94:eb:24:a2:71:da:0c:2b:81:6d:c4:44:ff:7e: bf:bb:d5:a1:1a:c3:16:7b:a6:54:93:00:85:d3:2a:e9:9b:8a: 90:63:e5:ec:49:51:58:e6:04:88:de:cb:6a:14:50:cd:cf:1f: 00:e7:d4:a8:6b:50:6e:c2:00:63:07:ec:47:73:49:e1:6e:13: d5:1f:9b:ad:3a:f9:be:f6:61:6b:33:c2:5b:52:b5:a4:09:c6: ce:aa:b4:1b:9c:c2:62:5e:81:cc:95:41:01:9e:e3:2d:da:26: 30:20:63:ed:d7:ff:65:67:bf:d4:da:ec:91:b9:02:c5:fd:36: 8d:9d:3a:bb:6a:c3:dc:76:3d:1a:bc:ac:3c:2e:8d:06:e4:18: cc:d7:7e:83:27:e2:a6:9d:5c:75:16:92:6b:f4:b1:45:3a:b9: f8:64:cf:ae:ae:cd:ab:f0:6e:fb:84:4e:cf:96:b2:75:5c:c9: 48:4c:4d:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GgYfQiExtaH2+FZhUMNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1 YWE2YTgwHhcNMjYwMTI1MTcwMDU5WhcNMjYwMTI2MTcwMDU5WjAzMTEwLwYDVQQD EygyMmQ4MWE1YTQ0NTA1ZDNlOWMwYjJkMWFlNjJhM2Y5Y2VmMGI5MzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfhH2xV8TJ6KxkfhQ5d1nlwMEQY4 cWKExGR2DHKdUCV/Z/GcLbPhg5s2wmpmvS4PyKkO7loxY1R2QHC7jvCviNZpMU4k 8wlrtznENvBw72mhSkfg5B02ueqD3BCxgAbB7PVJhlt80VZ2aKdZhDXS063apdTl H44oyL66l+llEfdkD9J3QGwwc2BUDWEEOeODPE/bBDX+Vb0cSbFiYKucMMg7BJo/ dQTkYSq0rEYOSOhX6g/KVyWny7O2+/PxortA2Q4EGtiMl0pfIisWV0d0sZw8Pfnj fOT0UsD5+SnvpwGjnj4aSjk0btQPmgAJg/6131UbWTykyiyzmqRxegWzxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLYGlpEUF0+nAstGuYqP5zvC5NrMB8GA1UdIwQY MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0 LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouHIHTp+ M+Jlxd79tIBhKeaKsQ/sle0cQjim/NrBfNw8Amz9GuWe2Aa6pG1CApd2cWsXH/d2 jgwrmO/B/luk3Ilb+QiOIHLN1XRxN5TrJKJx2gwrgW3ERP9+v7vVoRrDFnumVJMA hdMq6ZuKkGPl7ElRWOYEiN7LahRQzc8fAOfUqGtQbsIAYwfsR3NJ4W4T1R+brTr5 vvZhazPCW1K1pAnGzqq0G5zCYl6BzJVBAZ7jLdomMCBj7df/ZWe/1NrskbkCxf02 jZ06u2rD3HY9GrysPC6NBuQYzNd+gyfipp1cdRaSa/SxRTq5+GTPrq7Nq/Bu+4RO z5aydVzJSExNeg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:44 2026 by rpki-client