This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json) Hash identifier: KgAuuSzKZepv14Vzrw8NPn0TRBnU7YskebRMS8cVj+s= Subject key identifier: 7F:A7:BA:9B:CB:BD:7B:2E:AF:55:A4:AC:EC:C1:0E:E7:E2:24:8C:24 Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Certificate serial: 019BF507A46C22C469C2357F2A95E8FF41EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft Manifest number: 140C Signing time: Sun 25 Jan 2026 12:01:17 +0000 Manifest this update: Sun 25 Jan 2026 12:01:17 +0000 Manifest next update: Mon 26 Jan 2026 12:01:17 +0000 Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: 52TaU9zxKkuuTU9WdlRZXEiM+RMlG8HdWATmPGXG+UA=) 2: QpTGyhEqHx6901xnQ91Zzt7qUHE.roa (hash: YchmT807E93vtUCwowps9RxjRDg1qTobGuNKmeL1H4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:a4:6c:22:c4:69:c2:35:7f:2a:95:e8:ff:41:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Validity Not Before: Jan 25 12:01:17 2026 GMT Not After : Jan 26 12:01:17 2026 GMT Subject: CN=7fa7ba9bcbbd7b2eaf55a4acecc10ee7e2248c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:cd:6d:15:00:9b:2b:e8:ae:71:0d:68:44: b6:df:32:a4:b4:ee:d4:8c:36:50:62:fc:b1:4f:9d: 1e:86:24:40:ec:b6:3c:84:39:ad:7b:b8:4f:d8:ed: 4b:79:25:db:20:c6:c2:4d:9c:40:d7:95:47:8f:5a: 43:2e:fd:2c:a6:b6:67:62:68:b3:45:25:c0:07:94: 1d:a7:85:23:67:fd:74:e5:2d:1c:65:1d:14:ea:86: 40:f5:f4:37:b8:d6:e5:4b:e3:9f:91:eb:76:e5:74: 56:5f:2e:b8:4e:c7:61:94:42:fd:d8:6d:81:bb:99: fb:23:4d:81:16:e6:b4:d8:ca:b2:87:36:4b:59:f6: 79:ea:70:b2:f8:f8:0a:2a:9e:4e:57:23:53:59:2a: f4:fb:f1:57:60:0b:e8:a7:df:3c:ff:55:2a:e1:77: 2f:88:9f:ad:e4:bf:b6:75:8d:20:9d:1a:c2:66:80: 4d:38:1f:ba:d8:c0:0f:a6:65:c1:74:a2:c1:db:1f: c6:5c:03:4b:c0:83:65:c1:ff:fb:8e:f0:74:2c:13: e6:44:30:d2:85:8e:5a:14:99:b1:7f:bb:95:5c:0f: f2:e7:3b:8d:e2:53:d1:ca:0b:07:61:ae:49:31:6e: af:ea:62:17:8e:a6:ce:f6:36:90:e8:3b:c6:e7:c8: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A7:BA:9B:CB:BD:7B:2E:AF:55:A4:AC:EC:C1:0E:E7:E2:24:8C:24 X509v3 Authority Key Identifier: keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:86:16:07:2b:e4:3e:23:67:eb:52:2a:8e:cb:6a:26:77:fd: ab:99:8c:55:e3:8e:30:7a:7c:83:5f:46:50:48:9f:8e:5c:38: 19:bb:f8:5f:cd:a7:a5:25:e9:da:3e:1a:f9:1a:36:33:cc:52: 08:a6:fb:66:ae:c4:88:07:57:ba:cc:1d:49:ec:91:56:02:55: a5:7b:aa:a1:7e:41:90:cb:9f:57:5a:98:94:51:ac:7c:ec:bb: 31:74:10:ab:96:29:4a:d0:05:e3:a3:d2:9c:fe:3e:54:e7:5a: 0c:bd:69:53:38:49:f0:c4:85:6e:fc:c6:9d:10:64:6a:b4:cb: 16:92:9d:58:1a:88:dc:64:29:29:4e:72:4e:d3:c7:67:30:25: cd:86:b0:72:c8:4c:36:91:a4:98:53:15:a2:20:1e:a5:cf:f8: f2:dc:5f:1e:7e:c0:55:da:36:04:f4:0a:43:f2:cb:9f:3e:c5: df:54:92:21:a9:67:3d:f9:47:8a:c9:22:2c:19:1f:96:30:58: 93:0a:1c:d3:8c:74:a5:82:58:24:2e:18:8d:26:77:1a:77:af: ae:71:20:32:0a:ae:39:47:42:1a:cf:b4:61:7e:a9:ae:a3:ad: 04:66:eb:c3:d8:cb:53:4e:ef:c4:c1:81:bf:43:5f:6f:71:ba: a5:41:e3:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6RsIsRpwjV/KpXo/0HuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw NWIyZjAwHhcNMjYwMTI1MTIwMTE3WhcNMjYwMTI2MTIwMTE3WjAzMTEwLwYDVQQD Eyg3ZmE3YmE5YmNiYmQ3YjJlYWY1NWE0YWNlY2MxMGVlN2UyMjQ4YzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKfNbRUAmyvornENaES23zKktO7U jDZQYvyxT50ehiRA7LY8hDmte7hP2O1LeSXbIMbCTZxA15VHj1pDLv0sprZnYmiz RSXAB5Qdp4UjZ/105S0cZR0U6oZA9fQ3uNblS+Ofket25XRWXy64TsdhlEL92G2B u5n7I02BFua02MqyhzZLWfZ56nCy+PgKKp5OVyNTWSr0+/FXYAvop988/1Uq4Xcv iJ+t5L+2dY0gnRrCZoBNOB+62MAPpmXBdKLB2x/GXANLwINlwf/7jvB0LBPmRDDS hY5aFJmxf7uVXA/y5zuN4lPRygsHYa5JMW6v6mIXjqbO9jaQ6DvG58j9JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+nupvLvXsur1WkrOzBDufiJIwkMB8GA1UdIwQY MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIYWByvk PiNn61IqjstqJnf9q5mMVeOOMHp8g19GUEifjlw4Gbv4X82npSXp2j4a+Ro2M8xS CKb7Zq7EiAdXuswdSeyRVgJVpXuqoX5BkMufV1qYlFGsfOy7MXQQq5YpStAF46PS nP4+VOdaDL1pUzhJ8MSFbvzGnRBkarTLFpKdWBqI3GQpKU5yTtPHZzAlzYawcshM NpGkmFMVoiAepc/48txfHn7AVdo2BPQKQ/LLnz7F31SSIalnPflHiskiLBkfljBY kwoc04x0pYJYJC4YjSZ3GnevrnEgMgquOUdCGs+0YX6prqOtBGbrw9jLU07vxMGB v0Nfb3G6pUHjQA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:33 2026 by rpki-client