This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft File: 4336E008jUaNzls3Q1-Z4yPa4Og.mft (raw, json) Hash identifier: 5/X5P2AHLW5NPk0CoXVXwmGGNsOWWrZGGiefgEDwKOA= Subject key identifier: 26:86:AF:9F:8C:FF:A3:D3:C3:4B:02:3E:DD:63:EC:FD:3C:17:B9:DB Authority key identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 Certificate issuer: /CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Certificate serial: 019BF462BE200265B842C84B07CB65739E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft Manifest number: 7F Signing time: Sun 25 Jan 2026 09:01:10 +0000 Manifest this update: Sun 25 Jan 2026 09:01:10 +0000 Manifest next update: Mon 26 Jan 2026 09:01:10 +0000 Files and hashes: 1: 4336E008jUaNzls3Q1-Z4yPa4Og.crl (hash: uKerglgk3JPIy67p8UlObMCYWZDaCSXRLhVOzBiH+CU=) 2: FRuRXxuNQm-JvyXERoW5thoxpcA.roa (hash: hsEvgyVR3TbSFnQqvOe0YaHjtr8cJR2KhsCKJEMysHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:be:20:02:65:b8:42:c8:4b:07:cb:65:73:9e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Validity Not Before: Jan 25 09:01:10 2026 GMT Not After : Jan 26 09:01:10 2026 GMT Subject: CN=2686af9f8cffa3d3c34b023edd63ecfd3c17b9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:16:c5:af:f3:52:e9:a3:18:6c:cd:0f:c2: 47:b5:96:b1:62:d8:78:3a:da:fc:04:c4:25:bc:66: 0f:dd:8c:fb:6f:58:bc:a7:36:4a:24:49:d1:db:7d: ff:75:b4:e8:64:f1:93:16:c7:82:12:82:8c:a3:6b: ba:83:ff:f2:d6:cd:13:5e:7c:b3:f5:26:c0:6f:46: 39:c3:d6:38:a9:e9:e1:af:01:c1:d0:a7:f1:53:1e: dc:58:fe:b1:61:e0:fe:d4:1c:c3:5b:9b:4c:ba:50: f6:54:e9:73:12:60:e4:de:36:91:5f:fd:ee:46:1e: d1:2b:bf:ed:f2:3a:0f:f2:5b:c6:35:9f:5f:65:fd: b9:52:be:30:9d:24:03:34:2f:d3:a1:eb:a0:7f:c2: 70:e8:32:f9:24:ad:7b:2d:da:00:57:32:36:fe:d4: 81:ba:49:dc:1f:a7:79:28:38:17:e9:1a:42:e4:da: eb:f0:08:14:df:17:13:5d:ed:7c:33:ac:82:44:3a: 76:de:82:9c:bc:8c:16:7c:da:40:09:c6:d3:1e:a7: 4b:9f:0d:25:97:c7:92:18:18:d5:3b:bc:e3:ca:3d: bd:f0:e1:b7:18:f7:36:ed:d7:a1:19:a7:6f:a1:7c: 4c:e9:fe:99:f5:d2:cd:22:0e:08:40:f8:91:81:db: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:AF:9F:8C:FF:A3:D3:C3:4B:02:3E:DD:63:EC:FD:3C:17:B9:DB X509v3 Authority Key Identifier: keyid:E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:13:d0:de:24:fc:23:8b:52:8d:7d:04:74:d6:53:b3:61:5d: 7f:c3:97:14:1a:49:70:2f:94:a9:a6:8a:17:ab:22:79:94:d8: 1e:23:d7:d8:b2:ae:c6:5f:ce:89:c9:58:64:c5:a3:3a:44:a5: 21:f4:ab:c6:85:e2:af:6d:95:a4:e8:39:24:e1:b5:7b:0f:62: 6b:de:c0:34:c7:1d:c4:79:f9:01:4a:11:52:9a:2e:61:b0:54: 8e:e1:71:e9:ed:05:16:a1:19:f5:ac:de:e9:93:ab:71:aa:fb: 48:9d:37:21:25:9a:9d:28:96:32:4d:3b:38:76:68:d7:1f:b6: 3a:64:29:1b:23:25:a6:65:42:e4:72:d5:ad:58:62:f0:38:2e: 8b:2e:4c:78:f8:16:62:2c:46:f9:63:ec:28:33:25:be:db:cf: db:50:16:c2:1a:6a:b7:b7:3e:d6:63:1c:0d:1d:45:f4:21:74: a9:7f:ca:12:9e:8d:a9:3a:47:a0:34:35:87:d7:47:6f:61:86: 0b:34:0f:92:15:16:98:c1:47:9b:2b:3d:a7:4d:fb:b1:0c:82: 9f:36:26:94:a2:d5:13:e6:99:04:12:79:52:f2:f7:85:11:84: dc:04:a9:56:ae:2a:54:10:1a:a9:b3:c7:65:34:4d:a1:c7:26: 4e:7f:d6:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yr4gAmW4QshLB8tlc54PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2RmYTEzNGQzYzhkNDY4ZGNlNWIzNzQzNWY5OWUzMjNk YWUwZTgwHhcNMjYwMTI1MDkwMTEwWhcNMjYwMTI2MDkwMTEwWjAzMTEwLwYDVQQD EygyNjg2YWY5ZjhjZmZhM2QzYzM0YjAyM2VkZDYzZWNmZDNjMTdiOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qMWxa/zUumjGGzND8JHtZaxYth4 Otr8BMQlvGYP3Yz7b1i8pzZKJEnR233/dbToZPGTFseCEoKMo2u6g//y1s0TXnyz 9SbAb0Y5w9Y4qenhrwHB0KfxUx7cWP6xYeD+1BzDW5tMulD2VOlzEmDk3jaRX/3u Rh7RK7/t8joP8lvGNZ9fZf25Ur4wnSQDNC/Toeugf8Jw6DL5JK17LdoAVzI2/tSB ukncH6d5KDgX6RpC5Nrr8AgU3xcTXe18M6yCRDp23oKcvIwWfNpACcbTHqdLnw0l l8eSGBjVO7zjyj298OG3GPc27dehGadvoXxM6f6Z9dLNIg4IQPiRgdvkEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaGr5+M/6PTw0sCPt1j7P08F7nbMB8GA1UdIwQY MBaAFON9+hNNPI1Gjc5bN0NfmeMj2uDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjct NWY0YTcwNzEyYzIzLzEvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjctNWY0YTcwNzEyYzIz LzEvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxPQ3iT8 I4tSjX0EdNZTs2Fdf8OXFBpJcC+UqaaKF6sieZTYHiPX2LKuxl/OiclYZMWjOkSl IfSrxoXir22VpOg5JOG1ew9ia97ANMcdxHn5AUoRUpouYbBUjuFx6e0FFqEZ9aze 6ZOrcar7SJ03ISWanSiWMk07OHZo1x+2OmQpGyMlpmVC5HLVrVhi8Dguiy5MePgW YixG+WPsKDMlvtvP21AWwhpqt7c+1mMcDR1F9CF0qX/KEp6NqTpHoDQ1h9dHb2GG CzQPkhUWmMFHmys9p037sQyCnzYmlKLVE+aZBBJ5UvL3hRGE3ASpVq4qVBAaqbPH ZTRNoccmTn/WFA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:58 2026 by rpki-client