This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json) Hash identifier: 5I1M56MXPCj9lQPHZ9FTjavHZVccJIoaM0D578SUMpY= Subject key identifier: CA:EA:ED:DB:04:12:05:71:E5:8B:57:87:A0:84:C7:FD:18:FB:A1:A8 Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940 Certificate serial: 019BF83F13717D5F753259506C9ACE37829C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 03:00:41 +0000 Manifest this update: Mon 26 Jan 2026 03:00:41 +0000 Manifest next update: Tue 27 Jan 2026 03:00:41 +0000 Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=) 2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: OnVEjBorAy2CgyNEqQGBuSsa9+HNPea/dRJ5u3yWvy8=) 3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:13:71:7d:5f:75:32:59:50:6c:9a:ce:37:82:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940 Validity Not Before: Jan 26 03:00:41 2026 GMT Not After : Jan 27 03:00:41 2026 GMT Subject: CN=caeaeddb04120571e58b5787a084c7fd18fba1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:16:3c:ed:e1:9f:fd:a9:73:99:74:88:11: 15:8d:b8:f3:81:b4:5e:2a:19:a4:e8:88:a8:30:88: 66:f2:f7:d3:4e:3d:5c:2f:bb:67:e1:7f:20:7a:6d: c6:90:08:61:9c:66:be:08:ef:ed:af:7a:9f:9a:59: 0e:37:da:76:6c:f4:af:7d:ed:68:f6:0c:2c:e1:01: 73:ed:21:35:40:34:cc:06:59:28:48:ca:15:43:ec: 4e:ba:ab:46:30:05:f0:16:f2:fa:7b:3a:32:cc:4e: 0a:cd:ac:a0:70:a0:2c:fc:8e:3e:ab:73:99:50:50: e2:06:aa:6d:7d:bf:31:0c:b6:ea:dc:e4:b3:a0:c6: d4:b6:a6:1c:f0:5a:f7:6d:f8:de:68:cb:58:82:04: d9:51:f8:89:e4:71:10:e0:93:1c:fa:5e:ae:a4:86: 06:ed:0d:af:b0:b2:b1:c6:91:d5:40:22:9e:04:5c: e9:03:e6:ba:f6:8e:a9:ea:27:65:cd:ee:2d:51:0f: e8:72:3b:4b:7d:20:ab:37:ed:fa:ac:af:5c:e8:95: bf:46:6e:c0:38:32:12:ea:4b:75:cc:bd:24:89:9c: f8:69:64:9a:e8:4c:4c:5c:04:40:85:9d:10:f3:4a: ed:57:35:ab:ac:b9:70:58:08:50:56:22:0c:48:77: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EA:ED:DB:04:12:05:71:E5:8B:57:87:A0:84:C7:FD:18:FB:A1:A8 X509v3 Authority Key Identifier: keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:74:35:9d:33:e7:6b:b4:a3:81:ad:76:42:c4:d3:46:be:54: b8:6e:6f:99:7d:fe:c6:88:be:ce:32:93:53:1f:05:70:de:32: 42:0a:bb:3e:63:04:4e:9a:fa:5c:b0:34:88:09:2e:ab:bc:19: 1f:ad:c9:d1:99:f6:a7:b5:ef:26:e1:4d:fe:e6:88:31:7b:d9: cf:16:78:18:3c:a2:bf:48:a7:24:eb:b2:b5:0c:3a:25:93:d3: 1f:9f:ff:01:b8:d6:ca:e9:2c:23:3a:dc:43:b4:88:c8:88:11: 6a:b4:12:ae:a9:e6:f3:f8:3b:b9:02:2c:a6:59:2b:95:ea:71: 4a:ea:63:16:03:ea:a2:66:a5:75:04:a9:32:2e:16:0d:d2:39: 6a:d9:48:21:c9:25:7a:1a:39:b7:3d:43:fc:e0:c5:6a:3d:7b: d2:c7:f7:1e:29:25:43:39:4e:44:e1:0a:bf:2a:23:9e:ca:be: a3:ee:cd:19:c6:78:b1:20:16:e0:6d:7a:37:57:84:4e:38:fc: 87:19:b2:0c:c9:89:2c:70:85:dd:7b:6f:10:ba:5b:35:52:d2: 70:0d:3f:67:04:cf:69:aa:77:c5:d5:c4:bd:55:3f:cc:df:b0: 26:68:30:27:cf:d4:ef:42:e3:92:16:11:4d:85:94:09:90:35: d5:97:8e:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PxNxfV91MllQbJrON4KcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1 M2Q5NDAwHhcNMjYwMTI2MDMwMDQxWhcNMjYwMTI3MDMwMDQxWjAzMTEwLwYDVQQD EyhjYWVhZWRkYjA0MTIwNTcxZTU4YjU3ODdhMDg0YzdmZDE4ZmJhMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfwWPO3hn/2pc5l0iBEVjbjzgbRe Khmk6IioMIhm8vfTTj1cL7tn4X8gem3GkAhhnGa+CO/tr3qfmlkON9p2bPSvfe1o 9gws4QFz7SE1QDTMBlkoSMoVQ+xOuqtGMAXwFvL6ezoyzE4KzaygcKAs/I4+q3OZ UFDiBqptfb8xDLbq3OSzoMbUtqYc8Fr3bfjeaMtYggTZUfiJ5HEQ4JMc+l6upIYG 7Q2vsLKxxpHVQCKeBFzpA+a69o6p6idlze4tUQ/ocjtLfSCrN+36rK9c6JW/Rm7A ODIS6kt1zL0kiZz4aWSa6ExMXARAhZ0Q80rtVzWrrLlwWAhQViIMSHfFiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrq7dsEEgVx5YtXh6CEx/0Y+6GoMB8GA1UdIwQY MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1 LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnQ1nTPn a7Sjga12QsTTRr5UuG5vmX3+xoi+zjKTUx8FcN4yQgq7PmMETpr6XLA0iAkuq7wZ H63J0Zn2p7XvJuFN/uaIMXvZzxZ4GDyiv0inJOuytQw6JZPTH5//AbjWyuksIzrc Q7SIyIgRarQSrqnm8/g7uQIsplkrlepxSupjFgPqomaldQSpMi4WDdI5atlIIckl eho5tz1D/ODFaj170sf3HiklQzlOROEKvyojnsq+o+7NGcZ4sSAW4G16N1eETjj8 hxmyDMmJLHCF3XtvELpbNVLScA0/ZwTPaap3xdXEvVU/zN+wJmgwJ8/U70LjkhYR TYWUCZA11ZeOhQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:22 2026 by rpki-client