This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json) Hash identifier: +91/lKytMZGmZFYUYqYgX0U/n9opSSK8KfqZ0gZ8mKI= Subject key identifier: 93:3C:0C:29:20:F3:1F:C4:5D:D5:03:ED:E3:7A:BC:15:2E:B7:7C:37 Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa Certificate serial: 019BF4D074FC864238A5DB309EBA922E05CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft Manifest number: 0A Signing time: Sun 25 Jan 2026 11:01:00 +0000 Manifest this update: Sun 25 Jan 2026 11:01:00 +0000 Manifest next update: Mon 26 Jan 2026 11:01:00 +0000 Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: CYK7kYr5cLkI+AH0gWfZ8dZ78Rt7h+tnfBI1GkZju2g=) 2: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=) 3: ge1P3cjgZbH4-jouGp8R37HnnnE.roa (hash: hfhuIjJchFi5PyEHA8i3bHdGQduKnEFh2SUQYTcUv+4=) 4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:74:fc:86:42:38:a5:db:30:9e:ba:92:2e:05:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa Validity Not Before: Jan 25 11:01:00 2026 GMT Not After : Jan 26 11:01:00 2026 GMT Subject: CN=933c0c2920f31fc45dd503ede37abc152eb77c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:8f:59:5d:2e:b0:48:b2:f9:d0:d5:9e:8d: 58:cb:86:35:44:af:63:d8:df:9b:a8:44:a7:0e:65: 7d:46:2b:5c:ac:7f:f1:a1:a6:15:4f:5d:41:64:c4: ac:98:04:c8:05:00:6f:5b:ba:76:6e:c3:a0:0e:07: 23:8b:b4:6c:3b:59:db:93:65:a3:4f:27:fd:6c:db: 4a:4f:52:49:f1:11:b0:c9:e6:a2:a9:3e:76:f1:68: b2:a3:33:bf:78:98:cf:a1:30:52:e6:58:e7:f0:aa: ed:9b:04:1e:56:19:93:15:08:d4:2a:23:3c:22:24: b8:29:10:9c:c6:45:3f:cd:77:97:e9:8c:3c:3e:09: 33:df:da:55:b9:b0:58:83:6b:65:4d:f7:e3:1f:13: 67:4d:af:96:15:4d:31:19:d4:aa:91:1c:76:59:38: a8:25:49:10:d9:91:8c:b3:95:96:5f:ab:5d:5a:a0: 77:9c:11:cc:47:63:04:61:6a:95:08:9b:b1:33:88: 69:fa:b3:52:db:fb:66:42:05:4c:1c:05:22:67:40: 26:c0:44:d8:77:0c:6e:41:c1:da:59:71:f6:16:3e: bc:0d:e0:b4:70:83:e4:1d:2e:51:ea:0f:f1:3d:08: b8:f2:06:e8:bd:26:fc:46:28:41:3d:0f:81:e0:cf: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3C:0C:29:20:F3:1F:C4:5D:D5:03:ED:E3:7A:BC:15:2E:B7:7C:37 X509v3 Authority Key Identifier: keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5e:0a:9a:6c:62:38:32:0c:39:5b:12:c8:e3:bf:b7:03:47: d8:5a:54:b0:ca:53:28:ef:35:b0:ee:b9:81:61:13:a5:1c:7a: b5:de:04:cc:b6:39:00:5c:d4:52:46:b5:e6:8b:f4:9f:6d:38: 1f:0c:c0:2c:8d:bc:9a:17:e4:d3:de:02:84:13:e3:05:ed:81: 88:92:fa:0c:2d:29:ce:58:9e:c7:d0:ef:be:f0:89:e5:2a:22: 27:51:1d:5c:36:f5:a0:87:75:a9:af:8c:d8:f1:78:33:ed:8e: 34:3c:0d:26:25:5d:fc:d8:35:33:e6:65:76:69:ce:61:48:06: 81:3b:73:6a:b7:f1:22:b3:5f:95:2a:91:69:5b:b9:4a:35:06: 08:fe:46:e4:83:1a:4d:f6:8c:ee:fd:a1:a2:f1:11:69:e7:f3: 1c:3d:2e:06:84:fe:45:3e:c1:82:b3:39:7a:62:03:35:a1:9e: 15:a1:05:35:e9:b3:86:f3:fa:56:bc:40:02:27:71:14:35:62: 38:25:75:4f:be:71:05:66:e1:9f:90:af:c1:7b:dc:e8:46:7c: 57:63:1a:94:32:e7:63:b4:83:b9:bb:69:01:9c:18:bd:35:c2: f1:06:53:bf:5f:27:d6:e6:04:bf:31:55:df:6e:71:73:cb:30: 24:ab:4f:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00HT8hkI4pdswnrqSLgXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTcxNzQ5ZjgwMjkyNTM5MDFmNzFkNDY0MTAzOWU5MGYx YTk3ZmEwHhcNMjYwMTI1MTEwMTAwWhcNMjYwMTI2MTEwMTAwWjAzMTEwLwYDVQQD Eyg5MzNjMGMyOTIwZjMxZmM0NWRkNTAzZWRlMzdhYmMxNTJlYjc3YzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32SPWV0usEiy+dDVno1Yy4Y1RK9j 2N+bqESnDmV9RitcrH/xoaYVT11BZMSsmATIBQBvW7p2bsOgDgcji7RsO1nbk2Wj Tyf9bNtKT1JJ8RGwyeaiqT528WiyozO/eJjPoTBS5ljn8KrtmwQeVhmTFQjUKiM8 IiS4KRCcxkU/zXeX6Yw8Pgkz39pVubBYg2tlTffjHxNnTa+WFU0xGdSqkRx2WTio JUkQ2ZGMs5WWX6tdWqB3nBHMR2MEYWqVCJuxM4hp+rNS2/tmQgVMHAUiZ0AmwETY dwxuQcHaWXH2Fj68DeC0cIPkHS5R6g/xPQi48gbovSb8RihBPQ+B4M93dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJM8DCkg8x/EXdUD7eN6vBUut3w3MB8GA1UdIwQY MBaAFOLnF0n4ApJTkB9x1GQQOekPGpf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAt OGFkMjMwMThhNWFkLzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAtOGFkMjMwMThhNWFk LzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil4Kmmxi ODIMOVsSyOO/twNH2FpUsMpTKO81sO65gWETpRx6td4EzLY5AFzUUka15ov0n204 HwzALI28mhfk094ChBPjBe2BiJL6DC0pzliex9DvvvCJ5SoiJ1EdXDb1oId1qa+M 2PF4M+2ONDwNJiVd/Ng1M+ZldmnOYUgGgTtzarfxIrNflSqRaVu5SjUGCP5G5IMa TfaM7v2hovERaefzHD0uBoT+RT7BgrM5emIDNaGeFaEFNemzhvP6VrxAAidxFDVi OCV1T75xBWbhn5CvwXvc6EZ8V2MalDLnY7SDubtpAZwYvTXC8QZTv18n1uYEvzFV 325xc8swJKtPvQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:27 2026 by rpki-client