This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json) Hash identifier: +ejB5ZVALp5etWEH04pxhIdXm49CIvjteNBBd8gPbdo= Subject key identifier: 81:3B:CC:BA:42:D4:83:87:88:7C:EF:6C:2C:E3:76:78:D2:0A:15:D1 Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Certificate serial: 019BFD659CEA8059B96FE664A4375C0756B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft Manifest number: 1276 Signing time: Tue 27 Jan 2026 03:00:53 +0000 Manifest this update: Tue 27 Jan 2026 03:00:53 +0000 Manifest next update: Wed 28 Jan 2026 03:00:53 +0000 Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: Utba3Wk2ZbN92jPeQiZA6fYWNOObUVxKrR+wYfyjwE4=) 2: _wcF9jM9pkn5W8HUmqNyP2YzoVE.roa (hash: YR4TzWwhbeU41La1eRUFtaH6lftYq8CO9g5moHbgBbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:9c:ea:80:59:b9:6f:e6:64:a4:37:5c:07:56:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Validity Not Before: Jan 27 03:00:53 2026 GMT Not After : Jan 28 03:00:53 2026 GMT Subject: CN=813bccba42d48387887cef6c2ce37678d20a15d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:16:53:04:51:99:fd:8e:67:78:93:51:8d: d2:45:fb:52:36:de:6e:70:4d:44:3f:f5:ff:1a:1d: 93:18:ab:a4:1a:f4:2f:78:a7:52:2d:85:cd:2b:84: c1:b5:28:38:bc:08:50:0b:c8:4e:83:d6:06:93:c1: 7f:df:62:27:3d:2c:ea:b6:f6:1d:c1:7b:06:df:32: c5:3f:34:87:66:fc:a2:a0:fd:d8:08:f6:e2:fa:ff: 52:c0:62:f8:76:bb:70:04:22:aa:26:b7:34:41:9c: 69:9e:1b:f8:bb:e6:43:0c:7f:a4:31:e2:ab:50:de: af:fa:14:e3:2e:16:f2:cb:92:ea:c4:3a:a3:92:0e: db:b9:6f:ef:f8:5b:21:92:da:45:97:cb:02:18:97: 1a:50:e0:30:7e:ab:e5:bf:d7:43:0f:e9:d0:51:79: cf:19:35:f6:8a:76:55:df:2e:ec:6b:1a:17:74:45: d6:09:99:a5:08:6b:66:fb:a0:e4:1b:9b:6c:9a:6c: f9:ba:9d:bd:73:cd:b6:ea:70:f1:21:39:96:c1:24: 45:ef:74:a3:66:b2:a9:c8:4b:ce:6b:85:b1:31:94: 7d:d3:da:3b:8a:e6:73:23:63:53:be:85:a5:8d:4c: fd:7b:2a:d3:87:5a:18:3d:60:10:20:3c:fe:ad:59: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:CC:BA:42:D4:83:87:88:7C:EF:6C:2C:E3:76:78:D2:0A:15:D1 X509v3 Authority Key Identifier: keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1e:57:24:50:29:72:12:bb:7f:52:ca:4c:14:ff:68:bf:73: 13:cf:3f:2e:91:9a:5b:a1:5d:7e:bd:43:9f:c0:f5:d4:d2:ef: bb:bc:88:7c:60:f8:24:1e:f4:84:e0:b5:71:5e:44:24:58:19: 62:68:f0:8e:ed:26:b6:a8:56:1d:c0:5f:8b:08:b8:b4:6c:85: 6f:50:14:d4:9b:cd:38:f1:1a:11:5a:7a:22:95:44:5b:e3:8a: ec:0a:d3:64:9f:5d:a1:b2:4d:e1:ed:08:79:64:7c:f0:7c:48: 0d:cf:1d:10:61:21:ac:ae:c0:2b:49:29:2c:1a:1c:a2:6e:d0: 92:4b:12:be:53:b3:47:b6:98:ee:f7:d6:49:7c:93:e0:55:c2: 49:19:cc:f7:e2:6c:c4:93:65:b2:56:f2:ab:b5:c4:24:ac:1f: 75:4d:5c:03:41:77:3b:f7:ce:22:88:bb:1e:3a:74:f4:9d:30: b0:0d:d2:ce:dd:bc:3d:8d:c4:f8:68:8b:0b:2c:b4:0e:30:7f: fd:ac:2b:e2:7a:32:d5:d5:45:e8:f3:b4:e3:70:11:10:e4:8f: fe:c5:13:ec:f8:af:d3:bf:c4:e4:21:ab:5c:79:7d:33:d5:81: bf:4d:b6:df:3b:04:75:49:fe:85:11:ad:15:6d:ac:a6:a8:1b: ca:c4:78:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZZzqgFm5b+ZkpDdcB1a4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMDExZjA4NTlkMDZhMDg0OTc1ZjRlOGJkMmI1NTY3MTBk ZDhjMzAwHhcNMjYwMTI3MDMwMDUzWhcNMjYwMTI4MDMwMDUzWjAzMTEwLwYDVQQD Eyg4MTNiY2NiYTQyZDQ4Mzg3ODg3Y2VmNmMyY2UzNzY3OGQyMGExNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nQWUwRRmf2OZ3iTUY3SRftSNt5u cE1EP/X/Gh2TGKukGvQveKdSLYXNK4TBtSg4vAhQC8hOg9YGk8F/32InPSzqtvYd wXsG3zLFPzSHZvyioP3YCPbi+v9SwGL4drtwBCKqJrc0QZxpnhv4u+ZDDH+kMeKr UN6v+hTjLhbyy5LqxDqjkg7buW/v+FshktpFl8sCGJcaUOAwfqvlv9dDD+nQUXnP GTX2inZV3y7saxoXdEXWCZmlCGtm+6DkG5tsmmz5up29c8226nDxITmWwSRF73Sj ZrKpyEvOa4WxMZR909o7iuZzI2NTvoWljUz9eyrTh1oYPWAQIDz+rVlkPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE7zLpC1IOHiHzvbCzjdnjSChXRMB8GA1UdIwQY MBaAFOMBHwhZ0GoISXX06L0rVWcQ3YwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDIt ZDQ4YjdkMjYyNGRiLzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDItZDQ4YjdkMjYyNGRi LzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEx5XJFAp chK7f1LKTBT/aL9zE88/LpGaW6Fdfr1Dn8D11NLvu7yIfGD4JB70hOC1cV5EJFgZ Ymjwju0mtqhWHcBfiwi4tGyFb1AU1JvNOPEaEVp6IpVEW+OK7ArTZJ9dobJN4e0I eWR88HxIDc8dEGEhrK7AK0kpLBocom7QkksSvlOzR7aY7vfWSXyT4FXCSRnM9+Js xJNlslbyq7XEJKwfdU1cA0F3O/fOIoi7Hjp09J0wsA3Szt28PY3E+GiLCyy0DjB/ /awr4noy1dVF6PO043AREOSP/sUT7Piv07/E5CGrXHl9M9WBv0223zsEdUn+hRGt FW2spqgbysR4JA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:30 2026 by rpki-client