This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json) Hash identifier: KytdZG6SY8ErI2LvP2670QhcfrBH3A5Oa6VIhC/gMRk= Subject key identifier: 93:C1:E4:00:A9:32:A1:B5:A3:A3:52:5A:EB:52:0C:C8:03:A9:B0:51 Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00 Certificate serial: 019BDFC9C3E7BD1A07D01228F6790F0D822C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft Manifest number: 140A Signing time: Wed 21 Jan 2026 09:01:40 +0000 Manifest this update: Wed 21 Jan 2026 09:01:40 +0000 Manifest next update: Thu 22 Jan 2026 09:01:40 +0000 Files and hashes: 1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=) 2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: IJbEakejgOLcu0YimpA5P5edJQ7qTj6LHocQW+hxiI0=) 3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:c9:c3:e7:bd:1a:07:d0:12:28:f6:79:0f:0d:82:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00 Validity Not Before: Jan 21 09:01:40 2026 GMT Not After : Jan 22 09:01:40 2026 GMT Subject: CN=93c1e400a932a1b5a3a3525aeb520cc803a9b051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:0d:4e:9a:b5:cd:b8:57:e1:8d:b8:db:e2: 4f:d6:87:20:b0:25:d4:28:0b:ae:99:d3:60:bc:3e: 27:dd:b1:06:d5:99:6a:b7:a9:47:82:b9:c6:23:48: 9b:6e:cc:f9:ac:3e:63:33:8c:ca:73:c5:3e:e1:3a: 45:c1:30:3a:27:17:60:6a:0f:84:80:57:00:0f:a4: 1a:ff:b4:5d:8a:cb:83:86:c1:18:5b:cc:52:04:a8: 2f:24:1c:fe:3f:27:2f:c2:71:e4:c2:2c:f8:ed:39: ca:6b:d2:a2:23:48:ac:50:d1:8b:80:c5:ce:5a:26: b2:73:af:a4:7e:eb:00:93:08:d8:af:9b:9a:af:44: 01:07:b0:1c:44:15:e0:73:74:30:99:6a:2c:4c:35: 5d:a7:d0:16:7c:05:d7:e0:b5:bb:d1:4b:ba:2d:f3: 88:da:72:96:f7:fd:aa:50:dd:56:3a:cc:98:f8:7d: c4:7c:30:f2:4a:29:f1:64:03:95:93:c5:e9:64:cc: 91:54:83:4a:73:db:d3:a2:cd:75:4e:0a:39:a2:7a: 91:42:f8:9b:72:99:5f:f3:25:5f:2c:d4:2e:bc:dd: 2c:ba:e4:64:22:26:ff:e5:fc:99:24:3c:af:04:d9: a1:b2:1c:21:89:90:bf:6d:b8:35:5f:17:20:11:26: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C1:E4:00:A9:32:A1:B5:A3:A3:52:5A:EB:52:0C:C8:03:A9:B0:51 X509v3 Authority Key Identifier: keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f0:eb:e8:8f:6a:85:c1:c2:88:82:8d:43:38:4d:03:65:61: c5:5d:90:9c:7d:88:55:1a:85:64:01:df:f7:2f:80:66:78:8e: d0:8b:8f:ec:25:da:61:53:11:b9:85:f7:49:bf:40:ca:72:a6: 84:af:b1:cd:09:bd:7b:5f:ee:fa:86:45:8e:80:6c:70:92:6b: c6:9a:5e:0f:24:4d:5c:dd:0d:e4:06:f0:61:c1:a7:8c:57:a7: 46:a1:5b:a5:63:51:ae:17:0c:29:77:eb:bc:0b:2b:ac:e0:a4: b5:fc:3c:88:dc:0b:32:ae:9f:fb:00:5c:a8:bb:96:52:73:95: 7c:be:f6:cc:c7:38:83:17:37:b5:50:8c:d5:b3:34:4d:f1:05: ed:75:55:14:23:8b:d3:06:e0:f4:01:05:b4:fe:d7:b5:5b:74: 3b:24:fe:92:1a:66:2f:e0:9f:02:4a:91:60:54:33:25:a8:67: 6a:f2:60:8b:3d:b3:b2:de:a3:4d:d6:aa:52:64:eb:ff:a3:e3: 5a:14:95:3a:7a:ba:f8:11:c7:d9:c0:9e:8f:e2:ba:ff:9f:19: 43:94:d9:aa:de:e9:40:24:a5:ab:f7:b4:a2:76:e3:7d:df:e3: 01:f5:59:87:a7:14:91:cf:06:b7:14:21:0b:72:e5:81:e1:56: 92:71:20:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfycPnvRoH0BIo9nkPDYIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTRhYzYyMjRmZTE5NDQ0MjBkYzNhOThkZDYzYWJhZTRh ZjdlMDAwHhcNMjYwMTIxMDkwMTQwWhcNMjYwMTIyMDkwMTQwWjAzMTEwLwYDVQQD Eyg5M2MxZTQwMGE5MzJhMWI1YTNhMzUyNWFlYjUyMGNjODAzYTliMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5INTpq1zbhX4Y242+JP1ocgsCXU KAuumdNgvD4n3bEG1Zlqt6lHgrnGI0ibbsz5rD5jM4zKc8U+4TpFwTA6Jxdgag+E gFcAD6Qa/7RdisuDhsEYW8xSBKgvJBz+PycvwnHkwiz47TnKa9KiI0isUNGLgMXO Wiayc6+kfusAkwjYr5uar0QBB7AcRBXgc3QwmWosTDVdp9AWfAXX4LW70Uu6LfOI 2nKW9/2qUN1WOsyY+H3EfDDySinxZAOVk8XpZMyRVINKc9vTos11Tgo5onqRQvib cplf8yVfLNQuvN0suuRkIib/5fyZJDyvBNmhshwhiZC/bbg1XxcgESZOSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPB5ACpMqG1o6NSWutSDMgDqbBRMB8GA1UdIwQY MBaAFOLkrGIk/hlEQg3DqY3WOrrkr34AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWIt YmE0ZDA2ZGYwYmU1LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWItYmE0ZDA2ZGYwYmU1 LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfDr6I9q hcHCiIKNQzhNA2VhxV2QnH2IVRqFZAHf9y+AZniO0IuP7CXaYVMRuYX3Sb9AynKm hK+xzQm9e1/u+oZFjoBscJJrxppeDyRNXN0N5AbwYcGnjFenRqFbpWNRrhcMKXfr vAsrrOCktfw8iNwLMq6f+wBcqLuWUnOVfL72zMc4gxc3tVCM1bM0TfEF7XVVFCOL 0wbg9AEFtP7XtVt0OyT+khpmL+CfAkqRYFQzJahnavJgiz2zst6jTdaqUmTr/6Pj WhSVOnq6+BHH2cCej+K6/58ZQ5TZqt7pQCSlq/e0onbjfd/jAfVZh6cUkc8GtxQh C3LlgeFWknEgig== -----END CERTIFICATE-----Generated at Wed Jan 21 14:34:15 2026 by rpki-client