This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json) Hash identifier: j5v1R19kcyMrhfqdxhdOfpFVHYUVJLQCxkw5KhO5/qo= Subject key identifier: 6E:8A:03:EE:9A:24:F4:78:EE:19:44:C9:29:01:94:11:6E:7E:2D:FA Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Certificate serial: 019BFB7716EAF82BB0E942BB91CC56AD32C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 18:00:44 +0000 Manifest this update: Mon 26 Jan 2026 18:00:44 +0000 Manifest next update: Tue 27 Jan 2026 18:00:44 +0000 Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: ok3r5mn7pRKFMXMlxcBzQTxO0RiYjMApugDwqh8L/PM=) 2: UdwPC5AdaFNXtHywAO0ry8S25cM.roa (hash: tBmGJBJCpxYDGJAJLW9uH/5FtF0sovEOEcwJbFRoFVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:16:ea:f8:2b:b0:e9:42:bb:91:cc:56:ad:32:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Validity Not Before: Jan 26 18:00:44 2026 GMT Not After : Jan 27 18:00:44 2026 GMT Subject: CN=6e8a03ee9a24f478ee1944c9290194116e7e2dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:8f:48:f1:31:0a:f3:f3:1d:a3:55:fb:7d: 37:91:f7:9f:b8:a6:f5:17:ac:41:0d:9c:18:87:96: 54:54:e3:12:2a:9c:59:04:d5:a3:06:97:bb:7d:73: 67:d4:c3:26:6b:64:cc:f6:c9:f1:c3:37:bc:d6:cf: 7a:ef:a1:18:fb:a0:0a:4c:e2:4a:d7:07:0e:0c:6c: 58:f0:12:a5:0b:d3:3e:f7:5b:64:1a:e7:49:2e:0d: c6:7d:a8:64:0b:98:1a:95:4c:42:87:5a:b0:c1:12: aa:75:45:31:67:ef:4c:ce:b2:0e:05:06:04:86:a6: e7:ef:64:9d:63:a6:ad:a3:ed:40:a2:29:14:63:06: 6a:0f:9d:57:a1:91:c3:4c:1b:93:14:a7:66:ab:da: fa:7d:20:9f:42:f5:8b:87:45:c4:b3:4c:66:d4:07: 6e:8b:23:0d:2e:7a:aa:0a:bf:c5:62:9f:e2:26:51: 59:3d:b0:a7:22:57:ac:41:5d:a9:03:53:c9:28:94: 08:08:71:f7:ae:03:d7:eb:6e:69:6a:68:8b:3f:19: ec:72:24:64:69:6d:24:03:46:ca:60:94:c1:cb:95: a7:45:4a:3a:71:4e:a6:1d:b8:ff:d3:a7:a7:64:53: 35:5e:d2:4e:29:9b:4c:57:e7:34:97:6b:c4:fd:ea: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8A:03:EE:9A:24:F4:78:EE:19:44:C9:29:01:94:11:6E:7E:2D:FA X509v3 Authority Key Identifier: keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b9:4d:e4:75:5f:66:98:b6:e5:f3:87:2a:72:53:56:f1:7a: a2:35:e5:34:52:80:4d:29:7e:90:a0:21:77:86:0e:c2:f4:e8: 86:28:bd:be:00:8f:71:b8:5e:90:71:61:0c:06:82:76:d3:83: ee:97:91:76:80:42:13:00:3d:53:22:37:16:67:1e:1b:03:21: 1b:cf:19:c1:52:76:0a:cd:0c:a9:26:45:00:7d:83:cb:c9:08: 82:13:85:c8:b1:c9:32:3e:5b:8e:2e:e7:28:b3:0c:74:64:30: 6a:93:8f:34:05:41:28:e5:7a:96:42:8c:9b:c6:dd:29:76:d1: 9f:4b:17:fd:39:12:1e:2b:31:55:36:50:8a:a1:ca:3f:0b:36: 79:49:16:09:71:d4:40:c3:70:0e:44:6a:b0:df:59:7a:23:a1: ad:1b:27:19:7f:66:32:53:38:40:8f:bc:c3:37:18:98:8b:58: 69:8e:7c:95:7c:c2:56:56:ee:57:af:03:d8:d5:fc:a2:eb:73: e4:99:30:dc:8e:6c:2d:f9:77:f4:62:4a:83:3f:de:52:f9:f6: 59:09:a7:b9:98:32:70:cd:3c:e3:19:40:0e:21:01:81:8f:ea: aa:fe:60:99:52:5e:a6:83:9c:3e:11:9b:4b:40:35:cc:f7:1f: c8:64:35:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dxbq+Cuw6UK7kcxWrTLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDA2YTA2ZGM0OTA5OTdmZjhmYzNhNDJlY2YzODliZWQz ZGQxNzgwHhcNMjYwMTI2MTgwMDQ0WhcNMjYwMTI3MTgwMDQ0WjAzMTEwLwYDVQQD Eyg2ZThhMDNlZTlhMjRmNDc4ZWUxOTQ0YzkyOTAxOTQxMTZlN2UyZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QuPSPExCvPzHaNV+303kfefuKb1 F6xBDZwYh5ZUVOMSKpxZBNWjBpe7fXNn1MMma2TM9snxwze81s9676EY+6AKTOJK 1wcODGxY8BKlC9M+91tkGudJLg3GfahkC5galUxCh1qwwRKqdUUxZ+9MzrIOBQYE hqbn72SdY6ato+1AoikUYwZqD51XoZHDTBuTFKdmq9r6fSCfQvWLh0XEs0xm1Adu iyMNLnqqCr/FYp/iJlFZPbCnIlesQV2pA1PJKJQICHH3rgPX625pamiLPxnsciRk aW0kA0bKYJTBy5WnRUo6cU6mHbj/06enZFM1XtJOKZtMV+c0l2vE/eoLfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6KA+6aJPR47hlEySkBlBFufi36MB8GA1UdIwQY MBaAFOEAagbcSQmX/4/DpC7POJvtPdF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2Ut NDk0ZTI2NDkxNzk2LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2UtNDk0ZTI2NDkxNzk2 LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7lN5HVf Zpi25fOHKnJTVvF6ojXlNFKATSl+kKAhd4YOwvTohii9vgCPcbhekHFhDAaCdtOD 7peRdoBCEwA9UyI3FmceGwMhG88ZwVJ2Cs0MqSZFAH2Dy8kIghOFyLHJMj5bji7n KLMMdGQwapOPNAVBKOV6lkKMm8bdKXbRn0sX/TkSHisxVTZQiqHKPws2eUkWCXHU QMNwDkRqsN9ZeiOhrRsnGX9mMlM4QI+8wzcYmItYaY58lXzCVlbuV68D2NX8outz 5Jkw3I5sLfl39GJKgz/eUvn2WQmnuZgycM084xlADiEBgY/qqv5gmVJepoOcPhGb S0A1zPcfyGQ1+A== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:27 2026 by rpki-client