This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json) Hash identifier: Etd+gitZAW8EvzxhFG+rcYsWwgzsTFtwtkpNMgcCIfo= Subject key identifier: 34:55:EE:17:18:16:20:D5:AE:0E:82:F8:8F:AE:BD:A2:FD:B7:99:52 Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38 Certificate serial: 019BFE0B1E93F300F585D43C16E00AF4C366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft Manifest number: 0E04 Signing time: Tue 27 Jan 2026 06:01:39 +0000 Manifest this update: Tue 27 Jan 2026 06:01:39 +0000 Manifest next update: Wed 28 Jan 2026 06:01:39 +0000 Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=) 2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: az2v2jOKoDNhrrWftfmHoUiG2PWVM2gOc8zWweV1Z2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:1e:93:f3:00:f5:85:d4:3c:16:e0:0a:f4:c3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38 Validity Not Before: Jan 27 06:01:39 2026 GMT Not After : Jan 28 06:01:39 2026 GMT Subject: CN=3455ee17181620d5ae0e82f88faebda2fdb79952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:77:09:da:79:ba:44:7f:55:e1:c2:09:df: c9:00:77:b9:48:dd:1b:09:d6:d2:a2:6e:f3:fb:8f: b7:fd:b9:39:ac:7b:3e:8d:9d:5a:28:f4:2e:ff:88: 8f:f6:b0:22:0c:2f:17:94:45:69:0c:46:c7:8c:b5: 6e:25:17:e1:53:69:de:f9:28:51:fd:d9:2f:75:d6: f1:f0:2e:a0:da:32:93:f5:fb:d7:4d:19:2d:59:c1: 93:de:e7:c9:48:fd:86:c6:f6:a1:9b:e3:96:56:dd: b4:df:ef:fa:a4:fc:05:22:01:eb:47:05:58:4a:99: 22:a1:b6:16:67:14:1b:42:66:72:2b:b0:29:ce:28: ce:43:d9:74:77:63:c2:89:5d:a2:c7:b1:ed:c0:88: f7:b1:dc:32:8c:a8:24:35:39:79:7a:6c:d6:39:75: f5:c0:6f:75:f3:17:90:08:f3:86:6b:a2:26:6c:e9: be:77:41:cf:c6:82:37:11:7e:de:80:ff:dc:ad:91: 00:81:fa:a7:fe:47:ac:94:46:1d:ff:11:99:18:93: 8a:e5:e9:2b:3b:a1:74:df:16:8c:86:f4:7f:25:cb: a2:fc:85:db:f8:34:88:34:92:66:8f:89:95:9c:09: 58:6e:fc:98:f8:f5:33:da:74:7c:cb:35:fb:0c:1f: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:55:EE:17:18:16:20:D5:AE:0E:82:F8:8F:AE:BD:A2:FD:B7:99:52 X509v3 Authority Key Identifier: keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1d:8b:d9:06:7d:f3:89:57:5c:b2:ff:9f:73:1c:cc:70:11: fc:34:b5:a7:bc:d0:c9:83:64:cd:d7:9a:19:a2:69:5f:0a:51: 0a:b5:c6:7d:98:a8:03:9a:a5:11:e5:e3:ef:30:eb:d1:97:26: 53:8b:41:cf:44:86:7a:55:64:66:82:66:8f:8a:92:14:88:1e: ec:75:7e:d1:4c:e3:94:4e:1d:eb:74:43:41:ff:0a:8d:68:26: 65:ae:15:3c:ce:2e:09:05:b4:ac:cd:22:93:ee:91:24:61:12: 89:5a:64:85:b7:38:9a:1d:10:71:d5:fb:04:49:78:f1:53:56: 94:a1:fb:f3:2e:2d:5c:ef:e8:e8:1a:9a:87:e5:99:e8:95:08: 97:fd:e7:6d:99:da:5b:d7:5a:0c:67:84:a9:62:ba:ea:52:a2: 3a:a2:d1:f1:12:3b:23:c1:58:80:45:09:73:ee:bd:a8:29:5f: e3:1f:34:a7:ae:a3:69:9d:d4:9d:58:89:e0:b5:62:4d:ab:28: bd:c0:62:38:10:8e:a5:d3:5c:fd:aa:4a:18:2e:64:5e:e0:29: fd:fe:0f:f5:d2:ee:8c:16:f7:de:30:50:c2:d2:7c:93:7f:54: d6:05:45:84:cf:5a:dc:2d:45:2d:78:06:41:d0:08:b7:9a:a1: 5f:32:c4:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Cx6T8wD1hdQ8FuAK9MNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk ODFkMzgwHhcNMjYwMTI3MDYwMTM5WhcNMjYwMTI4MDYwMTM5WjAzMTEwLwYDVQQD EygzNDU1ZWUxNzE4MTYyMGQ1YWUwZTgyZjg4ZmFlYmRhMmZkYjc5OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0093Cdp5ukR/VeHCCd/JAHe5SN0b CdbSom7z+4+3/bk5rHs+jZ1aKPQu/4iP9rAiDC8XlEVpDEbHjLVuJRfhU2ne+ShR /dkvddbx8C6g2jKT9fvXTRktWcGT3ufJSP2Gxvahm+OWVt203+/6pPwFIgHrRwVY SpkiobYWZxQbQmZyK7ApzijOQ9l0d2PCiV2ix7HtwIj3sdwyjKgkNTl5emzWOXX1 wG918xeQCPOGa6ImbOm+d0HPxoI3EX7egP/crZEAgfqn/keslEYd/xGZGJOK5ekr O6F03xaMhvR/Jcui/IXb+DSINJJmj4mVnAlYbvyY+PUz2nR8yzX7DB+MXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRV7hcYFiDVrg6C+I+uvaL9t5lSMB8GA1UdIwQY MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3 LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcB2L2QZ9 84lXXLL/n3MczHAR/DS1p7zQyYNkzdeaGaJpXwpRCrXGfZioA5qlEeXj7zDr0Zcm U4tBz0SGelVkZoJmj4qSFIge7HV+0UzjlE4d63RDQf8KjWgmZa4VPM4uCQW0rM0i k+6RJGESiVpkhbc4mh0QcdX7BEl48VNWlKH78y4tXO/o6Bqah+WZ6JUIl/3nbZna W9daDGeEqWK66lKiOqLR8RI7I8FYgEUJc+69qClf4x80p66jaZ3UnViJ4LViTaso vcBiOBCOpdNc/apKGC5kXuAp/f4P9dLujBb33jBQwtJ8k39U1gVFhM9a3C1FLXgG QdAIt5qhXzLELw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:40 2026 by rpki-client