This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json) Hash identifier: Fyh4PlBo0bpIZ93w91obtRJxMHe73zIuf0CqgWdykSw= Subject key identifier: BE:81:B2:F7:FD:00:00:E9:32:21:66:C3:C0:FE:6C:C0:B8:17:E7:55 Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Certificate serial: 019BD9C7BB1AAE8E535F21C7E04A99E92297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft Manifest number: 0E22 Signing time: Tue 20 Jan 2026 05:01:43 +0000 Manifest this update: Tue 20 Jan 2026 05:01:43 +0000 Manifest next update: Wed 21 Jan 2026 05:01:43 +0000 Files and hashes: 1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=) 2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: +jLwC62u2nXswWN21Cdp3hLrLC+VPFlx1rXyb7Q5dYs=) 3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=) 4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c7:bb:1a:ae:8e:53:5f:21:c7:e0:4a:99:e9:22:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Validity Not Before: Jan 20 05:01:43 2026 GMT Not After : Jan 21 05:01:43 2026 GMT Subject: CN=be81b2f7fd0000e9322166c3c0fe6cc0b817e755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:e9:3d:00:0e:79:51:04:42:85:60:e4:36: f9:1d:24:16:7e:f7:b3:fb:4a:9a:a9:20:6d:14:b2: 66:b2:74:85:55:a3:e5:6f:ae:08:eb:b9:5e:8e:a7: 36:c4:c4:26:ab:b8:fe:15:44:6c:1d:3c:94:c1:c8: 50:41:e6:27:9c:0a:ff:75:8b:d3:e1:ff:4e:07:a8: 8d:23:b9:b7:bc:7b:3e:d6:3b:a3:7c:50:b4:f3:5a: c5:7a:12:ff:68:9a:97:9c:9c:d9:d4:21:20:eb:38: 9a:ab:58:a9:e7:e0:90:20:a2:cf:71:cb:b2:57:c4: 36:79:d3:27:10:70:4b:32:a1:dd:36:2b:98:55:e9: a9:ee:6f:f6:b2:0e:9e:11:d1:d2:31:10:e4:85:ed: 51:7a:64:02:be:f5:89:32:c8:73:63:fb:41:9f:7f: dc:57:b3:e9:0f:26:bd:e4:6d:88:5e:d0:30:78:f8: 36:85:85:0a:bb:ad:b6:61:13:e1:c3:ff:8e:00:1d: 45:89:0f:e6:ec:f1:96:b5:de:a2:09:d4:14:42:0e: cd:a0:ca:9b:67:a7:e2:e5:a5:a6:3e:29:00:1d:91: 1d:12:b3:bc:2e:0f:9e:ce:0f:1f:05:28:c1:f3:2d: ff:fc:27:55:2b:ea:b2:d1:5a:dc:63:4b:04:b5:27: f8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:81:B2:F7:FD:00:00:E9:32:21:66:C3:C0:FE:6C:C0:B8:17:E7:55 X509v3 Authority Key Identifier: keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6a:24:2c:c1:a5:27:c9:05:bc:15:e9:d1:95:5a:82:e1:bb: 58:fe:b1:9c:10:3f:be:ad:a1:bf:18:61:1d:9b:3c:5e:c4:05: 14:e9:1a:ed:d1:4d:08:06:e7:9a:e1:68:d8:fb:05:1c:a8:f4: c0:c0:25:0d:20:c9:8d:92:a7:d2:d5:e6:5c:74:8a:9f:c7:90: e8:fc:e8:24:60:af:af:14:e0:a2:ab:ea:58:51:2d:55:ad:36: ea:9e:37:f0:4f:c5:b7:58:1f:87:89:70:8f:3b:70:cd:8f:31: d5:b3:78:35:dc:cc:51:5c:dd:20:bf:a3:f0:6b:a6:e5:32:aa: b1:35:cf:96:a1:25:cf:05:71:ff:89:58:d4:25:1f:d1:38:1d: 56:74:13:53:42:b0:14:01:8f:44:81:21:ce:cf:fa:26:5a:2c: 8d:22:01:b1:1a:94:f8:fa:2e:24:c8:b4:7a:88:ab:ca:6f:89: e7:6e:4c:ee:c2:1c:19:76:26:62:f4:a7:9b:ad:e8:1f:fc:e0: 91:10:3e:66:b8:bc:38:5f:4b:c4:f7:0d:b5:b2:e7:f2:ff:c5: 3f:b3:9e:4d:f9:78:b0:f4:7a:3c:34:af:2f:16:19:9f:bb:d7: c4:da:8e:3b:1b:6e:ed:d1:77:43:37:3b:5a:fe:66:d9:83:35: e2:4c:97:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZx7saro5TXyHH4EqZ6SKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2 YTI0ZjUwHhcNMjYwMTIwMDUwMTQzWhcNMjYwMTIxMDUwMTQzWjAzMTEwLwYDVQQD EyhiZTgxYjJmN2ZkMDAwMGU5MzIyMTY2YzNjMGZlNmNjMGI4MTdlNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEnpPQAOeVEEQoVg5Db5HSQWfvez +0qaqSBtFLJmsnSFVaPlb64I67lejqc2xMQmq7j+FURsHTyUwchQQeYnnAr/dYvT 4f9OB6iNI7m3vHs+1jujfFC081rFehL/aJqXnJzZ1CEg6ziaq1ip5+CQIKLPccuy V8Q2edMnEHBLMqHdNiuYVemp7m/2sg6eEdHSMRDkhe1RemQCvvWJMshzY/tBn3/c V7PpDya95G2IXtAwePg2hYUKu622YRPhw/+OAB1FiQ/m7PGWtd6iCdQUQg7NoMqb Z6fi5aWmPikAHZEdErO8Lg+ezg8fBSjB8y3//CdVK+qy0VrcY0sEtSf4SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6Bsvf9AADpMiFmw8D+bMC4F+dVMB8GA1UdIwQY MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt OWNhZjI1YTQ5OWQ3LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3 LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGokLMGl J8kFvBXp0ZVaguG7WP6xnBA/vq2hvxhhHZs8XsQFFOka7dFNCAbnmuFo2PsFHKj0 wMAlDSDJjZKn0tXmXHSKn8eQ6PzoJGCvrxTgoqvqWFEtVa026p438E/Ft1gfh4lw jztwzY8x1bN4NdzMUVzdIL+j8Gum5TKqsTXPlqElzwVx/4lY1CUf0TgdVnQTU0Kw FAGPRIEhzs/6JlosjSIBsRqU+PouJMi0eoirym+J525M7sIcGXYmYvSnm63oH/zg kRA+Zri8OF9LxPcNtbLn8v/FP7OeTfl4sPR6PDSvLxYZn7vXxNqOOxtu7dF3Qzc7 Wv5m2YM14kyXLQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:27:10 2026 by rpki-client