This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json) Hash identifier: leFVAJb5aU4iSf4aqMNTU1xxK6R+skNstl8xxFNizhI= Subject key identifier: 61:D7:97:83:46:37:AC:46:FC:F8:A3:4E:FE:7D:35:EB:B6:2F:4F:7E Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Certificate serial: 019BFCC153DCD93C6E0B33133BA1C2AEB784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft Manifest number: 0852 Signing time: Tue 27 Jan 2026 00:01:26 +0000 Manifest this update: Tue 27 Jan 2026 00:01:26 +0000 Manifest next update: Wed 28 Jan 2026 00:01:26 +0000 Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=) 2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: XraX+maSTzVOZg15GioUerCwj4qtFjho/TYkP3Sq3sg=) 3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:53:dc:d9:3c:6e:0b:33:13:3b:a1:c2:ae:b7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Validity Not Before: Jan 27 00:01:26 2026 GMT Not After : Jan 28 00:01:26 2026 GMT Subject: CN=61d797834637ac46fcf8a34efe7d35ebb62f4f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:95:da:87:ab:8c:24:dd:85:1d:71:b9:93: a1:ca:64:10:de:19:e8:35:ce:c7:76:b3:a2:38:04: b9:ed:33:9f:18:d0:76:62:b1:2b:97:2a:06:0e:fa: d3:3e:3c:1b:79:aa:3b:a8:11:4a:2c:e6:c2:4c:58: 33:a3:bb:c6:57:2a:24:97:5c:22:48:d7:f8:f9:c9: e6:61:02:39:2b:ec:c1:c8:00:2e:e2:be:4c:36:35: 0b:8f:05:97:7a:75:f2:13:87:b0:b5:c4:fc:de:8d: 2f:ad:5a:6c:f7:4c:79:b5:ce:a7:74:b8:58:1f:99: 5d:52:14:fd:42:07:d8:89:44:33:29:98:1f:39:e4: c4:4e:52:18:c4:a2:ea:3b:2a:e8:20:b8:c8:21:3f: 79:f6:73:b7:97:7a:90:26:7b:df:ab:36:92:14:68: 94:f7:d1:5e:38:e5:cd:72:ef:8f:11:50:93:83:a5: 3a:b9:a9:65:40:99:0e:cb:e9:13:d7:63:a1:f4:12: c1:67:43:28:5b:bc:25:d4:05:75:32:d8:10:29:15: 7f:bd:6b:2e:64:8d:1f:f6:3f:27:ba:42:44:6b:25: 92:9a:a0:ac:bc:8d:10:08:81:36:1e:3d:1c:24:d8: 5c:5c:83:9f:8b:e1:d4:f5:a4:a0:a2:58:7b:ea:41: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D7:97:83:46:37:AC:46:FC:F8:A3:4E:FE:7D:35:EB:B6:2F:4F:7E X509v3 Authority Key Identifier: keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:5f:08:25:9c:1f:6f:1a:2e:0a:f3:00:d4:07:fb:85:90:65: 8a:2d:d6:fb:2e:f9:ec:31:d0:f2:6b:77:2d:dc:70:cf:5f:55: 5d:f1:2f:56:c6:8a:34:f8:bf:19:4a:42:5e:86:63:a9:db:91: 34:ee:d0:ea:00:ba:c4:ba:2c:d1:c3:27:9a:ce:ae:14:83:a9: c9:e0:ca:84:51:1b:48:79:8f:3e:20:f3:d1:69:d6:bc:76:34: 05:9a:6a:f8:84:9e:44:bb:34:84:7d:73:b1:83:4a:0d:72:5d: 8f:65:b3:50:25:71:24:37:f3:84:ad:68:8e:7d:b1:83:8a:bf: 02:20:12:07:65:0d:2b:75:5a:a9:7d:6a:16:b7:19:80:9d:4e: 25:a7:82:c5:a5:11:0b:91:f9:e1:1b:2a:79:d1:33:0b:82:62: cc:da:2d:a5:c8:8e:a0:85:c2:80:d6:d0:26:d9:46:07:69:e1: 22:b5:2a:20:ae:af:f7:03:1b:d8:b3:be:1a:54:3f:3b:53:10: b0:98:6f:27:f5:85:0a:63:20:85:db:08:8e:26:87:93:20:bb: 13:42:ff:76:51:d4:d4:5d:d2:c6:c4:02:8a:43:10:ce:7b:6c: 98:e0:e1:56:ad:48:ac:d9:71:d5:5b:01:f6:91:33:a4:5e:7e: d6:f5:88:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wVPc2TxuCzMTO6HCrreEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4 MjBhZDkwHhcNMjYwMTI3MDAwMTI2WhcNMjYwMTI4MDAwMTI2WjAzMTEwLwYDVQQD Eyg2MWQ3OTc4MzQ2MzdhYzQ2ZmNmOGEzNGVmZTdkMzVlYmI2MmY0ZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2OV2oerjCTdhR1xuZOhymQQ3hno Nc7HdrOiOAS57TOfGNB2YrErlyoGDvrTPjwbeao7qBFKLObCTFgzo7vGVyokl1wi SNf4+cnmYQI5K+zByAAu4r5MNjULjwWXenXyE4ewtcT83o0vrVps90x5tc6ndLhY H5ldUhT9QgfYiUQzKZgfOeTETlIYxKLqOyroILjIIT959nO3l3qQJnvfqzaSFGiU 99FeOOXNcu+PEVCTg6U6uallQJkOy+kT12Oh9BLBZ0MoW7wl1AV1MtgQKRV/vWsu ZI0f9j8nukJEayWSmqCsvI0QCIE2Hj0cJNhcXIOfi+HU9aSgolh76kGf6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHXl4NGN6xG/PijTv59Neu2L09+MB8GA1UdIwQY MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2F8IJZwf bxouCvMA1Af7hZBlii3W+y757DHQ8mt3Ldxwz19VXfEvVsaKNPi/GUpCXoZjqduR NO7Q6gC6xLos0cMnms6uFIOpyeDKhFEbSHmPPiDz0WnWvHY0BZpq+ISeRLs0hH1z sYNKDXJdj2WzUCVxJDfzhK1ojn2xg4q/AiASB2UNK3VaqX1qFrcZgJ1OJaeCxaUR C5H54RsqedEzC4JizNotpciOoIXCgNbQJtlGB2nhIrUqIK6v9wMb2LO+GlQ/O1MQ sJhvJ/WFCmMghdsIjiaHkyC7E0L/dlHU1F3SxsQCikMQzntsmODhVq1IrNlx1VsB 9pEzpF5+1vWIQw== -----END CERTIFICATE-----Generated at Tue Jan 27 05:02:39 2026 by rpki-client