This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json) Hash identifier: KOxAAP0ut5HgWoL95o5ehVHD3Ilm1MCycLv4GTyCzwg= Subject key identifier: ED:8E:EC:8D:A9:76:DF:B5:C0:B8:D1:6B:72:BB:95:0E:0F:A7:9E:29 Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Certificate serial: 019BD68F9619FBFAD6CEDD0749BB6611E1A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft Manifest number: 17E4 Signing time: Mon 19 Jan 2026 14:01:32 +0000 Manifest this update: Mon 19 Jan 2026 14:01:32 +0000 Manifest next update: Tue 20 Jan 2026 14:01:32 +0000 Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: sel/48bT5iAYyaRWH6CfmAOUr0RLNnXt4n2D0+YX8lo=) 2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=) 3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=) 4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=) 5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=) 6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:8f:96:19:fb:fa:d6:ce:dd:07:49:bb:66:11:e1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Validity Not Before: Jan 19 14:01:32 2026 GMT Not After : Jan 20 14:01:32 2026 GMT Subject: CN=ed8eec8da976dfb5c0b8d16b72bb950e0fa79e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:2b:6d:e3:45:7d:85:e1:c8:e2:af:78:b4: 6d:d3:6a:f7:24:26:e7:bc:17:00:96:a2:98:10:dd: 40:9a:ec:06:af:77:f6:0b:5d:a3:62:47:0e:a8:da: c7:74:54:68:55:ec:a2:20:bb:d2:3a:c8:2d:61:80: 3d:91:ce:35:72:9d:3b:aa:bc:9c:6a:7b:b7:20:f2: 4c:fd:9b:2f:05:95:34:f0:9a:26:b8:68:ac:3e:ee: 72:54:f3:38:7a:e6:86:48:fe:2e:a4:4f:6e:21:66: 0a:71:7e:28:2d:60:b4:5d:c1:4d:3e:9f:52:2c:18: 93:64:9f:cb:cf:de:07:a6:bb:3e:8f:b6:1b:54:19: 3e:05:21:77:28:8e:d7:51:2f:1d:56:aa:74:14:55: c4:aa:43:c0:01:0e:e3:10:f5:f4:09:74:7b:cd:18: eb:1d:ac:09:1b:7f:52:01:16:be:80:56:8b:2a:aa: 3e:34:bd:3f:0d:33:5e:f1:7f:8b:da:41:a3:a1:fe: a4:bb:2a:72:5a:ab:b6:24:00:f7:90:f5:fb:b3:15: 11:12:47:a2:aa:fd:10:19:8c:41:e4:de:96:ad:a2: c5:a9:c4:f1:0f:41:c9:b1:90:5c:b1:25:f2:bd:17: 68:2f:2f:8d:ba:11:a3:87:47:28:5b:38:f0:d4:e2: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8E:EC:8D:A9:76:DF:B5:C0:B8:D1:6B:72:BB:95:0E:0F:A7:9E:29 X509v3 Authority Key Identifier: keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:60:9c:4b:25:65:1a:44:c5:7c:50:1f:79:d3:c8:d6:98:ca: 3d:20:7c:3c:95:fe:fc:0a:26:fb:13:78:9b:6d:bc:1f:64:79: 72:8a:74:80:14:35:98:01:75:06:3b:ae:59:b9:c2:0d:b3:d6: d8:60:32:46:0c:74:68:5e:60:50:c4:9e:c0:41:85:2d:ba:d5: d1:b5:dc:f6:b5:06:d2:df:1a:6e:11:d7:e8:64:76:46:45:b7: ec:8f:54:a6:82:00:c1:9b:73:3c:61:20:de:8c:7d:e4:86:8c: 73:15:fb:1e:f4:8c:90:e7:46:de:80:d6:af:11:c3:f3:a4:a5: 31:0a:fc:85:8f:29:2a:b0:25:97:ba:79:92:51:9d:9b:b8:a2: 88:15:ad:57:3a:fc:51:99:8e:d4:10:6d:5d:a8:22:36:48:b8: 1c:2f:02:04:56:ed:eb:c6:33:a7:e2:87:a6:69:ec:ee:b3:a0: ae:ac:98:d8:08:fa:9c:85:56:06:87:ab:7a:43:0b:f4:64:b9: 90:cb:6d:f5:0b:14:1b:e1:12:0b:be:61:ab:45:99:b8:ed:79: 41:40:21:e6:3b:0b:83:fe:00:56:de:0f:f8:22:de:c6:f6:55: a5:3d:bc:b0:1a:ad:86:39:40:bd:93:28:34:34:e1:c1:60:f1: 04:b3:a1:de -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvWj5YZ+/rWzt0HSbtmEeGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy MjBmYzIwHhcNMjYwMTE5MTQwMTMyWhcNMjYwMTIwMTQwMTMyWjAzMTEwLwYDVQQD EyhlZDhlZWM4ZGE5NzZkZmI1YzBiOGQxNmI3MmJiOTUwZTBmYTc5ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTsrbeNFfYXhyOKveLRt02r3JCbn vBcAlqKYEN1AmuwGr3f2C12jYkcOqNrHdFRoVeyiILvSOsgtYYA9kc41cp07qryc anu3IPJM/ZsvBZU08JomuGisPu5yVPM4euaGSP4upE9uIWYKcX4oLWC0XcFNPp9S LBiTZJ/Lz94Hprs+j7YbVBk+BSF3KI7XUS8dVqp0FFXEqkPAAQ7jEPX0CXR7zRjr HawJG39SARa+gFaLKqo+NL0/DTNe8X+L2kGjof6kuypyWqu2JAD3kPX7sxUREkei qv0QGYxB5N6WraLFqcTxD0HJsZBcsSXyvRdoLy+NuhGjh0coWzjw1OI/zwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFO2O7I2pdt+1wLjRa3K7lQ4Pp54pMB8GA1UdIwQY MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0 MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGCc SyVlGkTFfFAfedPI1pjKPSB8PJX+/Aom+xN4m228H2R5cop0gBQ1mAF1BjuuWbnC DbPW2GAyRgx0aF5gUMSewEGFLbrV0bXc9rUG0t8abhHX6GR2RkW37I9UpoIAwZtz PGEg3ox95IaMcxX7HvSMkOdG3oDWrxHD86SlMQr8hY8pKrAll7p5klGdm7iiiBWt Vzr8UZmO1BBtXagiNki4HC8CBFbt68Yzp+KHpmns7rOgrqyY2Aj6nIVWBoerekML 9GS5kMtt9QsUG+ESC75hq0WZuO15QUAh5jsLg/4AVt4P+CLexvZVpT28sBqthjlA vZMoNDThwWDxBLOh3g== -----END CERTIFICATE-----Generated at Mon Jan 19 19:02:21 2026 by rpki-client