This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json) Hash identifier: VRKCs5z7HtICh959oPtuC6p9mxD1AfD/Qw5NpltBwLQ= Subject key identifier: 1B:86:20:B4:58:88:6C:46:32:CE:31:FD:99:65:55:DA:BC:08:40:0A Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Certificate serial: 019BE06E3B385E2480125DE2B0BDAA74748C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft Manifest number: 18DE Signing time: Wed 21 Jan 2026 12:01:19 +0000 Manifest this update: Wed 21 Jan 2026 12:01:19 +0000 Manifest next update: Thu 22 Jan 2026 12:01:19 +0000 Files and hashes: 1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: SLY0vKiSjt6aGjWPDHgytQHTwm+yZ8YzedzCZ6YVBwM=) 2: Mr6e66-hduQ_2Plh7o4YAdI0bng.roa (hash: LT3XRkl0zkPeI7NxrAQBrMnnE/3d0HUOmAJz1gmL73c=) 3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=) 4: WJQDqjdU85qKX_z9ajXtlIeeqwc.roa (hash: mlb+3yfxZjm9N1+YQt1lMML9aFyHgMQVkXXsZICY1yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:6e:3b:38:5e:24:80:12:5d:e2:b0:bd:aa:74:74:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Validity Not Before: Jan 21 12:01:19 2026 GMT Not After : Jan 22 12:01:19 2026 GMT Subject: CN=1b8620b458886c4632ce31fd996555dabc08400a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9c:46:59:3a:f9:22:6c:2c:10:38:d5:1b:dd: 43:38:f8:b1:f3:47:a2:67:a3:d4:78:70:32:3d:7e: 7f:31:a0:9b:0d:35:64:6a:56:58:2a:8f:e5:a2:d6: d4:e9:22:b3:95:2c:e4:a5:1a:ae:ee:5e:4c:10:f6: ba:c4:4d:19:89:e6:18:60:1d:b6:26:77:1d:29:bf: e1:2c:81:e4:7e:55:4d:43:64:30:a3:02:23:d5:f1: 19:05:09:ff:52:53:05:a8:50:04:e7:c4:45:e6:5e: 6a:62:32:31:82:51:b7:04:fd:6b:7b:89:04:d1:15: dc:69:fd:5a:63:92:f4:0f:84:1c:b6:ea:c5:bd:ae: 90:5e:06:9a:78:6b:b9:22:33:36:6a:41:d9:9d:bb: ff:b4:6b:82:ab:78:4c:49:fa:46:96:ee:78:72:ec: 75:46:58:f0:19:63:c5:92:a6:ca:ab:7a:50:22:b3: 4b:a7:3e:be:19:d2:b3:e3:b8:3b:ca:3a:d9:82:ec: 1a:c3:7c:dc:ec:04:55:4d:42:b1:4f:f5:18:92:35: c9:68:81:31:f3:4f:0b:83:12:1f:a9:d3:71:63:57: 55:37:ae:c8:4b:6b:d3:2e:86:6c:6c:6c:ff:f9:61: 8e:d7:6d:e4:a8:11:a5:c9:f6:59:ea:05:d5:9d:10: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:86:20:B4:58:88:6C:46:32:CE:31:FD:99:65:55:DA:BC:08:40:0A X509v3 Authority Key Identifier: keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:aa:93:1a:08:75:37:05:2a:fa:8e:4f:2e:26:af:ae:f0: 0b:20:3e:58:a0:81:c3:71:07:85:5f:06:6b:f6:dd:ca:06:bb: f5:77:71:6d:50:b6:7f:8a:11:a2:2b:d6:c6:e5:61:05:4c:12: 1f:6e:62:83:77:d6:a7:94:5d:7c:db:aa:bf:b1:78:e3:cb:04: 31:b9:8c:08:af:75:1a:67:72:83:22:d4:9d:6b:70:42:ac:6d: 45:1f:da:c8:8d:05:61:f2:51:c8:81:24:a8:1e:30:92:50:be: e9:77:c3:62:7e:26:3c:69:6d:f0:cd:75:eb:ca:82:b8:06:49: 4b:e7:76:26:ad:ab:d1:b3:b3:00:58:10:27:32:5b:a6:d0:d0: 43:b6:d0:ff:ef:59:8e:f9:75:c6:a9:5f:ee:d3:aa:9d:08:a3: 08:ea:1f:dc:1a:b5:74:2e:30:eb:53:43:8d:51:9c:15:36:bf: 5c:63:a6:43:25:a3:95:c4:27:a0:5b:ed:51:cb:8a:da:15:24: b0:ed:bc:df:89:58:09:05:bd:f7:87:75:2b:73:1d:1b:29:01: a9:e5:32:74:1a:4f:35:6e:fb:fd:7d:c9:ca:8d:e0:96:71:56: bc:93:53:55:38:5c:f6:26:26:0b:c2:e0:69:94:0a:2f:ca:51: 81:51:47:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgbjs4XiSAEl3isL2qdHSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi MzZjNmMwHhcNMjYwMTIxMTIwMTE5WhcNMjYwMTIyMTIwMTE5WjAzMTEwLwYDVQQD EygxYjg2MjBiNDU4ODg2YzQ2MzJjZTMxZmQ5OTY1NTVkYWJjMDg0MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pxGWTr5ImwsEDjVG91DOPix80ei Z6PUeHAyPX5/MaCbDTVkalZYKo/lotbU6SKzlSzkpRqu7l5MEPa6xE0ZieYYYB22 JncdKb/hLIHkflVNQ2QwowIj1fEZBQn/UlMFqFAE58RF5l5qYjIxglG3BP1re4kE 0RXcaf1aY5L0D4QcturFva6QXgaaeGu5IjM2akHZnbv/tGuCq3hMSfpGlu54cux1 RljwGWPFkqbKq3pQIrNLpz6+GdKz47g7yjrZguwaw3zc7ARVTUKxT/UYkjXJaIEx 808LgxIfqdNxY1dVN67IS2vTLoZsbGz/+WGO123kqBGlyfZZ6gXVnRCrhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuGILRYiGxGMs4x/ZllVdq8CEAKMB8GA1UdIwQY MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt MDc0MDExNWI1YTUyLzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefKqkxoI dTcFKvqOTy4mr67wCyA+WKCBw3EHhV8Ga/bdyga79XdxbVC2f4oRoivWxuVhBUwS H25ig3fWp5RdfNuqv7F448sEMbmMCK91GmdygyLUnWtwQqxtRR/ayI0FYfJRyIEk qB4wklC+6XfDYn4mPGlt8M1168qCuAZJS+d2Jq2r0bOzAFgQJzJbptDQQ7bQ/+9Z jvl1xqlf7tOqnQijCOof3Bq1dC4w61NDjVGcFTa/XGOmQyWjlcQnoFvtUcuK2hUk sO2834lYCQW994d1K3MdGykBqeUydBpPNW77/X3Jyo3glnFWvJNTVThc9iYmC8Lg aZQKL8pRgVFHUQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:36 2026 by rpki-client