This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json) Hash identifier: Xe4gMMS0t0yaAW42pDLfsDlyng/51yG+2Axdybvioqs= Subject key identifier: 33:DE:32:D9:E5:25:D4:D1:00:C5:B8:1D:07:37:D1:DA:8D:0A:EB:E0 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019BFC52CE267CF68BACC9F211BAF71DBC04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 22:00:43 +0000 Manifest this update: Mon 26 Jan 2026 22:00:43 +0000 Manifest next update: Tue 27 Jan 2026 22:00:43 +0000 Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: ci/z6WyIt5YK0JmFzk0AP99woodrpNC+eSK1UP5LJH8=) 2: Wi5MJkqvObCqrjZBlo0JDmeXkfI.roa (hash: 99QCRcjIbmAy7NXYDozY/LitcvyDVNBk3XTYfLTEqtM=) 3: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (hash: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo=) 4: bRn03FRlSzZThZNkviNVTHKQJGs.roa (hash: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M=) 5: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (hash: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs=) 6: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (hash: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk=) 7: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (hash: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:ce:26:7c:f6:8b:ac:c9:f2:11:ba:f7:1d:bc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Jan 26 22:00:43 2026 GMT Not After : Jan 27 22:00:43 2026 GMT Subject: CN=33de32d9e525d4d100c5b81d0737d1da8d0aebe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:bf:37:6f:14:63:5d:36:7f:b4:be:17:15: 06:29:48:5c:12:6f:6a:e0:e8:ee:62:24:f7:d8:57: 9f:cb:1e:28:0e:49:62:c7:80:59:bc:b7:3b:f9:70: 5a:d2:32:35:18:b9:ad:95:3f:57:72:95:5c:27:b9: 6f:db:8e:54:06:80:28:a3:59:74:a4:25:bf:19:22: 42:40:10:83:4f:a4:6b:ed:46:26:08:44:7c:d9:e5: 82:3a:7f:30:15:31:15:c2:dd:6a:90:93:4e:43:83: 34:02:10:cf:c2:ba:37:5f:35:de:13:4c:fe:35:88: f7:59:62:d1:a7:06:02:6d:f2:c7:3a:7a:06:eb:0a: 0d:d7:44:c4:c6:61:e7:06:4b:85:f1:32:78:0b:5d: 92:47:aa:74:c7:22:87:ea:d8:07:09:65:64:1a:7f: e3:84:d9:19:31:ea:2c:23:9a:37:35:94:e3:f9:81: bf:c4:fe:ad:ac:dd:9c:2e:cb:90:48:c3:1f:a2:13: 2a:40:b4:cf:49:7a:65:d3:6a:ad:6a:d6:89:c4:c5: f9:a1:df:79:cb:76:48:ad:45:26:f1:ae:45:dd:ec: 25:37:64:ea:d7:3a:41:df:5f:90:f0:4a:65:ff:99: ee:6b:02:bd:ab:83:cd:fc:44:e6:3e:9b:6d:1e:68: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:32:D9:E5:25:D4:D1:00:C5:B8:1D:07:37:D1:DA:8D:0A:EB:E0 X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:21:ad:82:0f:94:92:59:f4:40:91:99:a7:ac:d2:32:5e:9f: 1b:4f:d4:5c:b9:a3:37:50:ec:7e:69:a4:f0:6a:30:31:5a:82: 21:56:c4:5d:4a:9d:34:a0:3f:6a:a0:d4:b8:53:03:93:1b:17: 0b:b2:02:38:6b:7c:f8:14:f7:68:b6:15:4d:d8:c3:9e:12:7d: 0e:ec:de:2c:18:35:49:2f:40:94:86:6e:20:11:81:a0:a1:18: 80:89:9c:4d:bb:8c:a9:52:22:80:d6:4e:61:5a:c5:1f:c7:f9: da:6e:c4:b7:43:ae:d2:fa:af:83:80:e4:85:c6:67:8b:c8:36: 9e:80:b0:05:e6:c6:17:f1:84:68:b3:d5:7e:1e:f5:d2:f5:ba: 75:99:63:78:14:4a:29:78:f3:0e:ed:6b:f2:0c:35:ed:88:5f: 09:fe:a4:80:58:04:0b:bf:d7:fd:72:a1:16:cc:84:a5:76:8b: 82:73:7c:1e:ef:f3:c9:70:0b:99:66:b5:05:2b:c0:11:6b:4f: d6:57:4e:8b:30:61:c4:f8:02:bd:ae:3f:e5:e5:55:69:af:86: 57:8d:0e:47:8e:42:07:b2:a6:49:cb:4f:d7:cc:4e:b7:78:fb: 63:31:92:32:79:51:f5:3d:d6:32:5e:85:b6:40:6a:fb:93:e3: 8e:d4:20:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Us4mfPaLrMnyEbr3HbwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjYwMTI2MjIwMDQzWhcNMjYwMTI3MjIwMDQzWjAzMTEwLwYDVQQD EygzM2RlMzJkOWU1MjVkNGQxMDBjNWI4MWQwNzM3ZDFkYThkMGFlYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMS/N28UY102f7S+FxUGKUhcEm9q 4OjuYiT32Fefyx4oDklix4BZvLc7+XBa0jI1GLmtlT9XcpVcJ7lv245UBoAoo1l0 pCW/GSJCQBCDT6Rr7UYmCER82eWCOn8wFTEVwt1qkJNOQ4M0AhDPwro3XzXeE0z+ NYj3WWLRpwYCbfLHOnoG6woN10TExmHnBkuF8TJ4C12SR6p0xyKH6tgHCWVkGn/j hNkZMeosI5o3NZTj+YG/xP6trN2cLsuQSMMfohMqQLTPSXpl02qtataJxMX5od95 y3ZIrUUm8a5F3ewlN2Tq1zpB31+Q8Epl/5nuawK9q4PN/ETmPpttHmgJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPeMtnlJdTRAMW4HQc30dqNCuvgMB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCGtgg+U kln0QJGZp6zSMl6fG0/UXLmjN1Dsfmmk8GowMVqCIVbEXUqdNKA/aqDUuFMDkxsX C7ICOGt8+BT3aLYVTdjDnhJ9DuzeLBg1SS9AlIZuIBGBoKEYgImcTbuMqVIigNZO YVrFH8f52m7Et0Ou0vqvg4DkhcZni8g2noCwBebGF/GEaLPVfh710vW6dZljeBRK KXjzDu1r8gw17YhfCf6kgFgEC7/X/XKhFsyEpXaLgnN8Hu/zyXALmWa1BSvAEWtP 1ldOizBhxPgCva4/5eVVaa+GV40OR45CB7KmSctP18xOt3j7YzGSMnlR9T3WMl6F tkBq+5PjjtQgkw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:17:44 2026 by rpki-client