This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json) Hash identifier: IiX7+1Ie4Fk0Rw8YRnN0NCxXjImiz7VjBSDWZYbAlLE= Subject key identifier: B6:C8:E5:F3:F4:BA:04:96:9C:10:7F:55:61:31:C7:7D:65:82:51:E2 Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Certificate serial: 019BEA4D5DF375FCACBA76B25E7CD83A6F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft Manifest number: 0485 Signing time: Fri 23 Jan 2026 10:01:37 +0000 Manifest this update: Fri 23 Jan 2026 10:01:37 +0000 Manifest next update: Sat 24 Jan 2026 10:01:37 +0000 Files and hashes: 1: 2FxreVqUv_iXTp_gEHHtX_RyDvE.roa (hash: 6tKnUYnu6mjtenIrBJhX9fiu65PwuGcfSqr4GAWWO5o=) 2: RKI3XSz6XZy96Ol-18QcP9FlH4c.roa (hash: g/j02qL/fofi4lQDzUhm/wqo/x+TAc1YiiXTTjZy7lA=) 3: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: HDcje/NCWdGEPkgeBVVY/YSS9fxUmv0q32Vo3REdMr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:4d:5d:f3:75:fc:ac:ba:76:b2:5e:7c:d8:3a:6f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Validity Not Before: Jan 23 10:01:37 2026 GMT Not After : Jan 24 10:01:37 2026 GMT Subject: CN=b6c8e5f3f4ba04969c107f556131c77d658251e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:61:48:02:51:36:d7:09:a3:5d:40:8d:4b: fe:87:33:47:03:4f:4d:9d:61:df:95:66:5c:49:ec: e3:4e:3d:4d:bf:ce:52:45:a0:c7:0e:6e:96:76:7d: 04:26:f1:6e:04:56:a5:f7:97:b7:72:54:28:73:65: 7a:01:04:c6:8d:ec:7b:e9:82:35:62:85:e6:32:c3: eb:96:c2:45:63:14:59:fa:1a:75:90:92:da:2c:b9: 3f:d9:67:d3:66:65:bf:03:80:77:f2:62:60:6d:1b: 8a:ed:a2:0f:ec:ff:3f:1e:e1:f3:51:20:bc:01:a4: 9d:2c:e5:56:81:fc:41:71:42:d1:ee:89:93:85:91: a3:41:77:d0:3d:6e:2e:b6:27:43:63:96:21:19:e2: c5:d2:45:3e:24:41:a5:7e:8e:1e:8c:65:c4:fb:da: b6:4d:bd:dd:7e:8d:e4:9a:71:11:c5:29:9a:51:80: a6:71:f3:9c:79:ea:17:68:57:ea:7e:25:76:40:97: 52:92:73:f9:df:03:0c:fc:a7:f5:df:53:0a:bb:42: 26:1a:22:fc:60:39:6a:79:b6:52:a7:18:7d:1c:9e: 73:d2:46:35:25:48:5f:c6:6b:5c:fc:42:2b:7f:52: 6d:be:ec:88:32:be:1c:90:cd:56:dc:6b:7d:0f:8b: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:E5:F3:F4:BA:04:96:9C:10:7F:55:61:31:C7:7D:65:82:51:E2 X509v3 Authority Key Identifier: keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d4:f2:b6:e2:a6:c3:b6:99:d0:df:94:c7:78:97:f4:76:c0: 72:a4:f4:a4:7f:6d:14:9d:40:b7:f6:1e:ff:54:03:aa:52:16: 20:7c:f7:1b:b5:35:34:f7:0d:23:ae:e6:94:1a:78:ae:c4:01: 26:3e:98:58:59:86:41:b6:a7:a0:64:2a:1c:3a:6e:b3:50:74: 70:52:87:b7:56:a1:ac:fa:88:f8:21:b0:c5:99:ad:21:93:27: 73:56:6c:ea:ed:99:22:24:60:17:11:5f:2f:2e:6b:3d:6c:92: aa:7e:66:2c:f6:3b:91:65:8f:13:7e:f4:9d:61:b4:dc:c1:de: 9d:43:9e:97:8f:0f:e3:51:20:53:c9:2c:a6:fb:7d:f2:20:8f: d8:20:6b:87:6f:03:2e:ae:01:18:46:5e:57:22:50:91:80:46: cd:6f:67:0d:93:8f:86:45:5b:bf:54:9a:e8:ad:92:36:26:bf: 4f:33:7d:1b:db:1a:b4:ea:03:34:68:c6:90:ac:eb:e2:3c:bd: 77:e0:8b:57:c4:16:02:8f:b5:23:05:ca:ee:d0:8f:1f:16:63: 16:af:d5:f9:f8:76:70:ce:18:a6:71:f1:0f:d3:d5:d3:9e:1c: 2d:9c:d2:4b:e0:00:b7:9d:7b:ba:ab:cc:0c:da:d7:fc:3d:bb: 52:8d:27:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvqTV3zdfysunayXnzYOm80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk NGU4YzUwHhcNMjYwMTIzMTAwMTM3WhcNMjYwMTI0MTAwMTM3WjAzMTEwLwYDVQQD EyhiNmM4ZTVmM2Y0YmEwNDk2OWMxMDdmNTU2MTMxYzc3ZDY1ODI1MWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqRhSAJRNtcJo11AjUv+hzNHA09N nWHflWZcSezjTj1Nv85SRaDHDm6Wdn0EJvFuBFal95e3clQoc2V6AQTGjex76YI1 YoXmMsPrlsJFYxRZ+hp1kJLaLLk/2WfTZmW/A4B38mJgbRuK7aIP7P8/HuHzUSC8 AaSdLOVWgfxBcULR7omThZGjQXfQPW4utidDY5YhGeLF0kU+JEGlfo4ejGXE+9q2 Tb3dfo3kmnERxSmaUYCmcfOceeoXaFfqfiV2QJdSknP53wMM/Kf131MKu0ImGiL8 YDlqebZSpxh9HJ5z0kY1JUhfxmtc/EIrf1JtvuyIMr4ckM1W3Gt9D4uguwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbI5fP0ugSWnBB/VWExx31lglHiMB8GA1UdIwQY MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et YWM4NjQ3ZDA1NThhLzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNTytuKm w7aZ0N+Ux3iX9HbAcqT0pH9tFJ1At/Ye/1QDqlIWIHz3G7U1NPcNI67mlBp4rsQB Jj6YWFmGQbanoGQqHDpus1B0cFKHt1ahrPqI+CGwxZmtIZMnc1Zs6u2ZIiRgFxFf Ly5rPWySqn5mLPY7kWWPE370nWG03MHenUOel48P41EgU8kspvt98iCP2CBrh28D Lq4BGEZeVyJQkYBGzW9nDZOPhkVbv1Sa6K2SNia/TzN9G9satOoDNGjGkKzr4jy9 d+CLV8QWAo+1IwXK7tCPHxZjFq/V+fh2cM4YpnHxD9PV054cLZzSS+AAt517uqvM DNrX/D27Uo0nBQ== -----END CERTIFICATE-----Generated at Fri Jan 23 12:57:53 2026 by rpki-client