This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json) Hash identifier: 0R9SD6S8knJgdOBb8varZEaddvnN+oP9nCxC3LYxckk= Subject key identifier: 57:24:0D:1A:C0:06:64:FD:CF:8E:C1:B6:71:A1:84:C1:49:E0:AE:64 Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Certificate serial: 019BFE792434DACE6D446C47C832112C1F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft Manifest number: 05BB Signing time: Tue 27 Jan 2026 08:01:50 +0000 Manifest this update: Tue 27 Jan 2026 08:01:50 +0000 Manifest next update: Wed 28 Jan 2026 08:01:50 +0000 Files and hashes: 1: 6ABbzKC7xD3f15f1nL7ehPPdv8g.roa (hash: vm92m0MvDsKxhJur0/wyRBU4n09f3ypTfzNsc2DUitY=) 2: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: DIts0RTJGzOlHMaugO3R1s905um1Dz9JaDTdBQFSkuo=) 3: uWma75PdV6AVC83aCG-d5GXsBTA.roa (hash: l+sIuRGwU1mgUSZbtQoGfvEHgDWDmkYLosWZi/xYnJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:79:24:34:da:ce:6d:44:6c:47:c8:32:11:2c:1f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Validity Not Before: Jan 27 08:01:50 2026 GMT Not After : Jan 28 08:01:50 2026 GMT Subject: CN=57240d1ac00664fdcf8ec1b671a184c149e0ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:54:77:df:a1:e9:87:04:55:32:8b:c6:ba: ca:cc:aa:70:66:77:fd:ac:fe:a7:ef:c6:17:e4:b1: 5a:e8:a9:69:3d:5e:4b:58:60:b2:97:19:f4:96:c0: 8d:63:95:f8:df:ec:a4:ee:00:44:80:2e:45:0b:99: 6e:28:be:f4:6b:ad:d5:58:14:ab:91:af:30:0a:e2: ea:33:7c:b8:a3:d0:b2:a1:48:75:2e:4a:13:ee:62: 12:4d:a5:43:b5:12:48:24:2a:be:5a:1b:15:ac:39: 5d:8f:d3:ee:82:e3:69:24:4d:bc:9c:fe:d4:fa:2c: a7:63:9f:3e:0c:cc:45:78:b3:ba:2c:65:e6:92:eb: 0f:1c:b6:95:25:2a:20:35:eb:5a:23:7c:52:ae:05: e0:4e:17:72:94:4b:80:79:89:ce:db:09:38:bb:9b: ec:98:e1:3d:c6:44:99:7a:1c:4e:d7:82:56:40:c5: 1e:bc:ab:e6:8d:73:3b:5c:3a:4b:43:59:61:ef:39: c2:31:fc:d6:09:b0:91:38:2b:e5:f3:86:f0:11:f4: ea:e4:97:b3:44:85:4e:52:7d:34:20:de:dc:b2:31: e8:b9:a6:fe:08:e9:c4:e1:d6:3d:e9:7f:64:25:9f: 83:34:3e:64:45:e0:5e:06:a6:1f:67:3d:a5:04:62: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:24:0D:1A:C0:06:64:FD:CF:8E:C1:B6:71:A1:84:C1:49:E0:AE:64 X509v3 Authority Key Identifier: keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7f:a1:a2:ee:9c:df:db:ca:7e:36:a0:65:cb:6f:0d:2c:af: 79:15:3c:f4:d8:eb:c1:a1:12:04:f7:09:a8:8f:f0:8c:38:e7: 8e:b6:bc:87:b3:4d:da:ce:a6:32:ec:c9:57:49:bf:8b:13:9d: b3:68:1e:5d:b2:b9:14:3f:e0:7d:17:94:b0:8d:e3:54:4d:48: 38:d0:4d:54:c8:35:35:8c:32:cf:18:6d:7c:08:68:24:e2:d1: 6f:3c:9a:4e:09:d4:19:94:37:07:e6:6b:5e:e8:38:2b:33:8b: cd:0e:17:b7:ff:99:42:fa:d5:2a:95:62:b3:85:91:ca:f2:69: 57:3b:8c:47:30:04:05:23:0b:81:71:ed:55:a1:37:52:c8:f2: a3:3e:06:45:9f:11:07:ed:50:a7:07:5f:53:29:17:c8:47:a5: 8b:03:0d:ff:f5:bd:51:2b:88:c1:ca:08:84:d8:d8:e1:7d:0a: 17:8d:ce:0a:cf:a1:87:a8:fe:65:63:f4:d8:e6:ba:b7:cb:cd: 82:db:4f:27:52:9c:b3:d8:f1:50:f2:3e:7a:a8:e0:43:56:e0: 04:8f:d6:40:2c:96:de:f4:64:d4:b1:66:3c:da:5d:a4:80:d8: 50:91:7b:52:f6:18:8f:3f:92:9b:3d:c5:c8:c0:b8:b3:5e:0c: 42:d1:ab:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eSQ02s5tRGxHyDIRLB8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj OTZmMjAwHhcNMjYwMTI3MDgwMTUwWhcNMjYwMTI4MDgwMTUwWjAzMTEwLwYDVQQD Eyg1NzI0MGQxYWMwMDY2NGZkY2Y4ZWMxYjY3MWExODRjMTQ5ZTBhZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOVUd9+h6YcEVTKLxrrKzKpwZnf9 rP6n78YX5LFa6KlpPV5LWGCylxn0lsCNY5X43+yk7gBEgC5FC5luKL70a63VWBSr ka8wCuLqM3y4o9CyoUh1LkoT7mISTaVDtRJIJCq+WhsVrDldj9PuguNpJE28nP7U +iynY58+DMxFeLO6LGXmkusPHLaVJSogNetaI3xSrgXgThdylEuAeYnO2wk4u5vs mOE9xkSZehxO14JWQMUevKvmjXM7XDpLQ1lh7znCMfzWCbCROCvl84bwEfTq5Jez RIVOUn00IN7csjHouab+COnE4dY96X9kJZ+DND5kReBeBqYfZz2lBGJaJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFckDRrABmT9z47BtnGhhMFJ4K5kMB8GA1UdIwQY MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX+hou6c 39vKfjagZctvDSyveRU89NjrwaESBPcJqI/wjDjnjra8h7NN2s6mMuzJV0m/ixOd s2geXbK5FD/gfReUsI3jVE1IONBNVMg1NYwyzxhtfAhoJOLRbzyaTgnUGZQ3B+Zr Xug4KzOLzQ4Xt/+ZQvrVKpVis4WRyvJpVzuMRzAEBSMLgXHtVaE3Usjyoz4GRZ8R B+1QpwdfUykXyEeliwMN//W9USuIwcoIhNjY4X0KF43OCs+hh6j+ZWP02Oa6t8vN gttPJ1Kcs9jxUPI+eqjgQ1bgBI/WQCyW3vRk1LFmPNpdpIDYUJF7UvYYjz+Smz3F yMC4s14MQtGrzA== -----END CERTIFICATE-----Generated at Tue Jan 27 12:45:25 2026 by rpki-client