This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json) Hash identifier: eT+zuKE7JWTO3+QTae1L30mU0r/TWMfFeRdNduJYXlA= Subject key identifier: 22:7B:EB:ED:FE:DF:42:A8:E3:23:56:A1:83:AE:52:EC:3B:90:7A:F3 Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Certificate serial: 019BF91B3157CF38DE3FAC0B100F65448CF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft Manifest number: 0EA2 Signing time: Mon 26 Jan 2026 07:01:07 +0000 Manifest this update: Mon 26 Jan 2026 07:01:07 +0000 Manifest next update: Tue 27 Jan 2026 07:01:07 +0000 Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: ota6xSjQlGG/tAitptV2rXypThox+u884N5ihOfVayY=) 2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:31:57:cf:38:de:3f:ac:0b:10:0f:65:44:8c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Validity Not Before: Jan 26 07:01:07 2026 GMT Not After : Jan 27 07:01:07 2026 GMT Subject: CN=227bebedfedf42a8e32356a183ae52ec3b907af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:58:a3:df:8c:48:e8:5c:50:fa:d7:f7:a5: e1:9b:8c:43:29:66:22:0d:41:5b:16:7f:55:bd:93: c9:90:f2:38:b3:04:52:55:3b:d9:ac:cc:95:0d:b5: 86:77:bc:7a:01:9c:07:c2:bf:3f:62:60:66:09:4c: 73:58:48:d3:11:ad:9b:58:22:79:4e:bb:26:ff:c3: 99:a3:da:7b:6d:40:cd:eb:53:18:e0:6d:6d:8d:d8: 94:0b:9a:97:d7:78:d9:11:94:23:7c:b2:23:27:b5: e1:5b:a3:15:8f:9f:00:9e:05:8a:bd:ec:59:18:bf: 1a:35:84:32:b4:e1:90:5c:fd:fd:ed:ba:35:06:de: e4:e3:68:a1:13:02:77:00:34:b7:df:e2:e1:e2:d4: 9e:68:31:f5:7a:0b:62:a6:04:40:e1:93:84:d1:dc: 0d:41:48:a8:66:92:27:4d:df:5d:27:bc:53:49:1c: fa:0b:af:ed:60:28:24:23:11:a3:5b:7a:6e:59:36: 3f:f7:9b:39:f0:89:b1:fb:5b:64:6e:73:75:8c:aa: 5e:a2:2f:84:6f:b1:f5:d5:6d:16:f6:49:b0:ce:bf: 81:b7:d4:82:86:9d:b8:c7:2d:54:d1:7b:98:89:78: da:41:36:3f:9a:33:d0:fb:fa:a3:de:6b:96:2a:fa: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7B:EB:ED:FE:DF:42:A8:E3:23:56:A1:83:AE:52:EC:3B:90:7A:F3 X509v3 Authority Key Identifier: keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e3:43:15:2a:7b:c5:41:a8:86:b5:61:b1:d2:29:02:18:f0: ae:5f:a3:91:c9:2a:8e:3c:80:e2:6b:14:cd:a0:e4:6b:74:5e: 16:39:72:8b:47:e3:5a:2e:91:d0:99:f5:00:aa:26:15:3d:72: c4:bc:3a:a8:03:07:a5:85:f7:10:08:84:53:5e:65:5f:b8:5f: 2c:3c:3e:72:9b:09:03:81:98:65:ff:dc:25:84:6c:33:46:22: a1:6c:a1:55:61:85:6c:09:87:19:98:c7:93:23:c6:9c:13:57: 7b:36:09:26:9e:63:0c:f1:90:14:85:7f:e2:e6:b1:48:00:38: 46:df:ba:77:fa:8b:62:ef:e2:2a:5c:31:9f:8e:0b:f0:dd:93: fb:63:68:96:10:7b:04:19:bd:4d:36:44:46:d8:bc:4c:3e:69: 3a:cf:08:c7:d6:18:b3:fe:63:f3:1b:5d:93:11:ab:e8:37:cb: d1:90:bb:ba:e8:b9:5a:2d:e5:cf:c7:87:a8:8e:f5:54:3b:50: d8:12:6c:5a:0e:e8:a7:6c:8a:01:6e:43:ea:61:11:3a:06:ea: 30:b5:3a:8b:a7:c3:5b:e7:26:f7:9b:35:1c:0a:1c:22:56:36: 5c:d3:a3:62:0b:55:1c:43:39:23:32:e9:47:60:ac:72:87:2a: f3:d9:be:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GzFXzzjeP6wLEA9lRIz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWVkMTQ4NGU5NmU0YmY3OTkzZTliODY3YjM0YzM0ZDZh OGFlMzYwHhcNMjYwMTI2MDcwMTA3WhcNMjYwMTI3MDcwMTA3WjAzMTEwLwYDVQQD EygyMjdiZWJlZGZlZGY0MmE4ZTMyMzU2YTE4M2FlNTJlYzNiOTA3YWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fBYo9+MSOhcUPrX96Xhm4xDKWYi DUFbFn9VvZPJkPI4swRSVTvZrMyVDbWGd7x6AZwHwr8/YmBmCUxzWEjTEa2bWCJ5 Trsm/8OZo9p7bUDN61MY4G1tjdiUC5qX13jZEZQjfLIjJ7XhW6MVj58AngWKvexZ GL8aNYQytOGQXP397bo1Bt7k42ihEwJ3ADS33+Lh4tSeaDH1egtipgRA4ZOE0dwN QUioZpInTd9dJ7xTSRz6C6/tYCgkIxGjW3puWTY/95s58Imx+1tkbnN1jKpeoi+E b7H11W0W9kmwzr+Bt9SChp24xy1U0XuYiXjaQTY/mjPQ+/qj3muWKvrqzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJ76+3+30Ko4yNWoYOuUuw7kHrzMB8GA1UdIwQY MBaAFOGu0UhOluS/eZPpuGezTDTWqK42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQt NGU3YmNhNTVmODIxLzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQtNGU3YmNhNTVmODIx LzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReNDFSp7 xUGohrVhsdIpAhjwrl+jkckqjjyA4msUzaDka3ReFjlyi0fjWi6R0Jn1AKomFT1y xLw6qAMHpYX3EAiEU15lX7hfLDw+cpsJA4GYZf/cJYRsM0YioWyhVWGFbAmHGZjH kyPGnBNXezYJJp5jDPGQFIV/4uaxSAA4Rt+6d/qLYu/iKlwxn44L8N2T+2NolhB7 BBm9TTZERti8TD5pOs8Ix9YYs/5j8xtdkxGr6DfL0ZC7uui5Wi3lz8eHqI71VDtQ 2BJsWg7op2yKAW5D6mEROgbqMLU6i6fDW+cm95s1HAocIlY2XNOjYgtVHEM5IzLp R2Cscocq89m+Bg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:20:55 2026 by rpki-client