This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json) Hash identifier: Fn9GqZrRswlPzL0Xaam8ZBGWIZj4C5rDHs/xZotZ4iU= Subject key identifier: 0F:67:93:4B:D0:CF:04:F0:FE:54:4E:26:5F:2E:12:7D:7E:06:0B:A7 Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8 Certificate serial: 019BFA2D4CF93789DD2A539C50FAADE77A19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft Manifest number: 17F8 Signing time: Mon 26 Jan 2026 12:00:31 +0000 Manifest this update: Mon 26 Jan 2026 12:00:31 +0000 Manifest next update: Tue 27 Jan 2026 12:00:31 +0000 Files and hashes: 1: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=) 2: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=) 3: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=) 4: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=) 5: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=) 6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: PuYW32qUmBLOJOxhCinpABVf+XPDLBtfN20KX2nUMTg=) 7: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=) 8: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:4c:f9:37:89:dd:2a:53:9c:50:fa:ad:e7:7a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8 Validity Not Before: Jan 26 12:00:31 2026 GMT Not After : Jan 27 12:00:31 2026 GMT Subject: CN=0f67934bd0cf04f0fe544e265f2e127d7e060ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:03:e0:88:4e:a6:be:7d:34:aa:00:1f:da:7a: 01:ef:c3:aa:ad:49:59:18:12:22:20:b7:ed:3b:77: 02:b1:d8:4b:84:14:e6:3a:b8:4a:e0:b0:4f:ae:a9: cb:e9:a4:fa:5b:c2:27:3f:d4:92:57:e8:97:0c:cc: 1f:74:e8:8b:46:76:7c:05:26:bc:c7:d8:e5:c9:07: 34:f5:81:f6:41:4e:10:e6:a4:3c:e9:bd:39:c6:f7: 7c:e2:24:f8:ae:f9:18:46:29:38:75:eb:c6:ff:58: 68:e9:84:7e:b8:24:92:94:d4:c5:c8:b0:e1:ff:8f: a0:a0:17:eb:aa:b7:21:05:f0:2f:7a:24:4d:e5:c8: 7b:2f:37:ed:03:34:fe:d2:f9:c5:e4:d8:7d:d9:c8: a6:41:14:51:21:f9:95:5c:b6:e3:62:c2:3e:33:7e: e9:6d:08:0d:56:87:d3:68:99:0b:05:43:72:f5:58: dc:ad:d6:d9:c3:ec:e5:68:c9:56:26:db:b1:0b:36: dc:a4:76:1e:0a:e2:6a:1c:24:cf:39:b3:98:b4:07: da:0b:6d:fe:f8:af:a4:03:6a:9f:b1:e9:0f:ac:dd: 41:d7:0a:e8:f7:4b:a3:d0:8a:42:da:07:ab:7b:1e: dd:c7:e2:07:c0:c6:b0:f4:ab:0d:e5:a5:9a:db:31: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:67:93:4B:D0:CF:04:F0:FE:54:4E:26:5F:2E:12:7D:7E:06:0B:A7 X509v3 Authority Key Identifier: keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cc:54:60:e0:a1:69:13:78:ee:dd:b0:1d:ad:c3:89:1d:d5: c0:fa:09:26:a2:d8:dc:b7:68:0c:9d:db:1e:7c:ef:bb:45:67: 0f:1a:e7:5f:71:74:7b:f8:45:77:9e:7c:eb:7b:b3:15:64:e2: d2:80:7c:e9:bd:ef:cc:81:57:a5:0f:41:45:3a:14:ca:79:ed: 64:ac:87:f7:cc:de:99:c3:db:49:67:16:92:c4:3c:48:4b:bf: 80:49:47:f6:b1:11:68:48:37:fc:f2:d5:c8:07:5d:cd:62:a2: ef:94:ff:5f:42:19:ab:d6:0b:a3:93:ef:57:4c:1d:20:99:a8: 6b:04:8d:e3:19:fe:6d:55:b1:b5:c8:d0:fd:17:be:61:72:77: 78:25:86:be:d0:21:85:2e:c8:aa:b5:41:20:b4:39:a0:bf:8c: 9e:f1:49:5b:30:77:f4:3a:a7:c8:33:b8:e3:7e:6c:d2:05:5b: 05:e0:4a:68:a3:65:7e:78:cc:5c:4e:47:a2:5a:69:fe:06:23: a5:b1:83:40:41:59:27:db:b2:d6:41:5a:7e:89:5c:ab:71:52: e2:6d:0a:06:5d:52:13:f7:83:c3:7c:c7:fb:c5:75:c4:23:86: 52:50:da:8c:ba:98:cf:92:77:c3:d6:0b:e4:ac:e2:e1:0b:93: 47:b0:71:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LUz5N4ndKlOcUPqt53oZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz OTM0YjgwHhcNMjYwMTI2MTIwMDMxWhcNMjYwMTI3MTIwMDMxWjAzMTEwLwYDVQQD EygwZjY3OTM0YmQwY2YwNGYwZmU1NDRlMjY1ZjJlMTI3ZDdlMDYwYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwPgiE6mvn00qgAf2noB78OqrUlZ GBIiILftO3cCsdhLhBTmOrhK4LBPrqnL6aT6W8InP9SSV+iXDMwfdOiLRnZ8BSa8 x9jlyQc09YH2QU4Q5qQ86b05xvd84iT4rvkYRik4devG/1ho6YR+uCSSlNTFyLDh /4+goBfrqrchBfAveiRN5ch7LzftAzT+0vnF5Nh92cimQRRRIfmVXLbjYsI+M37p bQgNVofTaJkLBUNy9VjcrdbZw+zlaMlWJtuxCzbcpHYeCuJqHCTPObOYtAfaC23+ +K+kA2qfsekPrN1B1wro90uj0IpC2gerex7dx+IHwMaw9KsN5aWa2zGXOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9nk0vQzwTw/lROJl8uEn1+BgunMB8GA1UdIwQY MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt MDI1M2QwNGZiOGZmLzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8xUYOCh aRN47t2wHa3DiR3VwPoJJqLY3LdoDJ3bHnzvu0VnDxrnX3F0e/hFd55863uzFWTi 0oB86b3vzIFXpQ9BRToUynntZKyH98zemcPbSWcWksQ8SEu/gElH9rERaEg3/PLV yAddzWKi75T/X0IZq9YLo5PvV0wdIJmoawSN4xn+bVWxtcjQ/Re+YXJ3eCWGvtAh hS7IqrVBILQ5oL+MnvFJWzB39DqnyDO4435s0gVbBeBKaKNlfnjMXE5Holpp/gYj pbGDQEFZJ9uy1kFafolcq3FS4m0KBl1SE/eDw3zH+8V1xCOGUlDajLqYz5J3w9YL 5Kzi4QuTR7Bx7g== -----END CERTIFICATE-----Generated at Mon Jan 26 15:40:01 2026 by rpki-client