This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json) Hash identifier: G69rEgAOQtOsJZnnCpJVhLUybMznEsHsQbvTOAk2iz0= Subject key identifier: 07:40:72:82:68:EB:99:46:D9:E7:D4:20:82:50:20:CC:34:E6:F8:FB Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Certificate serial: 019BFA2DAF72D40CE9A55F7BBE78F51AAF00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 12:00:56 +0000 Manifest this update: Mon 26 Jan 2026 12:00:56 +0000 Manifest next update: Tue 27 Jan 2026 12:00:56 +0000 Files and hashes: 1: 0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa (hash: FJlCbonLD9dF4g0EKnBAz84rCEY7Zmpte8ZXE9ooZuo=) 2: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: 39w3MBPhGS8aYVBdbzx26aFMjAK2mx6cFHVrnyRxwSg=) 3: CwpxvpCjkjiVHLiVbQuAWgtQ54o.roa (hash: A9xtP47/NQPXNxopvGJvQs5ptoCe1VvA5rj1UqAT7fA=) 4: jl2G_Du7vY1XFmIxGhvnvFEWvcE.roa (hash: RFk3rcVrZLSmQvBNuxyGLTQ7ZkOHCUZDzMm3yZpbe5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:af:72:d4:0c:e9:a5:5f:7b:be:78:f5:1a:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Validity Not Before: Jan 26 12:00:56 2026 GMT Not After : Jan 27 12:00:56 2026 GMT Subject: CN=0740728268eb9946d9e7d420825020cc34e6f8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:e2:8e:4d:8b:af:ed:a7:e7:02:76:b9:3a: 91:cc:64:56:a7:86:69:ba:af:e8:d4:4b:64:c5:03: b6:ff:54:e8:60:6a:51:ca:fe:f1:85:d9:ac:52:e6: 5d:28:c9:79:cd:f2:19:ba:d6:e0:2f:d9:48:ae:2d: 7b:27:b3:47:22:6f:4b:d7:e4:59:3d:74:f1:ff:54: fa:0c:be:7a:9d:c4:43:8c:d4:4e:a0:ab:04:29:b6: 28:f1:fc:1b:a4:1f:2a:32:21:65:8a:2e:06:7a:26: 87:37:3c:0e:75:3a:94:fa:5e:66:87:11:aa:5b:dc: 43:28:ff:ac:ef:95:f1:93:4e:c8:a3:4e:8a:5e:4a: 3c:47:ce:f2:40:0b:30:86:05:be:eb:e8:66:ad:f7: 8b:6f:c5:62:f4:91:2f:7d:b4:e1:04:eb:12:80:ca: c3:e3:79:bd:36:81:23:b0:61:74:8a:aa:91:0c:47: a2:49:0c:5c:0e:d3:2c:e5:e8:14:a2:be:dd:e2:48: 78:2f:b7:b2:f3:83:bc:7a:b6:d1:a6:2b:2f:34:12: ac:1b:5a:21:4b:c0:99:09:c6:48:5f:02:f9:e4:f5: d6:e7:62:eb:be:a3:f3:e1:a5:42:bb:70:a9:6d:5d: e6:c6:77:b3:02:d2:33:ef:86:28:6a:e1:c9:f3:28: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:72:82:68:EB:99:46:D9:E7:D4:20:82:50:20:CC:34:E6:F8:FB X509v3 Authority Key Identifier: keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ee:8a:fb:6f:cd:c2:3a:22:99:2a:25:38:42:62:93:59:98: 49:e8:a3:5b:77:58:d5:ef:47:5a:24:1e:fa:f1:99:6e:05:cf: 47:aa:29:4a:a8:7a:92:2a:e3:ec:39:b5:e5:70:2b:9a:df:6e: be:dd:e2:64:75:71:fd:75:83:2b:12:3e:ae:8a:75:cb:76:06: e7:cd:48:d9:0b:16:5f:74:04:ef:bd:1e:92:cb:88:6e:e2:c2: 11:af:e2:b4:03:1e:bc:76:99:f6:a2:10:ce:c4:2f:ff:21:d0: 51:f5:94:b2:0a:65:ac:ee:60:69:24:9b:d0:65:9b:2a:38:a4: ee:bf:a3:c9:40:9c:45:c9:e8:40:08:26:76:49:d9:34:30:71: a5:f9:a8:62:be:ff:5d:49:96:c4:10:96:7b:de:e8:be:15:4b: 1b:43:8d:a9:41:14:d2:0d:98:41:46:1c:a8:21:03:0d:d8:81: 8e:ad:c5:a4:4c:82:c8:28:17:07:8a:22:11:bf:bc:ce:3d:e5: 2d:3a:38:de:c1:f0:88:36:6c:ca:3f:4c:a8:98:a7:15:cd:0a: 2d:80:c8:83:ba:ce:0e:05:78:34:20:9a:bc:10:d9:11:bb:3d: 27:67:39:1d:71:57:e9:c1:3f:27:81:4b:da:41:b0:0d:b6:91: cf:0c:eb:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6La9y1AzppV97vnj1Gq8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwY2RlMmMxZmNlM2Q2ZmUyMTg1MzQ3ZGQ4OWRjZmQxM2Vi YmIxNTEwHhcNMjYwMTI2MTIwMDU2WhcNMjYwMTI3MTIwMDU2WjAzMTEwLwYDVQQD EygwNzQwNzI4MjY4ZWI5OTQ2ZDllN2Q0MjA4MjUwMjBjYzM0ZTZmOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY7ijk2Lr+2n5wJ2uTqRzGRWp4Zp uq/o1EtkxQO2/1ToYGpRyv7xhdmsUuZdKMl5zfIZutbgL9lIri17J7NHIm9L1+RZ PXTx/1T6DL56ncRDjNROoKsEKbYo8fwbpB8qMiFlii4GeiaHNzwOdTqU+l5mhxGq W9xDKP+s75Xxk07Io06KXko8R87yQAswhgW+6+hmrfeLb8Vi9JEvfbThBOsSgMrD 43m9NoEjsGF0iqqRDEeiSQxcDtMs5egUor7d4kh4L7ey84O8erbRpisvNBKsG1oh S8CZCcZIXwL55PXW52LrvqPz4aVCu3CpbV3mxnezAtIz74YoauHJ8ygqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdAcoJo65lG2efUIIJQIMw05vj7MB8GA1UdIwQY MBaAFODN4sH849b+IYU0fdidz9E+u7FRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEt ZWNiMzEyNmZjOGVkLzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEtZWNiMzEyNmZjOGVk LzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu6K+2/N wjoimSolOEJik1mYSeijW3dY1e9HWiQe+vGZbgXPR6opSqh6kirj7Dm15XArmt9u vt3iZHVx/XWDKxI+rop1y3YG581I2QsWX3QE770eksuIbuLCEa/itAMevHaZ9qIQ zsQv/yHQUfWUsgplrO5gaSSb0GWbKjik7r+jyUCcRcnoQAgmdknZNDBxpfmoYr7/ XUmWxBCWe97ovhVLG0ONqUEU0g2YQUYcqCEDDdiBjq3FpEyCyCgXB4oiEb+8zj3l LTo43sHwiDZsyj9MqJinFc0KLYDIg7rODgV4NCCavBDZEbs9J2c5HXFX6cE/J4FL 2kGwDbaRzwzrzA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:03 2026 by rpki-client