This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json) Hash identifier: DalrxqvM5rJHLoCObX1zIdqT1beiC96ejgfL12k3eFo= Subject key identifier: 95:8D:A8:E6:48:57:94:73:51:4D:84:D0:C6:B5:6B:CC:2B:05:E1:EB Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Certificate serial: 019BFC52BA71E745FC796B3E828BD4390996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft Manifest number: 177E Signing time: Mon 26 Jan 2026 22:00:38 +0000 Manifest this update: Mon 26 Jan 2026 22:00:38 +0000 Manifest next update: Tue 27 Jan 2026 22:00:38 +0000 Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: /weYTq/X8TVKp39KtCSJflDwr9JdKoM05BttEjkAzNU=) 2: KelGy5FqE-jDU-pEPXMpLcf7VOM.roa (hash: NXCD8cFHqcP6cTa5T44AKZobSHdu2jZzVhofvoBvDgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:ba:71:e7:45:fc:79:6b:3e:82:8b:d4:39:09:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Validity Not Before: Jan 26 22:00:38 2026 GMT Not After : Jan 27 22:00:38 2026 GMT Subject: CN=958da8e648579473514d84d0c6b56bcc2b05e1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:bf:a5:3d:3f:a0:04:96:d4:00:1b:69:cc: b2:ba:89:9d:76:ba:4b:2c:1d:9f:82:91:d3:59:c5: 4b:2c:99:69:d1:cf:e1:2f:cb:14:06:c8:58:48:25: 3c:78:9a:e0:15:6f:16:95:65:66:e9:0f:1f:da:46: 69:65:a7:e2:dc:21:7d:ad:69:95:8e:e4:07:fc:5b: 79:c2:19:aa:9a:0b:09:2a:07:fe:cf:ca:ea:98:ac: 82:76:c4:cb:98:26:b0:50:80:67:82:94:57:6c:8f: c1:b1:45:a3:0f:27:0f:a7:dd:5b:73:58:5e:1c:84: ea:43:53:89:c5:b7:ff:b1:3e:8e:b8:f1:c9:fc:fc: 44:c8:dd:71:39:c8:bc:2e:90:7c:71:5c:9f:cb:ac: 1f:ab:ab:d3:ac:77:16:34:f6:4e:ff:01:49:1b:39: 71:f2:3e:3e:21:e6:38:d7:80:76:82:7e:73:65:76: 6e:3e:08:40:38:e0:90:ab:1b:e7:7e:c3:bf:f6:7d: 96:cb:71:a2:6f:2b:e5:fd:bb:7d:cc:d8:e1:42:90: a2:04:40:22:4b:65:07:fb:fe:ee:c3:2e:6a:79:1d: 58:a8:b1:fa:8c:17:f8:c7:d2:aa:8b:8f:b5:fe:ad: 55:b4:64:72:23:83:c4:05:57:ce:24:6b:18:d5:90: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:A8:E6:48:57:94:73:51:4D:84:D0:C6:B5:6B:CC:2B:05:E1:EB X509v3 Authority Key Identifier: keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:86:9c:aa:e3:47:aa:68:fc:61:4e:ac:2c:b8:c6:95:14:37: 18:3e:fb:15:42:32:ed:95:c1:96:c0:6a:f9:cd:a4:b4:85:53: 32:d5:9b:de:ba:70:c0:c1:ce:8f:f2:3d:7b:e1:87:ed:f0:64: 66:83:9c:c7:b8:49:5f:18:5b:f9:b1:96:34:9b:09:18:33:10: 59:84:fc:24:d0:73:de:81:40:fc:ce:ac:e7:9f:ed:af:98:dc: 43:19:e9:8d:82:98:3a:38:fe:c0:76:04:47:12:16:02:ff:95: 8e:e2:4d:46:f1:a2:d5:bc:cf:09:e6:fc:a8:75:3b:88:50:5a: 32:14:fa:53:48:0c:83:22:b9:71:7a:5f:96:45:2e:1f:f8:11: 24:a6:8b:74:c3:dd:74:71:07:cf:3d:37:f5:f9:8f:d8:ea:50: 20:80:cb:62:8c:a1:81:89:a7:eb:25:29:61:4a:41:f4:3c:e0: 8f:94:01:6e:27:09:f4:e1:69:04:6a:55:17:d4:7d:d2:51:d7: 31:2c:1e:da:76:85:15:02:8e:6b:ae:0f:9a:18:24:06:a6:71: 49:a7:c9:47:25:e9:82:92:62:d4:02:7a:54:0c:94:e9:b9:13: e1:42:7b:0e:45:50:cc:fe:28:70:b7:ac:a8:b1:2a:53:b7:d1: f6:0f:7e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Urpx50X8eWs+govUOQmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGFhZGMwNjk1NTVhMWFiZTAzMWZkMGEwMjgwNjljOGZi ODliMmIwHhcNMjYwMTI2MjIwMDM4WhcNMjYwMTI3MjIwMDM4WjAzMTEwLwYDVQQD Eyg5NThkYThlNjQ4NTc5NDczNTE0ZDg0ZDBjNmI1NmJjYzJiMDVlMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p6/pT0/oASW1AAbacyyuomddrpL LB2fgpHTWcVLLJlp0c/hL8sUBshYSCU8eJrgFW8WlWVm6Q8f2kZpZafi3CF9rWmV juQH/Ft5whmqmgsJKgf+z8rqmKyCdsTLmCawUIBngpRXbI/BsUWjDycPp91bc1he HITqQ1OJxbf/sT6OuPHJ/PxEyN1xOci8LpB8cVyfy6wfq6vTrHcWNPZO/wFJGzlx 8j4+IeY414B2gn5zZXZuPghAOOCQqxvnfsO/9n2Wy3Gibyvl/bt9zNjhQpCiBEAi S2UH+/7uwy5qeR1YqLH6jBf4x9Kqi4+1/q1VtGRyI4PEBVfOJGsY1ZBghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWNqOZIV5RzUU2E0Ma1a8wrBeHrMB8GA1UdIwQY MBaAFOCKrcBpVVoavgMf0KAoBpyPuJsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQt OWE3MmQ5OTAzZWI4LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQtOWE3MmQ5OTAzZWI4 LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4acquNH qmj8YU6sLLjGlRQ3GD77FUIy7ZXBlsBq+c2ktIVTMtWb3rpwwMHOj/I9e+GH7fBk ZoOcx7hJXxhb+bGWNJsJGDMQWYT8JNBz3oFA/M6s55/tr5jcQxnpjYKYOjj+wHYE RxIWAv+VjuJNRvGi1bzPCeb8qHU7iFBaMhT6U0gMgyK5cXpflkUuH/gRJKaLdMPd dHEHzz039fmP2OpQIIDLYoyhgYmn6yUpYUpB9Dzgj5QBbicJ9OFpBGpVF9R90lHX MSwe2naFFQKOa64PmhgkBqZxSafJRyXpgpJi1AJ6VAyU6bkT4UJ7DkVQzP4ocLes qLEqU7fR9g9+/g== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:39 2026 by rpki-client