This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json) Hash identifier: bEeQWVh4KFAxw+xS1kEAqDr14pNRyK47SoyJFVMBsjs= Subject key identifier: 0B:BD:BD:8C:65:27:15:41:C5:82:8F:88:D7:EA:73:59:96:C1:ED:87 Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10 Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910 Certificate serial: 019BFAD263488CF5D32D063EA19CF825449E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft Manifest number: 076E Signing time: Mon 26 Jan 2026 15:00:50 +0000 Manifest this update: Mon 26 Jan 2026 15:00:50 +0000 Manifest next update: Tue 27 Jan 2026 15:00:50 +0000 Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: jLMxT8bscsFDyPdq536qLl+es3jxHMxvvxuOD6R4H4o=) 2: PhborNJW4v901OmJBHlugkCPu9Q.roa (hash: Woe0vtydZEfAzh9wNFeDl+e4gU+OEGllk8tizf6C77U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:63:48:8c:f5:d3:2d:06:3e:a1:9c:f8:25:44:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910 Validity Not Before: Jan 26 15:00:50 2026 GMT Not After : Jan 27 15:00:50 2026 GMT Subject: CN=0bbdbd8c65271541c5828f88d7ea735996c1ed87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:73:fe:82:6b:15:9e:cf:4c:67:f8:79:1e: 6a:46:9b:90:c2:ab:c5:c0:c9:8b:4e:48:f1:ac:01: dc:d0:9d:c7:7a:ee:20:d9:7b:38:05:67:1a:01:1f: 93:07:bb:16:1c:e7:e8:1a:17:8b:1a:99:59:5b:ee: e6:4c:42:77:81:ad:ec:d5:16:a8:17:79:f4:8f:24: 3c:48:82:49:28:2f:c9:15:f9:c1:f6:45:e4:f5:ed: ce:c9:e8:cf:e5:25:97:39:09:44:8b:cf:34:da:7a: 02:1a:16:0e:6e:7a:3f:4d:10:87:08:9f:eb:e8:e9: 2f:4f:f9:60:15:16:39:7b:f7:1d:85:8e:c6:cf:7a: c2:d4:b7:11:fb:35:00:61:49:d2:08:34:96:b3:8f: 4c:40:b5:e4:c7:58:cc:5c:a6:2b:5c:8c:32:c8:79: 71:04:93:6f:3e:b8:3c:ef:be:ba:40:d3:da:ed:6b: 04:2c:ce:d8:ca:54:64:03:58:09:55:4b:6c:79:b8: 3e:37:99:0a:75:19:9a:08:ad:6a:2d:91:c4:45:e0: 6a:21:bf:62:13:d6:df:d3:84:22:9c:51:62:6b:90: 5c:e5:c3:99:e9:50:b0:76:6e:b6:f8:99:18:d2:50: 40:ce:83:12:bb:f6:f1:72:87:d5:c9:cc:23:de:fa: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BD:BD:8C:65:27:15:41:C5:82:8F:88:D7:EA:73:59:96:C1:ED:87 X509v3 Authority Key Identifier: keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3a:66:bf:8c:c6:84:b3:0f:44:c0:13:4c:d7:db:4a:a6:9b: 4d:62:81:72:fa:c0:2f:ed:e3:02:84:ad:9c:1d:41:9b:87:cd: 01:da:64:51:40:c5:97:f4:d8:d1:7e:b2:37:0b:1a:e2:dd:e2: 45:ad:ea:1b:60:30:d8:90:3a:3f:08:90:c3:b1:55:2b:8c:9a: 7a:d0:80:30:82:cb:cc:3b:6d:bf:3e:d0:d8:85:87:74:db:29: 9e:40:5f:1e:c9:44:bc:1a:a3:ea:4a:83:28:d8:50:f6:88:46: 10:4d:33:ed:9c:f3:6b:c5:ab:17:b6:0e:2b:03:32:63:5e:a0: 97:f0:3b:5a:5d:8a:c8:6b:8a:ef:fe:d9:87:33:a4:e4:f7:66: 54:8c:36:f2:20:7b:81:00:1b:c6:c8:d7:a4:ea:4a:74:ef:bf: 52:39:8f:56:4e:7e:a1:38:50:54:ee:11:3a:cc:c9:3b:44:b2: 62:60:f3:5d:30:df:79:f7:6f:00:d5:94:7e:7f:e6:9e:b4:10: e7:0b:8d:e9:04:f8:06:fd:3a:e1:91:0d:55:ae:b0:51:22:a7: 4f:dd:55:6d:2d:80:8f:bf:ba:4e:44:65:16:50:a2:d7:49:47: b9:1f:ec:4c:cd:ac:30:52:60:bb:e7:11:e2:1c:b2:ac:61:0f: ac:c4:97:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60mNIjPXTLQY+oZz4JUSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTg2MzFlZGI0ODExMzIzMjVhMWQxODZmYmRlMDFmYTE1 Nzc5MTAwHhcNMjYwMTI2MTUwMDUwWhcNMjYwMTI3MTUwMDUwWjAzMTEwLwYDVQQD EygwYmJkYmQ4YzY1MjcxNTQxYzU4MjhmODhkN2VhNzM1OTk2YzFlZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuztz/oJrFZ7PTGf4eR5qRpuQwqvF wMmLTkjxrAHc0J3Heu4g2Xs4BWcaAR+TB7sWHOfoGheLGplZW+7mTEJ3ga3s1Rao F3n0jyQ8SIJJKC/JFfnB9kXk9e3OyejP5SWXOQlEi8802noCGhYObno/TRCHCJ/r 6OkvT/lgFRY5e/cdhY7Gz3rC1LcR+zUAYUnSCDSWs49MQLXkx1jMXKYrXIwyyHlx BJNvPrg87766QNPa7WsELM7YylRkA1gJVUtsebg+N5kKdRmaCK1qLZHEReBqIb9i E9bf04QinFFia5Bc5cOZ6VCwdm62+JkY0lBAzoMSu/bxcofVycwj3vreawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu9vYxlJxVBxYKPiNfqc1mWwe2HMB8GA1UdIwQY MBaAFOKoYx7bSBEyMlodGG+94B+hV3kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAt NDZkNmJhZWZkYWIxLzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAtNDZkNmJhZWZkYWIx LzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszpmv4zG hLMPRMATTNfbSqabTWKBcvrAL+3jAoStnB1Bm4fNAdpkUUDFl/TY0X6yNwsa4t3i Ra3qG2Aw2JA6PwiQw7FVK4yaetCAMILLzDttvz7Q2IWHdNspnkBfHslEvBqj6kqD KNhQ9ohGEE0z7Zzza8WrF7YOKwMyY16gl/A7Wl2KyGuK7/7ZhzOk5PdmVIw28iB7 gQAbxsjXpOpKdO+/UjmPVk5+oThQVO4ROszJO0SyYmDzXTDfefdvANWUfn/mnrQQ 5wuN6QT4Bv064ZENVa6wUSKnT91VbS2Aj7+6TkRlFlCi10lHuR/sTM2sMFJgu+cR 4hyyrGEPrMSXuw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:17 2026 by rpki-client