This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json) Hash identifier: EEkg/3rRy0VIFsbczVeVk8JIhOsw0Re17nMyC/efGGM= Subject key identifier: 25:02:55:A1:0E:3D:51:C3:4E:49:18:D7:C5:C0:CC:62:71:64:DA:22 Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38 Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038 Certificate serial: 019BFB77CD2C23368ADFF2ED01734F10FF36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 18:01:28 +0000 Manifest this update: Mon 26 Jan 2026 18:01:28 +0000 Manifest next update: Tue 27 Jan 2026 18:01:28 +0000 Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: 6uZzPDIpNzKtghkeA1LiQCiLoCa+ty1aQBu1YCm1JFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:cd:2c:23:36:8a:df:f2:ed:01:73:4f:10:ff:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038 Validity Not Before: Jan 26 18:01:28 2026 GMT Not After : Jan 27 18:01:28 2026 GMT Subject: CN=250255a10e3d51c34e4918d7c5c0cc627164da22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:8f:0e:b1:ad:f6:e6:22:ca:09:8c:1f:5c: 80:ab:ad:1b:06:13:ce:ed:c3:70:84:de:32:ff:f9: e1:5b:56:58:42:a2:26:81:17:2b:6c:36:93:db:4c: fd:eb:da:36:8d:94:a5:58:9c:7f:ad:90:f1:e4:57: 93:c1:08:78:03:a6:75:06:aa:6a:eb:06:cc:e2:ec: 4e:f1:51:27:4a:7c:9d:22:c9:34:d3:97:93:49:4f: a6:b1:16:71:32:7a:17:33:64:2e:8d:2a:cd:5a:f6: 5d:7b:d1:d4:69:0c:6a:20:d0:99:86:95:11:70:46: bb:3f:6b:14:5b:af:de:46:ff:30:78:40:84:2b:95: 64:20:3c:53:05:1e:02:a1:a1:f3:3c:7a:75:b2:4d: b7:75:fe:3f:6c:85:b9:00:26:ec:82:cb:e0:9b:fb: b3:f9:c1:d6:a2:a7:11:50:95:46:05:ff:ad:29:a5: f2:b8:70:f2:eb:4c:eb:b9:a3:64:a7:32:ca:13:51: d5:69:7f:3e:0b:e1:01:ed:cc:02:1b:d8:b6:fb:5c: 71:2b:ef:f5:06:7d:cb:60:67:47:f5:7e:18:94:e3: b7:b0:e8:f4:49:d5:08:20:5f:24:2e:98:f1:b0:b7: c1:1a:99:76:fe:a4:ff:9a:8c:0c:d6:ae:8b:89:a8: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:55:A1:0E:3D:51:C3:4E:49:18:D7:C5:C0:CC:62:71:64:DA:22 X509v3 Authority Key Identifier: keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a8:47:39:bb:aa:c6:6c:d5:44:17:1f:9a:b9:01:5b:e6:bb: 2a:97:47:74:3d:b7:6d:0d:1e:0e:0a:73:92:3f:fa:7a:27:94: 47:09:9c:4b:c0:81:fe:c7:4f:f5:84:20:d0:0e:9e:cc:49:bb: 63:74:ed:5e:da:c9:16:3e:5d:0f:01:81:06:ee:03:81:1f:3c: 50:7e:80:81:e4:e0:cb:12:07:a5:0c:d0:bc:66:79:61:d6:fc: 13:13:e5:31:4b:8f:60:0b:8b:81:12:68:48:64:4e:b4:8f:6f: 52:3c:0b:87:ee:09:a7:81:5c:2f:92:b0:39:7c:27:f2:ec:2a: 16:1d:cf:3c:f0:37:55:5b:d0:b5:8f:8b:67:e7:24:60:0b:31: 9b:eb:92:3a:e7:5f:e7:ad:93:24:af:91:e8:c8:e8:a9:f4:72: 65:80:2e:77:84:0d:b6:0e:48:a7:bd:23:46:1e:e4:e8:7a:20: 3b:82:3e:95:0e:89:48:09:96:f6:c8:ad:71:cd:1d:d3:68:36: 85:9e:48:6e:3e:b4:ca:81:90:78:22:eb:c8:f0:db:f0:77:0b: b9:50:e7:63:01:a0:ce:d2:95:8e:ff:09:59:ee:29:12:a5:d3: e4:0f:a9:9c:9b:91:c3:ee:6c:e1:9c:bd:2f:d7:e9:80:37:2e: a0:c2:6f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d80sIzaK3/LtAXNPEP82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdkYWUxZTY1MDg1NmNjODU3MWU0NjJlYmQ5ZWJlYjY1 YzcwMzgwHhcNMjYwMTI2MTgwMTI4WhcNMjYwMTI3MTgwMTI4WjAzMTEwLwYDVQQD EygyNTAyNTVhMTBlM2Q1MWMzNGU0OTE4ZDdjNWMwY2M2MjcxNjRkYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2euPDrGt9uYiygmMH1yAq60bBhPO 7cNwhN4y//nhW1ZYQqImgRcrbDaT20z969o2jZSlWJx/rZDx5FeTwQh4A6Z1Bqpq 6wbM4uxO8VEnSnydIsk005eTSU+msRZxMnoXM2QujSrNWvZde9HUaQxqINCZhpUR cEa7P2sUW6/eRv8weECEK5VkIDxTBR4CoaHzPHp1sk23df4/bIW5ACbsgsvgm/uz +cHWoqcRUJVGBf+tKaXyuHDy60zruaNkpzLKE1HVaX8+C+EB7cwCG9i2+1xxK+/1 Bn3LYGdH9X4YlOO3sOj0SdUIIF8kLpjxsLfBGpl2/qT/mowM1q6LiagMlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUCVaEOPVHDTkkY18XAzGJxZNoiMB8GA1UdIwQY MBaAFIOH2uHmUIVsyFceRi69nr62XHA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmYTRlWlFoV3pJVng1R0xyMmV2clpjY0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZjRiYmItNzg1ZC00NmI2LWIyOWYt MmI4NWY3MGEzNjY2LzEvZzRmYTRlWlFoV3pJVng1R0xyMmV2clpjY0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mZjRiYmItNzg1ZC00NmI2LWIyOWYtMmI4NWY3MGEzNjY2 LzEvZzRmYTRlWlFoV3pJVng1R0xyMmV2clpjY0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqhHObuq xmzVRBcfmrkBW+a7KpdHdD23bQ0eDgpzkj/6eieURwmcS8CB/sdP9YQg0A6ezEm7 Y3TtXtrJFj5dDwGBBu4DgR88UH6AgeTgyxIHpQzQvGZ5Ydb8ExPlMUuPYAuLgRJo SGROtI9vUjwLh+4Jp4FcL5KwOXwn8uwqFh3PPPA3VVvQtY+LZ+ckYAsxm+uSOudf 562TJK+R6MjoqfRyZYAud4QNtg5Ip70jRh7k6HogO4I+lQ6JSAmW9sitcc0d02g2 hZ5Ibj60yoGQeCLryPDb8HcLuVDnYwGgztKVjv8JWe4pEqXT5A+pnJuRw+5s4Zy9 L9fpgDcuoMJv0A== -----END CERTIFICATE-----Generated at Tue Jan 27 04:15:45 2026 by rpki-client