This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json) Hash identifier: EXGrM+bdafibGSqS0+e1Tckvk8HjOpO4HNTJrzMs1kU= Subject key identifier: 3C:D8:81:57:DF:96:F4:76:67:59:07:B4:39:28:8A:05:04:CD:AE:8D Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9 Certificate serial: 019C088E0467D57BF06165EA13BB6B3F85E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft Manifest number: 14AB Signing time: Thu 29 Jan 2026 07:00:50 +0000 Manifest this update: Thu 29 Jan 2026 07:00:50 +0000 Manifest next update: Fri 30 Jan 2026 07:00:50 +0000 Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: PEh20GXl/z/6yX5AtuZH2Ycxt5wE3Bv6SX4Xl5HuaOU=) 2: fJgYZ4ej2JhPoX-SwafXWVTllE4.roa (hash: oBfl5sq0NvI5C3NZdb3K0ESRoAncOv9TLGKLm+7rmlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:8e:04:67:d5:7b:f0:61:65:ea:13:bb:6b:3f:85:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9 Validity Not Before: Jan 29 07:00:50 2026 GMT Not After : Jan 30 07:00:50 2026 GMT Subject: CN=3cd88157df96f476675907b439288a0504cdae8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:21:9c:8c:fc:29:89:3a:8c:2e:51:f2:f2: 1c:c9:ae:d4:db:b0:2e:3f:08:7a:0c:b0:66:26:78: 46:59:ef:03:7b:01:e4:9c:1a:7e:8f:17:34:8e:3f: 73:17:ab:b3:e5:8d:e7:e6:79:fc:3d:b7:a5:87:9f: 47:74:ba:59:c9:dc:ec:dc:72:41:19:f5:de:10:2e: cd:e7:ff:78:36:4b:7e:06:17:7e:fd:24:90:6a:eb: 52:51:f6:8b:9d:dd:13:36:73:6c:d1:01:e0:f4:f5: 89:7e:5b:94:d2:18:d3:b4:56:75:28:1b:5d:d7:62: 67:6c:cc:a2:92:ca:db:ea:68:78:d2:bf:0e:25:72: 9f:48:19:77:bd:38:27:2f:83:03:86:67:eb:0f:15: ab:c4:d8:2a:95:bb:aa:d2:b6:60:66:28:c6:35:e3: 52:a5:bd:14:f3:b5:05:ff:f6:88:d7:96:6a:de:57: d5:93:e3:37:aa:c6:f0:9c:6d:56:38:41:7f:7c:2e: de:46:67:c5:78:f5:66:f6:95:a9:8a:46:78:10:eb: b6:29:81:54:ec:a4:fd:d2:d0:59:8a:6a:3a:15:67: 06:bc:8a:eb:29:d1:0e:bf:b5:f0:3c:c7:d6:fb:26: 9e:c2:58:59:24:35:cf:5a:37:51:69:56:31:34:2f: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:81:57:DF:96:F4:76:67:59:07:B4:39:28:8A:05:04:CD:AE:8D X509v3 Authority Key Identifier: keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:62:03:13:05:8c:e6:0d:c2:b8:f8:28:a8:1d:14:3c:75:e7: d1:85:83:dc:2e:70:0f:22:df:16:a8:2e:57:23:bf:b1:a1:66: 7a:e9:28:59:36:d7:71:46:7f:f7:ee:2b:cb:27:9b:fc:72:bf: 76:98:37:70:33:84:14:37:0a:19:84:47:e1:ed:3f:59:04:ab: e2:3b:46:73:3f:17:15:11:a6:1f:e2:6a:a3:b6:82:d2:9f:4a: 1f:73:99:f7:8e:08:f3:36:7f:d0:17:0f:42:da:ae:25:e4:2d: cf:e2:7d:cb:ca:2e:67:d8:40:5e:70:bb:47:7f:b9:79:3f:59: 68:67:bf:af:6a:95:4f:c5:b2:79:58:85:32:24:07:af:08:74: a5:5c:9e:28:c8:0c:56:ed:d5:54:00:5b:75:aa:1d:97:f3:c2: 04:5d:d5:91:1a:90:a6:f3:e0:b0:49:e7:4b:39:ba:14:ee:c7: b0:53:1f:4e:0d:a2:ff:19:33:6b:60:51:4d:b1:5c:c4:f6:d0: 61:ab:76:e6:06:3e:07:27:54:6a:72:e2:38:7a:fb:f1:72:87: 38:9e:68:29:19:bd:9c:f8:ec:16:f0:fa:80:bb:aa:b4:f7:78: 71:24:4f:c6:ff:79:c9:5f:e8:30:c7:7f:8e:a7:ad:cc:db:1f: f6:70:16:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwIjgRn1XvwYWXqE7trP4XjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNzc1MzhkZWMyZWZjZDJmMTFjYzYzNzE5N2QxZDlhNmZk YWU5ZDkwHhcNMjYwMTI5MDcwMDUwWhcNMjYwMTMwMDcwMDUwWjAzMTEwLwYDVQQD EygzY2Q4ODE1N2RmOTZmNDc2Njc1OTA3YjQzOTI4OGEwNTA0Y2RhZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUQhnIz8KYk6jC5R8vIcya7U27Au Pwh6DLBmJnhGWe8DewHknBp+jxc0jj9zF6uz5Y3n5nn8Pbelh59HdLpZydzs3HJB GfXeEC7N5/94Nkt+Bhd+/SSQautSUfaLnd0TNnNs0QHg9PWJfluU0hjTtFZ1KBtd 12JnbMyiksrb6mh40r8OJXKfSBl3vTgnL4MDhmfrDxWrxNgqlbuq0rZgZijGNeNS pb0U87UF//aI15Zq3lfVk+M3qsbwnG1WOEF/fC7eRmfFePVm9pWpikZ4EOu2KYFU 7KT90tBZimo6FWcGvIrrKdEOv7XwPMfW+yaewlhZJDXPWjdRaVYxNC+rmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzYgVfflvR2Z1kHtDkoigUEza6NMB8GA1UdIwQY MBaAFOJ3U43sLvzS8RzGNxl9HZpv2unZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWIt ODJlZTJkMmI0Mjg5LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWItODJlZTJkMmI0Mjg5 LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmIDEwWM 5g3CuPgoqB0UPHXn0YWD3C5wDyLfFqguVyO/saFmeukoWTbXcUZ/9+4ryyeb/HK/ dpg3cDOEFDcKGYRH4e0/WQSr4jtGcz8XFRGmH+Jqo7aC0p9KH3OZ944I8zZ/0BcP QtquJeQtz+J9y8ouZ9hAXnC7R3+5eT9ZaGe/r2qVT8WyeViFMiQHrwh0pVyeKMgM Vu3VVABbdaodl/PCBF3VkRqQpvPgsEnnSzm6FO7HsFMfTg2i/xkza2BRTbFcxPbQ Yat25gY+BydUanLiOHr78XKHOJ5oKRm9nPjsFvD6gLuqtPd4cSRPxv95yV/oMMd/ jqetzNsf9nAWrg== -----END CERTIFICATE-----Generated at Thu Jan 29 10:02:06 2026 by rpki-client