This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json) Hash identifier: OFdv7NVAoS1gqQsMUGKnHWvHl2jQYt2PeQ1VTVfw7LQ= Subject key identifier: 5C:C9:63:D3:A8:EB:A6:DC:DE:FE:65:30:25:C6:F0:BF:16:81:35:F7 Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Certificate serial: 019C1D9544815A5B0BD167FCE3DF865DC21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft Manifest number: 17FD Signing time: Mon 02 Feb 2026 09:00:47 +0000 Manifest this update: Mon 02 Feb 2026 09:00:47 +0000 Manifest next update: Tue 03 Feb 2026 09:00:47 +0000 Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=) 2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: wd5gdD1gSIfZ9RnOUqOqJo6J4TvXZJoBIni2NnQIKO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:95:44:81:5a:5b:0b:d1:67:fc:e3:df:86:5d:c2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Validity Not Before: Feb 2 09:00:47 2026 GMT Not After : Feb 3 09:00:47 2026 GMT Subject: CN=5cc963d3a8eba6dcdefe653025c6f0bf168135f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:3b:32:95:a5:20:54:91:2d:78:27:1e:8a: 0c:b3:1c:d4:c1:03:b8:b7:cd:07:a8:91:50:8f:e8: c3:fb:45:3c:95:3a:8f:16:6f:92:33:d0:87:fc:1d: 60:7b:80:4d:db:77:b6:63:1e:dd:c4:fc:de:c1:cf: b2:b9:f6:29:12:48:4a:8a:3e:2b:16:ef:76:5a:5b: 95:20:07:88:5d:fe:b4:3b:1e:bf:61:29:9e:1b:d3: 82:a8:54:a2:37:90:14:4f:a6:7f:db:c5:97:e2:5b: 48:e8:95:55:ca:26:bd:ba:d6:91:cd:25:d7:ca:0f: 13:4d:97:e1:fa:16:0c:de:13:12:05:e8:ac:bb:f0: 16:e7:da:19:ef:69:e4:57:0d:44:3c:69:1d:3d:a5: 05:79:f7:aa:b5:40:01:f2:90:e8:0a:d6:ba:ec:48: 56:a5:67:84:19:e6:9d:f2:04:2e:a4:9a:4e:ff:c3: 99:68:4e:cd:fe:f0:3b:b3:2b:e6:49:0a:d0:4d:21: b1:83:be:b6:4d:df:e2:5e:02:0a:ee:21:90:b3:e3: 4e:a5:ee:65:51:ff:fe:cc:fa:9c:76:57:5d:af:bb: 1f:de:f5:d5:f5:be:d0:31:70:10:81:e1:53:e0:fd: 5f:2f:f1:06:39:fe:e8:92:82:33:19:eb:f9:9b:2f: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C9:63:D3:A8:EB:A6:DC:DE:FE:65:30:25:C6:F0:BF:16:81:35:F7 X509v3 Authority Key Identifier: keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d6:cd:ae:c2:50:18:7a:b1:8f:92:3d:43:91:e6:fa:1d:ad: e2:81:99:11:8e:68:cb:b5:7e:6b:a1:40:08:1e:cc:e8:6a:38: f5:29:b5:bb:20:31:0f:81:62:e8:1f:67:26:72:e7:0f:f1:62: 4e:ce:d2:05:c2:5e:7a:58:4d:57:42:05:81:eb:9d:00:26:5b: 5f:f5:8a:b5:44:b0:23:21:c3:61:b2:95:6a:11:5c:4b:16:d2: e6:41:f8:5b:0a:0f:6a:f9:a7:00:87:4f:15:01:29:00:78:c9: 9b:d0:f2:a1:97:40:c6:57:c2:8a:dd:9d:5b:2a:56:7a:04:e9: 07:e3:99:0a:ae:b7:84:0d:61:8e:8d:b9:fa:8b:48:7a:57:0b: fb:4a:09:0e:28:74:8b:97:a5:da:da:c2:50:6b:48:bd:6c:a7: 26:dd:b4:03:95:6b:0c:43:29:39:c9:5d:79:72:0b:1c:4f:a4: 78:91:a6:73:3f:d4:00:58:ca:eb:20:be:f9:19:be:1e:e4:77: bf:33:99:a9:83:8b:12:08:b2:65:b3:cc:ec:0c:b6:fc:2c:5a: 2c:ac:84:32:e9:0d:e9:da:b1:7d:c7:67:5c:12:fc:4e:2a:7e: ec:22:9b:8f:83:dd:fd:6e:97:c7:87:29:72:e3:2f:31:1c:30: 01:2f:de:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdlUSBWlsL0Wf849+GXcIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl ZjExMDIwHhcNMjYwMjAyMDkwMDQ3WhcNMjYwMjAzMDkwMDQ3WjAzMTEwLwYDVQQD Eyg1Y2M5NjNkM2E4ZWJhNmRjZGVmZTY1MzAyNWM2ZjBiZjE2ODEzNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZs7MpWlIFSRLXgnHooMsxzUwQO4 t80HqJFQj+jD+0U8lTqPFm+SM9CH/B1ge4BN23e2Yx7dxPzewc+yufYpEkhKij4r Fu92WluVIAeIXf60Ox6/YSmeG9OCqFSiN5AUT6Z/28WX4ltI6JVVyia9utaRzSXX yg8TTZfh+hYM3hMSBeisu/AW59oZ72nkVw1EPGkdPaUFefeqtUAB8pDoCta67EhW pWeEGead8gQupJpO/8OZaE7N/vA7syvmSQrQTSGxg762Td/iXgIK7iGQs+NOpe5l Uf/+zPqcdlddr7sf3vXV9b7QMXAQgeFT4P1fL/EGOf7okoIzGev5my+3CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzJY9Oo66bc3v5lMCXG8L8WgTX3MB8GA1UdIwQY MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtbNrsJQ GHqxj5I9Q5Hm+h2t4oGZEY5oy7V+a6FACB7M6Go49Sm1uyAxD4Fi6B9nJnLnD/Fi Ts7SBcJeelhNV0IFgeudACZbX/WKtUSwIyHDYbKVahFcSxbS5kH4WwoPavmnAIdP FQEpAHjJm9DyoZdAxlfCit2dWypWegTpB+OZCq63hA1hjo25+otIelcL+0oJDih0 i5el2trCUGtIvWynJt20A5VrDEMpOcldeXILHE+keJGmcz/UAFjK6yC++Rm+HuR3 vzOZqYOLEgiyZbPM7Ay2/CxaLKyEMukN6dqxfcdnXBL8Tip+7CKbj4Pd/W6Xx4cp cuMvMRwwAS/eDQ== -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:50 2026 by rpki-client