This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json) Hash identifier: gxLwGLHC/NM1xHJw7c0Ztueevu/sbNc+pTqu8dAfizg= Subject key identifier: 15:DE:39:97:2B:8D:1A:7F:5D:66:EA:77:3E:B2:0A:93:44:EC:85:F7 Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Certificate serial: 019BFCC10937E1925B36ABC84EAEB14B5978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft Manifest number: 0EFA Signing time: Tue 27 Jan 2026 00:01:07 +0000 Manifest this update: Tue 27 Jan 2026 00:01:07 +0000 Manifest next update: Wed 28 Jan 2026 00:01:07 +0000 Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: PfndOYwigMwbjKq63JYbFHcmmQs77bSXlCCBLSoV+NQ=) 2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=) 3: _Swl5gHDR66TZCO_pkS1vQ9SqpA.roa (hash: 3hG7Kqg7tej55cxB4vcGvkTLY6M+LbT5b2wG9YFhS4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:09:37:e1:92:5b:36:ab:c8:4e:ae:b1:4b:59:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Validity Not Before: Jan 27 00:01:07 2026 GMT Not After : Jan 28 00:01:07 2026 GMT Subject: CN=15de39972b8d1a7f5d66ea773eb20a9344ec85f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:40:a8:74:5a:c2:ce:43:bf:c1:93:26:21: 84:0c:bc:07:d6:0d:d3:eb:16:1f:9a:f3:78:79:09: 02:25:cb:94:3a:3e:34:db:11:05:5a:2a:f9:72:04: 49:47:11:33:8e:92:6c:c6:9e:c7:ae:de:d2:03:e1: 11:35:0b:46:00:67:fe:66:a3:ca:7c:7a:51:8e:30: 8c:b8:04:b1:bb:71:e9:81:6b:95:95:cc:d6:0f:14: 19:8d:45:a9:58:36:63:e3:48:7b:6f:13:0d:60:36: aa:01:3c:59:f2:4b:10:c8:c5:da:19:9f:59:f4:5f: 50:aa:fa:9d:cf:7f:14:cf:c3:09:10:74:22:2e:c0: ce:19:3f:03:d3:10:1e:ce:6b:87:74:b3:5f:8e:59: 20:0c:3e:1d:59:06:dd:0a:d8:6d:92:0c:7b:74:52: 0c:b1:f4:77:83:4c:57:36:31:72:ba:d7:8d:2d:e9: a6:6b:00:69:83:12:91:64:e0:d4:da:77:94:bd:d5: df:28:35:d6:8f:bb:64:f0:fd:77:e3:3e:19:4c:7f: 7e:a1:11:1b:a2:12:f6:f1:51:cf:3e:63:a1:9d:d5: 80:2a:29:91:68:d6:d9:22:7b:1f:92:02:55:fd:6e: 31:de:00:4b:76:9c:3d:ec:1b:21:4e:1b:76:da:33: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:39:97:2B:8D:1A:7F:5D:66:EA:77:3E:B2:0A:93:44:EC:85:F7 X509v3 Authority Key Identifier: keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c0:98:5e:09:a1:fb:a4:2e:98:ef:69:28:7e:e8:78:10:b1: 2f:3a:28:33:16:a9:04:ab:ec:02:6e:97:a5:d8:1d:4f:cc:a7: 33:e0:55:3f:ba:21:ca:aa:15:d2:39:99:08:02:8a:0b:de:66: b4:30:98:52:1a:de:36:46:ae:3f:c9:f4:83:33:66:c9:dd:9e: 43:12:ab:b3:cf:ed:f6:00:ef:a3:98:4a:00:8a:17:a2:89:d8: 3c:e8:d4:d7:f0:c3:47:95:64:83:fc:dc:cb:10:18:03:66:3f: 89:e6:a1:c5:02:b4:ef:78:17:21:70:9a:7b:0f:00:68:77:f3: de:c2:81:75:c2:45:b1:0c:fb:0c:6e:30:7d:b8:d3:a0:51:b9: 4d:71:81:b6:8b:49:8a:c9:cb:f5:ec:96:7f:68:80:95:f3:8b: 9e:be:8f:73:53:c5:00:d1:00:22:77:9b:15:cd:87:f7:25:6c: 8f:30:2c:ff:ad:1b:a1:75:12:01:28:74:fa:cb:96:f1:a1:1f: 2f:14:8d:ea:31:22:51:ca:47:2b:41:27:69:a8:14:c2:f5:73: 7e:00:18:79:88:e2:5a:bb:77:69:f9:00:03:cf:87:66:b9:4e: 08:5b:53:23:75:51:b6:97:0d:63:a5:af:8d:6f:45:b9:fe:b0: c9:3a:86:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wQk34ZJbNqvITq6xS1l4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0 MmY1MGQwHhcNMjYwMTI3MDAwMTA3WhcNMjYwMTI4MDAwMTA3WjAzMTEwLwYDVQQD EygxNWRlMzk5NzJiOGQxYTdmNWQ2NmVhNzczZWIyMGE5MzQ0ZWM4NWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKZAqHRaws5Dv8GTJiGEDLwH1g3T 6xYfmvN4eQkCJcuUOj402xEFWir5cgRJRxEzjpJsxp7Hrt7SA+ERNQtGAGf+ZqPK fHpRjjCMuASxu3HpgWuVlczWDxQZjUWpWDZj40h7bxMNYDaqATxZ8ksQyMXaGZ9Z 9F9Qqvqdz38Uz8MJEHQiLsDOGT8D0xAezmuHdLNfjlkgDD4dWQbdCthtkgx7dFIM sfR3g0xXNjFyuteNLemmawBpgxKRZODU2neUvdXfKDXWj7tk8P134z4ZTH9+oREb ohL28VHPPmOhndWAKimRaNbZInsfkgJV/W4x3gBLdpw97BshTht22jNVAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXeOZcrjRp/XWbqdz6yCpNE7IX3MB8GA1UdIwQY MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsCYXgmh +6QumO9pKH7oeBCxLzooMxapBKvsAm6XpdgdT8ynM+BVP7ohyqoV0jmZCAKKC95m tDCYUhreNkauP8n0gzNmyd2eQxKrs8/t9gDvo5hKAIoXoonYPOjU1/DDR5Vkg/zc yxAYA2Y/ieahxQK073gXIXCaew8AaHfz3sKBdcJFsQz7DG4wfbjToFG5TXGBtotJ isnL9eyWf2iAlfOLnr6Pc1PFANEAInebFc2H9yVsjzAs/60boXUSASh0+suW8aEf LxSN6jEiUcpHK0EnaagUwvVzfgAYeYjiWrt3afkAA8+HZrlOCFtTI3VRtpcNY6Wv jW9Fuf6wyTqG1g== -----END CERTIFICATE-----Generated at Tue Jan 27 06:10:59 2026 by rpki-client