This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json) Hash identifier: 4pyta3IIdJUqnyh/kvsVvxQgSsEoYLf8+GgAFlKScPc= Subject key identifier: 23:91:00:2D:74:43:9D:EC:06:AF:CA:0B:0C:2C:1A:54:3B:B1:57:65 Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Certificate serial: 019BFC8A8F175DCD2199B34D430EB323FB62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft Manifest number: 022E Signing time: Mon 26 Jan 2026 23:01:37 +0000 Manifest this update: Mon 26 Jan 2026 23:01:37 +0000 Manifest next update: Tue 27 Jan 2026 23:01:37 +0000 Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: 92rTmx8OoQvJMPc4oAtDpQGCmCQkUHi2cejviqv65UA=) 2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:8f:17:5d:cd:21:99:b3:4d:43:0e:b3:23:fb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Validity Not Before: Jan 26 23:01:37 2026 GMT Not After : Jan 27 23:01:37 2026 GMT Subject: CN=2391002d74439dec06afca0b0c2c1a543bb15765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:b8:85:c2:7d:e9:03:fe:d7:d7:0d:0b:8b: 0d:d6:37:49:1f:90:10:c2:f8:2c:64:73:6c:9b:b3: 92:81:2b:b2:5e:ad:21:7b:a6:58:ff:27:bc:05:04: ce:19:26:19:7a:97:87:bd:13:6f:1b:d9:71:51:1e: 41:4a:e7:c4:9b:72:8d:df:69:5b:57:c6:fb:af:9f: 1f:43:dd:a0:0a:51:fe:1c:7e:69:7c:11:a9:49:94: 00:bf:7a:9f:53:9d:58:de:fd:7c:88:ff:46:8d:fb: 72:9d:0e:b6:9f:46:04:83:3e:a4:35:2b:ad:50:24: 23:ab:1c:ea:77:63:9d:df:52:81:48:c6:a5:66:15: 9c:26:18:91:db:5d:80:22:d7:bd:5c:b7:31:c8:bf: 98:e2:3b:db:db:f1:2a:2e:4e:d5:e3:69:c0:91:04: 22:97:b5:21:28:f8:f3:16:1b:2d:80:90:56:ed:53: 91:ca:57:c6:fe:4e:b1:46:04:bf:2d:0f:85:01:c9: a1:78:18:45:09:42:0d:bf:d0:98:5a:69:50:9f:e6: ed:10:b4:a4:d2:79:e5:ba:d1:1b:86:60:25:4d:aa: 78:53:85:e2:99:07:07:81:ff:81:0a:0c:60:5f:a6: 18:4c:e9:9f:1d:33:25:f5:c7:ad:00:d3:70:d7:74: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:91:00:2D:74:43:9D:EC:06:AF:CA:0B:0C:2C:1A:54:3B:B1:57:65 X509v3 Authority Key Identifier: keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9b:eb:65:72:f5:cc:d0:d6:64:e5:4d:17:0e:76:50:17:1d: bd:f3:e7:60:cc:2e:33:b8:dd:f5:2f:8a:f5:3c:23:0e:67:58: d8:cf:71:c9:5a:4d:40:5f:ac:14:6f:77:dc:d6:fc:26:65:55: 59:40:69:67:c3:a3:c5:8e:69:8e:5f:3f:0d:36:1f:15:33:dc: 17:f2:5c:ed:b3:35:a5:64:13:1b:ab:0d:b3:ab:37:e1:be:81: a9:a8:d0:62:9a:56:5e:25:bc:19:ca:e2:b0:87:90:ee:dd:9e: 43:00:87:2a:07:87:cc:57:8c:34:97:9e:06:79:00:7d:60:67: 89:2b:62:eb:b6:0d:6d:57:f8:53:ea:02:79:3e:75:99:69:4f: c8:06:95:7e:ca:61:c3:5c:5e:ff:6a:73:69:0e:68:4c:8e:0f: fc:62:95:44:84:f1:1b:86:53:39:18:16:ec:d1:19:18:4d:08: fc:63:1b:11:ab:07:36:5e:20:f1:96:14:cc:ce:23:84:4a:5c: ce:1f:19:1c:b4:be:f2:6d:c6:67:ab:44:e8:f9:16:36:a2:28: f0:a0:f7:c6:ab:38:e8:6b:f6:a2:8b:8f:a6:81:24:83:8c:41: 9d:d0:f6:ac:24:e3:95:2a:1b:8e:a1:31:94:a9:9f:b4:53:e0: 4f:62:78:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8io8XXc0hmbNNQw6zI/tiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTFiZjUzZWJlZDdiNTQ4MDg2ZjRhZjY4MDM0NTQwZjIw YTc4ZWMwHhcNMjYwMTI2MjMwMTM3WhcNMjYwMTI3MjMwMTM3WjAzMTEwLwYDVQQD EygyMzkxMDAyZDc0NDM5ZGVjMDZhZmNhMGIwYzJjMWE1NDNiYjE1NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY24hcJ96QP+19cNC4sN1jdJH5AQ wvgsZHNsm7OSgSuyXq0he6ZY/ye8BQTOGSYZepeHvRNvG9lxUR5BSufEm3KN32lb V8b7r58fQ92gClH+HH5pfBGpSZQAv3qfU51Y3v18iP9GjftynQ62n0YEgz6kNSut UCQjqxzqd2Od31KBSMalZhWcJhiR212AIte9XLcxyL+Y4jvb2/EqLk7V42nAkQQi l7UhKPjzFhstgJBW7VORylfG/k6xRgS/LQ+FAcmheBhFCUINv9CYWmlQn+btELSk 0nnlutEbhmAlTap4U4XimQcHgf+BCgxgX6YYTOmfHTMl9cetANNw13QrWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCORAC10Q53sBq/KCwwsGlQ7sVdlMB8GA1UdIwQY MBaAFODhv1Pr7XtUgIb0r2gDRUDyCnjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUt MmM5Njc5YWNlOWIxLzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUtMmM5Njc5YWNlOWIx LzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpvrZXL1 zNDWZOVNFw52UBcdvfPnYMwuM7jd9S+K9TwjDmdY2M9xyVpNQF+sFG933Nb8JmVV WUBpZ8OjxY5pjl8/DTYfFTPcF/Jc7bM1pWQTG6sNs6s34b6BqajQYppWXiW8Gcri sIeQ7t2eQwCHKgeHzFeMNJeeBnkAfWBniSti67YNbVf4U+oCeT51mWlPyAaVfsph w1xe/2pzaQ5oTI4P/GKVRITxG4ZTORgW7NEZGE0I/GMbEasHNl4g8ZYUzM4jhEpc zh8ZHLS+8m3GZ6tE6PkWNqIo8KD3xqs46Gv2oouPpoEkg4xBndD2rCTjlSobjqEx lKmftFPgT2J4bg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:59 2026 by rpki-client