This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json) Hash identifier: 7QymGA5ol7xE4j/DWuiiNhWGjQaES5yYCX+uyrNjQRM= Subject key identifier: 9D:12:AF:76:D2:EC:7C:1F:46:01:0F:76:93:E8:E5:DC:CF:72:0F:1E Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Certificate serial: 019BFD2F07BCC74383345BEE554892258A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft Manifest number: 1383 Signing time: Tue 27 Jan 2026 02:01:16 +0000 Manifest this update: Tue 27 Jan 2026 02:01:16 +0000 Manifest next update: Wed 28 Jan 2026 02:01:16 +0000 Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: WHW3e4G2IXST1e8Am9f0zh2ZvBE+AQtR9ilRLMKGu9c=) 2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2f:07:bc:c7:43:83:34:5b:ee:55:48:92:25:8a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Validity Not Before: Jan 27 02:01:16 2026 GMT Not After : Jan 28 02:01:16 2026 GMT Subject: CN=9d12af76d2ec7c1f46010f7693e8e5dccf720f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:95:da:8e:29:94:85:1c:57:72:14:05:b2: 29:3e:7a:99:8f:64:29:1a:62:4b:a7:ad:51:78:87: 41:fa:e4:df:4e:0b:49:8a:06:ae:a9:d9:71:c8:24: d5:cb:b6:ae:75:7c:f0:f5:de:04:1c:1d:ee:9f:23: 5a:ee:80:4f:b0:db:fe:2a:f5:5a:81:88:08:6d:7a: 71:7f:b9:48:2b:f1:67:7d:c6:3f:39:b5:a7:db:32: b1:cd:89:fd:4a:f0:32:36:79:c9:91:d9:32:7d:07: 93:e1:20:a7:08:d2:1f:36:95:a5:e1:c5:21:12:6e: 4b:49:b3:2d:41:50:c1:b8:8e:ec:11:88:65:af:85: ad:9e:1e:71:e6:e1:57:33:97:a0:5f:a9:55:36:b8: c7:56:75:5b:31:3b:77:de:e0:17:d4:53:78:6c:72: aa:20:1d:bc:3a:4a:c8:75:22:a2:1c:95:4d:54:34: d3:04:92:f4:fe:08:05:29:0f:01:05:eb:a3:1b:3e: 10:e1:10:de:f4:88:d7:43:f8:59:4a:2d:df:8c:da: f4:a3:8e:42:7e:8e:78:28:a8:e5:48:01:85:0c:85: e0:10:95:8d:6d:1d:b1:77:7e:69:56:af:7b:6d:7e: 81:e3:0a:18:45:f8:b1:2f:f6:2e:62:f3:2d:8b:47: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:12:AF:76:D2:EC:7C:1F:46:01:0F:76:93:E8:E5:DC:CF:72:0F:1E X509v3 Authority Key Identifier: keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2f:5b:bf:4f:8b:a7:75:d8:a3:e2:91:c9:f9:f3:7c:4e:b4: 64:8a:ee:5a:a1:d3:e7:e5:f5:72:e3:24:cc:24:63:bb:11:e4: 5c:5b:b0:29:b1:d9:63:bf:1f:67:56:ee:a0:00:68:f0:07:f7: 9c:57:3d:7b:06:f7:c2:c4:92:7d:75:54:c6:ed:62:aa:f5:09: ec:8f:b4:ff:a7:3f:5c:34:22:c8:e8:88:18:e7:bd:00:cd:c1: 4b:1a:8b:cd:b9:e2:0b:c8:7f:b5:66:7b:0d:e4:f0:22:f6:2f: af:7b:ab:eb:e3:c6:bd:f6:31:f0:ae:b8:d3:8a:17:37:f4:51: 1f:69:3c:0d:2f:8d:9b:4b:d9:b9:f0:6c:ad:9f:9c:96:8e:0c: 4a:d0:03:b7:10:22:24:f4:bd:f4:a5:3b:4e:4e:22:1c:4e:1f: cf:43:b3:ed:d9:fe:3e:ef:7d:bb:37:8c:d2:69:cd:db:ab:2e: 4c:1c:c9:53:b5:12:64:af:cc:e7:ba:e7:ea:28:11:a4:ba:ac: 0c:be:39:3a:58:a1:3b:c2:b9:c9:62:20:e0:fd:51:09:6a:76: 54:32:39:f3:37:a4:e8:33:3a:9a:41:3f:18:e3:a2:6b:c9:8a: 34:ed:e2:f3:bf:8e:8a:60:9d:dd:fc:81:cf:4c:d8:9e:f7:57: e3:ae:08:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Lwe8x0ODNFvuVUiSJYpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh OTgyMzEwHhcNMjYwMTI3MDIwMTE2WhcNMjYwMTI4MDIwMTE2WjAzMTEwLwYDVQQD Eyg5ZDEyYWY3NmQyZWM3YzFmNDYwMTBmNzY5M2U4ZTVkY2NmNzIwZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhWV2o4plIUcV3IUBbIpPnqZj2Qp GmJLp61ReIdB+uTfTgtJigauqdlxyCTVy7audXzw9d4EHB3unyNa7oBPsNv+KvVa gYgIbXpxf7lIK/FnfcY/ObWn2zKxzYn9SvAyNnnJkdkyfQeT4SCnCNIfNpWl4cUh Em5LSbMtQVDBuI7sEYhlr4Wtnh5x5uFXM5egX6lVNrjHVnVbMTt33uAX1FN4bHKq IB28OkrIdSKiHJVNVDTTBJL0/ggFKQ8BBeujGz4Q4RDe9IjXQ/hZSi3fjNr0o45C fo54KKjlSAGFDIXgEJWNbR2xd35pVq97bX6B4woYRfixL/YuYvMti0dg1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0Sr3bS7HwfRgEPdpPo5dzPcg8eMB8GA1UdIwQY MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS9bv0+L p3XYo+KRyfnzfE60ZIruWqHT5+X1cuMkzCRjuxHkXFuwKbHZY78fZ1buoABo8Af3 nFc9ewb3wsSSfXVUxu1iqvUJ7I+0/6c/XDQiyOiIGOe9AM3BSxqLzbniC8h/tWZ7 DeTwIvYvr3ur6+PGvfYx8K6404oXN/RRH2k8DS+Nm0vZufBsrZ+clo4MStADtxAi JPS99KU7Tk4iHE4fz0Oz7dn+Pu99uzeM0mnN26suTBzJU7USZK/M57rn6igRpLqs DL45OlihO8K5yWIg4P1RCWp2VDI58zek6DM6mkE/GOOia8mKNO3i87+OimCd3fyB z0zYnvdX464IRA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:50 2026 by rpki-client