This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json) Hash identifier: 9+3SYAstXSpHfsvW4WoEnc1KTANPk9dD6nqJMIc79H8= Subject key identifier: F2:C1:A5:6E:91:24:07:CD:61:B9:9C:46:BB:56:8D:5D:43:C6:B5:9C Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002 Certificate serial: 019BC151868DAB301CEBA2BB0D226EE9B09F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft Manifest number: 0B8D Signing time: Thu 15 Jan 2026 11:01:44 +0000 Manifest this update: Thu 15 Jan 2026 11:01:44 +0000 Manifest next update: Fri 16 Jan 2026 11:01:44 +0000 Files and hashes: 1: 0NqeGlWZDzCjZCDWy4QOQl-n2DY.roa (hash: 8iXrSdtjq3/hG24zElfh5zhWwb7toZX38vGMt5k8Nqw=) 2: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: Rmstua+NxCUtGNwwMMPQhWKGqHL2xbYfNdDYSC34H50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 11:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:51:86:8d:ab:30:1c:eb:a2:bb:0d:22:6e:e9:b0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002 Validity Not Before: Jan 15 11:01:44 2026 GMT Not After : Jan 16 11:01:44 2026 GMT Subject: CN=f2c1a56e912407cd61b99c46bb568d5d43c6b59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:9c:2e:ea:b1:e3:4a:40:dc:d1:85:21:e5: d6:73:95:49:4d:24:66:a1:ae:a1:73:c4:77:62:75: 57:72:ca:cc:53:a9:50:85:1e:64:95:d1:86:ff:86: 70:b9:50:1b:9e:5e:40:ca:e7:88:19:dc:bc:2a:e1: 06:82:85:53:8c:06:37:5b:eb:96:da:33:c8:ee:52: 58:70:25:e5:7e:c0:a3:78:80:27:8e:d0:7e:cc:8d: f5:d2:18:05:a0:b9:f0:46:c1:e7:40:9c:10:b3:0d: 0c:11:44:2c:77:cc:02:4a:c8:dc:33:18:23:89:9b: 84:41:e7:c9:37:f1:28:87:40:76:2b:e7:03:ef:40: 65:6e:71:88:89:76:7a:12:08:2d:6d:95:3a:f5:cd: 9e:56:a9:8c:9c:91:07:ff:97:a2:77:66:64:cc:24: c8:c0:a3:85:42:81:8f:01:96:0f:ef:eb:3b:f8:51: f5:b5:5c:4e:90:e9:f0:6e:8a:62:3f:40:51:9f:81: 24:cf:04:d6:4e:d7:17:e9:7f:dd:31:84:83:e9:7c: 7a:c5:05:c0:97:2e:25:fc:b2:9f:a1:36:51:63:93: 58:12:27:0b:c9:0b:d3:f5:30:a0:b8:e7:b6:d5:92: d5:f4:1d:33:63:36:19:b5:b0:7e:07:7f:ec:e1:6c: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:A5:6E:91:24:07:CD:61:B9:9C:46:BB:56:8D:5D:43:C6:B5:9C X509v3 Authority Key Identifier: keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d3:e6:8f:67:68:50:76:1c:b1:d7:fd:91:bc:3e:6b:81:f4: 37:ba:21:8f:5c:e7:75:fc:b0:38:c8:b9:00:31:71:18:a0:b2: 25:8b:82:d1:2a:b7:03:4d:3a:21:cb:08:94:a3:8b:ae:03:ed: 0c:72:e5:bb:15:91:fc:0d:51:04:b4:a7:6b:23:c2:5c:ae:2a: 28:b4:99:05:8e:c7:cb:bd:ef:fe:29:52:f9:5e:6b:34:dd:31: 59:33:02:6b:6a:05:35:aa:a6:fa:ae:7f:37:da:5f:dd:55:3c: b9:4a:39:b3:a4:72:b8:a0:29:0f:86:d9:42:ee:24:bb:9b:2c: 6b:c1:94:d1:e5:ad:55:7b:18:4d:44:63:5e:1a:fe:00:27:97: 49:73:6a:fd:7c:b4:1c:6d:bd:51:32:da:73:97:f4:20:0f:f6: bf:63:57:a0:3b:24:2e:00:d5:ae:f2:c1:02:aa:cc:84:03:a8: 6b:3b:71:0f:e4:ef:e6:4c:e2:27:54:36:ab:12:22:e2:0e:93: 8c:c9:4b:6f:c7:8d:92:01:82:59:6a:87:f8:a8:46:e2:67:33: f4:2c:87:cf:eb:83:53:bc:f8:aa:88:c6:2d:84:5d:4c:74:0d: 50:71:29:65:ef:26:84:bd:b2:ce:50:d3:34:a1:21:ad:32:14: 24:d0:97:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvBUYaNqzAc66K7DSJu6bCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwMjkyYzJhMTA2MmJiMzI5ODBhM2M0NDNmZmYzODNh NDEwMDIwHhcNMjYwMTE1MTEwMTQ0WhcNMjYwMTE2MTEwMTQ0WjAzMTEwLwYDVQQD EyhmMmMxYTU2ZTkxMjQwN2NkNjFiOTljNDZiYjU2OGQ1ZDQzYzZiNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRecLuqx40pA3NGFIeXWc5VJTSRm oa6hc8R3YnVXcsrMU6lQhR5kldGG/4ZwuVAbnl5AyueIGdy8KuEGgoVTjAY3W+uW 2jPI7lJYcCXlfsCjeIAnjtB+zI310hgFoLnwRsHnQJwQsw0MEUQsd8wCSsjcMxgj iZuEQefJN/Eoh0B2K+cD70BlbnGIiXZ6EggtbZU69c2eVqmMnJEH/5eid2ZkzCTI wKOFQoGPAZYP7+s7+FH1tVxOkOnwbopiP0BRn4EkzwTWTtcX6X/dMYSD6Xx6xQXA ly4l/LKfoTZRY5NYEicLyQvT9TCguOe21ZLV9B0zYzYZtbB+B3/s4WwsSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLBpW6RJAfNYbmcRrtWjV1DxrWcMB8GA1UdIwQY MBaAFOCgApLCoQYrsymAo8RD//ODpBACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQt M2I2NGNjMzM2Yzc5LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQtM2I2NGNjMzM2Yzc5 LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdPmj2do UHYcsdf9kbw+a4H0N7ohj1zndfywOMi5ADFxGKCyJYuC0Sq3A006IcsIlKOLrgPt DHLluxWR/A1RBLSnayPCXK4qKLSZBY7Hy73v/ilS+V5rNN0xWTMCa2oFNaqm+q5/ N9pf3VU8uUo5s6RyuKApD4bZQu4ku5ssa8GU0eWtVXsYTURjXhr+ACeXSXNq/Xy0 HG29UTLac5f0IA/2v2NXoDskLgDVrvLBAqrMhAOoaztxD+Tv5kziJ1Q2qxIi4g6T jMlLb8eNkgGCWWqH+KhG4mcz9CyHz+uDU7z4qojGLYRdTHQNUHEpZe8mhL2yzlDT NKEhrTIUJNCXGQ== -----END CERTIFICATE-----Generated at Thu Jan 15 18:43:10 2026 by rpki-client