This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json) Hash identifier: yVA+n/KgSmV0hZcbe/fBQ+38g59MHx0SE1fv2lh+D3k= Subject key identifier: E5:91:74:73:DA:3E:D1:7A:66:D7:0B:98:43:37:31:58:99:D1:02:F1 Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Certificate serial: 019BFA2E12772F910EB59AF4DABF5F563A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 12:01:21 +0000 Manifest this update: Mon 26 Jan 2026 12:01:21 +0000 Manifest next update: Tue 27 Jan 2026 12:01:21 +0000 Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: jWNWkaNDBRfWF+flEDN7uzU+0wCgqKe011tL/3CdudA=) 2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=) 3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=) 4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=) 5: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=) 6: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:12:77:2f:91:0e:b5:9a:f4:da:bf:5f:56:3a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Validity Not Before: Jan 26 12:01:21 2026 GMT Not After : Jan 27 12:01:21 2026 GMT Subject: CN=e5917473da3ed17a66d70b984337315899d102f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:e9:7f:57:14:36:fc:a6:1c:4b:ca:b5:b2: c1:ef:f8:04:4a:f8:7e:86:36:d5:28:b0:2c:8c:e7: aa:d9:ee:3a:72:85:5f:e4:97:53:14:a2:58:22:79: 69:5d:2d:63:d7:8d:28:56:32:ba:63:27:07:da:b0: bc:fb:26:8b:a9:03:2d:2d:12:56:9d:44:70:14:13: 80:50:88:70:6e:b9:60:c6:48:f9:0d:cf:d7:b9:25: 8b:8d:b3:41:be:db:b4:44:12:84:ac:d5:20:0c:81: 38:4b:d6:ad:c7:dc:3b:0b:82:a1:4e:1d:f6:4b:b7: a5:ab:55:3b:cc:2b:bd:ff:81:b8:90:7f:ed:41:e2: fb:ec:98:c2:22:cd:34:20:af:4c:1e:67:15:00:7d: 57:c4:9c:c0:05:fb:fd:63:42:42:9c:86:ca:ee:a9: b1:8b:c2:08:59:4e:90:6d:15:80:98:9d:2e:7a:20: 2e:3e:4c:92:4c:e4:e4:d6:d1:e2:75:b3:4f:01:a6: 72:9b:29:71:65:a8:ea:17:c6:ec:47:a5:3c:d5:22: 5b:fd:fa:30:e1:f7:4b:39:77:b7:89:d8:fb:a6:31: 94:fa:a6:b4:ee:af:cf:d9:26:f2:76:d6:0c:fe:c2: e6:57:3f:1b:3e:17:56:1c:5f:b7:27:9e:64:41:80: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:74:73:DA:3E:D1:7A:66:D7:0B:98:43:37:31:58:99:D1:02:F1 X509v3 Authority Key Identifier: keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b4:11:89:6d:8e:67:b6:71:2e:82:41:8a:f1:3b:09:2b:fc: fe:10:f7:c5:02:f6:ae:d6:7f:28:91:48:0b:77:6a:d5:86:20: 4a:a2:ef:f3:c3:af:20:49:84:9f:ac:e2:26:14:b9:2b:0f:62: ff:c7:f9:15:dd:64:e2:98:bd:d3:06:c5:9a:f0:91:56:10:f3: 54:f8:04:0c:c5:22:15:6f:16:8d:fc:ab:16:65:5b:24:7e:c2: 99:b1:7e:fb:8b:f0:0e:b3:4d:0e:43:08:f0:b8:4f:fd:2c:92: fe:8c:6f:20:94:6c:a8:76:8b:85:9a:12:0e:4d:4f:56:50:87: c1:28:47:79:c3:05:1f:aa:67:55:9d:a2:a1:bc:76:99:60:d4: 40:4f:ab:a8:d8:c3:fd:22:03:a3:b6:29:9e:06:00:19:c5:b2: 57:88:75:1d:1b:24:0e:5a:cd:65:d6:46:94:3e:6e:e3:01:ca: 98:08:a9:49:f5:92:2f:75:a5:53:cb:86:d2:6d:0b:eb:fe:80: 78:52:ae:7f:bf:2c:36:82:7e:64:81:67:e1:ac:77:9b:7e:62: 31:95:05:6f:d9:45:43:26:b2:4a:b0:73:cc:a9:87:f8:df:26: fe:09:39:b2:c1:b1:8f:a4:b2:c2:cf:25:b9:1e:22:6f:04:a0: 06:a5:f5:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LhJ3L5EOtZr02r9fVjpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi ZTFiMTEwHhcNMjYwMTI2MTIwMTIxWhcNMjYwMTI3MTIwMTIxWjAzMTEwLwYDVQQD EyhlNTkxNzQ3M2RhM2VkMTdhNjZkNzBiOTg0MzM3MzE1ODk5ZDEwMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/bpf1cUNvymHEvKtbLB7/gESvh+ hjbVKLAsjOeq2e46coVf5JdTFKJYInlpXS1j140oVjK6YycH2rC8+yaLqQMtLRJW nURwFBOAUIhwbrlgxkj5Dc/XuSWLjbNBvtu0RBKErNUgDIE4S9atx9w7C4KhTh32 S7elq1U7zCu9/4G4kH/tQeL77JjCIs00IK9MHmcVAH1XxJzABfv9Y0JCnIbK7qmx i8IIWU6QbRWAmJ0ueiAuPkySTOTk1tHidbNPAaZymylxZajqF8bsR6U81SJb/fow 4fdLOXe3idj7pjGU+qa07q/P2SbydtYM/sLmVz8bPhdWHF+3J55kQYBzdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWRdHPaPtF6ZtcLmEM3MViZ0QLxMB8GA1UdIwQY MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt NzQyZGMwYzk3MGMwLzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLQRiW2O Z7ZxLoJBivE7CSv8/hD3xQL2rtZ/KJFIC3dq1YYgSqLv88OvIEmEn6ziJhS5Kw9i /8f5Fd1k4pi90wbFmvCRVhDzVPgEDMUiFW8WjfyrFmVbJH7CmbF++4vwDrNNDkMI 8LhP/SyS/oxvIJRsqHaLhZoSDk1PVlCHwShHecMFH6pnVZ2iobx2mWDUQE+rqNjD /SIDo7YpngYAGcWyV4h1HRskDlrNZdZGlD5u4wHKmAipSfWSL3WlU8uG0m0L6/6A eFKuf78sNoJ+ZIFn4ax3m35iMZUFb9lFQyaySrBzzKmH+N8m/gk5ssGxj6Syws8l uR4ibwSgBqX1pQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:54 2026 by rpki-client