This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json) Hash identifier: OBjs3dLzGMGXou9L8RJ5VKq3W2jzZigaxkKs6+khZ08= Subject key identifier: F1:1D:6C:AC:9D:0D:22:E3:17:45:42:39:18:58:03:5B:CC:F9:B0:8B Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a Certificate serial: 019BA4FEBABC7A9CB43C315C5FD2F24149D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft Manifest number: 17BF Signing time: Fri 09 Jan 2026 23:01:55 +0000 Manifest this update: Fri 09 Jan 2026 23:01:55 +0000 Manifest next update: Sat 10 Jan 2026 23:01:55 +0000 Files and hashes: 1: 2fN3eFa0bjosUQqjhzxnSC-ZbG4.roa (hash: adZ7mZtP0EOWzdaHjuDb/aCtRN0v7AY6Df2Y3DcoCAs=) 2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: SRVkTMP7iBTYxw5qefyjIsr1Qj2nv67RRLl0estWmhE=) 3: fQpqOd1l93-P-yMVY0liF15r3FA.roa (hash: fe669y4X3Xx1cDS4i66TQBvbP8wPt7PZfJZDiZ3TAoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:fe:ba:bc:7a:9c:b4:3c:31:5c:5f:d2:f2:41:49:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a Validity Not Before: Jan 9 23:01:55 2026 GMT Not After : Jan 10 23:01:55 2026 GMT Subject: CN=f11d6cac9d0d22e3174542391858035bccf9b08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:a2:2d:3c:07:bd:f8:3d:39:4a:bb:f9:13: 5e:ec:05:e7:a2:05:ca:e2:b6:e4:5d:c7:36:f8:60: 8f:39:04:d7:b0:09:dc:8b:83:2e:be:9d:cf:b5:70: 1e:10:4b:3d:aa:a1:37:fb:1f:5c:16:87:8c:b6:43: 13:45:cb:fb:2b:46:7e:f7:01:a8:04:46:76:3e:eb: bc:00:d4:d4:54:82:8a:ca:1a:d5:f7:a1:3d:13:36: bb:b9:a9:36:c7:68:8d:46:ce:13:e9:d8:64:96:53: de:3d:a5:ad:16:03:b2:90:c2:9c:ae:30:32:0a:44: f5:2f:fa:eb:e5:21:c3:89:a8:68:f6:74:45:a1:a9: d2:18:0d:28:90:c8:aa:37:c2:6d:22:c4:67:14:25: d8:79:b4:67:b8:7b:3f:6e:a7:2e:8f:29:eb:58:27: 26:8e:40:b2:38:7f:e2:19:f6:2c:3d:da:46:ce:f8: a1:0c:bc:72:be:e2:0a:08:c2:2f:36:5f:3d:10:11: 7f:62:76:8f:69:79:97:c6:02:42:b4:c5:56:9d:43: 93:05:9b:e0:0b:91:a4:1b:36:5b:a7:7d:aa:09:85: 61:44:ff:9a:48:88:9b:96:9a:87:69:8a:94:03:21: 1d:1c:70:0e:6e:b2:98:a3:d4:bd:a7:eb:26:3f:ca: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:6C:AC:9D:0D:22:E3:17:45:42:39:18:58:03:5B:CC:F9:B0:8B X509v3 Authority Key Identifier: keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e5:de:1e:cb:35:59:76:e9:84:a7:e9:b4:8e:ab:db:f4:fb: e5:20:11:c7:84:83:d9:af:dd:28:1e:a6:3a:24:c8:57:2e:6f: 6f:12:5b:89:a5:a1:f2:08:86:71:f8:3a:33:fb:a7:75:9e:6f: c0:3b:4e:6b:8d:36:68:f4:5b:74:8f:5a:27:34:57:d6:ed:e0: 20:2e:8f:8c:5d:a7:73:a7:d9:e3:a4:b7:b2:54:5e:46:81:54: d3:b0:88:7f:54:c3:8d:6b:06:1d:82:05:98:42:97:35:ec:28: 80:9a:84:82:ce:23:a4:88:fd:23:6b:23:84:cf:79:6a:5e:4c: e5:89:db:4d:ca:ca:e8:7d:cc:6a:28:f9:d1:da:9c:98:46:2d: 58:65:67:d6:b8:d7:f5:72:35:ea:04:8e:de:c3:16:39:1b:bd: 6f:b6:bd:79:7d:16:bc:c2:03:21:c1:53:18:eb:85:3d:67:7e: a8:c2:4a:49:96:eb:fb:89:f9:15:56:a9:17:2a:cd:ce:f5:3e: 1c:f1:6e:04:66:3f:09:30:b9:ad:30:73:f0:9d:db:9a:45:28: 9d:08:35:4d:68:6f:80:52:8e:dd:6a:a3:6d:db:08:1d:03:e3: 17:f2:82:8c:37:6c:d6:65:53:6d:59:ea:79:71:d7:9c:3e:58: 35:8b:c5:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuk/rq8epy0PDFcX9LyQUnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl Zjk5M2EwHhcNMjYwMTA5MjMwMTU1WhcNMjYwMTEwMjMwMTU1WjAzMTEwLwYDVQQD EyhmMTFkNmNhYzlkMGQyMmUzMTc0NTQyMzkxODU4MDM1YmNjZjliMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/iiLTwHvfg9OUq7+RNe7AXnogXK 4rbkXcc2+GCPOQTXsAnci4Muvp3PtXAeEEs9qqE3+x9cFoeMtkMTRcv7K0Z+9wGo BEZ2Puu8ANTUVIKKyhrV96E9Eza7uak2x2iNRs4T6dhkllPePaWtFgOykMKcrjAy CkT1L/rr5SHDiaho9nRFoanSGA0okMiqN8JtIsRnFCXYebRnuHs/bqcujynrWCcm jkCyOH/iGfYsPdpGzvihDLxyvuIKCMIvNl89EBF/YnaPaXmXxgJCtMVWnUOTBZvg C5GkGzZbp32qCYVhRP+aSIiblpqHaYqUAyEdHHAObrKYo9S9p+smP8q3QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEdbKydDSLjF0VCORhYA1vM+bCLMB8GA1UdIwQY MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt NjhhMmYwYmI1YjdhLzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuXeHss1 WXbphKfptI6r2/T75SARx4SD2a/dKB6mOiTIVy5vbxJbiaWh8giGcfg6M/undZ5v wDtOa402aPRbdI9aJzRX1u3gIC6PjF2nc6fZ46S3slReRoFU07CIf1TDjWsGHYIF mEKXNewogJqEgs4jpIj9I2sjhM95al5M5YnbTcrK6H3Maij50dqcmEYtWGVn1rjX 9XI16gSO3sMWORu9b7a9eX0WvMIDIcFTGOuFPWd+qMJKSZbr+4n5FVapFyrNzvU+ HPFuBGY/CTC5rTBz8J3bmkUonQg1TWhvgFKO3WqjbdsIHQPjF/KCjDds1mVTbVnq eXHXnD5YNYvFJg== -----END CERTIFICATE-----Generated at Sat Jan 10 07:09:45 2026 by rpki-client