This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json) Hash identifier: 4BAhSdc4E3/dPAtwNNXWiiJ+t5gqAAoG5zRTFA6XdZI= Subject key identifier: A1:2F:51:8C:53:33:2A:6E:16:1B:D7:D9:19:B9:69:62:21:12:4E:96 Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44 Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944 Certificate serial: 019BAC8159017F3096A2B108530E501CEB5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft Manifest number: 123C Signing time: Sun 11 Jan 2026 10:01:56 +0000 Manifest this update: Sun 11 Jan 2026 10:01:56 +0000 Manifest next update: Mon 12 Jan 2026 10:01:56 +0000 Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: ZPZcDaNlvbYqNwtqqLwpVsCqo76QDSbwV7ub2W9qbqg=) 2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:81:59:01:7f:30:96:a2:b1:08:53:0e:50:1c:eb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944 Validity Not Before: Jan 11 10:01:56 2026 GMT Not After : Jan 12 10:01:56 2026 GMT Subject: CN=a12f518c53332a6e161bd7d919b9696221124e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:9d:b8:59:da:cf:2c:c6:2a:67:24:e5:a6: 7c:8a:1e:82:d4:7e:98:8b:83:cb:48:2f:b9:1a:39: 3b:39:bb:70:70:98:4c:93:4d:bb:2c:f6:3e:b3:d1: bc:81:9b:37:80:f4:9d:21:56:9e:11:94:dc:ee:d3: 94:9b:7a:94:2e:c7:ba:9e:dc:a7:e5:dc:2f:4f:37: fa:79:3d:82:a9:72:0e:c5:d7:64:eb:29:94:08:8f: 93:1a:db:55:a8:d8:58:70:8e:2b:3d:eb:61:58:e1: 71:c2:2d:fa:4e:8b:2d:cd:79:06:b6:92:56:09:95: c6:c0:52:cb:19:91:e7:13:6b:8d:ae:83:c2:51:17: fa:ed:51:f0:c4:99:33:74:f0:40:c2:dc:b7:f8:1f: 3e:76:f4:c3:19:68:ce:7c:a0:dd:07:81:ee:67:a6: 2f:ef:c1:46:2f:ca:a9:c7:82:2f:bd:02:21:34:af: cb:12:b5:ed:5c:3d:c8:a0:e5:7f:ff:62:17:7b:29: b7:45:c9:e7:32:f0:0c:aa:70:5d:6e:98:fb:e4:10: 2f:1d:95:ef:f4:e7:43:60:e5:19:d5:0d:63:44:c2: ac:d3:8d:f2:aa:a1:fa:ce:ec:55:67:a6:07:0f:76: 5b:5e:7f:86:eb:57:b3:c0:1c:de:ce:d1:38:2b:28: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2F:51:8C:53:33:2A:6E:16:1B:D7:D9:19:B9:69:62:21:12:4E:96 X509v3 Authority Key Identifier: keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2a:b8:38:94:0c:81:e7:c4:3d:c8:a5:c9:db:d1:7c:05:a0: e6:3e:74:16:92:6d:4c:5c:e6:29:71:5f:23:fc:be:e1:f6:39: 83:dc:99:9e:7e:29:1e:da:66:15:c8:77:16:18:dc:bd:e3:14: e2:bc:1d:d4:2d:f1:3d:d3:10:91:28:9c:d5:e4:3f:1e:1a:b0: d1:05:94:e4:2a:ab:9d:80:0d:08:96:e9:3f:7c:1e:bc:f1:2b: bf:c5:42:3b:36:af:64:34:20:bd:bf:ff:aa:61:b4:3f:5a:5a: a3:b0:5e:a6:11:a3:6d:3f:f0:e4:62:bd:23:06:49:86:87:1d: ce:b6:87:f0:c4:27:57:f6:71:7e:b5:24:35:ea:e5:28:bc:89: 50:28:64:c8:ce:de:49:59:13:cc:30:ec:99:1d:1f:80:67:de: e9:ae:e0:1f:61:7b:ca:f2:20:55:22:c9:d1:62:b9:4a:5e:d8: 2f:07:d6:69:e5:e0:11:ea:67:c4:7f:98:df:7a:03:30:1c:5d: 1d:ef:10:f9:44:cc:90:2a:a8:3d:46:6c:f9:9a:3d:47:07:9f: d1:4a:d3:a5:bc:c4:08:46:0d:9f:7e:6b:d9:cd:cf:54:09:d9: b6:58:06:57:7f:68:b4:8a:61:b3:27:c9:a0:13:e0:2a:09:bf: ac:1c:8d:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusgVkBfzCWorEIUw5QHOtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDNjOWFmNmNmNTJiOGEzOTBiNThmMDBiMTRhODg3MTAz MzY5NDQwHhcNMjYwMTExMTAwMTU2WhcNMjYwMTEyMTAwMTU2WjAzMTEwLwYDVQQD EyhhMTJmNTE4YzUzMzMyYTZlMTYxYmQ3ZDkxOWI5Njk2MjIxMTI0ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH2duFnazyzGKmck5aZ8ih6C1H6Y i4PLSC+5Gjk7ObtwcJhMk027LPY+s9G8gZs3gPSdIVaeEZTc7tOUm3qULse6ntyn 5dwvTzf6eT2CqXIOxddk6ymUCI+TGttVqNhYcI4rPethWOFxwi36TostzXkGtpJW CZXGwFLLGZHnE2uNroPCURf67VHwxJkzdPBAwty3+B8+dvTDGWjOfKDdB4HuZ6Yv 78FGL8qpx4IvvQIhNK/LErXtXD3IoOV//2IXeym3RcnnMvAMqnBdbpj75BAvHZXv 9OdDYOUZ1Q1jRMKs043yqqH6zuxVZ6YHD3ZbXn+G61ezwBzeztE4KyhSDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEvUYxTMypuFhvX2Rm5aWIhEk6WMB8GA1UdIwQY MBaAFOHTya9s9SuKOQtY8AsUqIcQM2lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQt Y2M3Njc5ZjE4MDJmLzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQtY2M3Njc5ZjE4MDJm LzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCq4OJQM gefEPcilydvRfAWg5j50FpJtTFzmKXFfI/y+4fY5g9yZnn4pHtpmFch3FhjcveMU 4rwd1C3xPdMQkSic1eQ/Hhqw0QWU5CqrnYANCJbpP3wevPErv8VCOzavZDQgvb// qmG0P1pao7BephGjbT/w5GK9IwZJhocdzraH8MQnV/ZxfrUkNerlKLyJUChkyM7e SVkTzDDsmR0fgGfe6a7gH2F7yvIgVSLJ0WK5Sl7YLwfWaeXgEepnxH+Y33oDMBxd He8Q+UTMkCqoPUZs+Zo9Rwef0UrTpbzECEYNn35r2c3PVAnZtlgGV39otIphsyfJ oBPgKgm/rByNew== -----END CERTIFICATE-----Generated at Sun Jan 11 19:08:57 2026 by rpki-client