This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json) Hash identifier: J/CQFfQKsTw8yKDMeGiQH5+6VSJDCySOfbrLlCIe7Bo= Subject key identifier: A6:C1:2E:5C:E3:43:4E:DA:46:93:2B:F4:E4:51:EA:AA:6E:87:92:9A Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b Certificate serial: 019BFA6453FBD92BADEEF7D5C193C96F834D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft Manifest number: 1856 Signing time: Mon 26 Jan 2026 13:00:37 +0000 Manifest this update: Mon 26 Jan 2026 13:00:37 +0000 Manifest next update: Tue 27 Jan 2026 13:00:37 +0000 Files and hashes: 1: j53A_1kF9aSNXUc59y7aaNnJTIQ.roa (hash: OEN7haodJOJY7ysf6XgmF/7hfw+3ZMgQrirEKvY0HS0=) 2: pBY-m3fTvRgCKA2fhrrC18yYXXo.roa (hash: rEOIvVPIx9D8zhJT04AIosT1AdrWPH4fBg2A4YDwjlQ=) 3: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: 53tvWBJQNiC3Rv4Hw8KONISX9wRMrXILDmT7dliUL2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:53:fb:d9:2b:ad:ee:f7:d5:c1:93:c9:6f:83:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b Validity Not Before: Jan 26 13:00:37 2026 GMT Not After : Jan 27 13:00:37 2026 GMT Subject: CN=a6c12e5ce3434eda46932bf4e451eaaa6e87929a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:4b:46:3d:15:80:09:bf:47:99:38:29:db: 3d:71:b0:4c:fe:39:44:bd:9c:eb:d5:4a:85:a5:fd: 03:e5:5c:a2:8c:d0:f2:ac:4c:97:00:8d:86:f3:fc: 5f:83:e0:33:b1:55:88:6b:02:a9:0f:45:e6:41:47: 75:e1:16:23:09:e5:64:ca:a6:af:9a:81:14:38:73: 47:b7:a7:1a:f9:91:be:6e:6f:5d:e5:35:41:82:42: 76:7a:d4:4e:f4:4a:26:1d:2e:a5:59:8e:8a:44:21: a3:e2:24:16:90:30:55:d7:52:7b:54:5d:65:cd:76: bc:0e:18:0e:d0:e3:f5:2a:10:9c:4b:78:7f:3b:fc: 07:74:8d:3d:d5:f1:5a:28:16:e8:94:09:ca:cf:8b: e8:a3:07:17:0e:af:13:3e:e2:1e:a1:b2:39:cc:44: e9:5b:37:62:60:f3:3b:b3:76:f1:04:4d:b7:8e:db: 85:66:a1:65:b9:94:2f:2c:97:59:a2:34:cf:60:cc: ae:23:2e:46:e5:7e:52:fc:da:81:40:e2:f9:01:df: 06:a6:59:6e:b6:8b:8d:ff:9a:f7:7b:b0:45:80:bf: ea:0f:a7:1b:62:a2:cf:50:46:2b:7f:0e:69:34:9d: 47:5a:4b:15:bc:35:8c:38:8a:64:2f:48:5e:f2:80: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:2E:5C:E3:43:4E:DA:46:93:2B:F4:E4:51:EA:AA:6E:87:92:9A X509v3 Authority Key Identifier: keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:65:2f:80:02:6e:ec:99:f0:30:8a:ea:60:fa:1e:0e:0c:e7: 51:18:63:e9:7d:d7:3e:d7:f0:87:16:04:fb:3d:95:9e:8a:2e: dc:04:95:ac:c6:18:19:58:b0:8a:1f:0b:3e:f2:8f:27:80:ea: 7c:4d:56:75:28:6e:19:ad:3f:ed:7c:28:c8:c0:c9:9a:6e:34: 2b:69:33:86:0a:54:65:fa:1b:76:c9:df:3b:4e:e0:e2:c9:c6: c0:59:40:e4:10:35:22:31:bd:fd:7b:51:96:4b:58:bf:2f:1d: ce:e4:b8:3d:9d:51:ef:35:2f:95:d2:76:d7:9c:96:8e:b0:bc: 83:51:cb:8f:c3:eb:58:f4:d1:5e:cb:74:bd:3c:f0:a7:db:a5: b5:0c:b3:53:05:4d:9f:87:49:bb:27:c1:cb:89:b2:45:ce:22: d8:04:0a:a8:c3:91:98:e9:9f:2f:d4:ea:1b:02:c3:65:b8:42: a9:50:0e:25:56:24:20:b7:67:9f:25:cc:16:18:ef:f1:c2:fa: 0b:12:6b:f8:03:1d:e2:69:77:99:3c:32:65:af:c2:ae:ee:32: bb:82:88:65:58:6d:98:c7:91:ba:c1:67:f3:bf:38:d4:97:1d: 6e:3d:64:a8:d6:2e:15:ec:0f:20:3f:d7:8d:c0:11:93:95:4e: a2:e5:c3:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZFP72Sut7vfVwZPJb4NNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4 OWU5NWIwHhcNMjYwMTI2MTMwMDM3WhcNMjYwMTI3MTMwMDM3WjAzMTEwLwYDVQQD EyhhNmMxMmU1Y2UzNDM0ZWRhNDY5MzJiZjRlNDUxZWFhYTZlODc5MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4RLRj0VgAm/R5k4Kds9cbBM/jlE vZzr1UqFpf0D5VyijNDyrEyXAI2G8/xfg+AzsVWIawKpD0XmQUd14RYjCeVkyqav moEUOHNHt6ca+ZG+bm9d5TVBgkJ2etRO9EomHS6lWY6KRCGj4iQWkDBV11J7VF1l zXa8DhgO0OP1KhCcS3h/O/wHdI091fFaKBbolAnKz4voowcXDq8TPuIeobI5zETp WzdiYPM7s3bxBE23jtuFZqFluZQvLJdZojTPYMyuIy5G5X5S/NqBQOL5Ad8Gpllu touN/5r3e7BFgL/qD6cbYqLPUEYrfw5pNJ1HWksVvDWMOIpkL0he8oCUzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbBLlzjQ07aRpMr9ORR6qpuh5KaMB8GA1UdIwQY MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt NDAyMTI2NWMzOWIwLzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGUvgAJu 7JnwMIrqYPoeDgznURhj6X3XPtfwhxYE+z2Vnoou3ASVrMYYGViwih8LPvKPJ4Dq fE1WdShuGa0/7XwoyMDJmm40K2kzhgpUZfobdsnfO07g4snGwFlA5BA1IjG9/XtR lktYvy8dzuS4PZ1R7zUvldJ215yWjrC8g1HLj8PrWPTRXst0vTzwp9ultQyzUwVN n4dJuyfBy4myRc4i2AQKqMORmOmfL9TqGwLDZbhCqVAOJVYkILdnnyXMFhjv8cL6 CxJr+AMd4ml3mTwyZa/Cru4yu4KIZVhtmMeRusFn87841Jcdbj1kqNYuFewPID/X jcARk5VOouXD3w== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:34 2026 by rpki-client