This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json) Hash identifier: 53ZD1Kh7mHfa+S2A9hkzB81MbjVMYH7c+oYiS2i4Ino= Subject key identifier: 21:2A:D4:B3:46:18:AD:5D:BD:AD:0D:D9:B2:C5:78:D4:42:09:7C:68 Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120 Certificate serial: 019BFCC1039694AD571FE04C9A0D4D033D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft Manifest number: 0D40 Signing time: Tue 27 Jan 2026 00:01:06 +0000 Manifest this update: Tue 27 Jan 2026 00:01:06 +0000 Manifest next update: Wed 28 Jan 2026 00:01:06 +0000 Files and hashes: 1: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=) 2: G2_PiUJpUwNaL9OFJdICG-GBzaI.roa (hash: lDduugUTdXOP9UBT5qryDM5SzsJ+d6xRkObDWeT06oc=) 3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=) 4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: 6N/+OriFiX5l39d9qJA9mJmGE2FrXztm4GqPeMbY9J8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:03:96:94:ad:57:1f:e0:4c:9a:0d:4d:03:3d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120 Validity Not Before: Jan 27 00:01:06 2026 GMT Not After : Jan 28 00:01:06 2026 GMT Subject: CN=212ad4b34618ad5dbdad0dd9b2c578d442097c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:2a:b5:d3:77:bb:51:bc:2f:c4:40:dd:13: 53:bc:0a:dd:eb:f8:92:ed:4b:55:82:f9:c6:6c:b3: fe:55:54:ff:6b:e7:3a:87:0f:56:f5:65:99:ed:62: ef:2a:aa:2e:40:fb:c1:20:64:97:00:93:c6:f4:6d: 0c:45:5f:5c:e9:10:76:a4:b4:1d:71:47:60:a1:62: 00:41:95:1e:16:fa:4e:59:bd:49:cb:6b:35:1c:8b: 18:8c:31:00:b5:08:f2:d1:8c:3d:3e:60:c9:bc:aa: ff:54:dc:f0:06:54:0d:e5:fe:ef:41:99:84:2b:34: c4:d1:65:f3:22:ee:b8:a1:9a:97:7c:26:79:ea:98: 8f:96:14:e3:60:cd:01:93:39:1a:75:9e:1a:32:5f: 54:58:5d:79:ed:16:b0:a4:28:78:d2:74:41:2c:2b: 2e:70:77:f7:df:7a:92:25:29:6c:e2:d8:51:92:2a: 60:b2:05:5a:9c:b1:cb:c8:21:84:67:9c:fd:2f:8f: 57:ac:0a:5c:68:e5:88:5b:13:e3:97:aa:3c:91:13: 85:a8:15:c2:c6:0f:d4:38:a0:bf:da:c8:cf:4b:18: f1:7a:52:99:68:86:f9:de:7d:39:f3:38:98:75:67: 29:3f:6e:48:c0:90:d3:22:c7:28:0c:31:9b:1d:24: a6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:D4:B3:46:18:AD:5D:BD:AD:0D:D9:B2:C5:78:D4:42:09:7C:68 X509v3 Authority Key Identifier: keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c4:0a:61:50:9f:fd:df:1b:b5:8d:1d:92:56:40:25:00:bf: 1f:40:2d:58:4c:2e:da:75:8f:f7:01:49:e7:c0:7a:d1:83:94: 88:14:e4:de:87:07:01:74:20:22:22:a3:a1:eb:22:4b:b8:1e: e7:19:a9:42:a6:f3:ff:ac:30:d1:ea:68:5a:dc:ef:fa:0e:43: 9b:de:e7:d7:1d:53:db:8b:75:b1:5b:8c:91:24:d0:18:a3:c7: 09:15:89:c7:2d:0a:7a:59:08:cf:f3:dc:f1:b0:fb:c2:09:f4: ce:b0:51:7d:6a:f0:71:ac:6a:6f:e8:8d:45:67:f8:85:32:89: b7:07:34:54:50:16:03:91:95:57:66:2a:20:66:ca:44:ef:11: 22:2d:cd:69:77:e4:56:6f:49:5f:e6:b1:7b:bb:c6:4e:b9:99: bc:a8:67:86:97:de:6e:36:98:69:ed:11:6d:d2:b4:6a:43:9f: 56:06:d6:cf:91:a2:41:ef:eb:c4:7f:c1:48:7c:55:47:b4:3d: b9:d9:1a:a0:01:38:18:32:02:cf:52:1d:42:c2:fd:9f:6b:e8: 84:a2:3b:0b:46:58:5d:75:1a:cd:5e:32:16:ec:db:3d:05:72: 43:da:b3:0a:b3:ff:7a:99:52:f7:c4:e5:f5:0f:41:22:e3:4f: 43:15:a4:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wQOWlK1XH+BMmg1NAz2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy NjExMjAwHhcNMjYwMTI3MDAwMTA2WhcNMjYwMTI4MDAwMTA2WjAzMTEwLwYDVQQD EygyMTJhZDRiMzQ2MThhZDVkYmRhZDBkZDliMmM1NzhkNDQyMDk3YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoucqtdN3u1G8L8RA3RNTvArd6/iS 7UtVgvnGbLP+VVT/a+c6hw9W9WWZ7WLvKqouQPvBIGSXAJPG9G0MRV9c6RB2pLQd cUdgoWIAQZUeFvpOWb1Jy2s1HIsYjDEAtQjy0Yw9PmDJvKr/VNzwBlQN5f7vQZmE KzTE0WXzIu64oZqXfCZ56piPlhTjYM0BkzkadZ4aMl9UWF157RawpCh40nRBLCsu cHf333qSJSls4thRkipgsgVanLHLyCGEZ5z9L49XrApcaOWIWxPjl6o8kROFqBXC xg/UOKC/2sjPSxjxelKZaIb53n058ziYdWcpP25IwJDTIscoDDGbHSSm5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEq1LNGGK1dva0N2bLFeNRCCXxoMB8GA1UdIwQY MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8QKYVCf /d8btY0dklZAJQC/H0AtWEwu2nWP9wFJ58B60YOUiBTk3ocHAXQgIiKjoesiS7ge 5xmpQqbz/6ww0epoWtzv+g5Dm97n1x1T24t1sVuMkSTQGKPHCRWJxy0KelkIz/Pc 8bD7wgn0zrBRfWrwcaxqb+iNRWf4hTKJtwc0VFAWA5GVV2YqIGbKRO8RIi3NaXfk Vm9JX+axe7vGTrmZvKhnhpfebjaYae0RbdK0akOfVgbWz5GiQe/rxH/BSHxVR7Q9 udkaoAE4GDICz1IdQsL9n2vohKI7C0ZYXXUazV4yFuzbPQVyQ9qzCrP/eplS98Tl 9Q9BIuNPQxWkbw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:39 2026 by rpki-client