This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json) Hash identifier: znJX0gpTOcYN8qVkgg4jLTxP0TiETcqK/m3nRRp6bzc= Subject key identifier: BD:70:E0:3F:EC:62:8A:15:E8:64:A0:2F:37:00:D4:DE:D6:FA:B6:DD Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Certificate serial: 019BDEB74D51812D18BD6A205116CCC3A852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft Manifest number: 10ED Signing time: Wed 21 Jan 2026 04:01:53 +0000 Manifest this update: Wed 21 Jan 2026 04:01:53 +0000 Manifest next update: Thu 22 Jan 2026 04:01:53 +0000 Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=) 2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: Hzw1YZ7QlytSzFEDOxZxZHsxp/88P9tHCmhIRBL8O6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:b7:4d:51:81:2d:18:bd:6a:20:51:16:cc:c3:a8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Validity Not Before: Jan 21 04:01:53 2026 GMT Not After : Jan 22 04:01:53 2026 GMT Subject: CN=bd70e03fec628a15e864a02f3700d4ded6fab6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:65:82:b7:23:e3:77:57:5e:1c:b0:bf:84: f9:5d:0f:b8:75:61:bc:0e:99:95:ab:87:dc:95:5e: ee:b6:fb:09:ee:d8:de:65:f3:25:59:43:42:d1:b3: 7a:79:3f:b5:e4:2a:a7:d4:d9:97:10:43:76:7c:7f: cc:55:54:70:32:02:d4:b4:56:ca:08:f3:d3:9f:dc: 17:9e:a3:0c:c3:ef:f1:62:b3:44:6d:bb:b8:48:6c: e4:96:86:e7:f5:aa:ea:e8:89:11:7d:b0:4c:ea:31: 99:3b:a0:93:3f:ae:fc:14:b0:81:8d:d7:7f:aa:49: cb:2f:e5:2d:f7:63:f7:f7:8f:65:d7:d9:17:4c:60: 30:06:e5:60:49:8b:33:02:b3:da:13:fd:b9:c9:ec: 6a:e1:b1:d7:b3:3b:e6:76:f1:d1:bc:f9:97:33:39: 8d:57:8a:7f:bc:59:d0:fe:0e:38:00:97:d9:53:64: c8:3b:c5:03:76:1f:61:b1:fb:bb:7c:7c:9b:5b:79: eb:2c:8a:c4:6f:02:71:95:9a:cc:91:b5:ef:ae:81: 1f:09:f4:86:d6:4e:ba:91:4f:fe:d9:12:99:87:64: 9c:36:b6:a0:6c:1e:1f:2c:a5:04:a9:20:95:ef:cf: 7c:da:af:50:5f:ff:b5:4a:1b:c9:8e:b4:09:bb:32: 2f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:E0:3F:EC:62:8A:15:E8:64:A0:2F:37:00:D4:DE:D6:FA:B6:DD X509v3 Authority Key Identifier: keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6c:07:d4:42:1f:59:52:61:11:71:90:7d:9d:70:61:0e:e7: 43:41:37:fc:4c:13:9f:38:26:36:d1:23:6b:c7:aa:7e:4f:8e: 54:67:eb:c6:37:a7:4f:cf:72:10:18:36:6f:a4:fb:38:e8:36: 19:89:e1:f4:b2:9c:a5:9d:02:ec:99:c9:ee:19:2f:db:8d:dd: 0b:b7:bb:de:42:d3:31:16:94:03:34:c7:c2:0c:5c:85:e2:3a: 85:70:9f:0d:15:df:fe:08:e8:50:db:fb:a4:45:69:0f:e7:0f: c7:00:c4:e5:5e:4c:bf:59:62:d9:f7:e3:ef:9d:a3:7e:f8:c0: de:de:2b:50:4c:36:87:86:64:cc:cc:bb:f8:7c:8e:26:bd:84: e1:1c:a2:14:75:37:50:7d:90:20:75:ce:c1:96:a7:0f:9a:70: bb:3a:c5:a0:a1:06:fe:51:2e:25:9c:fd:aa:53:3f:32:4e:fd: f4:aa:6c:42:91:a1:ad:be:a8:ff:8a:63:18:48:b3:b3:46:06: 79:dc:04:a8:bd:cf:a3:e1:56:74:5e:1b:97:44:8d:2a:52:a3: fa:57:a8:3f:09:a3:a6:b8:5c:67:80:ec:5e:1f:c5:54:ca:55: 1f:d0:e1:f0:49:11:af:f7:12:f7:f0:37:3a:a4:b7:0a:3e:ab: eb:09:d7:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvet01RgS0YvWogURbMw6hSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZGY1ODUyYWY5MDViNDE1ZmRmNTNlMzI4NzZmNTdhNzRk NmMxZjAwHhcNMjYwMTIxMDQwMTUzWhcNMjYwMTIyMDQwMTUzWjAzMTEwLwYDVQQD EyhiZDcwZTAzZmVjNjI4YTE1ZTg2NGEwMmYzNzAwZDRkZWQ2ZmFiNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSplgrcj43dXXhywv4T5XQ+4dWG8 DpmVq4fclV7utvsJ7tjeZfMlWUNC0bN6eT+15Cqn1NmXEEN2fH/MVVRwMgLUtFbK CPPTn9wXnqMMw+/xYrNEbbu4SGzklobn9arq6IkRfbBM6jGZO6CTP678FLCBjdd/ qknLL+Ut92P3949l19kXTGAwBuVgSYszArPaE/25yexq4bHXszvmdvHRvPmXMzmN V4p/vFnQ/g44AJfZU2TIO8UDdh9hsfu7fHybW3nrLIrEbwJxlZrMkbXvroEfCfSG 1k66kU/+2RKZh2ScNragbB4fLKUEqSCV78982q9QX/+1ShvJjrQJuzIvAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1w4D/sYooV6GSgLzcA1N7W+rbdMB8GA1UdIwQY MBaAFOHfWFKvkFtBX99T4yh29Xp01sHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgt MWU2NTc3Y2ExNzJkLzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgtMWU2NTc3Y2ExNzJk LzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2wH1EIf WVJhEXGQfZ1wYQ7nQ0E3/EwTnzgmNtEja8eqfk+OVGfrxjenT89yEBg2b6T7OOg2 GYnh9LKcpZ0C7JnJ7hkv243dC7e73kLTMRaUAzTHwgxcheI6hXCfDRXf/gjoUNv7 pEVpD+cPxwDE5V5Mv1li2ffj752jfvjA3t4rUEw2h4ZkzMy7+HyOJr2E4RyiFHU3 UH2QIHXOwZanD5pwuzrFoKEG/lEuJZz9qlM/Mk799KpsQpGhrb6o/4pjGEizs0YG edwEqL3Po+FWdF4bl0SNKlKj+leoPwmjprhcZ4DsXh/FVMpVH9Dh8EkRr/cS9/A3 OqS3Cj6r6wnXBg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:12 2026 by rpki-client