This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json) Hash identifier: 7GQE+wft44DeJbpayfaUOhfEIlZg4GqPHHZ2XpgXx6w= Subject key identifier: 5A:4E:E7:06:7B:4C:0F:CF:F4:92:4F:A9:45:C5:72:F1:89:58:A1:E4 Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d Certificate serial: 019BFD661130698BF2A3DBFE9812DF263321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft Manifest number: 0C90 Signing time: Tue 27 Jan 2026 03:01:23 +0000 Manifest this update: Tue 27 Jan 2026 03:01:23 +0000 Manifest next update: Wed 28 Jan 2026 03:01:23 +0000 Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: MLCJl7y0V4uCtJlsyTBvawXFCPFtPO507Utdc1R2ffg=) 2: FUzfMQWbWYJAl81rll8lsW9bXuA.roa (hash: xah1oJ9H5XBFnmyuP1LKxRtObX+nqWM1r3kAT41zJYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:66:11:30:69:8b:f2:a3:db:fe:98:12:df:26:33:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d Validity Not Before: Jan 27 03:01:23 2026 GMT Not After : Jan 28 03:01:23 2026 GMT Subject: CN=5a4ee7067b4c0fcff4924fa945c572f18958a1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:30:96:92:d1:22:45:0f:10:04:66:75:8e: 88:48:15:e4:71:d2:62:81:1b:8a:69:99:90:75:d9: a4:68:f1:be:06:eb:66:56:b1:e1:b1:09:7d:f0:bd: d6:40:c1:ac:ab:15:1e:f8:0a:d5:f6:43:90:dc:7a: 25:0a:d6:6e:d7:f9:4f:c8:5a:d3:cf:25:0f:c4:06: f0:2e:3d:ef:63:df:39:09:58:1f:2a:b7:96:51:f9: e0:95:2f:e5:ec:78:6b:5e:9e:1e:33:9d:61:17:74: 08:ae:ea:3b:dc:2e:27:b7:6c:dd:90:a4:2e:15:bd: 6d:e3:ef:64:14:fd:49:64:a4:d7:6c:94:79:de:ff: 87:21:c0:20:09:be:dd:33:1a:7d:11:f2:dd:eb:7a: a2:fd:25:bc:d5:4e:2c:f5:47:44:7f:16:4c:7f:21: 88:23:84:12:e3:58:e0:cd:5f:b2:c1:db:7c:49:44: ee:50:b1:5b:d4:86:e9:b4:0d:9a:54:d7:ae:a0:b7: b4:c2:59:c4:14:6c:09:ef:5f:ff:d8:f1:34:27:82: c2:6d:6d:4a:89:c7:7c:49:ca:0f:04:8b:16:4e:2b: 4a:44:f0:09:6b:8d:d1:d4:83:c3:db:71:a0:4c:d9: 1e:bf:0f:f0:17:fb:be:f1:5f:d9:98:0e:b6:c7:6e: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4E:E7:06:7B:4C:0F:CF:F4:92:4F:A9:45:C5:72:F1:89:58:A1:E4 X509v3 Authority Key Identifier: keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b1:5d:42:48:17:c8:96:19:77:82:40:40:3f:8d:4a:fd:4f: d0:e2:68:b5:3a:e1:ed:f6:02:ec:5d:c4:87:74:50:44:c0:12: 32:78:68:59:ba:45:c2:49:f2:d6:6a:51:57:f3:11:e5:83:fb: 44:99:35:6b:4d:f1:02:8d:42:04:7d:e2:29:9a:2e:63:0c:4b: 26:2d:97:91:3f:d2:5e:2d:32:cb:98:dd:f1:de:a4:e0:d6:1c: 86:44:c6:3e:76:08:34:6d:4f:1d:77:8b:38:eb:88:6b:2c:0d: ae:41:99:7c:80:e1:34:11:a5:56:64:bc:8d:72:6a:5a:40:9b: b2:be:34:7b:64:40:a4:c9:92:10:f7:39:82:a8:74:83:43:55: f3:b4:20:b9:a6:88:06:88:d7:ea:ff:8c:c6:d9:a1:03:87:3f: b4:76:19:c5:90:0b:13:b7:c7:49:d7:6a:05:62:bd:57:3a:9f: af:11:df:7e:07:dc:b8:d7:d4:14:55:bf:60:0f:3d:8a:27:f8: 71:5c:e1:3a:11:8f:b7:02:05:74:6f:3d:95:cd:de:31:34:01: 9b:ca:0b:4e:5e:6a:e1:ba:e4:57:92:e3:65:88:b7:17:a5:22: a9:49:cb:fc:ea:0a:c9:97:bc:2c:6c:e6:d6:88:4b:a6:56:42: 80:6c:52:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZhEwaYvyo9v+mBLfJjMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTBlOWNjM2I3ZTM2M2Q3MjZiZDcwMjc1MGI1M2YyOWIw NTBhN2QwHhcNMjYwMTI3MDMwMTIzWhcNMjYwMTI4MDMwMTIzWjAzMTEwLwYDVQQD Eyg1YTRlZTcwNjdiNGMwZmNmZjQ5MjRmYTk0NWM1NzJmMTg5NThhMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGcwlpLRIkUPEARmdY6ISBXkcdJi gRuKaZmQddmkaPG+ButmVrHhsQl98L3WQMGsqxUe+ArV9kOQ3HolCtZu1/lPyFrT zyUPxAbwLj3vY985CVgfKreWUfnglS/l7HhrXp4eM51hF3QIruo73C4nt2zdkKQu Fb1t4+9kFP1JZKTXbJR53v+HIcAgCb7dMxp9EfLd63qi/SW81U4s9UdEfxZMfyGI I4QS41jgzV+ywdt8SUTuULFb1IbptA2aVNeuoLe0wlnEFGwJ71//2PE0J4LCbW1K icd8ScoPBIsWTitKRPAJa43R1IPD23GgTNkevw/wF/u+8V/ZmA62x25RAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpO5wZ7TA/P9JJPqUXFcvGJWKHkMB8GA1UdIwQY MBaAFOKQ6cw7fjY9cmvXAnULU/KbBQp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEt OTExM2ZkN2FmZDZjLzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEtOTExM2ZkN2FmZDZj LzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirFdQkgX yJYZd4JAQD+NSv1P0OJotTrh7fYC7F3Eh3RQRMASMnhoWbpFwkny1mpRV/MR5YP7 RJk1a03xAo1CBH3iKZouYwxLJi2XkT/SXi0yy5jd8d6k4NYchkTGPnYING1PHXeL OOuIaywNrkGZfIDhNBGlVmS8jXJqWkCbsr40e2RApMmSEPc5gqh0g0NV87QguaaI BojX6v+MxtmhA4c/tHYZxZALE7fHSddqBWK9VzqfrxHffgfcuNfUFFW/YA89iif4 cVzhOhGPtwIFdG89lc3eMTQBm8oLTl5q4brkV5LjZYi3F6UiqUnL/OoKyZe8LGzm 1ohLplZCgGxSSQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:07:45 2026 by rpki-client