This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json) Hash identifier: 7Mkzq/I7pr/aTp6D3U6ADKF3rhhfjE7/krOKWt2eXeM= Subject key identifier: A5:12:CE:AA:91:D7:83:7D:39:29:E8:D8:C5:F9:76:1A:34:E3:D4:F0 Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f Certificate serial: 019BAFB8E88B7650BDDF20F0C96D0B78BF1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft Manifest number: 0A02 Signing time: Mon 12 Jan 2026 01:01:29 +0000 Manifest this update: Mon 12 Jan 2026 01:01:29 +0000 Manifest next update: Tue 13 Jan 2026 01:01:29 +0000 Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: 0skZJ5Q4Oyka8y+6MQmc5bKsZU6H0IL5DLRgxdLBKbI=) 2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b8:e8:8b:76:50:bd:df:20:f0:c9:6d:0b:78:bf:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f Validity Not Before: Jan 12 01:01:29 2026 GMT Not After : Jan 13 01:01:29 2026 GMT Subject: CN=a512ceaa91d7837d3929e8d8c5f9761a34e3d4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:dc:ed:08:fd:34:90:4c:fa:f7:c0:19:53: 54:26:e2:68:3f:af:05:5b:1e:11:15:98:6f:4f:a0: 8b:c4:12:fe:e1:ad:c2:36:96:29:a0:e8:b2:45:5f: 04:4f:9a:12:76:d3:09:f0:02:e9:19:66:0c:91:c8: 59:69:7f:89:89:46:e0:4c:0c:2f:13:f5:ec:5f:f0: 81:4d:b8:fb:2c:4c:91:6c:d2:93:fe:c0:58:93:61: de:7d:d0:c8:fb:7a:06:d2:02:9c:70:2d:a2:22:3d: af:7f:b8:ea:6d:ba:b6:36:8c:4d:0e:b1:5a:d8:e9: a7:ad:f3:30:cd:fa:34:9a:fc:0c:50:21:aa:4d:25: 57:b3:cc:76:d2:70:20:ec:06:51:9f:81:3e:ea:b3: bd:99:26:dc:b5:8a:dd:78:48:3c:df:d3:79:0d:cd: d5:47:4f:51:c7:68:58:c2:84:48:09:c0:f2:9c:5c: 87:47:91:3c:af:e6:83:b8:97:33:12:9d:12:01:82: e2:e9:ef:74:ea:7c:6c:af:eb:e4:dc:29:76:05:28: 6c:3e:0d:a6:69:b2:d8:d8:94:36:1f:92:16:ae:8b: c2:3f:79:f0:d7:28:ec:96:4c:47:82:3b:2e:5c:18: d6:2b:d4:ba:a8:de:a2:0d:f5:79:69:b0:37:39:18: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:12:CE:AA:91:D7:83:7D:39:29:E8:D8:C5:F9:76:1A:34:E3:D4:F0 X509v3 Authority Key Identifier: keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e9:cb:3a:71:fe:90:7b:df:1a:e1:a3:22:a5:50:27:3b:ae: 77:05:85:8b:d5:ff:6d:4b:15:ac:2b:fb:1b:8e:8d:a7:1e:e6: 00:1c:74:ac:89:18:7b:75:89:56:da:b7:01:6e:e0:1c:be:51: 25:1d:74:75:45:9d:91:eb:42:3f:1a:05:fa:32:03:4c:de:e5: d9:b8:dc:bb:cb:43:98:d2:c1:6e:9d:03:49:91:67:ec:cd:16: 0d:04:2d:b6:1c:d7:25:42:15:3a:18:0c:ce:63:bc:06:4d:f8: 2d:a0:45:f2:8b:f9:04:06:c5:73:b3:2d:91:ac:8a:d8:75:e6: d2:f3:3c:aa:1a:df:ee:8e:11:5f:8b:3f:cb:47:aa:ad:1f:b7: 70:22:d6:46:35:1c:50:b2:36:9e:f7:9f:49:5f:5d:03:2f:48: a6:bd:54:24:f7:39:03:eb:5a:d3:b4:fb:8e:b1:33:59:47:25: 7e:04:f3:08:76:39:d3:fd:22:b9:f8:79:35:34:33:09:04:c6: 1a:b6:88:02:fa:6a:ae:5f:74:6f:25:c2:a2:23:62:e5:d7:ec: 0f:4f:09:d9:60:f4:56:74:7b:5f:fb:98:41:b5:4e:66:2a:a2: da:30:3e:98:96:a6:9e:f9:03:59:88:d7:5c:7a:3f:54:ef:d3: 59:0c:b0:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuOiLdlC93yDwyW0LeL8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx NzkxMmYwHhcNMjYwMTEyMDEwMTI5WhcNMjYwMTEzMDEwMTI5WjAzMTEwLwYDVQQD EyhhNTEyY2VhYTkxZDc4MzdkMzkyOWU4ZDhjNWY5NzYxYTM0ZTNkNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjHc7Qj9NJBM+vfAGVNUJuJoP68F Wx4RFZhvT6CLxBL+4a3CNpYpoOiyRV8ET5oSdtMJ8ALpGWYMkchZaX+JiUbgTAwv E/XsX/CBTbj7LEyRbNKT/sBYk2HefdDI+3oG0gKccC2iIj2vf7jqbbq2NoxNDrFa 2OmnrfMwzfo0mvwMUCGqTSVXs8x20nAg7AZRn4E+6rO9mSbctYrdeEg839N5Dc3V R09Rx2hYwoRICcDynFyHR5E8r+aDuJczEp0SAYLi6e906nxsr+vk3Cl2BShsPg2m abLY2JQ2H5IWrovCP3nw1yjslkxHgjsuXBjWK9S6qN6iDfV5abA3ORiNxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUSzqqR14N9OSno2MX5dho049TwMB8GA1UdIwQY MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMunLOnH+ kHvfGuGjIqVQJzuudwWFi9X/bUsVrCv7G46Npx7mABx0rIkYe3WJVtq3AW7gHL5R JR10dUWdketCPxoF+jIDTN7l2bjcu8tDmNLBbp0DSZFn7M0WDQQtthzXJUIVOhgM zmO8Bk34LaBF8ov5BAbFc7MtkayK2HXm0vM8qhrf7o4RX4s/y0eqrR+3cCLWRjUc ULI2nvefSV9dAy9Ipr1UJPc5A+ta07T7jrEzWUclfgTzCHY50/0iufh5NTQzCQTG GraIAvpqrl90byXCoiNi5dfsD08J2WD0VnR7X/uYQbVOZiqi2jA+mJamnvkDWYjX XHo/VO/TWQywaw== -----END CERTIFICATE-----Generated at Mon Jan 12 10:33:24 2026 by rpki-client