This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json) Hash identifier: qPCavp4IckyW7rKNgP0v1CJx/ccIM7W1ZPql7CCAd50= Subject key identifier: 1D:76:75:43:2A:00:F3:7D:17:DD:D3:E4:D3:86:80:26:71:C5:01:80 Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Certificate serial: 019B9CD6AE1262DC522E490B15E3005F5C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft Manifest number: 05BC Signing time: Thu 08 Jan 2026 09:01:13 +0000 Manifest this update: Thu 08 Jan 2026 09:01:13 +0000 Manifest next update: Fri 09 Jan 2026 09:01:13 +0000 Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: kix0DgnEsKQTsU/euob7nv/A29Ip3Ayl9Wji+2cQ4Dc=) 2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=) 3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:d6:ae:12:62:dc:52:2e:49:0b:15:e3:00:5f:5c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Validity Not Before: Jan 8 09:01:13 2026 GMT Not After : Jan 9 09:01:13 2026 GMT Subject: CN=1d7675432a00f37d17ddd3e4d386802671c50180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:e6:0c:9e:ca:1f:d8:7d:a9:13:96:26:a7: 8e:4f:50:54:af:7b:06:be:52:c4:a4:51:7b:5b:9f: ba:c4:f6:97:70:b8:f8:b8:06:3a:58:75:11:d3:74: 1e:7d:81:fe:bc:70:9f:9a:06:ee:db:c1:d7:2b:90: b0:eb:a1:32:d7:b9:3c:75:f2:e9:53:3b:63:01:ab: c4:af:68:4c:ca:fc:a8:3f:9a:d8:7e:e2:72:f3:a8: bb:b1:5b:38:9f:1e:d8:c1:44:25:22:2b:31:da:bc: 59:72:82:24:ce:27:2c:15:fe:bf:ec:93:c1:73:7d: 26:48:c1:cb:4d:81:e3:78:85:99:7f:3d:54:1a:20: 93:b9:64:ec:ac:28:b5:a4:ad:99:d1:1c:76:33:e8: e4:c9:b1:32:24:98:51:e9:db:00:9a:cd:90:a1:77: b0:ce:49:6b:2f:89:2b:16:86:71:c3:ce:f5:5a:9c: 03:2c:11:2a:35:61:91:d9:6b:5b:27:38:2b:f8:0c: 92:71:33:aa:63:a8:ec:6c:9a:d4:c1:44:97:57:85: 28:b5:7b:43:1e:1f:f4:fe:a9:a1:57:30:87:1e:6b: 1f:86:8c:ae:b3:fd:9f:da:b6:66:1d:ed:0c:b4:ec: fe:39:d7:d1:1a:35:90:1f:0d:42:08:c3:76:4f:78: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:76:75:43:2A:00:F3:7D:17:DD:D3:E4:D3:86:80:26:71:C5:01:80 X509v3 Authority Key Identifier: keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d2:01:2a:6a:1e:37:c8:7c:88:23:c6:59:d5:67:96:32:ea: ea:8d:c4:b0:7b:9d:f9:73:38:ec:cd:ce:a9:f6:8b:ac:6d:4c: ac:a8:8d:dc:2c:f7:c3:ba:49:82:5d:d5:91:64:5d:1c:b5:b2: 52:87:9b:0f:ba:16:60:10:6e:fb:a5:84:88:bd:2f:e1:18:11: a8:c0:a9:9d:2d:7c:d0:ac:e8:14:b5:c6:0b:07:31:98:c0:bb: 1b:b3:01:01:dd:74:df:0f:85:18:b0:6e:c8:02:c8:5d:f3:57: b5:90:eb:f8:a9:dd:b9:7a:88:52:3f:3d:73:10:be:9d:10:c3: 25:80:2a:91:9a:b5:b1:7b:68:dc:8d:0e:38:06:6a:b0:7e:d2: 5b:c4:94:40:90:57:98:46:2b:54:ff:84:09:9f:83:78:60:5c: a3:f7:4e:4a:21:6f:c2:09:a6:8c:6c:db:3c:20:82:93:c1:29: 4d:09:07:e1:8a:bf:f2:2b:60:26:98:25:15:d2:66:d6:bd:73: 6d:bd:59:b9:ac:b2:25:c2:d5:55:f6:ee:1f:43:45:a5:04:52: 31:42:eb:2c:77:8d:eb:54:71:47:34:f2:7c:e1:20:75:d2:92: eb:b8:98:0f:18:58:cd:6f:7d:85:93:d1:7e:19:10:a8:ee:50: 7c:ae:e8:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuc1q4SYtxSLkkLFeMAX1x4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi NmFkZjAwHhcNMjYwMTA4MDkwMTEzWhcNMjYwMTA5MDkwMTEzWjAzMTEwLwYDVQQD EygxZDc2NzU0MzJhMDBmMzdkMTdkZGQzZTRkMzg2ODAyNjcxYzUwMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XjmDJ7KH9h9qROWJqeOT1BUr3sG vlLEpFF7W5+6xPaXcLj4uAY6WHUR03QefYH+vHCfmgbu28HXK5Cw66Ey17k8dfLp UztjAavEr2hMyvyoP5rYfuJy86i7sVs4nx7YwUQlIisx2rxZcoIkzicsFf6/7JPB c30mSMHLTYHjeIWZfz1UGiCTuWTsrCi1pK2Z0Rx2M+jkybEyJJhR6dsAms2QoXew zklrL4krFoZxw871WpwDLBEqNWGR2WtbJzgr+AyScTOqY6jsbJrUwUSXV4UotXtD Hh/0/qmhVzCHHmsfhoyus/2f2rZmHe0MtOz+OdfRGjWQHw1CCMN2T3h9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB12dUMqAPN9F93T5NOGgCZxxQGAMB8GA1UdIwQY MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It MjkxYjdhZDA5M2JmLzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdIBKmoe N8h8iCPGWdVnljLq6o3EsHud+XM47M3OqfaLrG1MrKiN3Cz3w7pJgl3VkWRdHLWy UoebD7oWYBBu+6WEiL0v4RgRqMCpnS180KzoFLXGCwcxmMC7G7MBAd103w+FGLBu yALIXfNXtZDr+KnduXqIUj89cxC+nRDDJYAqkZq1sXto3I0OOAZqsH7SW8SUQJBX mEYrVP+ECZ+DeGBco/dOSiFvwgmmjGzbPCCCk8EpTQkH4Yq/8itgJpglFdJm1r1z bb1ZuayyJcLVVfbuH0NFpQRSMULrLHeN61RxRzTyfOEgddKS67iYDxhYzW99hZPR fhkQqO5QfK7oQQ== -----END CERTIFICATE-----Generated at Thu Jan 8 17:05:12 2026 by rpki-client