This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json) Hash identifier: qdBaIsrN8V93n0BAFlbXmn04/VLaTM2q6LaanSHbC0Q= Subject key identifier: D4:1B:1E:23:CE:AF:64:9D:F5:F3:BA:E8:6F:D1:2C:23:CE:F0:FC:1A Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f Certificate serial: 019BA3EBCAEAF70E867DD251B8243E2DE8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft Manifest number: 0604 Signing time: Fri 09 Jan 2026 18:01:37 +0000 Manifest this update: Fri 09 Jan 2026 18:01:37 +0000 Manifest next update: Sat 10 Jan 2026 18:01:37 +0000 Files and hashes: 1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=) 2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: aIKgO21z5QPYtbgRiA0BnE1ZpGChREsxLLWnHXPkx2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:eb:ca:ea:f7:0e:86:7d:d2:51:b8:24:3e:2d:e8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f Validity Not Before: Jan 9 18:01:37 2026 GMT Not After : Jan 10 18:01:37 2026 GMT Subject: CN=d41b1e23ceaf649df5f3bae86fd12c23cef0fc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8d:eb:5f:e2:f8:fc:30:ba:38:42:2d:d3:22: ef:db:9f:5c:e0:82:ae:f1:81:99:fe:ad:8f:2a:70: 6d:eb:3a:36:ad:9d:24:3f:05:b7:8e:62:fe:59:96: 33:02:3c:de:ae:ed:6e:18:b7:77:09:f4:a3:dd:c4: 96:3e:6e:db:c3:e3:35:ec:55:88:c2:fc:1c:4c:be: e1:56:e6:d8:fc:a0:10:68:84:fb:cf:14:ee:1a:ef: 20:fa:98:32:90:1f:26:1e:ba:81:db:02:75:fa:67: 1a:2b:bd:18:f5:5b:73:ee:a1:21:f3:09:a1:97:9a: 87:95:0d:40:c3:c0:92:0f:d1:76:1a:77:25:a0:aa: e8:13:1a:3a:aa:39:3c:59:d6:1f:d1:26:f5:c9:89: d2:81:cd:40:ef:a6:8f:77:c4:1d:bc:52:78:e1:06: 9c:02:84:3a:a0:85:9a:7f:0f:cb:8f:1c:a7:5e:4a: a3:32:c0:df:c9:73:45:9d:cd:80:71:1f:96:2a:85: 0e:be:df:12:b9:3f:4b:67:0f:fa:d8:e7:fd:0f:ac: bc:b0:03:fc:da:8c:c5:43:58:9f:dc:7a:83:af:cf: 84:36:53:66:d8:76:8f:46:92:6d:ae:23:bd:f7:d3: b9:d0:c5:a3:83:03:07:02:32:89:15:d3:98:60:54: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1B:1E:23:CE:AF:64:9D:F5:F3:BA:E8:6F:D1:2C:23:CE:F0:FC:1A X509v3 Authority Key Identifier: keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cc:52:65:2f:63:7e:e6:9b:cd:19:33:a4:cf:d4:a8:15:f5: 68:cb:27:6c:92:44:83:15:f0:57:81:27:83:b7:c8:cf:df:58: c8:67:79:ec:ec:b5:70:f4:1c:53:80:72:20:e8:e4:15:f6:05: 21:60:46:47:5b:30:a0:b3:7d:71:35:1d:a8:d2:cf:b4:28:5d: 90:f8:32:c7:59:65:63:ef:01:46:f2:7b:a4:5c:ad:00:2b:53: 29:7f:53:0d:6c:c7:89:09:3e:3c:35:95:3a:34:cc:ad:b3:32: 87:94:ca:04:f6:07:8b:2f:c0:b6:c0:91:9b:f3:85:10:58:74: 98:28:18:de:79:97:1d:1f:c2:e0:21:1c:ec:d3:2e:1f:d5:e8: dd:fd:ab:61:51:b7:28:6f:51:cb:6b:19:da:e8:51:d5:44:cf: ad:75:d6:eb:b2:fc:47:0e:94:23:00:d5:cf:84:b1:8e:a8:d3: 8e:d2:7a:15:e9:85:a0:bf:dc:c1:f1:fc:ed:cd:58:e9:34:f9: ac:28:4d:b2:42:14:09:b0:a0:12:c4:9c:7e:8a:b4:b7:6a:14: fb:10:99:64:26:ff:99:d4:e4:f1:ea:ce:2a:97:db:38:cf:51: 2c:1a:50:f1:ad:31:6f:31:83:87:9f:45:e2:d2:94:eb:d4:26: bd:cb:b6:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuj68rq9w6GfdJRuCQ+Lei8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNzUzMzlkYWMxNjUzNWQ0NTdhZTg4NjJiNTM1YmNlNTFl MTIyMGYwHhcNMjYwMTA5MTgwMTM3WhcNMjYwMTEwMTgwMTM3WjAzMTEwLwYDVQQD EyhkNDFiMWUyM2NlYWY2NDlkZjVmM2JhZTg2ZmQxMmMyM2NlZjBmYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y3rX+L4/DC6OEIt0yLv259c4IKu 8YGZ/q2PKnBt6zo2rZ0kPwW3jmL+WZYzAjzeru1uGLd3CfSj3cSWPm7bw+M17FWI wvwcTL7hVubY/KAQaIT7zxTuGu8g+pgykB8mHrqB2wJ1+mcaK70Y9Vtz7qEh8wmh l5qHlQ1Aw8CSD9F2GncloKroExo6qjk8WdYf0Sb1yYnSgc1A76aPd8QdvFJ44Qac AoQ6oIWafw/LjxynXkqjMsDfyXNFnc2AcR+WKoUOvt8SuT9LZw/62Of9D6y8sAP8 2ozFQ1if3HqDr8+ENlNm2HaPRpJtriO999O50MWjgwMHAjKJFdOYYFSgcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQbHiPOr2Sd9fO66G/RLCPO8PwaMB8GA1UdIwQY MBaAFOB1M52sFlNdRXrohitTW85R4SIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMt YmI2YzZjNDU3ODE3LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMtYmI2YzZjNDU3ODE3 LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8xSZS9j fuabzRkzpM/UqBX1aMsnbJJEgxXwV4Eng7fIz99YyGd57Oy1cPQcU4ByIOjkFfYF IWBGR1swoLN9cTUdqNLPtChdkPgyx1llY+8BRvJ7pFytACtTKX9TDWzHiQk+PDWV OjTMrbMyh5TKBPYHiy/AtsCRm/OFEFh0mCgY3nmXHR/C4CEc7NMuH9Xo3f2rYVG3 KG9Ry2sZ2uhR1UTPrXXW67L8Rw6UIwDVz4SxjqjTjtJ6FemFoL/cwfH87c1Y6TT5 rChNskIUCbCgEsScfoq0t2oU+xCZZCb/mdTk8erOKpfbOM9RLBpQ8a0xbzGDh59F 4tKU69Qmvcu2IA== -----END CERTIFICATE-----Generated at Sat Jan 10 04:03:46 2026 by rpki-client