This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json) Hash identifier: KsmKYBWAZyjijJr5f5kESumdyUlGIwNzo5FFAf1L180= Subject key identifier: AE:35:CC:3A:B9:E8:A4:B3:39:DB:95:58:B3:3C:77:18:69:7E:08:C3 Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72 Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172 Certificate serial: 019BAEDCCECA2006B11A952B724204D0D606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft Manifest number: 0A39 Signing time: Sun 11 Jan 2026 21:01:05 +0000 Manifest this update: Sun 11 Jan 2026 21:01:05 +0000 Manifest next update: Mon 12 Jan 2026 21:01:05 +0000 Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=) 2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: ZGejTIzu3qVJD3X0CstuwTNs3H5QCY5sAoGxf8xG6UU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dc:ce:ca:20:06:b1:1a:95:2b:72:42:04:d0:d6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172 Validity Not Before: Jan 11 21:01:05 2026 GMT Not After : Jan 12 21:01:05 2026 GMT Subject: CN=ae35cc3ab9e8a4b339db9558b33c7718697e08c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:7a:8a:61:62:a7:0b:99:79:65:63:a1:64: 96:c6:02:d6:5f:0e:33:7c:58:0b:1c:c2:fe:a0:b4: 77:68:4b:a4:55:9e:df:d8:92:ae:34:44:ee:06:69: cb:b0:39:d6:fd:e5:ca:84:35:cf:6a:16:d3:f7:79: 26:31:19:ee:ed:d0:8a:2d:09:e9:51:d6:b0:44:6b: 9c:dd:fc:d1:d5:82:ed:5e:05:64:0a:95:49:40:d4: d6:f6:d9:32:cb:fd:be:4e:77:75:2e:42:50:f6:5e: eb:bf:1f:fb:0b:b6:59:37:68:74:36:cf:c9:c0:25: 1a:5b:1d:7d:e2:10:77:f5:db:23:ac:b4:4f:26:1d: ca:e3:ea:27:9d:b0:a8:9d:97:f6:ee:2e:3c:da:da: 4e:98:2d:fd:71:41:bb:bd:21:f7:ac:b9:6a:e3:78: 83:59:17:a6:f0:95:d8:53:d7:66:89:37:ed:4f:c7: 31:10:25:6b:ae:80:d5:5b:57:bc:2b:f7:d7:01:68: 23:d4:18:de:85:bc:7e:a5:eb:63:c5:68:54:50:9a: a5:cf:4b:0f:66:1b:e9:7e:9c:28:08:3f:aa:50:b6: fb:fc:e9:4f:0d:67:a6:66:fd:1e:f4:bd:3e:9b:87: f8:80:4d:d8:5d:aa:3d:81:49:70:e1:75:63:61:2d: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:35:CC:3A:B9:E8:A4:B3:39:DB:95:58:B3:3C:77:18:69:7E:08:C3 X509v3 Authority Key Identifier: keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bb:35:db:87:7f:51:8c:0a:cc:81:49:1d:6d:66:63:16:33: c1:aa:7d:63:78:a9:d4:f5:49:32:07:62:58:fa:c4:2b:ac:73: 72:c8:f9:33:11:b6:ab:a1:14:b6:94:d2:cb:f8:fb:d7:68:ea: 44:51:05:e3:e4:e0:97:27:9d:87:0a:54:c0:89:75:84:e9:5b: a1:fa:96:d6:18:3e:2b:15:02:4f:c6:c8:8f:10:72:bc:d2:6f: 8f:82:6d:37:a7:86:3a:89:c6:49:49:fe:7f:cc:7d:39:9c:3e: 0b:3d:ed:77:40:16:33:70:4a:38:e8:34:cb:ef:ae:8e:e7:bd: 87:9b:7f:0f:eb:fa:de:c4:1e:c7:81:1c:08:7b:28:c4:bd:7c: 4a:fe:82:b7:2a:be:03:d6:23:1a:16:2d:12:a1:16:08:cd:7c: 87:f2:b6:1c:d5:f6:e2:ac:e4:b2:ae:19:74:9b:27:be:87:23: 73:23:d8:06:ac:a3:e7:cc:6e:6d:bb:30:72:35:42:89:f8:1a: 35:b5:31:18:92:15:ec:fb:b1:23:04:db:0c:19:9f:77:d7:f1: 43:1c:76:c0:1a:14:54:e8:ec:02:88:91:36:50:f9:46:9b:0d: 33:f6:75:10:d4:f6:be:0b:e1:ae:59:9b:a8:38:36:71:b1:3c: 47:51:ba:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3M7KIAaxGpUrckIE0NYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNzhjNGFhYTAyMWJlZDhiOTI2ZTM1OTFmZGY1MGM4ZGY2 YmMxNzIwHhcNMjYwMTExMjEwMTA1WhcNMjYwMTEyMjEwMTA1WjAzMTEwLwYDVQQD EyhhZTM1Y2MzYWI5ZThhNGIzMzlkYjk1NThiMzNjNzcxODY5N2UwOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAh6imFipwuZeWVjoWSWxgLWXw4z fFgLHML+oLR3aEukVZ7f2JKuNETuBmnLsDnW/eXKhDXPahbT93kmMRnu7dCKLQnp UdawRGuc3fzR1YLtXgVkCpVJQNTW9tkyy/2+Tnd1LkJQ9l7rvx/7C7ZZN2h0Ns/J wCUaWx194hB39dsjrLRPJh3K4+onnbConZf27i482tpOmC39cUG7vSH3rLlq43iD WRem8JXYU9dmiTftT8cxECVrroDVW1e8K/fXAWgj1Bjehbx+petjxWhUUJqlz0sP ZhvpfpwoCD+qULb7/OlPDWemZv0e9L0+m4f4gE3YXao9gUlw4XVjYS12+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK41zDq56KSzOduVWLM8dxhpfgjDMB8GA1UdIwQY MBaAFOJ4xKqgIb7YuSbjWR/fUMjfa8FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt ZmM0MzM5MTk4OGY3LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYtZmM0MzM5MTk4OGY3 LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbs124d/ UYwKzIFJHW1mYxYzwap9Y3ip1PVJMgdiWPrEK6xzcsj5MxG2q6EUtpTSy/j712jq RFEF4+TglyedhwpUwIl1hOlbofqW1hg+KxUCT8bIjxByvNJvj4JtN6eGOonGSUn+ f8x9OZw+Cz3td0AWM3BKOOg0y++ujue9h5t/D+v63sQex4EcCHsoxL18Sv6Ctyq+ A9YjGhYtEqEWCM18h/K2HNX24qzksq4ZdJsnvocjcyPYBqyj58xubbswcjVCifga NbUxGJIV7PuxIwTbDBmfd9fxQxx2wBoUVOjsAoiRNlD5RpsNM/Z1ENT2vgvhrlmb qDg2cbE8R1G6CA== -----END CERTIFICATE-----Generated at Mon Jan 12 08:17:20 2026 by rpki-client