This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json) Hash identifier: kVLS1Zb/wb0h6kTur6SQhAykHf5iLyt1aHPbY/ehAZ4= Subject key identifier: 3A:34:09:D7:62:A5:C7:B4:8A:C8:9C:E7:CF:07:30:6C:95:AF:8E:C6 Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789 Certificate serial: 019BA422A259BC088B06570E4BEB20292B8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft Manifest number: 17C4 Signing time: Fri 09 Jan 2026 19:01:31 +0000 Manifest this update: Fri 09 Jan 2026 19:01:31 +0000 Manifest next update: Sat 10 Jan 2026 19:01:31 +0000 Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: oxI35OZRF34tQUKpftbSRZpohw/XSFKgw6cQx7B7YXs=) 2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:22:a2:59:bc:08:8b:06:57:0e:4b:eb:20:29:2b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789 Validity Not Before: Jan 9 19:01:31 2026 GMT Not After : Jan 10 19:01:31 2026 GMT Subject: CN=3a3409d762a5c7b48ac89ce7cf07306c95af8ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:62:af:5a:1c:04:b0:7b:ca:ee:33:83:b3: 0b:99:7c:66:e6:b4:62:df:ac:f8:db:26:24:56:ca: 1c:76:78:f5:3b:cf:45:51:d8:96:bb:37:92:c6:f5: 68:83:1b:b2:d3:aa:ec:5b:1e:b5:f8:a6:ec:2a:11: c8:d8:54:3a:a7:81:14:5c:f9:fc:9f:9e:cd:ba:58: b7:c9:c4:54:98:16:c8:78:33:88:e4:06:a3:da:b6: 14:25:f1:49:db:7c:57:3e:be:91:25:4a:56:08:55: 3e:83:42:50:32:0b:c8:56:c2:e0:29:97:cd:ee:84: 67:c3:a4:9b:27:a2:c8:8c:36:dd:34:cc:2b:6c:ca: 86:b9:ed:7c:07:c2:10:2b:3b:42:9e:53:35:f1:2a: 36:4e:6b:81:3b:09:da:88:06:3a:cc:bd:3f:d8:56: e6:55:07:7f:27:0e:eb:6b:61:5b:2f:89:34:0f:a0: dd:03:93:fb:98:9c:79:52:ba:da:70:05:9d:3d:df: 9b:b4:43:05:5e:e6:16:27:50:aa:7f:09:64:22:5d: 09:e3:1f:d7:d2:16:af:eb:ae:a3:fc:86:ba:e8:b8: 85:e8:a4:8f:a6:18:30:ae:94:49:0d:95:a4:34:48: 23:05:1d:5a:d2:fb:be:76:4c:44:9b:4e:3a:f8:2b: 8a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:34:09:D7:62:A5:C7:B4:8A:C8:9C:E7:CF:07:30:6C:95:AF:8E:C6 X509v3 Authority Key Identifier: keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b8:2c:66:4f:59:7e:64:7c:f4:85:43:3d:ab:39:51:f7:29: 33:f7:de:0f:e4:b3:7c:dc:b7:79:1a:0f:3e:b6:0d:a2:fb:a2: d6:3d:ae:ca:a9:f7:42:07:06:dc:8e:e1:8e:3a:a6:2b:50:1e: 7f:7b:18:46:37:c8:65:7a:2e:24:52:34:7d:0d:f1:b4:b9:43: 4a:ba:ce:9d:f1:7d:e6:94:12:26:6d:b7:d6:f3:8e:d3:8e:68: 0a:f9:69:0b:d6:ca:6f:04:25:58:3b:99:7f:c3:07:d3:43:d5: c4:0c:9b:22:08:ad:c5:d4:27:39:31:04:20:69:42:5f:17:cb: 41:c7:62:41:bd:2f:79:b1:f8:3c:0a:a3:ea:c4:2f:b7:12:af: ad:c6:65:7d:20:11:fd:11:29:0c:dc:82:7c:86:6f:7c:6a:d8: c8:c8:98:d3:4b:8e:f4:1f:13:d7:67:83:31:9a:ff:bf:b7:9b: c8:d4:db:e3:14:58:5b:69:86:21:c2:ba:4c:f8:9b:7b:fc:3d: 3f:2d:d2:5f:6c:90:5d:e6:4a:92:ff:c8:11:9d:be:91:46:10: ad:bd:53:0a:36:89:c9:5c:7b:ca:ce:42:1f:1c:5a:15:58:18: 97:39:93:35:39:b7:3d:5b:b7:2a:c2:1b:4b:70:08:75:53:79: 0f:0f:0b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZukIqJZvAiLBlcOS+sgKSuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMzk2NDlmYWE4ZjlkZTNkYWU5MWJlNzk5YTI3ZTJjYTY2 Mjg3ODkwHhcNMjYwMTA5MTkwMTMxWhcNMjYwMTEwMTkwMTMxWjAzMTEwLwYDVQQD EygzYTM0MDlkNzYyYTVjN2I0OGFjODljZTdjZjA3MzA2Yzk1YWY4ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwplir1ocBLB7yu4zg7MLmXxm5rRi 36z42yYkVsocdnj1O89FUdiWuzeSxvVogxuy06rsWx61+KbsKhHI2FQ6p4EUXPn8 n57Nuli3ycRUmBbIeDOI5Aaj2rYUJfFJ23xXPr6RJUpWCFU+g0JQMgvIVsLgKZfN 7oRnw6SbJ6LIjDbdNMwrbMqGue18B8IQKztCnlM18So2TmuBOwnaiAY6zL0/2Fbm VQd/Jw7ra2FbL4k0D6DdA5P7mJx5UrracAWdPd+btEMFXuYWJ1CqfwlkIl0J4x/X 0hav666j/Ia66LiF6KSPphgwrpRJDZWkNEgjBR1a0vu+dkxEm046+CuKIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo0Cddipce0isic588HMGyVr47GMB8GA1UdIwQY MBaAFOA5ZJ+qj53j2ukb55mifiymYoeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgt ZDc2NzhhMDc4N2QxLzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgtZDc2NzhhMDc4N2Qx LzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7gsZk9Z fmR89IVDPas5UfcpM/feD+SzfNy3eRoPPrYNovui1j2uyqn3QgcG3I7hjjqmK1Ae f3sYRjfIZXouJFI0fQ3xtLlDSrrOnfF95pQSJm231vOO045oCvlpC9bKbwQlWDuZ f8MH00PVxAybIgitxdQnOTEEIGlCXxfLQcdiQb0vebH4PAqj6sQvtxKvrcZlfSAR /REpDNyCfIZvfGrYyMiY00uO9B8T12eDMZr/v7ebyNTb4xRYW2mGIcK6TPibe/w9 Py3SX2yQXeZKkv/IEZ2+kUYQrb1TCjaJyVx7ys5CHxxaFVgYlzmTNTm3PVu3KsIb S3AIdVN5Dw8LFQ== -----END CERTIFICATE-----Generated at Fri Jan 9 23:48:05 2026 by rpki-client