This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json) Hash identifier: P0+F0d+duCBwzhfe3h7yQexdh10bk6Ix/w0KhEBbRF4= Subject key identifier: 45:2C:63:11:35:34:A9:0D:BA:34:46:12:BF:1B:49:54:C7:64:E8:2F Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Certificate serial: 019BB2F0DC361CC387319F277067B8778374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft Manifest number: 13BE Signing time: Mon 12 Jan 2026 16:01:27 +0000 Manifest this update: Mon 12 Jan 2026 16:01:27 +0000 Manifest next update: Tue 13 Jan 2026 16:01:27 +0000 Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: Y3oVPgbeQNXu5xP/9JEbdANtIoObu+5QM+AZ/mroKsM=) 2: ivkUxaGtEsJtdEm-0-az5FTe9g4.roa (hash: jf7yns1EHQl0bSQHREu9Zc2V/PBevRWEVblmvAVkiQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:f0:dc:36:1c:c3:87:31:9f:27:70:67:b8:77:83:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Validity Not Before: Jan 12 16:01:27 2026 GMT Not After : Jan 13 16:01:27 2026 GMT Subject: CN=452c63113534a90dba344612bf1b4954c764e82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:ad:40:1e:a5:7b:b8:b4:87:69:78:01:87: 29:d1:d8:42:03:dc:b5:8c:ae:2e:9a:a4:c6:0a:9f: 90:7d:4d:27:db:07:bb:ed:10:62:61:90:7e:40:10: fc:8a:9e:26:98:20:8d:8a:70:55:79:e4:d9:92:72: 36:8f:3c:9d:80:2d:a7:3d:13:c2:82:02:ca:4e:29: 00:7b:4f:70:92:a2:2a:3a:0d:16:61:e2:de:90:7f: 18:79:a1:cb:4e:c0:9f:bc:ce:c6:21:fd:bb:c7:76: f7:b7:bf:79:42:55:9e:42:a2:de:46:41:56:9b:c9: c3:47:55:be:14:49:65:64:c7:6c:2b:f3:c2:d3:45: 2e:4b:52:27:de:14:41:78:75:02:3b:2c:e1:ab:c7: f4:c4:49:76:d8:79:56:d7:11:a2:bf:15:77:78:dd: 09:cb:15:5d:53:d1:96:c6:b8:43:54:20:68:25:a0: 19:4d:02:a5:84:a7:e2:28:c8:1d:74:c5:bf:e3:59: ce:71:ca:4c:0b:b2:d4:76:d8:1a:e0:80:e1:42:b7: 02:a1:49:90:8e:7b:6b:b0:1d:25:18:7d:8c:d7:ff: 04:59:34:a8:88:42:df:1a:b3:53:54:0f:d1:0d:e4: 8d:96:79:fb:19:16:c6:7e:a9:c3:2f:12:99:dd:6d: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:63:11:35:34:A9:0D:BA:34:46:12:BF:1B:49:54:C7:64:E8:2F X509v3 Authority Key Identifier: keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:30:d3:e0:a8:bf:08:6f:d1:5e:9d:00:6a:c5:52:2a:b8:d2: f2:04:ee:ef:29:9d:b5:3b:5d:10:85:05:be:d5:f4:4b:bf:2b: 23:db:66:e8:e0:b3:3d:5d:d0:3c:ec:2f:fc:a9:80:38:87:35: 8b:37:2e:2d:40:10:dc:07:85:00:6b:54:61:0d:8f:30:e3:0e: b1:20:b0:7e:13:ee:a6:e0:5e:55:fd:6c:0f:1d:39:81:0c:ef: 4e:34:84:a8:ed:ef:6b:14:ce:99:b1:61:64:35:03:71:a7:0b: 6b:f3:03:dd:13:61:77:44:f7:14:27:11:c5:f0:4a:2b:e6:48: 2e:0b:ed:16:65:b5:51:8d:cc:da:ed:41:ff:e7:54:7d:49:52: 6a:52:b4:63:a5:e6:47:a0:69:c7:93:3e:48:fb:cf:74:9d:4f: fe:ac:c1:06:a4:5e:c4:d1:ff:fd:e5:a8:53:84:8d:7a:d6:05: 22:26:16:99:48:df:49:5f:52:3e:de:25:7f:c1:b5:36:5f:32: a8:23:58:93:76:97:8f:89:58:f7:39:b2:b0:a4:74:f0:fe:98: 6e:f7:48:0b:dd:c2:dc:7b:39:82:08:be:7a:9c:a2:a5:f7:4e: d8:7b:f5:f8:4f:10:05:7e:53:4c:74:ca:5f:c3:24:54:3f:bc: d5:34:53:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuy8Nw2HMOHMZ8ncGe4d4N0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTEyYTI3OTViNmU0ZGYyNjVmNjVkZjBhMDBjYjdjN2U0 NWRlZWYwHhcNMjYwMTEyMTYwMTI3WhcNMjYwMTEzMTYwMTI3WjAzMTEwLwYDVQQD Eyg0NTJjNjMxMTM1MzRhOTBkYmEzNDQ2MTJiZjFiNDk1NGM3NjRlODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TKtQB6le7i0h2l4AYcp0dhCA9y1 jK4umqTGCp+QfU0n2we77RBiYZB+QBD8ip4mmCCNinBVeeTZknI2jzydgC2nPRPC ggLKTikAe09wkqIqOg0WYeLekH8YeaHLTsCfvM7GIf27x3b3t795QlWeQqLeRkFW m8nDR1W+FEllZMdsK/PC00UuS1In3hRBeHUCOyzhq8f0xEl22HlW1xGivxV3eN0J yxVdU9GWxrhDVCBoJaAZTQKlhKfiKMgddMW/41nOccpMC7LUdtga4IDhQrcCoUmQ jntrsB0lGH2M1/8EWTSoiELfGrNTVA/RDeSNlnn7GRbGfqnDLxKZ3W3XGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUsYxE1NKkNujRGEr8bSVTHZOgvMB8GA1UdIwQY MBaAFOHhKieVtuTfJl9l3woAy3x+Rd7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYt ODJjNmNmMTRkZmUyLzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYtODJjNmNmMTRkZmUy LzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTDT4Ki/ CG/RXp0AasVSKrjS8gTu7ymdtTtdEIUFvtX0S78rI9tm6OCzPV3QPOwv/KmAOIc1 izcuLUAQ3AeFAGtUYQ2PMOMOsSCwfhPupuBeVf1sDx05gQzvTjSEqO3vaxTOmbFh ZDUDcacLa/MD3RNhd0T3FCcRxfBKK+ZILgvtFmW1UY3M2u1B/+dUfUlSalK0Y6Xm R6Bpx5M+SPvPdJ1P/qzBBqRexNH//eWoU4SNetYFIiYWmUjfSV9SPt4lf8G1Nl8y qCNYk3aXj4lY9zmysKR08P6YbvdIC93C3Hs5ggi+epyipfdO2Hv1+E8QBX5TTHTK X8MkVD+81TRTDg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:25:01 2026 by rpki-client