This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json) Hash identifier: QU50XdBxdJqpjA1QmdvkH/QwVudC4wnxFePpfZdV0f4= Subject key identifier: C8:2B:BD:66:A3:2E:9A:65:67:46:DF:58:DD:8C:B8:25:F4:EA:7C:6B Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Certificate serial: 019BAF4B6C0B034E1D515D82676CE86CC55A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft Manifest number: 1752 Signing time: Sun 11 Jan 2026 23:01:54 +0000 Manifest this update: Sun 11 Jan 2026 23:01:54 +0000 Manifest next update: Mon 12 Jan 2026 23:01:54 +0000 Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: h5+e3Ps1Tg2orh8qXVTJBFyxP5/bX5utmf8jESHrDmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 23:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4b:6c:0b:03:4e:1d:51:5d:82:67:6c:e8:6c:c5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Validity Not Before: Jan 11 23:01:54 2026 GMT Not After : Jan 12 23:01:54 2026 GMT Subject: CN=c82bbd66a32e9a656746df58dd8cb825f4ea7c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:91:35:80:1a:87:b2:32:18:bf:86:82:3e: 21:fc:77:d4:22:7e:57:00:42:a6:97:9f:8e:73:a9: 92:5a:c1:6e:dc:a5:47:ae:83:7e:db:09:d9:61:5f: d2:bf:e7:7b:37:a7:77:c0:10:d4:ca:ea:75:16:eb: 99:08:a9:07:88:f7:80:b4:2a:1b:15:8c:c8:df:ba: be:8b:2b:d0:00:7d:31:45:91:bb:ca:eb:7e:b3:6b: b5:23:6a:a5:34:ff:b7:2d:ee:3b:07:1d:8d:30:59: 99:7d:c6:82:b9:35:d0:87:0f:e5:ce:78:59:0c:87: 26:1c:d2:26:24:95:95:dd:a9:a6:fd:eb:30:a5:c3: 71:88:3f:bc:3b:b9:b0:37:1d:48:06:92:e2:98:af: 7d:d6:00:e5:f9:3a:0b:28:19:21:19:3e:c8:bd:4c: 52:9d:1a:fa:48:e7:9d:7c:8e:03:d1:31:4f:12:9b: ef:fb:da:97:1f:04:52:76:30:6a:0d:d5:c9:66:18: 0f:47:c3:d3:ca:58:83:e1:62:4a:23:34:6b:73:ba: a8:34:cc:28:fd:0d:71:a0:5e:60:f5:20:6d:00:9e: 16:64:12:ca:19:65:d7:0e:c1:99:02:6e:a6:7c:b5: 7b:d5:fc:b8:78:6f:80:42:8e:62:7a:0d:e7:4f:86: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2B:BD:66:A3:2E:9A:65:67:46:DF:58:DD:8C:B8:25:F4:EA:7C:6B X509v3 Authority Key Identifier: keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5d:25:b3:76:28:ae:fc:88:39:03:9e:6c:1e:a4:ae:53:f3: 83:84:13:a4:d2:7a:f0:87:4c:fd:df:62:b0:0c:9a:80:81:56: 27:1c:6f:d1:ff:6e:96:d6:40:b1:8c:67:22:88:a5:bb:1b:80: 75:35:37:2f:94:42:55:dc:85:c2:0c:bb:96:5d:3a:30:ad:13: 5a:0d:58:3b:63:e7:d3:69:1b:83:40:da:a2:17:a3:bc:96:1b: 33:ec:01:00:60:74:ab:bb:55:0d:1a:58:3c:a5:97:aa:85:d0: 1d:b8:da:5d:f7:be:0a:1d:4e:87:ce:42:a1:fd:5e:0f:81:e5: 7a:5a:99:18:8a:1a:2d:17:cc:4c:de:54:00:65:5f:85:e5:f7: c8:b1:5f:71:cd:34:ed:33:01:40:b7:a0:32:76:bb:7b:7f:02: 6b:a7:a4:5a:62:16:88:e2:83:f2:a8:d6:8b:73:85:e7:e6:59: bd:ac:d4:13:49:d3:87:87:0c:ad:d4:c7:63:8d:64:91:d2:70: 69:eb:87:59:b2:d4:c5:03:2b:fb:45:72:4c:c0:6f:7d:a0:92: 11:0d:38:24:8d:5a:06:20:92:51:c6:61:ba:59:5f:98:66:88: c6:9b:94:49:fa:57:ac:58:c9:2e:5e:67:59:32:9d:2c:ad:89: dd:79:3f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvS2wLA04dUV2CZ2zobMVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk NmUxMmYwHhcNMjYwMTExMjMwMTU0WhcNMjYwMTEyMjMwMTU0WjAzMTEwLwYDVQQD EyhjODJiYmQ2NmEzMmU5YTY1Njc0NmRmNThkZDhjYjgyNWY0ZWE3YzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmmRNYAah7IyGL+Ggj4h/HfUIn5X AEKml5+Oc6mSWsFu3KVHroN+2wnZYV/Sv+d7N6d3wBDUyup1FuuZCKkHiPeAtCob FYzI37q+iyvQAH0xRZG7yut+s2u1I2qlNP+3Le47Bx2NMFmZfcaCuTXQhw/lznhZ DIcmHNImJJWV3amm/eswpcNxiD+8O7mwNx1IBpLimK991gDl+ToLKBkhGT7IvUxS nRr6SOedfI4D0TFPEpvv+9qXHwRSdjBqDdXJZhgPR8PTyliD4WJKIzRrc7qoNMwo /Q1xoF5g9SBtAJ4WZBLKGWXXDsGZAm6mfLV71fy4eG+AQo5ieg3nT4ZADQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgrvWajLpplZ0bfWN2MuCX06nxrMB8GA1UdIwQY MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIl0ls3Yo rvyIOQOebB6krlPzg4QTpNJ68IdM/d9isAyagIFWJxxv0f9ultZAsYxnIoiluxuA dTU3L5RCVdyFwgy7ll06MK0TWg1YO2Pn02kbg0DaohejvJYbM+wBAGB0q7tVDRpY PKWXqoXQHbjaXfe+Ch1Oh85Cof1eD4HlelqZGIoaLRfMTN5UAGVfheX3yLFfcc00 7TMBQLegMna7e38Ca6ekWmIWiOKD8qjWi3OF5+ZZvazUE0nTh4cMrdTHY41kkdJw aeuHWbLUxQMr+0VyTMBvfaCSEQ04JI1aBiCSUcZhullfmGaIxpuUSfpXrFjJLl5n WTKdLK2J3Xk/7Q== -----END CERTIFICATE-----Generated at Mon Jan 12 06:33:47 2026 by rpki-client