This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json) Hash identifier: SlYaRdJBvcQarw9lcaWCxYWKQpTU3TcDMljLk0tjlKI= Subject key identifier: DA:2D:12:42:FE:A3:C0:20:91:59:E1:D8:AD:42:46:13:0B:39:29:77 Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f Certificate serial: 019BA15893B20481E36E55EDA12068088C70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft Manifest number: 08C5 Signing time: Fri 09 Jan 2026 06:01:35 +0000 Manifest this update: Fri 09 Jan 2026 06:01:35 +0000 Manifest next update: Sat 10 Jan 2026 06:01:35 +0000 Files and hashes: 1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: gVWQ5HXwltu5QEzCctEok7qnnhWGaxjnYuXHwRfWS4k=) 2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:58:93:b2:04:81:e3:6e:55:ed:a1:20:68:08:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f Validity Not Before: Jan 9 06:01:35 2026 GMT Not After : Jan 10 06:01:35 2026 GMT Subject: CN=da2d1242fea3c0209159e1d8ad4246130b392977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:73:f5:de:ee:82:98:82:13:07:cd:00:96: 18:41:91:33:08:60:51:df:62:75:10:53:94:96:ed: fd:f7:94:34:1e:41:38:a8:24:be:4a:8b:2f:96:99: a5:ed:d2:bc:3c:7a:6c:28:a1:53:ea:c8:8f:21:b8: 61:f9:41:c6:a8:b5:d7:89:4f:dc:80:53:03:9c:1d: 56:0d:63:2e:7b:d3:76:ed:fd:4b:5c:65:0e:ee:74: e0:65:f6:c4:32:82:7c:bb:bb:7d:2c:56:9f:13:3d: bd:f1:bb:1a:d1:02:47:69:4c:46:6e:b6:be:0a:95: d2:08:3d:ab:9f:46:5b:61:42:60:a8:31:c7:73:b9: 24:66:2b:e2:79:c2:d8:24:b2:b5:51:c4:dd:90:77: e5:89:b0:7a:45:e0:24:73:77:63:bd:f3:fe:a7:ef: fb:1a:6e:4c:7f:d1:8b:ac:65:79:86:a2:2f:fb:6a: 03:c2:55:ee:f8:45:78:ef:4c:ad:51:b7:56:88:3d: 87:8f:01:ca:1d:58:2a:97:40:9e:7a:44:1a:01:58: a2:dd:53:fe:ee:4d:af:eb:ff:70:96:57:0d:0c:9c: d0:17:c7:7c:c1:79:dd:41:ea:b4:63:30:62:c7:e9: 1e:02:6c:86:9c:74:6d:c0:12:89:56:c7:3a:d8:dd: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2D:12:42:FE:A3:C0:20:91:59:E1:D8:AD:42:46:13:0B:39:29:77 X509v3 Authority Key Identifier: keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4d:59:6c:9d:13:74:ed:8f:86:44:c4:bb:99:1a:ca:77:aa: e5:4b:71:29:88:a9:07:a3:bf:d8:98:b1:59:27:bc:bd:00:33: 18:f9:a5:ce:2d:ea:e7:f7:06:ad:7d:b6:51:75:54:b5:a7:e6: 0f:9e:3a:3b:6f:06:8a:07:9d:e5:74:75:c8:f5:a4:32:7d:6f: 1a:b7:c9:76:2e:9e:8b:46:57:9e:f8:e4:a2:bf:15:30:4a:2f: 4d:76:f5:7c:56:a0:6b:66:8f:8b:ce:86:54:6e:fb:d2:1b:f5: c7:bf:a7:79:67:5c:e8:e7:40:ae:a7:69:47:93:aa:80:c5:6f: 36:11:bb:3b:db:44:b0:42:3f:f5:ba:07:cd:62:3d:17:f8:3d: cf:fa:b6:4c:37:48:62:e7:33:dd:87:bd:90:40:3b:69:be:c9: 37:78:73:bc:36:89:06:7d:57:f5:09:8a:9e:fd:e7:56:32:fb: 61:fd:c2:05:c6:e2:75:63:c3:12:eb:21:88:1b:1c:c6:cc:d0: 69:25:fa:fd:38:44:b3:66:2b:09:59:eb:da:99:60:e9:10:7a: de:1f:39:b7:2a:99:39:d8:df:68:27:5a:5e:74:e1:be:c6:a1: ea:00:f6:c2:17:44:7c:fe:98:99:25:e4:be:a7:80:ac:1b:63: 29:b4:84:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhWJOyBIHjblXtoSBoCIxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1 NWQxNGYwHhcNMjYwMTA5MDYwMTM1WhcNMjYwMTEwMDYwMTM1WjAzMTEwLwYDVQQD EyhkYTJkMTI0MmZlYTNjMDIwOTE1OWUxZDhhZDQyNDYxMzBiMzkyOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ABz9d7ugpiCEwfNAJYYQZEzCGBR 32J1EFOUlu3995Q0HkE4qCS+Sosvlpml7dK8PHpsKKFT6siPIbhh+UHGqLXXiU/c gFMDnB1WDWMue9N27f1LXGUO7nTgZfbEMoJ8u7t9LFafEz298bsa0QJHaUxGbra+ CpXSCD2rn0ZbYUJgqDHHc7kkZiviecLYJLK1UcTdkHflibB6ReAkc3djvfP+p+/7 Gm5Mf9GLrGV5hqIv+2oDwlXu+EV470ytUbdWiD2HjwHKHVgql0CeekQaAVii3VP+ 7k2v6/9wllcNDJzQF8d8wXndQeq0YzBix+keAmyGnHRtwBKJVsc62N1uZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNotEkL+o8AgkVnh2K1CRhMLOSl3MB8GA1UdIwQY MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARk1ZbJ0T dO2PhkTEu5kayneq5UtxKYipB6O/2JixWSe8vQAzGPmlzi3q5/cGrX22UXVUtafm D546O28Giged5XR1yPWkMn1vGrfJdi6ei0ZXnvjkor8VMEovTXb1fFaga2aPi86G VG770hv1x7+neWdc6OdArqdpR5OqgMVvNhG7O9tEsEI/9boHzWI9F/g9z/q2TDdI Yucz3Ye9kEA7ab7JN3hzvDaJBn1X9QmKnv3nVjL7Yf3CBcbidWPDEushiBscxszQ aSX6/ThEs2YrCVnr2plg6RB63h85tyqZOdjfaCdaXnThvsah6gD2whdEfP6YmSXk vqeArBtjKbSESw== -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:52 2026 by rpki-client