This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json) Hash identifier: uaoptISRvq1cmRpeZ01xauh2fM4kign24q3KcOP7ExI= Subject key identifier: 03:AA:6F:3D:50:2C:B5:CE:80:3E:E4:D2:5E:26:90:FC:3F:05:D7:79 Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b Certificate serial: 019B79375588AF609C842DD7C0222C6DC7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft Manifest number: 0E41 Signing time: Thu 01 Jan 2026 11:00:27 +0000 Manifest this update: Thu 01 Jan 2026 11:00:27 +0000 Manifest next update: Fri 02 Jan 2026 11:00:27 +0000 Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=) 2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: 6ZvvREyT7R8BUdAxjT8x5A4CRMo7T0QSsMwc1ZCNo/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:55:88:af:60:9c:84:2d:d7:c0:22:2c:6d:c7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b Validity Not Before: Jan 1 11:00:27 2026 GMT Not After : Jan 2 11:00:27 2026 GMT Subject: CN=03aa6f3d502cb5ce803ee4d25e2690fc3f05d779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:0b:23:54:b9:6e:05:b4:89:da:2a:67:8e: d8:71:65:c2:72:74:91:85:4f:9d:34:eb:3b:91:c7: 24:d2:6a:00:06:cc:58:78:a5:e6:6f:a9:52:55:47: 43:f0:20:b5:da:66:1d:4f:8e:32:3c:0b:96:76:2c: 45:95:ca:48:25:8d:7d:e5:dc:4f:8f:40:a7:7e:c5: dc:85:69:1c:41:90:8a:03:d1:1c:c6:e4:c0:18:85: 99:8c:3d:d6:1e:e6:d0:40:56:1f:96:b7:f4:fd:f8: 73:ff:50:e2:0b:1e:34:5f:6d:9d:fe:3b:ef:a8:12: 79:e7:3c:05:a3:2a:16:f8:c5:45:28:c9:86:48:51: 05:13:ac:a6:38:a5:78:c6:1c:6b:11:ec:9b:2d:af: 5a:2f:9d:3d:c3:ae:0d:9f:7b:c0:3d:8a:39:7f:35: 78:e3:17:c7:d6:cd:06:ee:6d:57:b8:e0:e5:b8:d5: 2e:b5:60:3d:d5:0f:05:08:f8:06:d8:da:9b:09:65: 61:62:93:df:52:18:22:42:ba:b2:b8:d3:f6:9c:1b: a6:92:cf:83:ba:61:cc:28:e7:ae:77:c1:f7:5b:8e: 8d:a2:5e:54:59:69:95:c3:db:52:72:71:30:eb:bb: 59:56:d8:9a:0a:62:eb:76:01:a4:3e:b6:94:72:bf: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AA:6F:3D:50:2C:B5:CE:80:3E:E4:D2:5E:26:90:FC:3F:05:D7:79 X509v3 Authority Key Identifier: keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:28:86:d3:32:c7:52:a2:57:f9:13:f9:9a:b0:40:77:6f:71: 76:93:2d:ef:dd:21:eb:f1:f1:6b:57:e2:3f:59:e7:f2:79:02: b1:95:76:25:01:01:91:43:2f:48:44:a3:d3:0b:99:35:ab:bf: 84:63:e2:6b:19:52:44:e4:42:48:b2:0b:22:71:44:59:8a:95: 53:84:b6:fc:d0:84:b1:78:c7:7e:99:29:05:d4:23:74:1f:c0: 32:17:b8:9c:52:85:46:fe:58:8d:d4:78:e6:4d:73:c2:c5:4d: 18:dd:4a:40:77:87:d0:58:9b:82:ef:3e:94:60:56:d0:8f:3d: 81:53:7d:e1:83:44:f9:31:0a:0f:02:90:4e:82:2a:c9:08:04: b6:9f:3c:80:ed:2b:c1:7a:46:83:67:22:b5:92:a0:30:43:e7: 71:3b:7e:e5:d2:fc:1c:f5:b9:a5:3a:d7:c9:8b:a2:f9:1b:d5: ad:81:7d:61:27:84:d9:8f:e2:94:9c:a2:f4:18:30:d5:8a:e5: 17:80:25:d0:23:35:17:d7:b4:e4:b2:10:0d:5a:3f:b5:4e:77: a7:7e:86:d4:a9:93:12:a6:41:fd:9b:21:b3:a1:7f:b9:b8:be: a4:d4:ad:a0:87:cf:b3:b7:a6:28:c6:c9:5b:d0:ec:f5:6d:3a: 53:73:e2:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N1WIr2CchC3XwCIsbcevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhmZGU2ZmFkYmI2YjJjMWRiNmZlNDFmODI5ZDFmMjAx NWJlMGIwHhcNMjYwMTAxMTEwMDI3WhcNMjYwMTAyMTEwMDI3WjAzMTEwLwYDVQQD EygwM2FhNmYzZDUwMmNiNWNlODAzZWU0ZDI1ZTI2OTBmYzNmMDVkNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EILI1S5bgW0idoqZ47YcWXCcnSR hU+dNOs7kcck0moABsxYeKXmb6lSVUdD8CC12mYdT44yPAuWdixFlcpIJY195dxP j0CnfsXchWkcQZCKA9EcxuTAGIWZjD3WHubQQFYflrf0/fhz/1DiCx40X22d/jvv qBJ55zwFoyoW+MVFKMmGSFEFE6ymOKV4xhxrEeybLa9aL509w64Nn3vAPYo5fzV4 4xfH1s0G7m1XuODluNUutWA91Q8FCPgG2NqbCWVhYpPfUhgiQrqyuNP2nBumks+D umHMKOeud8H3W46Nol5UWWmVw9tScnEw67tZVtiaCmLrdgGkPraUcr9gJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOqbz1QLLXOgD7k0l4mkPw/Bdd5MB8GA1UdIwQY MBaAFK+I/eb627aywdtv5B+CnR8gFb4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAt NmUwZDIxM2Y0ODRhLzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAtNmUwZDIxM2Y0ODRh LzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyiG0zLH UqJX+RP5mrBAd29xdpMt790h6/Hxa1fiP1nn8nkCsZV2JQEBkUMvSESj0wuZNau/ hGPiaxlSRORCSLILInFEWYqVU4S2/NCEsXjHfpkpBdQjdB/AMhe4nFKFRv5YjdR4 5k1zwsVNGN1KQHeH0Fibgu8+lGBW0I89gVN94YNE+TEKDwKQToIqyQgEtp88gO0r wXpGg2citZKgMEPncTt+5dL8HPW5pTrXyYui+RvVrYF9YSeE2Y/ilJyi9Bgw1Yrl F4Al0CM1F9e05LIQDVo/tU53p36G1KmTEqZB/Zshs6F/ubi+pNStoIfPs7emKMbJ W9Ds9W06U3PibQ== -----END CERTIFICATE-----Generated at Thu Jan 1 21:22:09 2026 by rpki-client