This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json) Hash identifier: siD96B8SynQEXAeEpHNM6ZeUJ+mxgtWRKu2bFl4jm0Q= Subject key identifier: E6:CA:AF:A4:4D:C0:23:83:E5:40:82:8D:92:CE:7E:C6:E7:58:6F:CE Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e Certificate serial: 019B78CA649F945E6B09FAC113AB9B14AAD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft Manifest number: 05EC Signing time: Thu 01 Jan 2026 09:01:28 +0000 Manifest this update: Thu 01 Jan 2026 09:01:28 +0000 Manifest next update: Fri 02 Jan 2026 09:01:28 +0000 Files and hashes: 1: 4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa (hash: towBJONDWlEy1Ghtn/h9pt+Tf2v85Qo/Obp+rcJdKYc=) 2: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: L6tkPUuD/5oIacA/2SYS+WwlnGxKpSpNy9wBYdOdLl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:64:9f:94:5e:6b:09:fa:c1:13:ab:9b:14:aa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e Validity Not Before: Jan 1 09:01:28 2026 GMT Not After : Jan 2 09:01:28 2026 GMT Subject: CN=e6caafa44dc02383e540828d92ce7ec6e7586fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:05:9a:b9:40:af:e3:ff:60:e8:80:fc:9d: 5c:9e:5a:07:f6:49:4a:c7:50:cc:1c:f8:b1:07:1f: 5b:d8:29:5a:7f:e3:95:d4:e4:f4:55:62:9c:67:5a: f5:79:03:32:e6:ba:7d:ae:4a:4c:89:26:e2:82:e2: be:a5:b2:d4:8e:06:2c:34:c4:40:1c:1c:16:5e:b7: f7:77:8c:72:0d:16:70:32:3d:4f:62:c1:16:e6:5c: c4:2d:0a:f5:42:e0:01:2e:6f:43:5e:b2:11:d7:0c: 51:0e:da:19:6d:a3:44:5a:b9:fe:23:e3:d1:40:11: d9:53:cb:c7:2c:30:16:8f:c5:52:a0:05:06:ec:b2: 80:41:93:fa:40:68:8c:4e:8f:d5:65:a2:ab:66:fc: aa:a3:1c:ba:89:f3:72:68:c6:df:8f:88:70:91:0b: 6a:1f:88:0f:ac:d5:b3:11:d4:82:5a:73:be:a0:d5: ce:8d:3b:59:3b:51:74:1e:69:23:f4:e4:33:91:6e: eb:40:92:cc:c0:49:22:85:fe:f1:0b:92:0a:eb:a6: 7b:c3:b3:63:e6:9f:12:c0:f1:1b:04:97:5b:b3:e3: e0:ca:e0:ba:ec:ab:dd:d5:41:20:50:97:72:42:79: bd:e0:57:73:37:cb:4b:40:90:66:c8:5c:01:63:7a: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CA:AF:A4:4D:C0:23:83:E5:40:82:8D:92:CE:7E:C6:E7:58:6F:CE X509v3 Authority Key Identifier: keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:c7:30:8a:45:95:ab:38:96:db:be:81:c5:74:76:f2:1d: 9a:15:f7:03:24:42:55:7f:a8:3f:eb:1f:86:93:34:f9:6b:7d: b3:99:52:79:e2:59:6e:7d:a2:ba:30:b9:c2:3e:62:c9:4c:82: 53:c6:bb:29:b1:52:f1:a5:d9:c2:b1:fa:72:c4:cf:be:4c:b5: 6d:cc:39:1e:ba:72:f8:f7:7b:08:46:9e:2f:b7:2a:57:a7:a4: 1f:d9:2e:e1:3b:41:ca:50:55:8a:af:67:92:ec:26:ae:d2:8d: f5:d6:24:39:fe:f4:07:ca:30:e7:f1:c0:2d:99:f3:9c:0a:ac: 25:de:e3:98:4a:69:05:33:88:4f:82:7a:94:e9:a7:db:49:37: 6d:81:18:f5:2f:d4:a1:17:53:d7:5d:49:c7:53:dc:82:bb:80: 24:f6:89:0d:be:52:13:69:6e:93:3b:49:27:c5:d1:2b:ff:67: 21:b4:fb:0d:d5:bd:e6:73:af:52:4d:1f:d9:b3:a6:38:64:48: fe:97:ea:e0:90:b3:cb:67:60:d8:c2:df:16:44:9f:a4:10:b2: 48:98:5d:90:01:ea:29:22:78:3b:1e:16:0a:58:01:b5:57:90: 32:c9:a4:cc:c0:8c:ac:30:6f:03:a5:99:ae:15:a6:30:de:bf: 22:24:11:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ymSflF5rCfrBE6ubFKrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx NTEyN2UwHhcNMjYwMTAxMDkwMTI4WhcNMjYwMTAyMDkwMTI4WjAzMTEwLwYDVQQD EyhlNmNhYWZhNDRkYzAyMzgzZTU0MDgyOGQ5MmNlN2VjNmU3NTg2ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob4FmrlAr+P/YOiA/J1cnloH9klK x1DMHPixBx9b2Claf+OV1OT0VWKcZ1r1eQMy5rp9rkpMiSbiguK+pbLUjgYsNMRA HBwWXrf3d4xyDRZwMj1PYsEW5lzELQr1QuABLm9DXrIR1wxRDtoZbaNEWrn+I+PR QBHZU8vHLDAWj8VSoAUG7LKAQZP6QGiMTo/VZaKrZvyqoxy6ifNyaMbfj4hwkQtq H4gPrNWzEdSCWnO+oNXOjTtZO1F0Hmkj9OQzkW7rQJLMwEkihf7xC5IK66Z7w7Nj 5p8SwPEbBJdbs+PgyuC67Kvd1UEgUJdyQnm94FdzN8tLQJBmyFwBY3p0swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObKr6RNwCOD5UCCjZLOfsbnWG/OMB8GA1UdIwQY MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt NjFjMWVjYWFiNTVmLzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwrHMIpF las4ltu+gcV0dvIdmhX3AyRCVX+oP+sfhpM0+Wt9s5lSeeJZbn2iujC5wj5iyUyC U8a7KbFS8aXZwrH6csTPvky1bcw5Hrpy+Pd7CEaeL7cqV6ekH9ku4TtBylBViq9n kuwmrtKN9dYkOf70B8ow5/HALZnznAqsJd7jmEppBTOIT4J6lOmn20k3bYEY9S/U oRdT111Jx1PcgruAJPaJDb5SE2lukztJJ8XRK/9nIbT7DdW95nOvUk0f2bOmOGRI /pfq4JCzy2dg2MLfFkSfpBCySJhdkAHqKSJ4Ox4WClgBtVeQMsmkzMCMrDBvA6WZ rhWmMN6/IiQR4w== -----END CERTIFICATE-----Generated at Thu Jan 1 11:05:03 2026 by rpki-client