This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json) Hash identifier: /FZPR5AFHK6MqjhcgFvwWNMkw5g8qef5tuW1EcC0yJ4= Subject key identifier: 58:10:29:9F:56:D0:4D:6C:4F:1C:FE:15:7E:02:F0:68:A6:78:1A:FD Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da Certificate serial: 019B785BD60DB3227CA3088CDE1C3CDA4131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft Manifest number: 0E3D Signing time: Thu 01 Jan 2026 07:00:42 +0000 Manifest this update: Thu 01 Jan 2026 07:00:42 +0000 Manifest next update: Fri 02 Jan 2026 07:00:42 +0000 Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: yWDs2ImiD3rCklraF1IYDdn64fYKHfsliLmxDUeA3qg=) 2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=) 3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=) 4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:d6:0d:b3:22:7c:a3:08:8c:de:1c:3c:da:41:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da Validity Not Before: Jan 1 07:00:42 2026 GMT Not After : Jan 2 07:00:42 2026 GMT Subject: CN=5810299f56d04d6c4f1cfe157e02f068a6781afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:7b:46:b6:0f:5a:e5:cc:af:59:01:bd:8b: 06:2a:61:e7:d3:10:af:0d:71:11:a7:25:e0:c3:0c: 73:71:a5:7d:95:55:ec:65:6a:f7:7e:9b:a7:de:f1: 72:f1:87:b9:f7:e8:a1:de:82:19:93:1a:cf:28:29: e1:bc:6f:db:3e:46:e7:e7:32:4c:c4:79:3e:c3:0c: a2:5e:18:a7:68:6e:53:34:0b:fe:e6:39:83:a0:d5: e2:70:2c:cd:bf:b0:58:95:c9:b1:06:09:93:c0:e7: 86:4b:02:8d:72:25:70:c1:2d:5c:87:0f:ec:ff:cc: 3f:87:0e:57:57:2a:1f:0c:e4:ec:d0:0d:8b:32:88: a3:9c:83:32:8c:42:c0:ea:8b:f1:c5:b0:bb:1d:ab: e3:b4:30:da:28:ae:05:a8:41:5c:fb:5f:8b:d2:74: bc:77:83:67:c8:e8:e3:82:1a:e7:47:cb:a8:c6:a5: 65:3f:fe:4d:8d:11:94:e0:3f:a4:d4:d7:dc:6e:28: f9:93:8c:4d:14:e6:16:33:01:f3:61:ee:de:7e:45: 58:e4:68:5a:21:71:4d:83:29:8b:f6:66:5a:f1:23: c6:1c:35:0d:56:43:c8:1c:c7:45:ae:ce:30:c1:e7: a0:e6:60:07:5d:4d:e4:5a:12:0a:15:4b:d4:49:25: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:10:29:9F:56:D0:4D:6C:4F:1C:FE:15:7E:02:F0:68:A6:78:1A:FD X509v3 Authority Key Identifier: keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:ad:22:de:4f:8e:04:09:c1:11:1c:69:1a:e0:dc:51:a2:2b: 6e:c2:1b:b5:9c:64:30:c0:e9:fb:33:29:e2:dc:10:86:6c:af: ff:91:d9:04:d6:4e:1d:17:7f:46:28:84:73:0e:0c:b9:d6:8e: 86:8d:38:50:78:43:1a:4d:4b:c0:f8:9a:81:4f:8f:44:ee:f5: a1:fd:ef:75:cf:2b:e3:41:db:5c:fb:70:63:be:d1:d9:32:53: ab:cf:df:2a:1a:e4:73:b8:c2:a7:ec:ba:ea:c0:db:e6:8b:04: 2e:f4:4e:9d:e1:29:07:da:5c:fd:01:2e:80:2a:d0:e6:8f:e3: 69:5f:ab:e6:ee:c4:bc:57:c1:cc:c1:2f:c1:40:f2:44:a7:62: d7:b1:bd:c0:05:c4:06:e1:5f:5d:5b:e4:6e:20:f8:5e:8b:b2: 48:8e:e8:9f:4f:81:7d:3d:75:11:1f:ae:dd:b4:0a:12:6a:41: 80:a1:04:b1:40:12:23:2b:9e:71:a9:53:44:d5:6b:aa:d5:af: 53:06:46:d9:42:58:62:50:06:f5:14:96:79:1c:97:15:bc:30: c3:ce:3c:8d:e1:b6:3b:ed:ce:34:fa:c6:98:cd:d4:c1:a2:fc: a9:4b:e2:b2:ed:87:da:1d:b9:0f:f0:8b:b9:49:64:db:4c:a1: 29:c7:5f:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W9YNsyJ8owiM3hw82kExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjhlMzZiYTU3N2VkNDdlNjkyODcyOTY5MTk5MWU0ZTdm MjM1ZGEwHhcNMjYwMTAxMDcwMDQyWhcNMjYwMTAyMDcwMDQyWjAzMTEwLwYDVQQD Eyg1ODEwMjk5ZjU2ZDA0ZDZjNGYxY2ZlMTU3ZTAyZjA2OGE2NzgxYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWB7RrYPWuXMr1kBvYsGKmHn0xCv DXERpyXgwwxzcaV9lVXsZWr3fpun3vFy8Ye59+ih3oIZkxrPKCnhvG/bPkbn5zJM xHk+wwyiXhinaG5TNAv+5jmDoNXicCzNv7BYlcmxBgmTwOeGSwKNciVwwS1chw/s /8w/hw5XVyofDOTs0A2LMoijnIMyjELA6ovxxbC7HavjtDDaKK4FqEFc+1+L0nS8 d4NnyOjjghrnR8uoxqVlP/5NjRGU4D+k1Nfcbij5k4xNFOYWMwHzYe7efkVY5Gha IXFNgymL9mZa8SPGHDUNVkPIHMdFrs4wweeg5mAHXU3kWhIKFUvUSSXAkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgQKZ9W0E1sTxz+FX4C8GimeBr9MB8GA1UdIwQY MBaAFOFo42uld+1H5pKHKWkZkeTn8jXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgt Y2I0YmFiZTlkYzhmLzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgtY2I0YmFiZTlkYzhm LzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1q0i3k+O BAnBERxpGuDcUaIrbsIbtZxkMMDp+zMp4twQhmyv/5HZBNZOHRd/RiiEcw4MudaO ho04UHhDGk1LwPiagU+PRO71of3vdc8r40HbXPtwY77R2TJTq8/fKhrkc7jCp+y6 6sDb5osELvROneEpB9pc/QEugCrQ5o/jaV+r5u7EvFfBzMEvwUDyRKdi17G9wAXE BuFfXVvkbiD4XouySI7on0+BfT11ER+u3bQKEmpBgKEEsUASIyuecalTRNVrqtWv UwZG2UJYYlAG9RSWeRyXFbwww848jeG2O+3ONPrGmM3UwaL8qUvisu2H2h25D/CL uUlk20yhKcdfFA== -----END CERTIFICATE-----Generated at Thu Jan 1 09:06:50 2026 by rpki-client