This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft File: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json) Hash identifier: QsRM5GlOhPxjVhqzzmmaUViFHdYQfYy5IrCNEkr8bfo= Subject key identifier: F1:DC:A2:ED:90:EE:92:5B:A3:74:D7:C2:08:4F:2E:34:AF:11:37:65 Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f Certificate serial: 019B958B3492974F6B580E473D9DFEFDE3BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft Manifest number: 0353 Signing time: Tue 06 Jan 2026 23:01:26 +0000 Manifest this update: Tue 06 Jan 2026 23:01:26 +0000 Manifest next update: Wed 07 Jan 2026 23:01:26 +0000 Files and hashes: 1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: Hu/5aXmjNtFUKWllApweesPoPRfpyu4kmn0c5XT0eh0=) 2: FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa (hash: GRwxJaIJLS4eVDlQIIx4t+X6+buzHRZw5GpMOZnwve4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:8b:34:92:97:4f:6b:58:0e:47:3d:9d:fe:fd:e3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f Validity Not Before: Jan 6 23:01:26 2026 GMT Not After : Jan 7 23:01:26 2026 GMT Subject: CN=f1dca2ed90ee925ba374d7c2084f2e34af113765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:e6:5b:b5:1e:4b:ef:d1:50:48:3b:1e:d4: d8:5a:c1:d4:53:60:ce:85:11:ff:51:ca:d1:74:1f: 45:ee:a9:46:08:43:30:01:61:a0:67:d3:c9:8f:12: f3:2a:5f:fa:5c:1e:06:0f:79:8f:8b:db:8e:27:32: 2e:1b:6f:b4:f3:e7:47:fe:fd:89:6b:fb:2b:eb:40: 07:9b:97:b4:be:b6:8e:1c:f2:85:78:25:15:60:b4: c1:85:d1:c0:52:5f:1e:4e:c8:8d:49:96:d5:03:63: 8d:1f:a9:55:ac:9c:56:32:d9:df:5f:1a:b1:e5:66: d1:94:bb:2c:bc:83:e2:6c:da:cb:90:47:a3:5c:f0: ae:44:6e:7d:6e:62:22:ca:1a:7b:12:03:1d:05:27: c8:ed:1d:d1:b5:48:46:11:68:89:a2:d0:71:da:44: 96:75:2a:b3:a0:32:a8:40:b1:17:c8:fa:bb:b7:93: c1:ca:c2:bc:22:f1:59:56:1c:d6:d2:e2:c0:2a:e9: dd:43:3b:39:38:eb:aa:a4:a8:72:80:8e:9b:2e:2a: c9:2d:f5:c1:96:dd:29:b4:52:d7:72:d4:1f:db:92: 92:f8:17:a9:9f:fd:ed:dc:64:5d:c3:2b:dd:3a:e1: 6c:bf:15:f0:a3:a0:e9:1c:cf:c9:fa:e3:94:26:20: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:A2:ED:90:EE:92:5B:A3:74:D7:C2:08:4F:2E:34:AF:11:37:65 X509v3 Authority Key Identifier: keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:72:86:38:58:12:55:7c:6a:89:3b:f0:62:57:dc:a0:11:3a: c0:44:60:e3:5b:b4:e9:b0:eb:a0:04:30:7c:35:d0:fa:6b:ed: 1d:ab:5b:ee:fe:8f:5d:f2:0a:1e:f3:28:20:f3:7b:f4:94:dd: cc:90:57:33:3e:af:22:fa:22:af:f4:a2:7c:13:bf:48:04:39: cc:2a:ff:16:b0:9c:25:92:18:e9:f9:b2:f1:fc:cd:69:0e:8a: fb:37:45:df:5c:de:12:07:6a:96:bf:16:70:bb:05:e7:e3:23: 4e:89:45:5c:99:0b:f0:b6:6e:0d:2e:ca:d1:74:40:b4:4b:a5: 76:9b:61:f7:58:29:9f:38:e1:af:25:87:0f:01:6c:1c:a9:9c: 97:a9:ed:e7:8f:80:19:d0:2d:0a:b3:7d:d0:b2:9f:4e:7b:74: 03:8f:56:3b:4b:7c:47:57:93:78:81:78:c5:1f:41:ca:69:85: 32:29:59:4a:e4:0c:1f:1b:11:46:00:96:45:e8:9b:e1:dc:35: 92:d3:e3:10:57:ce:62:cc:85:80:ea:dd:d0:d1:9e:69:35:ba: 4b:72:db:d8:be:d2:a8:ca:6d:1a:32:f7:60:0c:54:2e:3b:66: d9:13:7a:14:e7:1f:4a:69:38:1a:78:94:fb:c4:3d:b6:22:23: 31:b2:9b:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVizSSl09rWA5HPZ3+/eO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTJmNDQxMzgyZDViYTFkODBkZjQ1OWJkNDZjMGEzMTU5 MGU3MmYwHhcNMjYwMTA2MjMwMTI2WhcNMjYwMTA3MjMwMTI2WjAzMTEwLwYDVQQD EyhmMWRjYTJlZDkwZWU5MjViYTM3NGQ3YzIwODRmMmUzNGFmMTEzNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn3mW7UeS+/RUEg7HtTYWsHUU2DO hRH/UcrRdB9F7qlGCEMwAWGgZ9PJjxLzKl/6XB4GD3mPi9uOJzIuG2+08+dH/v2J a/sr60AHm5e0vraOHPKFeCUVYLTBhdHAUl8eTsiNSZbVA2ONH6lVrJxWMtnfXxqx 5WbRlLssvIPibNrLkEejXPCuRG59bmIiyhp7EgMdBSfI7R3RtUhGEWiJotBx2kSW dSqzoDKoQLEXyPq7t5PBysK8IvFZVhzW0uLAKundQzs5OOuqpKhygI6bLirJLfXB lt0ptFLXctQf25KS+Bepn/3t3GRdwyvdOuFsvxXwo6DpHM/J+uOUJiBOKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHcou2Q7pJbo3TXwghPLjSvETdlMB8GA1UdIwQY MBaAFOMS9EE4LVuh2A30Wb1GwKMVkOcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTkt YjgwZWZiZDY4YmZkLzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTktYjgwZWZiZDY4YmZk LzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3KGOFgS VXxqiTvwYlfcoBE6wERg41u06bDroAQwfDXQ+mvtHatb7v6PXfIKHvMoIPN79JTd zJBXMz6vIvoir/SifBO/SAQ5zCr/FrCcJZIY6fmy8fzNaQ6K+zdF31zeEgdqlr8W cLsF5+MjTolFXJkL8LZuDS7K0XRAtEuldpth91gpnzjhryWHDwFsHKmcl6nt54+A GdAtCrN90LKfTnt0A49WO0t8R1eTeIF4xR9BymmFMilZSuQMHxsRRgCWReib4dw1 ktPjEFfOYsyFgOrd0NGeaTW6S3Lb2L7SqMptGjL3YAxULjtm2RN6FOcfSmk4GniU +8Q9tiIjMbKbzQ== -----END CERTIFICATE-----Generated at Wed Jan 7 06:58:28 2026 by rpki-client