This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json) Hash identifier: I2OwqBvFb4/8Gmjakgw2gwjgNi0PcNw5ZZCoZNQiQjE= Subject key identifier: 32:31:AF:53:7E:58:00:D5:C4:BB:32:73:B3:37:C5:21:EF:CE:69:4E Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Certificate serial: 019BB24C0C96732A9E25FFF2AE8CB05B2376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft Manifest number: 09D4 Signing time: Mon 12 Jan 2026 13:01:26 +0000 Manifest this update: Mon 12 Jan 2026 13:01:26 +0000 Manifest next update: Tue 13 Jan 2026 13:01:26 +0000 Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: 9kFKWfbvFPAyOVWXBmWa7HlJNkT37Hgf6XOifkZZdp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4c:0c:96:73:2a:9e:25:ff:f2:ae:8c:b0:5b:23:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Validity Not Before: Jan 12 13:01:26 2026 GMT Not After : Jan 13 13:01:26 2026 GMT Subject: CN=3231af537e5800d5c4bb3273b337c521efce694e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:46:16:0d:19:e2:ad:15:1b:77:fa:c7:91: 25:4f:94:b9:e0:9d:8a:84:04:6d:fb:24:ba:2d:2e: 23:ba:30:f8:ce:61:24:00:50:cf:fb:ea:fa:50:26: 59:c0:c0:b9:94:83:fa:33:73:16:96:b3:2f:63:34: 80:7d:c4:e3:a2:e2:96:2e:16:1f:eb:92:95:14:19: 01:cf:f5:aa:7c:29:ba:e4:e2:f0:80:0e:95:58:03: a6:96:e6:91:8f:56:3b:54:b0:d5:a1:22:d0:98:1a: f3:65:c8:40:de:de:3c:97:62:eb:c7:c8:85:f7:2a: ca:21:54:b5:8b:a1:7b:db:b6:75:12:e8:f4:76:a0: da:ba:b7:0e:b6:fe:54:a9:01:68:a1:87:65:c5:b5: 71:1f:b9:1a:33:7a:88:08:b0:f0:b8:3b:ea:1e:25: 56:2d:59:2d:46:80:1f:c5:b1:04:d7:48:b4:9e:ee: cf:31:2b:b2:6a:1d:96:08:e9:95:8c:d3:6e:75:6f: 21:29:c5:43:79:42:5e:d6:f3:9d:1d:ac:6b:f6:c1: 54:42:34:dc:4b:9f:a8:66:d1:60:da:fd:32:11:c2: c1:f2:37:76:f5:23:dc:6b:de:44:5c:9f:17:01:58: 8f:85:22:6b:aa:04:12:53:68:79:a2:ae:3a:40:5f: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:31:AF:53:7E:58:00:D5:C4:BB:32:73:B3:37:C5:21:EF:CE:69:4E X509v3 Authority Key Identifier: keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d2:1f:5d:0d:a5:be:f9:c8:4e:61:4e:f8:9a:81:be:4b:39: ae:fa:9a:36:2a:2f:36:7d:89:c6:04:a3:46:9a:00:2c:de:ea: f1:77:c8:1f:97:79:c7:af:24:92:53:c3:7a:0d:74:85:f5:38: 7a:74:95:5c:3e:dc:4e:00:80:dc:4d:3c:cc:21:75:2f:29:f9: 79:ef:0a:5f:9d:cd:53:71:9c:57:74:88:a6:92:d6:eb:f6:62: 1e:ac:c9:de:49:69:32:da:a9:82:22:90:64:f9:d9:7a:e9:47: e0:22:63:f1:32:b4:a9:6d:f1:98:ca:3b:97:ae:48:7f:c6:98: e8:85:b3:ed:de:3e:cf:e2:88:c9:94:96:31:e7:d5:a1:ae:77: 25:b7:62:41:73:bc:a5:dc:ff:f6:81:dd:13:70:14:07:cc:2f: 06:05:e7:f5:63:94:bb:f5:2b:c9:3a:78:fe:b9:77:80:2c:32: aa:9b:fb:9a:25:5d:fe:83:45:1b:69:86:db:c5:91:8b:93:45: 11:f6:6b:36:5f:9e:36:93:ef:0d:7f:00:57:66:02:86:a0:8d: 2d:62:ce:c1:74:0b:fb:96:33:1d:af:96:18:15:95:99:ea:4a: 4d:6c:46:4c:c2:df:d1:e4:ff:f4:3b:87:1c:0d:27:e4:46:a1: 83:7f:fc:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyTAyWcyqeJf/yroywWyN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx N2FmMjYwHhcNMjYwMTEyMTMwMTI2WhcNMjYwMTEzMTMwMTI2WjAzMTEwLwYDVQQD EygzMjMxYWY1MzdlNTgwMGQ1YzRiYjMyNzNiMzM3YzUyMWVmY2U2OTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruBGFg0Z4q0VG3f6x5ElT5S54J2K hARt+yS6LS4jujD4zmEkAFDP++r6UCZZwMC5lIP6M3MWlrMvYzSAfcTjouKWLhYf 65KVFBkBz/WqfCm65OLwgA6VWAOmluaRj1Y7VLDVoSLQmBrzZchA3t48l2Lrx8iF 9yrKIVS1i6F727Z1Euj0dqDaurcOtv5UqQFooYdlxbVxH7kaM3qICLDwuDvqHiVW LVktRoAfxbEE10i0nu7PMSuyah2WCOmVjNNudW8hKcVDeUJe1vOdHaxr9sFUQjTc S5+oZtFg2v0yEcLB8jd29SPca95EXJ8XAViPhSJrqgQSU2h5oq46QF95aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIxr1N+WADVxLsyc7M3xSHvzmlOMB8GA1UdIwQY MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0 LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtIfXQ2l vvnITmFO+JqBvks5rvqaNiovNn2JxgSjRpoALN7q8XfIH5d5x68kklPDeg10hfU4 enSVXD7cTgCA3E08zCF1Lyn5ee8KX53NU3GcV3SIppLW6/ZiHqzJ3klpMtqpgiKQ ZPnZeulH4CJj8TK0qW3xmMo7l65If8aY6IWz7d4+z+KIyZSWMefVoa53JbdiQXO8 pdz/9oHdE3AUB8wvBgXn9WOUu/UryTp4/rl3gCwyqpv7miVd/oNFG2mG28WRi5NF EfZrNl+eNpPvDX8AV2YChqCNLWLOwXQL+5YzHa+WGBWVmepKTWxGTMLf0eT/9DuH HA0n5Eahg3/87Q== -----END CERTIFICATE-----Generated at Mon Jan 12 22:12:25 2026 by rpki-client