This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json) Hash identifier: /bBIpk/yBfl3URIg2KP/u04mjF4U2+6Xhm6Ow9ARds4= Subject key identifier: FD:38:62:BE:13:BE:83:14:4D:C3:82:B0:03:BF:95:57:73:05:1B:1E Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Certificate serial: 019BB0CB5A0A39C235DD48F74115A256FEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft Manifest number: 1516 Signing time: Mon 12 Jan 2026 06:01:15 +0000 Manifest this update: Mon 12 Jan 2026 06:01:15 +0000 Manifest next update: Tue 13 Jan 2026 06:01:15 +0000 Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: ymz6FAcZxsxTNOHqgBFEeFyk6SDHBYJtjzRrg6DbL9I=) 2: eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa (hash: WYeB62ZsHbPuqTvSpxGwefGN+P372Umh9fLZQeEfJRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cb:5a:0a:39:c2:35:dd:48:f7:41:15:a2:56:fe:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Validity Not Before: Jan 12 06:01:15 2026 GMT Not After : Jan 13 06:01:15 2026 GMT Subject: CN=fd3862be13be83144dc382b003bf955773051b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:3c:61:af:eb:c7:42:36:d9:d8:01:81:68: 86:cb:19:98:49:0b:65:58:ce:20:6d:8f:aa:7f:3b: 7e:db:33:7d:5b:58:c8:56:c9:f6:e4:ef:8d:e3:5e: c1:b4:60:71:f4:89:57:00:0e:d4:27:2c:d8:33:51: 25:4e:55:ae:fd:54:a9:11:43:70:e6:dc:03:78:1e: f5:9c:de:b7:d8:c3:0c:f6:df:22:7f:8b:b7:5f:8f: 75:a3:b2:d3:93:b2:f3:33:b9:3e:bc:08:24:2d:6e: af:ad:86:05:a2:9d:6e:62:c7:07:b3:98:be:4a:48: 24:94:bb:f2:a8:4d:f4:07:63:7f:5b:75:35:af:ff: d3:ec:40:c7:76:52:2b:84:a8:35:17:27:5f:fd:14: 4d:a8:0a:3e:8f:af:c3:56:d2:a3:f7:7e:f8:64:ff: 16:06:b2:5d:53:3e:ee:d1:39:69:e1:47:3d:3a:c7: c4:2c:1a:a3:1f:2c:b9:6a:2f:ff:d4:a4:4c:3a:a7: f1:9c:b2:c7:3e:f0:80:7a:96:2c:89:40:9d:d2:6a: 37:ec:9c:1a:31:15:b7:5f:46:2c:01:65:48:07:9f: 81:0e:e2:8e:9e:bb:47:f7:ba:8c:60:3a:9c:30:d5: 75:be:0c:e7:ba:8f:93:de:68:78:e3:2a:c1:96:a0: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:62:BE:13:BE:83:14:4D:C3:82:B0:03:BF:95:57:73:05:1B:1E X509v3 Authority Key Identifier: keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:f3:7b:82:c3:71:87:ba:10:79:ed:be:d1:ca:5f:d5:74: 4b:d3:17:65:fb:4a:85:dc:50:f5:6b:f8:4b:bb:a6:58:21:4d: b2:19:da:21:cb:f8:19:29:d8:38:fc:2c:77:0f:ce:5f:89:b9: e9:f3:17:64:bc:b6:6b:a7:bb:ff:db:0f:aa:57:d3:f9:3e:3c: 41:26:6f:b3:3b:93:47:cb:a2:4d:fb:13:ad:57:25:0a:ec:d3: 69:d8:db:a1:57:e7:46:af:d8:c6:e1:ed:66:5a:a5:e1:4a:f6: 3d:4a:80:3a:0e:e1:af:94:da:6b:3f:fc:86:a4:8e:88:14:66: 65:90:73:ca:f4:8c:39:15:fe:bf:da:57:5b:5c:99:a1:7d:98: f1:c0:7c:00:8c:6a:9c:21:a9:f5:47:f5:ee:85:36:6c:29:28: 07:ab:87:75:16:f2:5b:c6:08:9e:58:2a:2c:51:08:d5:b6:bf: 00:0f:f2:fe:a6:0c:af:c6:f7:5c:53:c0:0a:9e:91:7f:9f:3a: e6:cc:ab:2a:1c:cc:4b:30:a2:d3:75:80:0c:98:d9:d0:3b:d1: 9a:03:aa:e6:ae:70:a2:0e:ea:83:16:03:76:75:73:33:25:b2: ff:54:7d:82:11:b8:47:90:7d:8f:c7:e6:2e:6e:4e:23:16:d7: 14:42:f7:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwy1oKOcI13Uj3QRWiVv6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5 YmMyMTMwHhcNMjYwMTEyMDYwMTE1WhcNMjYwMTEzMDYwMTE1WjAzMTEwLwYDVQQD EyhmZDM4NjJiZTEzYmU4MzE0NGRjMzgyYjAwM2JmOTU1NzczMDUxYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcA8Ya/rx0I22dgBgWiGyxmYSQtl WM4gbY+qfzt+2zN9W1jIVsn25O+N417BtGBx9IlXAA7UJyzYM1ElTlWu/VSpEUNw 5twDeB71nN632MMM9t8if4u3X491o7LTk7LzM7k+vAgkLW6vrYYFop1uYscHs5i+ SkgklLvyqE30B2N/W3U1r//T7EDHdlIrhKg1Fydf/RRNqAo+j6/DVtKj9374ZP8W BrJdUz7u0Tlp4Uc9OsfELBqjHyy5ai//1KRMOqfxnLLHPvCAepYsiUCd0mo37Jwa MRW3X0YsAWVIB5+BDuKOnrtH97qMYDqcMNV1vgznuo+T3mh44yrBlqAZIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP04Yr4TvoMUTcOCsAO/lVdzBRseMB8GA1UdIwQY MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt NjJiYTNhNjg4NGM4LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4 LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC7ze4LD cYe6EHntvtHKX9V0S9MXZftKhdxQ9Wv4S7umWCFNshnaIcv4GSnYOPwsdw/OX4m5 6fMXZLy2a6e7/9sPqlfT+T48QSZvszuTR8uiTfsTrVclCuzTadjboVfnRq/YxuHt Zlql4Ur2PUqAOg7hr5Taaz/8hqSOiBRmZZBzyvSMORX+v9pXW1yZoX2Y8cB8AIxq nCGp9Uf17oU2bCkoB6uHdRbyW8YInlgqLFEI1ba/AA/y/qYMr8b3XFPACp6Rf586 5syrKhzMSzCi03WADJjZ0DvRmgOq5q5wog7qgxYDdnVzMyWy/1R9ghG4R5B9j8fm Lm5OIxbXFEL3yA== -----END CERTIFICATE-----Generated at Mon Jan 12 09:16:02 2026 by rpki-client