This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json) Hash identifier: akTxqVl+sxMhqF3zOGOtbyxlOArqD0qGmiycNmrG7yE= Subject key identifier: 4B:4D:9C:93:BE:37:6E:84:AE:07:B7:91:67:0A:30:DD:E7:00:CC:E5 Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Certificate serial: 019BAEDD2BD6D5EC6AD3DFE4755F957AC333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft Manifest number: 1515 Signing time: Sun 11 Jan 2026 21:01:28 +0000 Manifest this update: Sun 11 Jan 2026 21:01:28 +0000 Manifest next update: Mon 12 Jan 2026 21:01:28 +0000 Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: Q/IlNad36tSBXtABQo46LXXJSmGfHjQu2QRUuNLSzA8=) 2: eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa (hash: WYeB62ZsHbPuqTvSpxGwefGN+P372Umh9fLZQeEfJRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:2b:d6:d5:ec:6a:d3:df:e4:75:5f:95:7a:c3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Validity Not Before: Jan 11 21:01:28 2026 GMT Not After : Jan 12 21:01:28 2026 GMT Subject: CN=4b4d9c93be376e84ae07b791670a30dde700cce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:9e:2a:df:32:1e:62:60:d2:86:bc:99:45: 32:02:6c:c5:9e:2d:19:dc:a0:88:74:95:e4:46:9f: c6:eb:03:96:c9:92:44:e6:cd:3c:19:12:ca:e7:96: ff:a4:df:ce:f2:09:0c:c5:a7:16:bf:fb:ae:75:74: 3b:ba:41:55:bf:23:a4:c6:ed:c8:28:18:61:92:9b: 52:50:17:82:d4:7f:fd:2f:38:6e:74:89:89:23:9f: 77:60:54:9e:43:bb:af:c6:b8:00:e5:c4:76:8e:e8: 01:f1:27:ff:22:02:98:49:65:f0:80:d6:47:e2:25: 0f:9f:d4:e1:61:d3:b1:bc:f1:44:27:14:51:c5:7e: 82:2e:64:0b:12:a4:51:15:d9:52:90:e3:71:26:22: b6:f8:0c:8b:c2:6d:b5:03:ae:13:13:64:80:17:df: ab:b9:0c:fd:b9:f3:c6:aa:98:11:5b:42:23:9f:b2: 24:74:91:16:cc:f6:54:15:59:28:e8:1e:27:94:df: b7:a6:52:bf:5f:93:00:6b:e8:12:64:c3:f4:7f:63: f7:26:18:20:90:fe:3c:48:71:fa:7f:a5:45:8b:44: 19:23:d2:aa:26:01:53:15:8f:59:b2:ba:fd:1a:6c: 01:23:01:4f:6e:84:1d:76:63:1f:c6:c9:f1:0a:d1: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:9C:93:BE:37:6E:84:AE:07:B7:91:67:0A:30:DD:E7:00:CC:E5 X509v3 Authority Key Identifier: keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:04:e5:de:7d:ce:2d:ed:44:6f:32:95:a0:62:19:0c:43:0e: 41:c6:50:87:58:4a:9f:80:d7:ad:d8:24:1f:11:55:12:aa:cf: ea:fa:e5:4f:53:c4:ae:59:1c:58:d5:04:46:43:73:62:8b:fa: 18:81:6e:9f:97:62:e2:88:e2:58:f5:a8:ec:1f:f8:94:f2:97: 6f:c9:53:4c:75:3c:c1:f8:0e:0b:85:31:fb:75:f4:40:71:1c: 2b:fc:d7:ec:5a:31:f3:ff:c2:a0:11:e5:c6:a2:04:b2:1c:d2: a1:0c:e8:f2:ef:6f:45:6f:e5:cb:50:16:0f:dd:76:16:1b:29: f3:0f:a7:7b:f4:78:74:a6:bc:46:f5:dc:38:79:3d:df:9f:3d: 74:fc:04:2b:62:c9:2a:8b:47:94:13:a7:34:b3:8e:85:33:ac: b3:bb:7f:81:9d:a5:f7:60:dc:1d:89:d0:e7:28:d5:32:33:c7: 7a:df:db:24:59:77:29:e8:a7:40:03:2c:6e:f5:70:7c:56:a5: d4:05:43:df:ba:68:3d:46:cf:b6:c4:ff:98:67:e6:86:10:2d: 90:f7:f5:3b:56:25:44:e1:3a:89:32:03:1e:60:52:c3:5a:b9: 74:81:2f:e3:02:aa:8a:48:b0:d9:91:1c:d4:f9:1c:f5:f9:c6: 06:8c:19:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3SvW1exq09/kdV+VesMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5 YmMyMTMwHhcNMjYwMTExMjEwMTI4WhcNMjYwMTEyMjEwMTI4WjAzMTEwLwYDVQQD Eyg0YjRkOWM5M2JlMzc2ZTg0YWUwN2I3OTE2NzBhMzBkZGU3MDBjY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCeKt8yHmJg0oa8mUUyAmzFni0Z 3KCIdJXkRp/G6wOWyZJE5s08GRLK55b/pN/O8gkMxacWv/uudXQ7ukFVvyOkxu3I KBhhkptSUBeC1H/9LzhudImJI593YFSeQ7uvxrgA5cR2jugB8Sf/IgKYSWXwgNZH 4iUPn9ThYdOxvPFEJxRRxX6CLmQLEqRRFdlSkONxJiK2+AyLwm21A64TE2SAF9+r uQz9ufPGqpgRW0Ijn7IkdJEWzPZUFVko6B4nlN+3plK/X5MAa+gSZMP0f2P3Jhgg kP48SHH6f6VFi0QZI9KqJgFTFY9Zsrr9GmwBIwFPboQddmMfxsnxCtG5+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtNnJO+N26Erge3kWcKMN3nAMzlMB8GA1UdIwQY MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt NjJiYTNhNjg4NGM4LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4 LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQTl3n3O Le1EbzKVoGIZDEMOQcZQh1hKn4DXrdgkHxFVEqrP6vrlT1PErlkcWNUERkNzYov6 GIFun5di4ojiWPWo7B/4lPKXb8lTTHU8wfgOC4Ux+3X0QHEcK/zX7Fox8//CoBHl xqIEshzSoQzo8u9vRW/ly1AWD912Fhsp8w+ne/R4dKa8RvXcOHk93589dPwEK2LJ KotHlBOnNLOOhTOss7t/gZ2l92DcHYnQ5yjVMjPHet/bJFl3KeinQAMsbvVwfFal 1AVD37poPUbPtsT/mGfmhhAtkPf1O1YlROE6iTIDHmBSw1q5dIEv4wKqikiw2ZEc 1Pkc9fnGBowZbw== -----END CERTIFICATE-----Generated at Mon Jan 12 02:56:39 2026 by rpki-client