This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json) Hash identifier: qUuxoyUoE8w8LE6vBoDALeP8Sc8Qtja1Ah1NUBAmPsw= Subject key identifier: 5C:80:52:88:7F:9A:22:7E:8D:79:D3:F7:7E:25:C4:BE:01:60:37:0D Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc Certificate serial: 019B79A54B0E13DDBA882424DBF2B663ED93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft Manifest number: 170E Signing time: Thu 01 Jan 2026 13:00:34 +0000 Manifest this update: Thu 01 Jan 2026 13:00:34 +0000 Manifest next update: Fri 02 Jan 2026 13:00:34 +0000 Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: JndBFJs/vYyN4QeHqh6cHtXzok9U9B33ZUeZIPCPhuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:a5:4b:0e:13:dd:ba:88:24:24:db:f2:b6:63:ed:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc Validity Not Before: Jan 1 13:00:34 2026 GMT Not After : Jan 2 13:00:34 2026 GMT Subject: CN=5c8052887f9a227e8d79d3f77e25c4be0160370d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:d2:4d:ed:78:b7:ae:8f:18:86:e9:90:2a: 59:57:3a:de:72:44:e9:61:dc:b6:e8:cd:63:8b:73: 2c:07:d2:00:20:e5:8f:d3:36:75:70:7f:11:3f:98: 22:9d:d7:f9:6b:2e:d0:f1:74:0d:c3:b9:0c:3e:55: 12:e2:c2:f5:a3:c4:d2:a4:91:37:3d:1b:b9:69:b3: a2:61:1d:44:0b:54:bb:9f:0c:13:63:62:01:28:ce: 30:2c:90:bd:c9:22:64:e5:8b:36:a2:31:80:57:c9: 42:15:f6:3e:00:a4:2f:51:b2:2a:70:a8:5a:6c:c6: 64:7c:dd:41:84:61:c2:e7:78:a8:88:b8:48:7e:0d: 29:b3:ad:f7:ad:eb:ff:bb:99:ec:69:d6:fa:56:86: ea:1d:5b:36:e3:38:4a:5e:7b:30:70:12:b3:80:38: da:a6:71:bd:85:c9:27:4e:68:52:84:d5:79:ac:8d: 70:5f:c3:c4:a1:58:b0:59:12:32:da:94:ce:a0:74: c7:03:4d:fe:48:47:97:f9:31:bf:10:fe:a2:f3:7f: a4:73:b0:7c:b6:f0:34:07:6b:1a:90:fc:92:78:55: 33:ed:8e:ee:6b:64:9c:85:e0:49:b3:92:da:d1:42: c7:cc:2d:a2:65:01:46:b7:1e:38:94:7d:aa:c1:30: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:80:52:88:7F:9A:22:7E:8D:79:D3:F7:7E:25:C4:BE:01:60:37:0D X509v3 Authority Key Identifier: keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:09:e0:4c:2f:61:1d:7c:56:a8:23:44:d8:3a:e3:cc:d1:8f: f0:df:98:42:5d:31:81:73:44:71:8e:a4:fa:7c:be:7c:3d:d8: 3c:08:f7:58:a4:f8:26:f0:87:00:09:37:91:96:e9:c9:50:dd: 85:b5:d0:d1:8b:03:a9:80:cf:43:47:e4:02:c3:43:01:66:8a: c9:22:e5:28:67:5e:ce:6d:f9:47:7f:61:52:00:6e:44:42:ad: ce:fb:c3:83:bb:29:54:8e:67:06:b4:a3:07:0c:81:80:02:9e: 5d:22:f1:f0:fa:e4:4e:72:e6:0e:f9:1b:e5:8c:5a:6f:c8:68: 0c:28:c0:ee:e5:34:16:17:57:39:fa:d8:e6:9a:0e:fa:21:ad: 2d:e5:f3:b9:e9:51:78:5d:5e:fe:a8:8c:ce:bb:61:38:00:32: 0f:b3:4f:ba:ce:63:59:ff:92:02:56:9a:c5:ee:15:4a:fd:fb: 64:bc:d4:99:5c:32:f8:4e:c5:2d:d2:5f:12:59:f9:6c:11:f5: 82:47:e2:12:2b:f0:45:35:ea:7a:89:ea:3b:f5:fe:1c:f7:a3: c1:f9:e3:10:68:dd:6d:48:fc:50:ab:4a:3f:5f:d4:5a:8a:95: 8d:81:eb:ba:87:e3:9a:7e:6e:51:b4:2e:33:47:22:79:d9:ac: 79:43:38:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5pUsOE926iCQk2/K2Y+2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj Y2VkZmMwHhcNMjYwMTAxMTMwMDM0WhcNMjYwMTAyMTMwMDM0WjAzMTEwLwYDVQQD Eyg1YzgwNTI4ODdmOWEyMjdlOGQ3OWQzZjc3ZTI1YzRiZTAxNjAzNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMTSTe14t66PGIbpkCpZVzreckTp Ydy26M1ji3MsB9IAIOWP0zZ1cH8RP5gindf5ay7Q8XQNw7kMPlUS4sL1o8TSpJE3 PRu5abOiYR1EC1S7nwwTY2IBKM4wLJC9ySJk5Ys2ojGAV8lCFfY+AKQvUbIqcKha bMZkfN1BhGHC53ioiLhIfg0ps633rev/u5nsadb6VobqHVs24zhKXnswcBKzgDja pnG9hcknTmhShNV5rI1wX8PEoViwWRIy2pTOoHTHA03+SEeX+TG/EP6i83+kc7B8 tvA0B2sakPySeFUz7Y7ua2ScheBJs5La0ULHzC2iZQFGtx44lH2qwTA8PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyAUoh/miJ+jXnT934lxL4BYDcNMB8GA1UdIwQY MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5 LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAngTC9h HXxWqCNE2DrjzNGP8N+YQl0xgXNEcY6k+ny+fD3YPAj3WKT4JvCHAAk3kZbpyVDd hbXQ0YsDqYDPQ0fkAsNDAWaKySLlKGdezm35R39hUgBuREKtzvvDg7spVI5nBrSj BwyBgAKeXSLx8PrkTnLmDvkb5Yxab8hoDCjA7uU0FhdXOfrY5poO+iGtLeXzuelR eF1e/qiMzrthOAAyD7NPus5jWf+SAlaaxe4VSv37ZLzUmVwy+E7FLdJfEln5bBH1 gkfiEivwRTXqeonqO/X+HPejwfnjEGjdbUj8UKtKP1/UWoqVjYHruofjmn5uUbQu M0ciedmseUM4iA== -----END CERTIFICATE-----Generated at Thu Jan 1 19:46:48 2026 by rpki-client