This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json) Hash identifier: nxKKppdD3eHnmjkbM/oo6EO8cKM6YGMX8PLzPkeTsDM= Subject key identifier: D9:71:AF:5E:CD:CE:F4:C7:DF:96:35:99:74:74:98:86:0B:3D:B6:F0 Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89 Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489 Certificate serial: 019BAEDD384B2309FB3B9F276CCB18442CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft Manifest number: 0498 Signing time: Sun 11 Jan 2026 21:01:31 +0000 Manifest this update: Sun 11 Jan 2026 21:01:31 +0000 Manifest next update: Mon 12 Jan 2026 21:01:31 +0000 Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: G0slFdzXdgxz1V8gNO2czCxGHvuTv9EhM6uGzg8adUg=) 2: sGlKPZsq_kBnIcmC4jJKq4QZ1VA.roa (hash: iOgZ+9MieJrs7p0qDVzl8joxzBwHIKp+gS9dVYnlDS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:38:4b:23:09:fb:3b:9f:27:6c:cb:18:44:2c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489 Validity Not Before: Jan 11 21:01:31 2026 GMT Not After : Jan 12 21:01:31 2026 GMT Subject: CN=d971af5ecdcef4c7df963599747498860b3db6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7a:f6:b4:2c:1e:27:9d:48:4f:63:40:26:a1: d1:fa:f9:04:73:cf:ca:d2:8d:ea:5d:f3:36:c3:1c: e3:c9:26:26:7f:31:e8:d2:ce:0e:ec:fe:f1:7e:db: 60:fc:85:91:d2:89:fe:14:d0:dc:95:29:37:4a:98: 59:94:17:23:e0:60:b3:76:dd:4e:02:27:ca:83:98: 52:b8:65:60:7a:25:91:38:f8:31:e0:c0:17:66:c1: 04:82:77:1a:05:bc:2f:20:8d:b2:b9:6a:a5:c7:0d: 70:d5:d8:5b:21:08:aa:57:1f:3c:c1:d2:a7:13:3b: 37:e3:75:db:bf:b0:18:9e:5d:ee:07:dc:ef:20:48: 4d:26:da:01:cd:4b:44:b2:88:51:49:27:ef:6f:3e: 0c:70:df:6a:f5:30:b1:eb:ff:8c:01:44:10:b8:aa: 6a:df:b4:37:5b:53:20:f7:4d:15:2f:96:3b:53:26: 61:5a:c6:dc:08:83:f0:d4:ef:d7:64:87:5b:02:c0: 28:10:96:c6:f5:d4:ce:ca:1a:6d:fb:66:f1:52:a4: 2c:ce:64:a3:ff:32:b5:ae:d8:6b:89:8a:dd:b0:68: 59:88:f9:df:c6:ce:6d:06:d9:d3:18:6a:14:6c:6e: 39:83:19:0d:db:77:26:dc:4d:e8:85:c2:2e:0a:e5: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:AF:5E:CD:CE:F4:C7:DF:96:35:99:74:74:98:86:0B:3D:B6:F0 X509v3 Authority Key Identifier: keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0d:ed:8a:d1:c7:ae:a1:9c:b5:05:eb:c7:91:d4:39:3a:65: d3:8d:d4:68:05:e7:f3:85:0a:ca:29:31:bf:c5:31:fe:19:65: 56:13:44:a9:8f:9f:ed:b6:8a:fb:3f:a2:cb:85:2e:f4:e7:3b: 3e:69:70:59:f0:06:47:dd:f7:65:b6:e3:e7:72:78:fc:46:8a: aa:de:8d:18:c6:9d:7e:86:c0:68:c9:7c:5c:a1:ca:3d:a5:a1: 2a:81:ad:6b:4e:69:ab:41:f4:49:89:d1:2f:ee:72:c1:c2:f6: 64:2c:23:fc:e9:fa:c8:74:e4:8e:19:c8:41:f4:06:af:54:1f: 5a:30:21:13:1b:48:02:d2:3e:ea:a9:d6:5f:ac:33:02:93:54: ce:a0:04:da:0f:36:c7:5c:7d:dc:66:ec:df:3d:5c:22:da:3c: f1:9a:a8:43:e6:6d:6f:29:02:22:62:b1:74:dc:04:51:17:07: 71:7c:4f:25:0c:a1:e3:9d:b4:7f:71:2b:b2:4b:a3:9f:58:fa: 1f:68:74:72:a5:62:f0:24:a9:78:75:1c:9e:7d:71:3e:65:56: 63:e5:5e:42:83:fd:40:f4:b9:2d:9d:87:3d:a0:c3:ef:41:63: 92:4f:f5:4f:47:2f:73:93:70:12:ec:56:28:ae:c7:9c:c0:e2: 20:ab:c0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3ThLIwn7O58nbMsYRCzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTIxZjg1ZjliZjE3YzAyMDk4N2VhMTMyMGQzZDYzYzU1 YWU0ODkwHhcNMjYwMTExMjEwMTMxWhcNMjYwMTEyMjEwMTMxWjAzMTEwLwYDVQQD EyhkOTcxYWY1ZWNkY2VmNGM3ZGY5NjM1OTk3NDc0OTg4NjBiM2RiNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53r2tCweJ51IT2NAJqHR+vkEc8/K 0o3qXfM2wxzjySYmfzHo0s4O7P7xfttg/IWR0on+FNDclSk3SphZlBcj4GCzdt1O AifKg5hSuGVgeiWROPgx4MAXZsEEgncaBbwvII2yuWqlxw1w1dhbIQiqVx88wdKn Ezs343Xbv7AYnl3uB9zvIEhNJtoBzUtEsohRSSfvbz4McN9q9TCx6/+MAUQQuKpq 37Q3W1Mg900VL5Y7UyZhWsbcCIPw1O/XZIdbAsAoEJbG9dTOyhpt+2bxUqQszmSj /zK1rthriYrdsGhZiPnfxs5tBtnTGGoUbG45gxkN23cm3E3ohcIuCuVQ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlxr17NzvTH35Y1mXR0mIYLPbbwMB8GA1UdIwQY MBaAFOGiH4X5vxfAIJh+oTINPWPFWuSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUt ODYyNjg0ZWNlYjQ2LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUtODYyNjg0ZWNlYjQ2 LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZA3titHH rqGctQXrx5HUOTpl043UaAXn84UKyikxv8Ux/hllVhNEqY+f7baK+z+iy4Uu9Oc7 PmlwWfAGR933Zbbj53J4/EaKqt6NGMadfobAaMl8XKHKPaWhKoGta05pq0H0SYnR L+5ywcL2ZCwj/On6yHTkjhnIQfQGr1QfWjAhExtIAtI+6qnWX6wzApNUzqAE2g82 x1x93Gbs3z1cIto88ZqoQ+ZtbykCImKxdNwEURcHcXxPJQyh4520f3Erskujn1j6 H2h0cqVi8CSpeHUcnn1xPmVWY+VeQoP9QPS5LZ2HPaDD70Fjkk/1T0cvc5NwEuxW KK7HnMDiIKvA0A== -----END CERTIFICATE-----Generated at Mon Jan 12 03:15:18 2026 by rpki-client