This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json) Hash identifier: A+ld+CRr5rsndf2Mc9PDJ5Mv1xrm/XXvFNcVpiPFOQU= Subject key identifier: CC:D9:D3:10:70:4D:FD:6E:65:72:39:07:1F:33:37:28:8D:80:1C:C4 Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28 Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228 Certificate serial: 019B9FA0DF7EED72D732CF991E1484C605DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft Manifest number: 17BB Signing time: Thu 08 Jan 2026 22:01:18 +0000 Manifest this update: Thu 08 Jan 2026 22:01:18 +0000 Manifest next update: Fri 09 Jan 2026 22:01:18 +0000 Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=) 2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: ilMz7hDmax0CwpEc3CfUnVtm9lKUk27UN+AJlDe+NiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:a0:df:7e:ed:72:d7:32:cf:99:1e:14:84:c6:05:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228 Validity Not Before: Jan 8 22:01:18 2026 GMT Not After : Jan 9 22:01:18 2026 GMT Subject: CN=ccd9d310704dfd6e657239071f3337288d801cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:eb:45:35:3d:ef:28:09:46:2a:36:e6:f7: 97:b4:e5:30:fa:89:69:ad:62:54:c2:68:ea:6a:9d: 9d:81:5a:93:24:85:83:0b:ae:50:02:ce:19:48:4e: 0f:7a:6e:a0:43:e7:3c:eb:72:25:eb:d0:ef:68:1b: eb:db:50:23:fe:1a:5f:ea:cf:42:7f:62:93:f8:c0: 6a:17:41:39:69:f8:89:32:06:ac:e7:f2:aa:de:06: 48:68:95:47:5b:81:d4:e1:d2:73:01:cb:45:12:6f: c0:14:da:7c:78:22:38:84:d4:6f:e6:08:41:f1:32: ff:d3:22:68:aa:ab:be:b5:72:e5:5c:72:20:29:3c: 3b:ba:12:a3:4f:7c:a1:0d:be:5a:18:48:9e:ff:a8: 16:e9:73:e7:4f:ab:76:5b:a0:ea:df:74:b1:95:d6: ad:e8:24:c6:f0:4e:00:b7:15:ba:61:16:98:42:65: 1c:ea:37:00:3f:3a:79:f7:09:53:7c:c2:90:1b:95: f8:c8:bb:2f:66:6c:28:e5:84:39:5d:ae:a6:f9:f2: c4:3d:12:50:87:f5:fc:93:78:11:e5:20:df:74:a1: 4b:41:35:59:26:7f:52:55:ec:8e:71:d0:2d:1e:04: 18:af:87:45:1b:85:11:e4:31:64:7c:03:cc:84:d2: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D9:D3:10:70:4D:FD:6E:65:72:39:07:1F:33:37:28:8D:80:1C:C4 X509v3 Authority Key Identifier: keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e5:ba:a0:6d:54:2d:25:96:70:6a:70:74:fd:6f:36:62:00: 92:0a:0a:f0:92:04:a0:9a:f6:ad:42:96:c8:d6:0b:37:78:b0: f3:82:01:15:7e:4c:44:44:2f:08:cb:d7:8e:c5:f5:ed:ff:d3: 8f:a4:0c:7f:e1:0b:15:b3:a9:a1:b9:14:e1:d2:eb:4b:d0:4b: 80:f9:f8:a1:df:aa:11:61:68:fa:4a:6f:c1:f0:2b:f2:f7:5f: 63:86:8a:40:10:64:a6:78:80:5a:ed:c9:9f:bc:57:c7:e3:df: 18:88:8a:42:93:ca:41:11:54:cb:25:37:4c:b0:3b:29:72:c6: 65:83:a1:b1:0a:5e:3b:ba:3a:0b:e6:46:97:f4:9b:1a:a6:d7: 0c:23:8d:37:0b:fe:e8:fd:0a:ff:cb:66:00:7c:88:aa:df:5a: 7b:2e:49:fc:05:61:db:44:7c:42:e2:0c:e5:66:4f:c4:a7:a2: 19:56:67:08:c8:f7:c4:f8:c3:d5:09:19:e5:d4:34:30:55:af: 60:bb:c0:b2:aa:81:b8:27:3c:24:3a:f2:97:ec:a4:b2:2d:87: 53:29:b3:85:fb:f2:b4:10:ec:d7:bc:7a:1e:81:30:07:69:d7: 02:85:17:77:2f:f9:3c:38:19:bb:d2:f0:d9:4c:44:7b:0e:79: 67:23:12:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZufoN9+7XLXMs+ZHhSExgXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxM2UzNzE2MTM5NDY1ZTZhOGNmOWY2YmQ4YjViOGY3NjMz YWYyMjgwHhcNMjYwMTA4MjIwMTE4WhcNMjYwMTA5MjIwMTE4WjAzMTEwLwYDVQQD EyhjY2Q5ZDMxMDcwNGRmZDZlNjU3MjM5MDcxZjMzMzcyODhkODAxY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwPrRTU97ygJRio25veXtOUw+olp rWJUwmjqap2dgVqTJIWDC65QAs4ZSE4Pem6gQ+c863Il69DvaBvr21Aj/hpf6s9C f2KT+MBqF0E5afiJMgas5/Kq3gZIaJVHW4HU4dJzActFEm/AFNp8eCI4hNRv5ghB 8TL/0yJoqqu+tXLlXHIgKTw7uhKjT3yhDb5aGEie/6gW6XPnT6t2W6Dq33Sxldat 6CTG8E4AtxW6YRaYQmUc6jcAPzp59wlTfMKQG5X4yLsvZmwo5YQ5Xa6m+fLEPRJQ h/X8k3gR5SDfdKFLQTVZJn9SVeyOcdAtHgQYr4dFG4UR5DFkfAPMhNICCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzZ0xBwTf1uZXI5Bx8zNyiNgBzEMB8GA1UdIwQY MBaAFOE+NxYTlGXmqM+fa9i1uPdjOvIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDct ZWYxNTcwYzcyNTk5LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDctZWYxNTcwYzcyNTk5 LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuW6oG1U LSWWcGpwdP1vNmIAkgoK8JIEoJr2rUKWyNYLN3iw84IBFX5MREQvCMvXjsX17f/T j6QMf+ELFbOpobkU4dLrS9BLgPn4od+qEWFo+kpvwfAr8vdfY4aKQBBkpniAWu3J n7xXx+PfGIiKQpPKQRFUyyU3TLA7KXLGZYOhsQpeO7o6C+ZGl/SbGqbXDCONNwv+ 6P0K/8tmAHyIqt9aey5J/AVh20R8QuIM5WZPxKeiGVZnCMj3xPjD1QkZ5dQ0MFWv YLvAsqqBuCc8JDryl+yksi2HUymzhfvytBDs17x6HoEwB2nXAoUXdy/5PDgZu9Lw 2UxEew55ZyMStg== -----END CERTIFICATE-----Generated at Fri Jan 9 07:51:22 2026 by rpki-client