This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json) Hash identifier: 0H8edvQTSehUNzEmD6bWlVERVYlSGcu/o5f6Rt7QZCE= Subject key identifier: 47:5A:F0:D0:F4:21:8D:DD:7E:95:62:2D:25:94:73:F1:B0:77:AB:34 Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea Certificate serial: 019B7911F39A0CD9E19FDA3DA38DCEE2CA13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 10:19:38 +0000 Manifest this update: Thu 01 Jan 2026 10:19:38 +0000 Manifest next update: Fri 02 Jan 2026 10:19:38 +0000 Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: eBy1K8unBjCRcfx7HYv4pQmX0RjhnCL5RT6OWfHs2vs=) 2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 10:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:f3:9a:0c:d9:e1:9f:da:3d:a3:8d:ce:e2:ca:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea Validity Not Before: Jan 1 10:19:38 2026 GMT Not After : Jan 2 10:19:38 2026 GMT Subject: CN=475af0d0f4218ddd7e95622d259473f1b077ab34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:67:48:b8:fe:d2:6b:a1:31:69:db:74:7a: a6:63:aa:75:7e:eb:5c:a6:b3:01:3e:5a:22:b3:b2: 70:2a:24:e5:65:2a:bc:99:89:de:61:7a:3b:22:cd: 8f:cc:f9:10:d7:aa:a4:48:08:0d:00:e4:af:09:51: b0:df:d2:2b:2d:c9:39:ee:69:44:f0:c0:2e:5a:52: c7:39:32:31:53:9c:93:aa:ef:8c:f3:1b:45:f5:ab: 8b:fe:19:c3:85:6d:cd:ee:ad:09:f1:a5:1f:9e:62: bd:72:77:62:10:6f:1e:58:53:f9:54:1f:c8:54:3e: fa:4a:39:2b:1f:44:da:7a:83:02:4a:93:99:41:71: 66:8c:ba:0b:80:f0:1f:bb:81:ff:da:e1:f3:75:8b: d1:bc:11:f4:86:f1:6f:9c:29:17:db:b6:b0:bc:23: 50:54:11:e8:16:22:2d:19:4b:24:bd:1a:4c:6d:0c: b3:9e:8c:74:73:39:8b:81:14:c0:3d:cf:69:88:72: 6d:27:2e:26:86:a9:5d:d9:d3:0c:00:4f:05:cc:49: 8c:9e:02:8b:56:26:2d:5a:ae:94:bb:66:8a:f6:7b: ed:3e:3b:1e:61:7e:20:10:42:9a:c1:b7:63:dc:70: 98:f0:20:59:35:15:c6:7f:7a:f6:bd:a3:56:e3:49: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5A:F0:D0:F4:21:8D:DD:7E:95:62:2D:25:94:73:F1:B0:77:AB:34 X509v3 Authority Key Identifier: keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fa:88:d9:89:15:56:50:37:95:e4:0c:58:a3:6b:63:5e:95: 91:1a:7f:78:3d:6b:47:2c:8a:bc:5f:05:e4:c5:c9:db:31:a9: 68:dd:11:fb:10:00:5a:c9:34:4f:4e:e9:8d:4e:4f:ed:96:21: 49:5f:24:c7:34:3f:0a:e1:77:9c:37:b1:b4:0b:60:b1:d2:09: 93:82:4c:7d:c5:33:1b:e3:9b:68:43:22:4c:df:e0:3c:74:70: 89:1d:f9:37:ec:6e:ea:e6:21:35:e9:a6:d5:a7:52:5d:bb:41: 2a:e1:01:6f:6c:d4:53:93:e2:4f:89:ee:f9:cc:e8:ac:f6:b8: 5f:e9:7c:b0:85:ca:25:3a:d7:96:5c:c0:93:41:37:24:db:22: f2:92:7c:f5:5b:7e:90:ef:87:f7:5a:53:10:39:36:7e:8a:93: ca:c0:fc:a5:1c:ef:07:1c:be:d9:1e:1c:1e:f0:9c:c3:7f:42: d1:c5:dd:b1:ff:dd:95:ad:f1:9f:b0:ec:3e:3b:80:7f:9d:f8: 09:a0:29:3e:5c:e7:26:e8:6c:db:4c:01:c4:09:55:8d:c0:ba: c4:25:91:13:5b:0b:74:78:fd:ef:3d:9e:e0:45:2a:9b:ff:46: eb:97:26:c3:66:07:10:71:39:46:ee:fd:1b:c1:b5:90:58:58: 96:1a:aa:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5EfOaDNnhn9o9o43O4soTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWVkOWE5ZDFiNmI1MzgzZWJmOTQ2ZDVmYzU0OTgwNjEy NTYzZWEwHhcNMjYwMTAxMTAxOTM4WhcNMjYwMTAyMTAxOTM4WjAzMTEwLwYDVQQD Eyg0NzVhZjBkMGY0MjE4ZGRkN2U5NTYyMmQyNTk0NzNmMWIwNzdhYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgdnSLj+0muhMWnbdHqmY6p1futc prMBPlois7JwKiTlZSq8mYneYXo7Is2PzPkQ16qkSAgNAOSvCVGw39IrLck57mlE 8MAuWlLHOTIxU5yTqu+M8xtF9auL/hnDhW3N7q0J8aUfnmK9cndiEG8eWFP5VB/I VD76SjkrH0TaeoMCSpOZQXFmjLoLgPAfu4H/2uHzdYvRvBH0hvFvnCkX27awvCNQ VBHoFiItGUskvRpMbQyznox0czmLgRTAPc9piHJtJy4mhqld2dMMAE8FzEmMngKL ViYtWq6Uu2aK9nvtPjseYX4gEEKawbdj3HCY8CBZNRXGf3r2vaNW40lLowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEda8ND0IY3dfpViLSWUc/Gwd6s0MB8GA1UdIwQY MBaAFOKe2anRtrU4Pr+UbV/FSYBhJWPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEt ZjZjNjg1OWIzMGYwLzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEtZjZjNjg1OWIzMGYw LzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfqI2YkV VlA3leQMWKNrY16VkRp/eD1rRyyKvF8F5MXJ2zGpaN0R+xAAWsk0T07pjU5P7ZYh SV8kxzQ/CuF3nDextAtgsdIJk4JMfcUzG+ObaEMiTN/gPHRwiR35N+xu6uYhNemm 1adSXbtBKuEBb2zUU5PiT4nu+czorPa4X+l8sIXKJTrXllzAk0E3JNsi8pJ89Vt+ kO+H91pTEDk2foqTysD8pRzvBxy+2R4cHvCcw39C0cXdsf/dla3xn7DsPjuAf534 CaApPlznJuhs20wBxAlVjcC6xCWRE1sLdHj97z2e4EUqm/9G65cmw2YHEHE5Ru79 G8G1kFhYlhqqkw== -----END CERTIFICATE-----Generated at Thu Jan 1 19:53:20 2026 by rpki-client