This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json) Hash identifier: Ge/DSeJmeTlZw4AXXictNDfH0FSlwQM8oPSk9ouJy0g= Subject key identifier: 1E:FA:2B:57:F2:14:B1:E3:D2:3B:68:51:01:10:B4:78:2B:54:51:CE Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44 Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244 Certificate serial: 019BF318A3937175DA5FD75B4D6405B0103B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft Manifest number: 0713 Signing time: Sun 25 Jan 2026 03:00:36 +0000 Manifest this update: Sun 25 Jan 2026 03:00:36 +0000 Manifest next update: Mon 26 Jan 2026 03:00:36 +0000 Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=) 2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: 5QoZh3FwkpI1vO8hmz9R0+f2ZLr05YyBVCPJjRXu4V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:a3:93:71:75:da:5f:d7:5b:4d:64:05:b0:10:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244 Validity Not Before: Jan 25 03:00:36 2026 GMT Not After : Jan 26 03:00:36 2026 GMT Subject: CN=1efa2b57f214b1e3d23b68510110b4782b5451ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:5f:d6:90:78:3b:35:41:3c:f3:d1:1f:1b: b8:7e:cd:26:b1:dd:75:6a:c2:8f:d6:81:29:44:27: 34:26:14:76:de:da:8a:12:28:62:58:90:b2:d1:62: 80:07:ca:cd:a0:ad:02:0b:d8:97:2c:32:01:38:98: 41:62:6b:c3:a0:e6:57:07:04:aa:8b:12:ce:7b:ac: 2a:22:8a:bb:c8:5a:53:65:88:e4:94:e9:bf:a5:d6: cd:bc:e0:74:e3:4a:f8:59:72:73:6a:86:e4:ca:62: 4b:32:2a:01:b7:d3:75:71:26:2b:cf:46:28:a7:a5: ca:06:b8:97:82:ec:1a:93:ad:41:cd:9e:b3:86:02: 3c:38:60:4d:e3:44:ff:ba:10:ac:1f:d3:04:b2:bf: 24:7e:2f:c7:74:ea:b8:ee:9a:4f:08:59:01:9d:aa: 25:4a:83:91:88:61:d8:de:f6:77:53:66:9d:66:72: fe:46:b6:de:00:60:2f:21:ec:bf:06:f8:23:33:39: ef:c2:fc:76:97:79:5f:ad:75:a9:52:0e:97:56:6a: 42:44:fa:1b:ad:09:5e:f4:76:3f:3f:b8:00:7d:28: 0c:07:4e:ee:61:d4:fb:8c:40:0a:cb:b8:c3:96:3b: 08:b2:1d:26:cc:ff:a2:60:90:d1:7e:fe:b9:8c:db: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FA:2B:57:F2:14:B1:E3:D2:3B:68:51:01:10:B4:78:2B:54:51:CE X509v3 Authority Key Identifier: keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e2:f6:78:22:c4:4d:42:10:d5:b4:95:49:38:05:68:6e:61: 1a:3f:17:ef:10:d4:63:f9:f6:ad:41:ee:14:87:82:f0:c8:24: 8c:86:01:53:a7:27:d5:0a:d8:2c:62:c1:c8:a6:8d:d0:86:de: 79:ad:ce:a5:ca:c5:c8:51:5b:9a:26:5a:99:b3:50:58:7f:32: 56:6f:5f:f4:e8:ae:27:15:ed:be:78:61:63:37:cd:93:55:7b: e9:47:a4:3d:6d:d1:97:ba:fb:53:21:11:b8:aa:9c:ff:88:7a: e2:76:1b:af:98:88:00:87:9b:c3:22:78:45:43:5d:50:9b:ab: d3:b2:83:f4:24:95:52:b2:96:70:ef:0f:68:5a:c1:6f:d8:1a: 80:7e:f6:8d:9f:08:48:65:ab:17:7d:13:a1:bb:0c:45:de:2c: 43:e9:30:fc:e6:da:a5:17:80:d0:f7:ee:d2:a5:ad:0a:df:9b: c1:6b:8d:7f:3a:42:e5:2f:a9:89:7a:f7:ba:4a:9f:fb:9e:20: 2d:86:b0:9b:64:3f:6e:49:c7:66:c0:b8:f4:89:67:9f:04:18: ab:e4:b5:d4:2f:c1:0e:b2:c5:c7:3b:e5:75:52:20:7e:1e:83: 3a:38:08:ce:2c:5b:7e:0e:0f:31:0a:67:4a:96:24:e7:f9:93: af:73:72:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGKOTcXXaX9dbTWQFsBA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2E2NDc3ZGQ5NzBjOTRiMmExN2I1MjUwMjk4MmQ0ZmM3 NWIyNDQwHhcNMjYwMTI1MDMwMDM2WhcNMjYwMTI2MDMwMDM2WjAzMTEwLwYDVQQD EygxZWZhMmI1N2YyMTRiMWUzZDIzYjY4NTEwMTEwYjQ3ODJiNTQ1MWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nhf1pB4OzVBPPPRHxu4fs0msd11 asKP1oEpRCc0JhR23tqKEihiWJCy0WKAB8rNoK0CC9iXLDIBOJhBYmvDoOZXBwSq ixLOe6wqIoq7yFpTZYjklOm/pdbNvOB040r4WXJzaobkymJLMioBt9N1cSYrz0Yo p6XKBriXguwak61BzZ6zhgI8OGBN40T/uhCsH9MEsr8kfi/HdOq47ppPCFkBnaol SoORiGHY3vZ3U2adZnL+RrbeAGAvIey/BvgjMznvwvx2l3lfrXWpUg6XVmpCRPob rQle9HY/P7gAfSgMB07uYdT7jEAKy7jDljsIsh0mzP+iYJDRfv65jNtZ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB76K1fyFLHj0jtoUQEQtHgrVFHOMB8GA1UdIwQY MBaAFJl6ZHfdlwyUsqF7UlApgtT8dbJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMt Mjg1NzQ1NjQ3ZjVmLzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMtMjg1NzQ1NjQ3ZjVm LzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+L2eCLE TUIQ1bSVSTgFaG5hGj8X7xDUY/n2rUHuFIeC8MgkjIYBU6cn1QrYLGLByKaN0Ibe ea3OpcrFyFFbmiZambNQWH8yVm9f9OiuJxXtvnhhYzfNk1V76UekPW3Rl7r7UyER uKqc/4h64nYbr5iIAIebwyJ4RUNdUJur07KD9CSVUrKWcO8PaFrBb9gagH72jZ8I SGWrF30TobsMRd4sQ+kw/ObapReA0Pfu0qWtCt+bwWuNfzpC5S+piXr3ukqf+54g LYawm2Q/bknHZsC49IlnnwQYq+S11C/BDrLFxzvldVIgfh6DOjgIzixbfg4PMQpn SpYk5/mTr3NyXA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:42:45 2026 by rpki-client