This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json) Hash identifier: 8eyzUjspISmw3K4mqcnG705zM78jG8UzYRTcV6ywJAs= Subject key identifier: 4C:78:71:70:6B:29:03:57:FE:52:BD:99:DB:61:34:0E:2E:26:23:0F Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c Certificate serial: 019BDA34D533D207B459192AC8E70680DB81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft Manifest number: 17DA Signing time: Tue 20 Jan 2026 07:00:54 +0000 Manifest this update: Tue 20 Jan 2026 07:00:54 +0000 Manifest next update: Wed 21 Jan 2026 07:00:54 +0000 Files and hashes: 1: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: 4OUsxJu0nCNA+Y8dFap77NqGfSbs2td8Mc/blZ/HspI=) 2: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=) 3: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:34:d5:33:d2:07:b4:59:19:2a:c8:e7:06:80:db:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c Validity Not Before: Jan 20 07:00:54 2026 GMT Not After : Jan 21 07:00:54 2026 GMT Subject: CN=4c7871706b290357fe52bd99db61340e2e26230f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:c9:49:18:90:aa:8d:94:f0:d2:48:ec:f6: ea:63:c5:dc:97:35:a3:6d:9f:92:c2:7e:7e:70:77: 13:c4:be:d0:cd:a0:16:7d:3f:46:c6:09:35:66:2d: 0e:04:d4:df:1d:6e:88:31:4f:f4:4f:78:40:6b:86: 14:51:8b:0e:4a:fd:82:2a:7e:c8:8c:91:2f:41:43: b7:07:3d:16:2d:ff:f9:3d:94:17:38:aa:67:01:41: 40:e4:b5:7f:f2:21:cb:b4:52:e9:ee:65:38:88:3e: 95:bd:95:80:15:d1:d9:a8:20:33:59:3b:a7:85:38: cc:7a:e8:3e:47:0d:d6:a4:52:28:2d:b2:21:cc:09: a4:e2:60:0f:5b:ec:0c:f2:21:96:63:7e:d3:87:4c: 4f:e7:1c:97:1a:ff:86:98:e9:86:f7:3f:95:61:f4: 9c:cf:98:36:c7:22:fb:d2:02:45:eb:0a:2b:d5:0b: 69:ef:4e:65:f7:17:04:e6:56:16:ba:0e:66:50:1e: 2b:d5:db:9f:f5:4f:d3:4a:3a:1f:4e:fc:88:f3:01: 89:45:18:01:0b:f4:43:8e:71:43:f0:74:79:52:9e: e4:ba:4c:a5:0d:31:8d:ed:ed:e9:2f:80:f7:79:c9: 9b:fe:d6:95:b5:75:e3:ed:7a:1c:b8:ef:92:12:3f: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:78:71:70:6B:29:03:57:FE:52:BD:99:DB:61:34:0E:2E:26:23:0F X509v3 Authority Key Identifier: keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:86:66:df:01:64:b4:61:dd:5b:db:6a:5b:b4:6c:74:fd:fb: 21:f1:3e:f1:54:69:f9:5f:24:20:10:fb:f4:e6:6d:d5:01:be: 3c:39:21:33:ec:f7:21:d5:fc:1b:23:10:25:ba:20:94:80:54: 46:5f:34:f6:5e:29:8d:62:d2:97:60:9c:65:a8:92:c6:35:1c: dc:cc:d0:ae:01:0e:25:17:52:dd:bc:c3:04:d8:94:2c:d4:e4: c6:e9:4a:79:16:57:04:6a:ae:9f:7e:33:df:07:25:7e:b1:66: 2f:9d:d3:61:bc:f1:c0:22:3f:be:05:08:82:c6:54:6e:fa:87: 6b:5e:c6:2d:4a:f6:fd:cd:8b:24:a8:57:c8:b7:7c:7c:7a:a4: c0:64:d9:8a:7b:48:75:b7:0a:81:63:bd:98:f9:86:7e:68:ee: 4e:4d:f3:5d:dd:d7:47:ce:47:b3:09:fe:42:ba:63:f8:93:a3: 28:72:16:c4:6a:36:11:17:17:25:db:e3:17:79:90:39:90:0d: ed:df:d8:47:c8:93:cd:71:d4:e2:da:8a:a0:b0:fd:ba:d2:0e: 37:8f:b5:80:c6:e0:19:fa:5f:d0:9a:f9:af:86:49:fb:3f:47: 26:95:f7:0b:d7:ae:ac:85:fe:8f:f7:b3:66:17:42:e3:19:e5: e2:62:de:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvaNNUz0ge0WRkqyOcGgNuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOWM2NzI5ZTFlODk4OTk4NGRkODAyZDFhOTBlODljZTJm ZTM3M2MwHhcNMjYwMTIwMDcwMDU0WhcNMjYwMTIxMDcwMDU0WjAzMTEwLwYDVQQD Eyg0Yzc4NzE3MDZiMjkwMzU3ZmU1MmJkOTlkYjYxMzQwZTJlMjYyMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfbJSRiQqo2U8NJI7PbqY8XclzWj bZ+Swn5+cHcTxL7QzaAWfT9Gxgk1Zi0OBNTfHW6IMU/0T3hAa4YUUYsOSv2CKn7I jJEvQUO3Bz0WLf/5PZQXOKpnAUFA5LV/8iHLtFLp7mU4iD6VvZWAFdHZqCAzWTun hTjMeug+Rw3WpFIoLbIhzAmk4mAPW+wM8iGWY37Th0xP5xyXGv+GmOmG9z+VYfSc z5g2xyL70gJF6wor1Qtp705l9xcE5lYWug5mUB4r1duf9U/TSjofTvyI8wGJRRgB C/RDjnFD8HR5Up7kukylDTGN7e3pL4D3ecmb/taVtXXj7XocuO+SEj+h8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEx4cXBrKQNX/lK9mdthNA4uJiMPMB8GA1UdIwQY MBaAFNqcZynh6JiZhN2ALRqQ6Jzi/jc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQt NjljNjhlMmVmMjdkLzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83NTVjNTUtYzRmNS00Y2I3LTg3MWQtNjljNjhlMmVmMjdk LzEvMnB4bktlSG9tSm1FM1lBdEdwRG9uT0wtTnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4Zm3wFk tGHdW9tqW7RsdP37IfE+8VRp+V8kIBD79OZt1QG+PDkhM+z3IdX8GyMQJboglIBU Rl809l4pjWLSl2CcZaiSxjUc3MzQrgEOJRdS3bzDBNiULNTkxulKeRZXBGqun34z 3wclfrFmL53TYbzxwCI/vgUIgsZUbvqHa17GLUr2/c2LJKhXyLd8fHqkwGTZintI dbcKgWO9mPmGfmjuTk3zXd3XR85Hswn+Qrpj+JOjKHIWxGo2ERcXJdvjF3mQOZAN 7d/YR8iTzXHU4tqKoLD9utION4+1gMbgGfpf0Jr5r4ZJ+z9HJpX3C9eurIX+j/ez ZhdC4xnl4mLejQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:16 2026 by rpki-client