This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft File: m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json) Hash identifier: e7fQjFkP70gzNijlYaUYbY6vh1yQ0FXx+q4NZWUJHbI= Subject key identifier: 3C:98:55:7D:15:45:76:34:7C:9C:E0:3A:9E:77:F1:E0:55:7A:B2:E3 Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Certificate serial: 019BFA2D90BC9421347ECE0B253CA61CA509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft Manifest number: 133D Signing time: Mon 26 Jan 2026 12:00:48 +0000 Manifest this update: Mon 26 Jan 2026 12:00:48 +0000 Manifest next update: Tue 27 Jan 2026 12:00:48 +0000 Files and hashes: 1: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: UvBiSxxc4mtExyZ5gRNW2/drXtbAtht6W5QhFlu5CUY=) 2: wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa (hash: NbvG7X6vkEtFD9/ZukAk8NJl9uOur/Cl3YOKKjQ2YLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:90:bc:94:21:34:7e:ce:0b:25:3c:a6:1c:a5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Validity Not Before: Jan 26 12:00:48 2026 GMT Not After : Jan 27 12:00:48 2026 GMT Subject: CN=3c98557d154576347c9ce03a9e77f1e0557ab2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:de:57:a3:db:b2:ac:12:64:3b:1f:d7:82: 19:5c:91:73:60:4b:87:27:18:5b:a1:20:0e:e4:83: c5:85:a3:87:e5:de:c8:ff:3f:98:88:75:a7:11:ad: ca:98:84:a2:30:ce:2e:93:ae:5d:76:df:99:e8:96: 43:1c:ca:65:c3:c3:d0:b8:dc:a4:7a:34:1f:06:4e: e6:98:1d:c2:02:92:da:52:5b:95:26:73:0b:e7:e9: 0c:40:a6:bb:63:46:28:f6:f1:e8:7c:c8:e6:7b:1b: be:56:cc:d1:5b:ff:29:dc:7a:34:3d:06:57:61:a9: b5:89:12:85:3d:83:7d:2a:a6:65:94:40:b1:d2:7e: 16:8e:bb:19:53:fb:fb:a1:15:91:40:ed:f4:64:61: d3:8c:ed:be:7e:24:9a:2d:fe:42:a7:86:9e:d6:25: ba:0e:d2:f2:dd:91:d2:cc:fd:6f:a9:99:e2:94:da: 45:4d:0c:36:05:cd:0e:64:ef:6e:53:0c:37:e7:77: 46:7e:ea:7e:d6:2b:9a:9e:e6:ff:72:ee:9c:d7:db: 88:a8:78:ac:1b:d5:55:1b:26:2f:f8:40:97:05:16: 74:b6:16:59:e0:5e:2e:cf:a1:69:bb:d9:53:10:3a: 69:3f:f8:80:a4:89:d6:ca:ab:fe:f1:7a:62:7a:55: be:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:98:55:7D:15:45:76:34:7C:9C:E0:3A:9E:77:F1:E0:55:7A:B2:E3 X509v3 Authority Key Identifier: keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fa:33:87:bd:e7:43:db:b4:d5:12:e8:a1:e6:ce:b1:72:ea: cd:68:31:0e:38:13:0e:a8:31:c4:b8:3a:4f:7b:f8:75:0d:58: 93:50:50:85:c8:e6:9e:1d:a8:6e:57:aa:17:42:be:f9:21:54: 44:e3:a5:76:4d:c4:96:38:e0:14:fd:4e:0a:47:e1:8d:a9:94: e1:bc:36:15:91:c7:39:cf:38:b8:41:a0:56:e8:45:66:f8:34: f0:f8:88:a2:4e:f1:4c:fd:be:47:4e:1f:c6:e6:4b:99:fc:38: 81:5b:2c:fd:94:26:ba:26:ce:8a:b8:57:cd:75:93:ee:8a:7c: ff:76:27:d1:9e:f8:f5:a7:7e:96:0e:c3:2b:cd:5b:20:f7:a5: 23:42:0b:9e:73:cb:1c:6c:b4:b9:f1:66:6c:2c:02:ee:a5:29: 4a:03:72:f2:3c:26:8e:30:2e:21:55:19:14:e7:b4:35:5a:20: 2d:b1:3c:65:51:4c:df:12:b2:78:12:8f:8a:55:e1:69:01:94: fb:56:ed:5b:a2:b4:35:36:a1:19:a2:06:02:16:f7:b2:e8:f8: d7:a3:e3:20:e6:62:2b:f9:11:a0:b6:56:e3:8a:8a:9e:26:1a: 2a:76:19:9b:f4:34:5b:bd:c6:a2:55:fd:52:e9:2e:e3:10:ba: 78:92:36:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZC8lCE0fs4LJTymHKUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTQ3MTcxMTJmZWMxMTlmNmNmY2FjZTdjYzQ0MzRmYjQ3 ZGY4ZjUwHhcNMjYwMTI2MTIwMDQ4WhcNMjYwMTI3MTIwMDQ4WjAzMTEwLwYDVQQD EygzYzk4NTU3ZDE1NDU3NjM0N2M5Y2UwM2E5ZTc3ZjFlMDU1N2FiMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I3eV6PbsqwSZDsf14IZXJFzYEuH JxhboSAO5IPFhaOH5d7I/z+YiHWnEa3KmISiMM4uk65ddt+Z6JZDHMplw8PQuNyk ejQfBk7mmB3CApLaUluVJnML5+kMQKa7Y0Yo9vHofMjmexu+VszRW/8p3Ho0PQZX Yam1iRKFPYN9KqZllECx0n4WjrsZU/v7oRWRQO30ZGHTjO2+fiSaLf5Cp4ae1iW6 DtLy3ZHSzP1vqZnilNpFTQw2Bc0OZO9uUww353dGfup+1iuanub/cu6c19uIqHis G9VVGyYv+ECXBRZ0thZZ4F4uz6Fpu9lTEDppP/iApInWyqv+8XpielW+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyYVX0VRXY0fJzgOp538eBVerLjMB8GA1UdIwQY MBaAFJvkcXES/sEZ9s/KznzEQ0+0ffj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQt ZjAzYWM1OWI1YTk3LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQtZjAzYWM1OWI1YTk3 LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPozh73n Q9u01RLooebOsXLqzWgxDjgTDqgxxLg6T3v4dQ1Yk1BQhcjmnh2obleqF0K++SFU ROOldk3EljjgFP1OCkfhjamU4bw2FZHHOc84uEGgVuhFZvg08PiIok7xTP2+R04f xuZLmfw4gVss/ZQmuibOirhXzXWT7op8/3Yn0Z749ad+lg7DK81bIPelI0ILnnPL HGy0ufFmbCwC7qUpSgNy8jwmjjAuIVUZFOe0NVogLbE8ZVFM3xKyeBKPilXhaQGU +1btW6K0NTahGaIGAhb3suj416PjIOZiK/kRoLZW44qKniYaKnYZm/Q0W73GolX9 Uuku4xC6eJI2+A== -----END CERTIFICATE-----Generated at Mon Jan 26 14:47:59 2026 by rpki-client