This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json) Hash identifier: LcqYZH8K5jqbW0C6xEBYeGsX7Hmud5rKzMgdRLtKgH0= Subject key identifier: 9F:5B:74:4E:2F:41:FB:B5:E7:0B:9C:0A:3B:EE:75:24:CC:4A:95:24 Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019BCF79F0CCC2DD8BCABDA7C8B678BB8271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft Manifest number: 111C Signing time: Sun 18 Jan 2026 05:00:33 +0000 Manifest this update: Sun 18 Jan 2026 05:00:33 +0000 Manifest next update: Mon 19 Jan 2026 05:00:33 +0000 Files and hashes: 1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=) 2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=) 3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=) 4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=) 5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: /IVwoSCKIpdPcGGIJi5vUWJcuFU0Pbc7OF91u2wePUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:79:f0:cc:c2:dd:8b:ca:bd:a7:c8:b6:78:bb:82:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Jan 18 05:00:33 2026 GMT Not After : Jan 19 05:00:33 2026 GMT Subject: CN=9f5b744e2f41fbb5e70b9c0a3bee7524cc4a9524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:de:5e:3c:c8:7b:ef:20:40:d3:a8:09:da: b1:3e:7d:a6:6a:94:e8:4e:77:c6:ba:55:d3:0d:2f: 6d:7c:fc:19:05:c8:50:fe:ed:d5:0c:08:6e:95:58: 33:f3:56:93:27:d9:bc:8b:8c:73:f1:f0:b2:03:9c: 07:14:83:24:96:be:34:24:3e:cd:a4:db:f7:1b:f0: c3:f9:b9:f4:40:6d:75:82:63:a1:95:03:bd:92:f3: 02:8c:20:f0:61:ec:cf:a3:91:0f:73:15:dc:50:58: 55:63:f1:8a:ff:2f:a8:0b:8f:eb:f8:3f:70:51:b7: 3f:1a:86:42:d6:b2:89:9a:4e:2c:4f:d4:3e:a1:1b: eb:8c:fe:20:60:f2:1f:65:96:46:8a:30:b8:17:69: 8c:74:88:29:0b:9b:0c:87:d7:d6:58:2b:90:cc:99: b3:bf:b3:8d:85:01:04:38:fe:83:6b:05:72:fc:45: 45:ec:a5:65:40:9d:42:81:cc:25:0b:4e:6b:5e:eb: 6e:6d:92:4f:db:52:20:f5:7d:4d:50:01:91:8c:39: fe:ff:f5:38:86:1e:06:75:cc:75:bc:7c:76:fd:27: 16:8e:16:49:4a:a6:49:63:04:6b:ca:fd:e1:14:1f: 37:55:70:58:e9:cb:49:21:0a:5d:20:24:cc:25:6a: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5B:74:4E:2F:41:FB:B5:E7:0B:9C:0A:3B:EE:75:24:CC:4A:95:24 X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:09:fc:5a:28:b7:9c:b3:aa:86:dc:6f:89:db:04:cb:4c:35: ca:1b:66:3d:fe:da:e4:2c:76:b8:21:a9:52:47:27:d4:78:e9: 78:d1:9a:e3:39:4d:d0:83:72:6b:a5:5c:f3:17:d8:90:38:9a: 99:5a:54:73:4e:6e:5b:38:28:8f:b5:e6:b8:45:b6:07:21:e9: fe:62:ed:69:d7:c7:5e:10:d3:ee:1f:e4:7f:1d:49:bb:a1:04: 3f:1f:cb:f9:ac:71:63:19:88:19:49:3f:de:4d:86:f4:06:3e: 23:7f:6a:a9:04:03:0a:af:86:09:df:36:34:3e:bf:ba:aa:94: 95:60:51:cd:1a:c7:0c:fd:0b:20:16:53:ad:87:69:59:4f:51: 80:09:88:b8:42:f0:f7:b6:42:0e:22:cf:e1:28:3a:5d:f9:fb: 25:25:b0:cf:c8:f8:b5:06:7c:f2:1d:12:55:a1:78:4e:fd:54: 86:31:63:ce:ec:4b:d4:7c:46:c0:20:af:0d:20:38:b9:99:df: 04:09:d0:6c:ab:d0:89:c8:7d:7c:19:1d:1f:ad:ad:be:0b:72: 07:c3:7a:d4:e0:8c:41:ee:f9:70:9a:41:2d:88:45:55:5d:71: 08:06:20:72:fd:08:6c:8e:fb:58:e0:8a:92:9f:7e:9c:7b:fc: 1e:cc:2d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPefDMwt2Lyr2nyLZ4u4JxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjYwMTE4MDUwMDMzWhcNMjYwMTE5MDUwMDMzWjAzMTEwLwYDVQQD Eyg5ZjViNzQ0ZTJmNDFmYmI1ZTcwYjljMGEzYmVlNzUyNGNjNGE5NTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pLeXjzIe+8gQNOoCdqxPn2mapTo TnfGulXTDS9tfPwZBchQ/u3VDAhulVgz81aTJ9m8i4xz8fCyA5wHFIMklr40JD7N pNv3G/DD+bn0QG11gmOhlQO9kvMCjCDwYezPo5EPcxXcUFhVY/GK/y+oC4/r+D9w Ubc/GoZC1rKJmk4sT9Q+oRvrjP4gYPIfZZZGijC4F2mMdIgpC5sMh9fWWCuQzJmz v7ONhQEEOP6DawVy/EVF7KVlQJ1CgcwlC05rXutubZJP21Ig9X1NUAGRjDn+//U4 hh4Gdcx1vHx2/ScWjhZJSqZJYwRryv3hFB83VXBY6ctJIQpdICTMJWoE2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9bdE4vQfu15wucCjvudSTMSpUkMB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQn8Wii3 nLOqhtxvidsEy0w1yhtmPf7a5Cx2uCGpUkcn1HjpeNGa4zlN0INya6Vc8xfYkDia mVpUc05uWzgoj7XmuEW2ByHp/mLtadfHXhDT7h/kfx1Ju6EEPx/L+axxYxmIGUk/ 3k2G9AY+I39qqQQDCq+GCd82ND6/uqqUlWBRzRrHDP0LIBZTrYdpWU9RgAmIuELw 97ZCDiLP4Sg6Xfn7JSWwz8j4tQZ88h0SVaF4Tv1UhjFjzuxL1HxGwCCvDSA4uZnf BAnQbKvQich9fBkdH62tvgtyB8N61OCMQe75cJpBLYhFVV1xCAYgcv0IbI77WOCK kp9+nHv8HswtOQ== -----END CERTIFICATE-----Generated at Sun Jan 18 11:14:28 2026 by rpki-client