This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: dkvGcobz/YJybtYgDm3Co9BoNb/7/Lt0QG75kDQ0Wd8= Subject key identifier: 06:CC:FF:D6:AD:1A:3E:F3:83:04:08:9D:10:0C:C7:F2:F9:5C:DF:16 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019BFC52C263CD5F8A0E3F6422304502E389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 13A7 Signing time: Mon 26 Jan 2026 22:00:40 +0000 Manifest this update: Mon 26 Jan 2026 22:00:40 +0000 Manifest next update: Tue 27 Jan 2026 22:00:40 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: P9iZqoxuCT_faQ_VmOItL5eeI3w.roa (hash: vyjNIFB4l6R6SblkqwaOxyYaaYx/koFd/Fz2EeWD6hY=) 7: Pw_nbjWJOP9tFjLlL6TuUPFhrIg.roa (hash: TrLYpO7jB7Oy0CQoGdlJxP66iYA8T+o+o2EcugMjmRs=) 8: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=) 11: snU0F1xcSWMYFQ2eQd5gZYlccBE.roa (hash: JdJmPKAnAhiR1J0EFD0dsDA9MKwuUlfNp7RQdQdV3Wk=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: W7jsyPRnpkyH35gElKQraPfPGKus73ocuUXpXZYv18w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:c2:63:cd:5f:8a:0e:3f:64:22:30:45:02:e3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 26 22:00:40 2026 GMT Not After : Jan 27 22:00:40 2026 GMT Subject: CN=06ccffd6ad1a3ef38304089d100cc7f2f95cdf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:6c:38:a7:ff:24:67:21:56:84:21:23:4b: e5:77:58:d2:d3:f7:b9:e4:ca:03:c7:16:a5:1d:90: 3c:89:b2:f9:16:7e:4a:35:7c:6b:1b:25:77:ef:ac: 01:6d:56:72:a9:8f:1f:0f:a6:0a:ca:b1:67:4f:b0: d7:cc:2a:0d:09:01:54:eb:8e:c2:58:ca:ba:8c:f8: 0a:11:5e:ea:f7:12:b2:5d:a2:94:66:10:ca:42:a8: dc:3c:5d:11:ff:39:9d:c9:d9:fc:05:40:60:02:00: b1:b7:5a:2f:e0:ca:88:e6:bd:cb:d9:0e:50:e9:76: e8:ba:58:63:a5:db:ff:77:ad:ac:24:44:21:38:38: 90:53:58:b0:11:6b:db:89:29:50:16:a9:ed:9b:ce: 57:84:0e:0c:4b:6e:29:d7:ed:e9:ca:23:24:2a:16: 55:59:fa:1f:d6:a7:52:56:8c:9d:5c:d9:48:ea:da: 2d:30:6e:04:09:22:ed:be:2b:04:bc:1e:7a:05:f7: 70:b9:1b:09:37:35:ab:01:8c:5f:c6:3d:95:57:0a: a1:d4:d0:f1:0c:ca:de:68:98:f0:6a:8a:fc:cf:0a: 46:db:37:e0:bb:24:d1:e6:16:8b:17:d7:e4:c4:61: c7:3e:49:cb:b1:8b:47:59:9c:77:ea:49:71:25:f5: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:FF:D6:AD:1A:3E:F3:83:04:08:9D:10:0C:C7:F2:F9:5C:DF:16 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ce:16:d5:13:bd:ba:63:aa:fb:a1:42:74:07:8d:8d:3f:9d: 1e:16:3f:06:f2:26:75:20:6d:85:00:82:75:12:45:01:40:03: e1:d2:80:1b:40:2c:c9:15:ad:46:64:58:2e:8a:f5:42:cc:44: 24:7f:7c:ff:12:79:99:cf:06:6d:86:f5:04:b2:38:f6:47:63: 6b:8e:a0:c3:a6:22:dc:78:b5:35:1d:f3:98:51:92:37:73:21: 5f:cd:35:7c:88:e8:ff:8d:56:eb:fa:46:19:da:36:ac:12:4c: e7:cc:88:b8:e9:ad:1c:d5:56:fd:bf:40:8e:43:3d:8d:12:62: 85:37:d8:ed:91:c1:0d:3f:e3:4a:4d:eb:57:05:0a:e1:68:0a: 52:ac:97:d8:55:47:85:43:bc:65:41:28:ed:6e:84:68:74:f6: e1:04:b8:1d:8c:bc:05:68:bc:93:60:27:d8:1c:22:13:ea:80: 78:fb:a3:73:0d:07:39:46:36:23:09:09:aa:5e:43:75:e6:53: 38:2e:10:8a:3a:87:ea:26:6e:c8:55:14:bc:c6:9f:a3:0a:7f: 2a:9f:43:14:04:b9:53:90:99:2d:c4:e6:00:25:d4:0e:db:7b: 2f:97:db:46:ff:51:04:12:a0:be:66:8f:52:aa:7d:52:2f:c3: 23:0c:27:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UsJjzV+KDj9kIjBFAuOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTI2MjIwMDQwWhcNMjYwMTI3MjIwMDQwWjAzMTEwLwYDVQQD EygwNmNjZmZkNmFkMWEzZWYzODMwNDA4OWQxMDBjYzdmMmY5NWNkZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlBsOKf/JGchVoQhI0vld1jS0/e5 5MoDxxalHZA8ibL5Fn5KNXxrGyV376wBbVZyqY8fD6YKyrFnT7DXzCoNCQFU647C WMq6jPgKEV7q9xKyXaKUZhDKQqjcPF0R/zmdydn8BUBgAgCxt1ov4MqI5r3L2Q5Q 6Xboulhjpdv/d62sJEQhODiQU1iwEWvbiSlQFqntm85XhA4MS24p1+3pyiMkKhZV Wfof1qdSVoydXNlI6totMG4ECSLtvisEvB56BfdwuRsJNzWrAYxfxj2VVwqh1NDx DMreaJjwaor8zwpG2zfguyTR5haLF9fkxGHHPknLsYtHWZx36klxJfXgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbM/9atGj7zgwQInRAMx/L5XN8WMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP84W1RO9 umOq+6FCdAeNjT+dHhY/BvImdSBthQCCdRJFAUAD4dKAG0AsyRWtRmRYLor1QsxE JH98/xJ5mc8GbYb1BLI49kdja46gw6Yi3Hi1NR3zmFGSN3MhX801fIjo/41W6/pG Gdo2rBJM58yIuOmtHNVW/b9AjkM9jRJihTfY7ZHBDT/jSk3rVwUK4WgKUqyX2FVH hUO8ZUEo7W6EaHT24QS4HYy8BWi8k2An2BwiE+qAePujcw0HOUY2IwkJql5DdeZT OC4QijqH6iZuyFUUvMafowp/Kp9DFAS5U5CZLcTmACXUDtt7L5fbRv9RBBKgvmaP Uqp9Ui/DIwwnZg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:30:09 2026 by rpki-client