This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json) Hash identifier: mMhuYVmlolvqzARMxg6NCrKyflxkJ4CcHPUUgDobBQk= Subject key identifier: 39:17:D8:E8:31:10:28:94:64:8F:AE:1C:80:FB:A9:51:8E:A9:75:0C Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Certificate serial: 019BF8ADAD960628AC3E1DC62647F7805CCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft Manifest number: 014F Signing time: Mon 26 Jan 2026 05:01:29 +0000 Manifest this update: Mon 26 Jan 2026 05:01:29 +0000 Manifest next update: Tue 27 Jan 2026 05:01:29 +0000 Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=) 2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=) 3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: XElxRQUSrTt8wSdXhFxj6/H3I8UYfVu1yn3QsEdyH8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:ad:96:06:28:ac:3e:1d:c6:26:47:f7:80:5c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Validity Not Before: Jan 26 05:01:29 2026 GMT Not After : Jan 27 05:01:29 2026 GMT Subject: CN=3917d8e831102894648fae1c80fba9518ea9750c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f5:fc:17:96:8c:f2:b4:c3:bd:a3:b5:cd:e9: cf:63:ce:bf:2a:48:2a:4d:bf:46:a8:7c:ee:9d:5d: 91:ca:e4:76:0b:bc:26:0b:ef:89:a3:a6:32:1e:5d: de:7f:0d:42:6e:ea:26:01:bb:fb:e1:33:0b:b9:bd: a7:81:58:82:b2:6e:11:4a:cd:6e:d7:2b:65:2e:3b: 92:09:a5:c6:76:d8:a0:0d:8f:31:e6:d6:6b:5e:9f: c8:11:2e:a1:7a:0b:60:e4:8e:66:4a:68:0a:62:dc: 87:44:12:e3:56:25:24:ec:5f:6e:f0:a5:7e:14:72: 0a:da:c4:f0:36:99:56:f4:13:6d:67:fd:b9:0f:4f: a6:34:f2:f5:8b:a9:66:8e:21:ce:5d:66:b1:fb:7a: 15:57:e7:5a:a8:88:e8:89:1c:c6:72:5b:2c:31:a3: 9a:1f:6f:3f:5e:b3:cc:49:d8:61:9e:cd:35:4e:fc: fb:8e:45:e8:be:b3:59:24:d2:5e:c5:4b:e8:c0:d6: d3:5b:c9:63:ee:ad:6b:4e:c6:70:93:ff:ca:6d:43: 07:f4:98:7a:46:a1:14:7a:52:7f:e2:dd:a1:c0:f3: 63:67:15:d1:25:0e:08:09:2b:7b:f8:99:fd:86:d5: d9:48:e3:b4:be:29:24:71:b4:fc:31:58:c5:68:4a: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:D8:E8:31:10:28:94:64:8F:AE:1C:80:FB:A9:51:8E:A9:75:0C X509v3 Authority Key Identifier: keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:54:18:ee:a8:e2:f2:86:b0:56:7c:64:ff:4d:3d:a8:26:c1: 82:29:87:27:8d:ab:e9:6b:61:40:b8:77:b9:84:cc:f4:39:1d: b4:b0:5e:00:46:b0:5e:36:61:48:ab:76:3f:ca:d9:8b:31:09: cd:1b:16:06:42:1b:80:f1:a7:a6:cd:dc:f2:99:bd:f6:dc:4d: 29:e4:dd:1a:89:a1:82:91:72:19:99:65:05:73:51:46:90:bc: 31:a5:7d:df:a3:90:90:da:bf:5d:e5:e3:73:cb:c4:ff:dc:91: b9:9a:e1:49:78:de:a0:11:c4:b8:6e:50:9e:e0:1b:b8:4b:33: 22:ee:cb:e6:8d:13:95:29:47:cd:8a:93:94:23:1f:11:e2:cf: 3d:d8:2e:6a:d8:ab:cb:33:ee:2e:c1:ce:4b:24:f2:7f:a3:11: c5:64:5c:7b:ba:e3:b1:13:72:dd:cf:22:03:3b:33:5f:47:65: 6a:7c:2d:69:42:8e:0e:bc:32:09:84:c7:0b:f5:43:42:f0:a4: ed:f2:af:30:d6:38:4a:72:c0:26:cf:b7:d3:06:b5:45:0c:c9: 19:a1:ea:c7:b4:23:67:23:49:72:29:62:2e:a3:e1:68:19:b4: 40:31:f2:22:27:bf:8f:8d:01:cd:9d:16:9f:bc:9f:23:82:65: 68:a4:e2:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4ra2WBiisPh3GJkf3gFzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl M2E2OGMwHhcNMjYwMTI2MDUwMTI5WhcNMjYwMTI3MDUwMTI5WjAzMTEwLwYDVQQD EygzOTE3ZDhlODMxMTAyODk0NjQ4ZmFlMWM4MGZiYTk1MThlYTk3NTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fX8F5aM8rTDvaO1zenPY86/Kkgq Tb9GqHzunV2RyuR2C7wmC++Jo6YyHl3efw1CbuomAbv74TMLub2ngViCsm4RSs1u 1ytlLjuSCaXGdtigDY8x5tZrXp/IES6hegtg5I5mSmgKYtyHRBLjViUk7F9u8KV+ FHIK2sTwNplW9BNtZ/25D0+mNPL1i6lmjiHOXWax+3oVV+daqIjoiRzGclssMaOa H28/XrPMSdhhns01Tvz7jkXovrNZJNJexUvowNbTW8lj7q1rTsZwk//KbUMH9Jh6 RqEUelJ/4t2hwPNjZxXRJQ4ICSt7+Jn9htXZSOO0vikkcbT8MVjFaEqStQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkX2OgxECiUZI+uHID7qVGOqXUMMB8GA1UdIwQY MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt MjQyMDFjMjUyOThmLzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlQY7qji 8oawVnxk/009qCbBgimHJ42r6WthQLh3uYTM9DkdtLBeAEawXjZhSKt2P8rZizEJ zRsWBkIbgPGnps3c8pm99txNKeTdGomhgpFyGZllBXNRRpC8MaV936OQkNq/XeXj c8vE/9yRuZrhSXjeoBHEuG5QnuAbuEszIu7L5o0TlSlHzYqTlCMfEeLPPdguatir yzPuLsHOSyTyf6MRxWRce7rjsRNy3c8iAzszX0dlanwtaUKODrwyCYTHC/VDQvCk 7fKvMNY4SnLAJs+30wa1RQzJGaHqx7QjZyNJciliLqPhaBm0QDHyIie/j40BzZ0W n7yfI4JlaKTiIg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:40 2026 by rpki-client