This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json) Hash identifier: Q+3sMJt8nccbD7ZB6fdg5ByQDnmC4Kfd0HSWCdr4FHc= Subject key identifier: 42:D0:EF:91:7A:BA:5A:2B:F5:FC:AF:92:1C:2C:4F:72:92:29:B1:BA Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d Certificate serial: 019BAE3890E963AE6C5A0FA3F69CFDA211DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft Manifest number: 1278 Signing time: Sun 11 Jan 2026 18:01:41 +0000 Manifest this update: Sun 11 Jan 2026 18:01:41 +0000 Manifest next update: Mon 12 Jan 2026 18:01:41 +0000 Files and hashes: 1: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: BCnZa6asFGYo0afPXeYCDVl5w4XBggSe2gQW6Ic4wgM=) 2: qJDNQCIShiElkTydihRoQ4bZNh8.roa (hash: boKmhzMkJFM950qaKYC/IewwayfQB6vcVhEgjzqGKmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:90:e9:63:ae:6c:5a:0f:a3:f6:9c:fd:a2:11:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d Validity Not Before: Jan 11 18:01:41 2026 GMT Not After : Jan 12 18:01:41 2026 GMT Subject: CN=42d0ef917aba5a2bf5fcaf921c2c4f729229b1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:e9:05:9d:f7:dc:c9:08:84:f8:d4:2a:41: 8f:a4:56:4a:1e:f7:18:b9:66:52:3f:f4:7f:e7:13: 64:a1:96:e2:b2:40:5f:f6:80:bd:f2:e9:37:7d:9f: cb:97:ff:1d:9f:22:7d:92:80:4b:5a:02:0d:c2:c5: 6f:36:15:79:c3:06:c9:c5:75:5a:c9:fb:44:03:e4: 4f:5b:f0:00:4b:da:b9:f8:ba:99:40:de:08:28:60: a2:b5:dd:00:ee:8a:bd:82:1a:63:e7:0e:48:44:0d: 9a:63:2b:e0:6e:b5:33:82:b8:b5:8d:4f:85:5b:15: a6:ee:59:82:94:0d:95:0f:40:46:9a:8f:77:ff:e9: a6:ca:8b:43:36:1e:23:a9:80:70:1c:4a:9d:06:d4: 6f:28:30:f2:db:eb:d7:29:1e:e5:f8:b0:7c:b1:c6: 3b:e9:ea:d9:90:13:41:6c:cb:0a:0c:1e:8e:45:ec: 1c:e6:31:fa:63:0c:b7:85:cc:dd:dd:75:a2:ea:51: a0:ba:37:ae:b6:4a:c7:f9:97:e5:4e:a0:2e:9e:11: be:8a:2d:bf:02:7b:22:f2:67:07:3f:4c:9c:e7:ee: 7e:09:dc:4b:3e:3e:92:e8:9e:cd:04:87:f8:7f:2e: 3a:7b:7e:13:87:6f:ba:b4:9b:ba:51:dc:1e:77:de: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D0:EF:91:7A:BA:5A:2B:F5:FC:AF:92:1C:2C:4F:72:92:29:B1:BA X509v3 Authority Key Identifier: keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:24:36:43:7f:5c:b6:1c:ee:73:82:3d:f4:37:d9:f5:3d:87: 96:9c:f9:9d:2c:52:35:62:24:3e:f8:a7:e1:20:b8:cf:5f:6b: 99:d4:e9:02:43:fe:8d:ab:3f:d6:29:1e:c4:b4:c6:a5:a6:6c: 16:8f:24:41:19:9c:b0:bf:e4:f1:b5:95:89:6f:a9:79:b3:a7: 7f:01:b8:82:c3:05:9f:52:fa:d6:b3:4f:e7:c9:1c:51:72:f8: 95:21:9b:1b:84:08:85:58:8d:d9:fb:71:7a:93:a9:22:4e:48: 74:c1:55:90:7c:f3:20:9f:a3:17:14:2f:3c:77:f9:ff:6f:e0: 04:2f:f7:73:b0:7f:7f:b0:ef:67:d5:09:64:99:10:1a:12:5b: 35:fe:50:f4:3a:31:a9:d4:ea:f5:fb:b8:6c:87:b7:80:3a:08: b0:03:6d:c6:0b:23:6b:f3:04:30:cf:ad:f4:88:e9:62:20:41: c4:8e:93:f6:b8:bc:64:fc:32:64:ca:2b:b2:02:26:f0:a0:a2: cd:68:77:1f:f5:cb:0d:1d:c7:2f:89:aa:2d:42:eb:8a:bd:99: a2:0b:62:28:a0:03:01:41:e7:b0:bf:fb:4e:a3:cd:d4:49:52: 44:4a:ae:d8:74:c5:dc:ef:4b:70:37:23:f0:17:f7:6a:eb:ee: 2f:37:3b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOJDpY65sWg+j9pz9ohHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NzBkMjhmYzQ5YWEwYWU4MDhjMzgzZjU4N2YzZWE0Y2Zl YjA0OWQwHhcNMjYwMTExMTgwMTQxWhcNMjYwMTEyMTgwMTQxWjAzMTEwLwYDVQQD Eyg0MmQwZWY5MTdhYmE1YTJiZjVmY2FmOTIxYzJjNGY3MjkyMjliMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6LpBZ333MkIhPjUKkGPpFZKHvcY uWZSP/R/5xNkoZbiskBf9oC98uk3fZ/Ll/8dnyJ9koBLWgINwsVvNhV5wwbJxXVa yftEA+RPW/AAS9q5+LqZQN4IKGCitd0A7oq9ghpj5w5IRA2aYyvgbrUzgri1jU+F WxWm7lmClA2VD0BGmo93/+mmyotDNh4jqYBwHEqdBtRvKDDy2+vXKR7l+LB8scY7 6erZkBNBbMsKDB6ORewc5jH6Ywy3hczd3XWi6lGgujeutkrH+ZflTqAunhG+ii2/ Ansi8mcHP0yc5+5+CdxLPj6S6J7NBIf4fy46e34Th2+6tJu6Udwed95crwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELQ75F6ulor9fyvkhwsT3KSKbG6MB8GA1UdIwQY MBaAFEVw0o/EmqCugIw4P1h/PqTP6wSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjct ZWIwNzM3OTdhYzY2LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjctZWIwNzM3OTdhYzY2 LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCQ2Q39c thzuc4I99DfZ9T2Hlpz5nSxSNWIkPvin4SC4z19rmdTpAkP+jas/1ikexLTGpaZs Fo8kQRmcsL/k8bWViW+pebOnfwG4gsMFn1L61rNP58kcUXL4lSGbG4QIhViN2ftx epOpIk5IdMFVkHzzIJ+jFxQvPHf5/2/gBC/3c7B/f7DvZ9UJZJkQGhJbNf5Q9Dox qdTq9fu4bIe3gDoIsANtxgsja/MEMM+t9IjpYiBBxI6T9ri8ZPwyZMorsgIm8KCi zWh3H/XLDR3HL4mqLULrir2ZogtiKKADAUHnsL/7TqPN1ElSREqu2HTF3O9LcDcj 8Bf3auvuLzc7Zw== -----END CERTIFICATE-----Generated at Sun Jan 11 21:07:18 2026 by rpki-client