This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json) Hash identifier: vUX7Xfpi5+MTYda6qtwDjjzLhAxCE2Gj8T/k9cTMmLQ= Subject key identifier: 19:E6:44:2E:17:E0:8B:9C:39:B7:4A:4B:D2:F5:D7:29:F9:65:EE:E2 Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba Certificate serial: 019BF72D81C4F1C3DB56BF2DD49D173F234A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft Manifest number: 15C0 Signing time: Sun 25 Jan 2026 22:01:53 +0000 Manifest this update: Sun 25 Jan 2026 22:01:53 +0000 Manifest next update: Mon 26 Jan 2026 22:01:53 +0000 Files and hashes: 1: KDQ-cFcPwQDy3bGFF_WSaIsvNNQ.roa (hash: nE15hquAwl/5m54NEuxKdixrl7Q9eNfNpFSjwL6hasY=) 2: ekbIvq4xoQE_G2aZ6OBWbjCke00.roa (hash: CDCAAwMBxMHZc9k/9U2grgMxj6swO3W7TTk/XqEYqRY=) 3: m7QfGcH9ehj8zUctNJKORHfF7YQ.roa (hash: jEz2eC4AxW2xJSso0f7640cBfazPEGudZTNrPpOM8vo=) 4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: a9bj5lFeAyq4pOLOEHLqsMqQhfm0JagKXzckynOLQ1M=) 5: xXThYeFskZa8CsEFNdXzq9WOPuU.roa (hash: cncRVt5HZa39EbyA1UHTjl7763HCDtgzdQM7tatOGC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:81:c4:f1:c3:db:56:bf:2d:d4:9d:17:3f:23:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba Validity Not Before: Jan 25 22:01:53 2026 GMT Not After : Jan 26 22:01:53 2026 GMT Subject: CN=19e6442e17e08b9c39b74a4bd2f5d729f965eee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:7b:2d:df:0e:99:23:c7:3b:8c:b9:70:d9: cf:17:19:24:9d:24:f3:29:8e:95:3a:1f:48:62:2c: ac:8c:61:61:ea:a2:e6:c7:5c:04:dd:78:bf:ca:d0: c2:8c:a2:21:b7:ec:38:42:17:25:4d:b3:cf:73:49: e5:81:e9:a1:a0:c1:f9:70:a6:c8:58:25:20:e7:38: cf:21:12:7c:db:10:e4:d2:03:4d:2f:d4:bb:56:7e: 02:62:c8:99:2d:e0:87:ce:6d:3e:c5:04:58:61:38: ab:bc:87:5e:60:e8:ff:c8:2a:ef:f0:96:1a:29:58: 11:37:5d:7a:37:69:19:1e:6c:1a:cc:a8:ea:c5:bf: f7:65:38:00:db:38:4e:61:31:cf:0a:f7:3e:c5:fa: be:bd:58:7e:b2:dc:00:4e:d8:84:03:43:3b:11:0a: fc:0c:cc:1e:dc:00:70:a7:ce:63:55:c3:ec:d5:42: bb:82:28:bf:40:b0:fb:33:0c:a2:ef:ae:4a:b9:ee: 75:d0:9d:64:66:d2:e3:8f:bb:42:a0:87:7e:9c:4e: d7:14:d8:a4:1c:2d:9a:9f:70:dc:53:80:7d:d8:d7: 95:92:2e:00:f6:6c:3b:1c:0d:f8:70:8e:b4:be:80: 84:e9:97:a5:d6:4e:cd:c1:77:bb:38:a6:37:97:f9: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:44:2E:17:E0:8B:9C:39:B7:4A:4B:D2:F5:D7:29:F9:65:EE:E2 X509v3 Authority Key Identifier: keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9a:45:63:40:e2:bb:9e:1f:28:20:f9:3b:fa:09:c2:a4:19: 52:ff:7d:8e:b4:45:cb:a7:84:d5:e5:96:72:88:f9:81:ef:2f: a3:13:d1:44:c5:af:69:83:86:16:06:a5:01:1a:cd:62:06:70: 83:0e:1c:e3:72:cb:1b:e1:71:60:65:2e:aa:eb:e8:0a:39:01: 86:a2:ed:02:e4:15:b9:9f:71:e5:d0:3a:6e:da:8f:cc:b6:30: 7c:99:9c:5c:b7:17:bc:8e:53:2d:4a:87:9c:74:b7:e7:35:00: 0d:30:a6:08:98:70:a0:3d:38:9f:28:4b:60:1a:ca:cb:53:f1: 9b:6d:b1:f0:49:99:28:ec:f6:dc:f8:6e:6f:e5:f9:f4:71:90: 39:f5:8d:39:7b:10:ba:5e:ef:be:22:b2:a5:b0:2e:ea:41:ed: 6a:a9:ec:94:e6:eb:db:10:d4:9b:95:90:4a:91:be:38:92:35: 8d:46:38:73:3b:4a:6d:ba:b4:40:be:5b:46:2e:9f:ad:7c:9d: 80:b3:50:fd:17:84:49:0a:b7:0e:5a:19:0b:af:c7:62:63:45: de:83:30:6f:dc:25:a3:ca:69:92:13:f9:51:97:8f:97:49:b2: 07:24:32:12:87:89:ce:cb:df:c9:99:7f:c4:35:85:d7:fc:3a: 11:54:b9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYHE8cPbVr8t1J0XPyNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWNjMGQ1OGIxNmFkYmJmN2ZhNWMyZmRiYzM2NTlmOWM3 M2M3YmEwHhcNMjYwMTI1MjIwMTUzWhcNMjYwMTI2MjIwMTUzWjAzMTEwLwYDVQQD EygxOWU2NDQyZTE3ZTA4YjljMzliNzRhNGJkMmY1ZDcyOWY5NjVlZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXZ7Ld8OmSPHO4y5cNnPFxkknSTz KY6VOh9IYiysjGFh6qLmx1wE3Xi/ytDCjKIht+w4QhclTbPPc0nlgemhoMH5cKbI WCUg5zjPIRJ82xDk0gNNL9S7Vn4CYsiZLeCHzm0+xQRYYTirvIdeYOj/yCrv8JYa KVgRN116N2kZHmwazKjqxb/3ZTgA2zhOYTHPCvc+xfq+vVh+stwATtiEA0M7EQr8 DMwe3ABwp85jVcPs1UK7gii/QLD7Mwyi765Kue510J1kZtLjj7tCoId+nE7XFNik HC2an3DcU4B92NeVki4A9mw7HA34cI60voCE6Zel1k7NwXe7OKY3l/m2QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnmRC4X4IucObdKS9L11yn5Ze7iMB8GA1UdIwQY MBaAFKccwNWLFq279/pcL9vDZZ+cc8e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt ZGU2NDBkMDEyMDY1LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1 LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMppFY0Di u54fKCD5O/oJwqQZUv99jrRFy6eE1eWWcoj5ge8voxPRRMWvaYOGFgalARrNYgZw gw4c43LLG+FxYGUuquvoCjkBhqLtAuQVuZ9x5dA6btqPzLYwfJmcXLcXvI5TLUqH nHS35zUADTCmCJhwoD04nyhLYBrKy1Pxm22x8EmZKOz23Phub+X59HGQOfWNOXsQ ul7vviKypbAu6kHtaqnslObr2xDUm5WQSpG+OJI1jUY4cztKbbq0QL5bRi6frXyd gLNQ/ReESQq3DloZC6/HYmNF3oMwb9wlo8ppkhP5UZePl0myByQyEoeJzsvfyZl/ xDWF1/w6EVS5nA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:56 2026 by rpki-client