This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json) Hash identifier: qJJ+7ayBaA3wcr7W51lKy7gWPINGAoinS8QP1q0RrcQ= Subject key identifier: 45:9F:53:6D:EF:BA:D4:C1:59:1E:D0:B3:86:4D:B4:B2:EA:E5:73:FE Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Certificate serial: 019BF6BEC06B780F01A8D52BC7B7CD89FC83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft Manifest number: 121A Signing time: Sun 25 Jan 2026 20:00:54 +0000 Manifest this update: Sun 25 Jan 2026 20:00:54 +0000 Manifest next update: Mon 26 Jan 2026 20:00:54 +0000 Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: tyXgiBYFun8QT8nBgHTppeoIw2GZK/b+aCTIe/drZBE=) 2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=) 3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=) 4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:c0:6b:78:0f:01:a8:d5:2b:c7:b7:cd:89:fc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Validity Not Before: Jan 25 20:00:54 2026 GMT Not After : Jan 26 20:00:54 2026 GMT Subject: CN=459f536defbad4c1591ed0b3864db4b2eae573fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:a7:da:04:e2:93:ec:20:15:fb:79:a8:92: 43:3f:7d:e5:69:da:88:fd:c4:b1:7e:62:83:2c:98: 29:da:9a:a4:91:47:52:ce:68:d2:dd:37:c1:b6:b5: 90:7f:59:a9:d8:fc:5c:ec:07:35:00:af:29:fa:df: 41:3b:21:f3:3c:26:14:c3:da:04:05:c3:36:da:c3: 43:fb:a2:4b:dc:52:c4:4b:38:3b:e2:60:fc:58:43: dc:bb:ec:83:a6:56:cb:e0:62:48:fc:f0:ad:2f:8d: d0:f2:99:88:09:20:b1:2e:d7:26:0b:8d:54:6b:1a: 26:35:46:c9:96:af:fc:83:75:21:e4:91:8e:71:59: 73:a6:ce:ba:af:b3:bc:9c:64:7a:62:3d:07:8b:7b: 31:ec:7a:d6:19:e6:42:1d:91:a5:e9:16:fc:2f:fe: 44:58:06:9b:5d:4e:e9:f7:cc:04:ff:2f:88:27:c6: 74:10:ad:c4:a5:ac:4a:40:dc:e6:43:98:ce:63:cd: 65:e1:61:ec:d1:9e:24:52:ce:96:71:94:7b:25:69: a7:eb:30:7d:61:85:24:12:79:95:6c:a2:15:f8:6b: 5c:7b:23:5f:96:a3:d1:5b:c1:d6:a9:91:b3:02:1c: 86:23:1e:8b:01:ad:c0:7b:b2:52:d3:3d:55:90:d9: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9F:53:6D:EF:BA:D4:C1:59:1E:D0:B3:86:4D:B4:B2:EA:E5:73:FE X509v3 Authority Key Identifier: keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4e:86:fe:89:69:ca:61:fe:f1:19:53:c3:20:06:36:4a:e9: 2c:f5:05:f6:9a:66:89:4c:4f:78:db:d6:ce:04:43:a3:ff:39: 5a:35:cb:01:5f:78:f3:58:6b:50:11:df:b6:ac:5c:22:bc:63: 9e:99:f3:36:0b:f9:18:89:5c:59:5b:7c:4b:cb:90:be:5e:8e: 60:9d:ff:3b:cd:27:de:c6:33:cf:df:22:0d:1a:cd:64:7f:71: 72:ba:8f:a4:d1:f7:3d:0b:42:e4:14:b3:cd:69:47:49:02:18: 26:12:83:b4:45:f3:36:6e:27:21:01:99:20:2a:77:81:00:80: 3a:4e:f7:89:b2:f0:80:f8:a2:82:31:e0:6e:43:f1:de:c7:a5: e9:d8:92:8a:9a:f2:9d:c3:e3:d4:7d:f1:83:80:89:62:4c:3a: ff:51:0a:fb:eb:6a:97:ba:d2:98:0f:51:8e:d9:b0:33:46:0e: 2d:22:dd:f8:a9:2e:a3:eb:47:a8:ad:9f:19:b5:50:90:50:5f: 33:3b:74:ce:89:18:d7:d3:d0:c3:36:f6:f2:5a:1c:2a:0d:60: 8a:8f:12:21:45:46:04:89:9e:d5:18:35:9e:82:af:b6:6b:77: 5f:7b:d0:88:69:45:a8:77:14:f5:d0:d4:66:7b:ac:e6:5d:f1: 01:c3:d2:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vsBreA8BqNUrx7fNifyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy OWVhMWYwHhcNMjYwMTI1MjAwMDU0WhcNMjYwMTI2MjAwMDU0WjAzMTEwLwYDVQQD Eyg0NTlmNTM2ZGVmYmFkNGMxNTkxZWQwYjM4NjRkYjRiMmVhZTU3M2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pun2gTik+wgFft5qJJDP33ladqI /cSxfmKDLJgp2pqkkUdSzmjS3TfBtrWQf1mp2Pxc7Ac1AK8p+t9BOyHzPCYUw9oE BcM22sND+6JL3FLESzg74mD8WEPcu+yDplbL4GJI/PCtL43Q8pmICSCxLtcmC41U axomNUbJlq/8g3Uh5JGOcVlzps66r7O8nGR6Yj0Hi3sx7HrWGeZCHZGl6Rb8L/5E WAabXU7p98wE/y+IJ8Z0EK3EpaxKQNzmQ5jOY81l4WHs0Z4kUs6WcZR7JWmn6zB9 YYUkEnmVbKIV+GtceyNflqPRW8HWqZGzAhyGIx6LAa3Ae7JS0z1VkNmn4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWfU23vutTBWR7Qs4ZNtLLq5XP+MB8GA1UdIwQY MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1 LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhE6G/olp ymH+8RlTwyAGNkrpLPUF9ppmiUxPeNvWzgRDo/85WjXLAV9481hrUBHftqxcIrxj npnzNgv5GIlcWVt8S8uQvl6OYJ3/O80n3sYzz98iDRrNZH9xcrqPpNH3PQtC5BSz zWlHSQIYJhKDtEXzNm4nIQGZICp3gQCAOk73ibLwgPiigjHgbkPx3sel6diSipry ncPj1H3xg4CJYkw6/1EK++tql7rSmA9RjtmwM0YOLSLd+Kkuo+tHqK2fGbVQkFBf Mzt0zokY19PQwzb28locKg1gio8SIUVGBIme1Rg1noKvtmt3X3vQiGlFqHcU9dDU Znus5l3xAcPSJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:14 2026 by rpki-client