This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json) Hash identifier: U1vCxAXiOXvuKUs+RX+NTqaNpIk2t0C0FD23a2+8vn8= Subject key identifier: 96:AE:93:9F:42:DC:10:FE:AB:86:14:6A:44:36:CB:DD:14:D6:5A:35 Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270 Certificate serial: 019BF6F5D5D0C8C6BBEDEBB3451B33DF308D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 21:01:04 +0000 Manifest this update: Sun 25 Jan 2026 21:01:04 +0000 Manifest next update: Mon 26 Jan 2026 21:01:04 +0000 Files and hashes: 1: 6LY_I5SzlhFBv9eGnwKkecDyqDs.roa (hash: rY/4K0UyTx9gEr0sURKBlWuNRZZ59rIT1DcPYpDH8zU=) 2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=) 3: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: RmwkUW6TBRciwHKLq8spnrnGuL7Jw00z8sueiS9gQlc=) 4: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (hash: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:d5:d0:c8:c6:bb:ed:eb:b3:45:1b:33:df:30:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270 Validity Not Before: Jan 25 21:01:04 2026 GMT Not After : Jan 26 21:01:04 2026 GMT Subject: CN=96ae939f42dc10feab86146a4436cbdd14d65a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:13:e0:81:14:3d:61:30:bf:d6:36:8d:8b: b9:e5:ba:d5:48:9b:e5:3d:42:7f:8e:e5:34:b8:5f: ca:81:63:eb:2b:ee:ac:d0:21:ee:60:85:96:27:f7: 1c:cc:38:cb:4a:d0:f0:73:c0:c1:5d:64:f2:fd:2a: 78:6f:27:41:47:00:ec:17:8a:e9:57:66:59:89:79: a2:f7:1e:2e:4b:ff:5c:7e:d3:ab:90:4e:99:1e:f4: d0:f4:7d:e3:a6:48:47:ab:3c:f2:5b:98:03:81:a9: 23:dc:c3:e8:21:3c:fc:88:8e:55:5c:4c:e2:34:6e: 05:cc:68:c3:b8:ab:99:75:3a:ab:c8:5e:e3:16:65: c9:87:dd:24:76:c6:e8:3f:a4:bc:c3:5d:40:b6:f0: fe:01:31:dd:13:7f:1c:71:01:be:1a:b0:fc:92:10: cc:13:b0:e4:a8:42:0a:26:e0:81:11:a7:6b:9d:df: d0:3b:7b:a9:30:46:2d:4c:94:29:2f:9e:16:b1:ee: 1c:e2:26:7a:e0:a9:d7:2e:69:77:73:b7:8e:92:6a: f4:7c:e0:e4:84:91:c5:c0:1e:20:13:84:5a:a7:8c: 5b:f5:1c:7a:0c:54:4f:31:2f:fc:85:99:2f:d4:ae: 85:3b:b7:b9:de:ef:4d:1d:e4:de:5a:e1:f9:e0:eb: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AE:93:9F:42:DC:10:FE:AB:86:14:6A:44:36:CB:DD:14:D6:5A:35 X509v3 Authority Key Identifier: keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c7:69:20:c4:84:a5:f4:c4:dc:3b:19:42:9e:33:59:62:1d: f3:6b:9f:a0:36:5a:14:65:ba:7f:f4:9b:87:1a:b7:fc:ba:e8: 73:5c:86:3c:8a:bf:58:f7:ac:a9:9a:07:16:88:a5:dc:d0:4e: 58:24:fd:94:45:27:72:e0:c1:be:bb:1c:86:90:b7:5c:e0:1c: 37:4f:7f:73:7c:dd:ef:0c:c8:e7:06:f7:bb:c3:d8:7b:fb:38: 9d:66:6f:75:b7:de:d0:b3:86:5a:0d:2a:cd:cd:83:5f:d4:21: f1:3d:4b:11:c4:a8:51:02:52:68:05:7f:42:ce:ab:27:34:f9: e8:a6:a4:2f:78:f1:ac:f4:ff:78:e1:10:54:77:75:cb:b1:b2: 83:93:a1:f8:07:6c:5a:84:b1:4f:30:87:a0:d0:12:ed:86:b7: d6:fe:81:a5:96:49:21:ed:8e:5c:63:3a:0e:36:dc:78:c9:90: 2c:59:ca:34:38:c9:60:e0:0a:a1:43:4c:35:5d:ce:d3:ac:95: 4e:c6:61:a3:93:1a:c2:4b:97:ec:e1:ad:97:98:17:2f:a7:3b: d7:f0:58:25:7d:7e:47:80:48:0c:83:26:6c:c9:3b:eb:c7:21: 0f:64:d7:f3:73:7a:72:da:dd:ac:28:8c:ca:10:6a:0b:e6:23: f4:cb:41:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29dXQyMa77euzRRsz3zCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw Y2MyNzAwHhcNMjYwMTI1MjEwMTA0WhcNMjYwMTI2MjEwMTA0WjAzMTEwLwYDVQQD Eyg5NmFlOTM5ZjQyZGMxMGZlYWI4NjE0NmE0NDM2Y2JkZDE0ZDY1YTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWsT4IEUPWEwv9Y2jYu55brVSJvl PUJ/juU0uF/KgWPrK+6s0CHuYIWWJ/cczDjLStDwc8DBXWTy/Sp4bydBRwDsF4rp V2ZZiXmi9x4uS/9cftOrkE6ZHvTQ9H3jpkhHqzzyW5gDgakj3MPoITz8iI5VXEzi NG4FzGjDuKuZdTqryF7jFmXJh90kdsboP6S8w11AtvD+ATHdE38ccQG+GrD8khDM E7DkqEIKJuCBEadrnd/QO3upMEYtTJQpL54Wse4c4iZ64KnXLml3c7eOkmr0fODk hJHFwB4gE4Rap4xb9Rx6DFRPMS/8hZkv1K6FO7e53u9NHeTeWuH54OsTSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJauk59C3BD+q4YUakQ2y90U1lo1MB8GA1UdIwQY MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt NmMxYjQ0NzFmN2VlLzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8dpIMSE pfTE3DsZQp4zWWId82ufoDZaFGW6f/Sbhxq3/Lroc1yGPIq/WPesqZoHFoil3NBO WCT9lEUncuDBvrschpC3XOAcN09/c3zd7wzI5wb3u8PYe/s4nWZvdbfe0LOGWg0q zc2DX9Qh8T1LEcSoUQJSaAV/Qs6rJzT56KakL3jxrPT/eOEQVHd1y7Gyg5Oh+Ads WoSxTzCHoNAS7Ya31v6BpZZJIe2OXGM6DjbceMmQLFnKNDjJYOAKoUNMNV3O06yV TsZho5MawkuX7OGtl5gXL6c71/BYJX1+R4BIDIMmbMk768chD2TX83N6ctrdrCiM yhBqC+Yj9MtBcg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:48 2026 by rpki-client