This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json) Hash identifier: 6d9Cy4urr+naRk4IKCZ8lxPyxW91gz8J6RgwwsZKzqA= Subject key identifier: 0C:13:C6:5F:B4:74:D5:2E:B5:81:02:1B:FB:66:7C:BA:25:50:57:A7 Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Certificate serial: 019BF6F61C6B66E481B1115CF46AC883C182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft Manifest number: 0DEE Signing time: Sun 25 Jan 2026 21:01:22 +0000 Manifest this update: Sun 25 Jan 2026 21:01:22 +0000 Manifest next update: Mon 26 Jan 2026 21:01:22 +0000 Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: fNSANQJHA8RSQQaZ0tJjyFkjJQ0kJOfJ2yD1pwvvymE=) 2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:1c:6b:66:e4:81:b1:11:5c:f4:6a:c8:83:c1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Validity Not Before: Jan 25 21:01:22 2026 GMT Not After : Jan 26 21:01:22 2026 GMT Subject: CN=0c13c65fb474d52eb581021bfb667cba255057a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:94:c9:ff:cf:da:42:68:ed:46:7c:77:88: e4:46:4d:83:cf:c9:fa:8e:1d:0b:99:7e:17:2c:b0: d5:92:f3:6e:bd:c0:18:38:00:65:c1:1c:65:8f:26: ca:27:cb:3b:9d:eb:93:5b:7d:c4:ab:82:ac:a1:6a: 9f:0b:68:1b:07:b5:95:83:8f:b2:ac:ca:fc:70:ba: 7e:1e:f2:f9:e2:f1:26:c1:3f:f3:29:9b:57:d9:38: 96:41:c0:56:31:e7:a9:01:3d:29:4d:ea:e3:7d:63: 52:9b:b7:25:77:30:c0:a9:c3:4d:bf:29:52:eb:c0: b6:3d:2b:e6:fb:ab:46:46:7f:0f:94:88:f2:4a:d9: 96:93:6c:65:62:e6:8a:9e:f6:9b:13:a7:6c:b9:36: f2:f7:16:55:6b:fd:0a:5e:34:3e:2f:97:e4:6d:bf: 70:e2:f8:45:9c:42:6a:96:2c:b6:8c:85:79:aa:42: 9d:c5:7d:60:b2:0b:01:c2:6a:41:2e:7a:a2:c0:a4: 44:4d:94:98:49:24:6e:f2:db:1f:9e:ea:bb:a7:a3: 5f:d5:a6:14:68:d4:e1:80:28:1d:0a:dd:7d:0a:77: 49:2e:bd:17:f2:d4:ed:0c:90:ba:d7:1b:30:26:2a: 86:6f:64:72:28:8a:68:b5:2f:b4:7f:3c:e2:ab:f7: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:13:C6:5F:B4:74:D5:2E:B5:81:02:1B:FB:66:7C:BA:25:50:57:A7 X509v3 Authority Key Identifier: keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:02:9b:c9:11:ce:e4:c6:7b:a5:11:a3:ff:34:5c:a8:ea:a7: a5:68:19:15:76:7e:79:49:9e:1d:38:07:9c:79:12:49:01:3f: 97:60:b6:e5:0e:b9:a9:6d:7e:dc:d9:c8:3c:92:d8:60:a7:21: 69:67:bd:f6:af:b6:74:ce:31:6b:31:05:98:cb:9b:37:be:75: 79:d9:a7:57:4a:fb:4c:00:90:49:fb:b3:ad:2a:fc:04:c5:fa: b2:cd:6a:ea:e5:d5:e1:7b:52:7f:03:1c:d1:76:b6:19:e3:72: ee:1f:6c:b6:a5:df:4e:b6:5a:95:7a:fe:75:6a:0c:09:ef:e4: 55:4e:40:66:06:d1:72:78:6d:f6:90:f2:84:c5:88:ec:ca:77: a8:2f:e3:38:a7:77:6b:ae:fc:c0:5b:ba:ed:48:f3:61:e4:e0: 4e:31:da:1f:ac:90:b5:64:94:ae:a5:3c:b8:ca:d9:ea:00:eb: 23:be:91:d1:92:d8:85:b0:f4:ff:54:2e:6f:fa:f4:0c:c5:55: 25:df:26:d7:a0:df:f0:d0:21:a0:b6:ca:81:3d:bb:58:95:82: 67:b5:98:f0:77:a4:95:dd:77:89:c8:79:f6:94:6c:30:fa:cc: da:7e:86:36:0f:42:bc:f3:c4:60:df:1c:d9:13:51:5d:9a:dc: b1:2c:42:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29hxrZuSBsRFc9GrIg8GCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj NTJkNGYwHhcNMjYwMTI1MjEwMTIyWhcNMjYwMTI2MjEwMTIyWjAzMTEwLwYDVQQD EygwYzEzYzY1ZmI0NzRkNTJlYjU4MTAyMWJmYjY2N2NiYTI1NTA1N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15uUyf/P2kJo7UZ8d4jkRk2Dz8n6 jh0LmX4XLLDVkvNuvcAYOABlwRxljybKJ8s7neuTW33Eq4KsoWqfC2gbB7WVg4+y rMr8cLp+HvL54vEmwT/zKZtX2TiWQcBWMeepAT0pTerjfWNSm7cldzDAqcNNvylS 68C2PSvm+6tGRn8PlIjyStmWk2xlYuaKnvabE6dsuTby9xZVa/0KXjQ+L5fkbb9w 4vhFnEJqliy2jIV5qkKdxX1gsgsBwmpBLnqiwKRETZSYSSRu8tsfnuq7p6Nf1aYU aNThgCgdCt19CndJLr0X8tTtDJC61xswJiqGb2RyKIpotS+0fzziq/cG6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwTxl+0dNUutYECG/tmfLolUFenMB8GA1UdIwQY MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAKbyRHO 5MZ7pRGj/zRcqOqnpWgZFXZ+eUmeHTgHnHkSSQE/l2C25Q65qW1+3NnIPJLYYKch aWe99q+2dM4xazEFmMubN751edmnV0r7TACQSfuzrSr8BMX6ss1q6uXV4XtSfwMc 0Xa2GeNy7h9stqXfTrZalXr+dWoMCe/kVU5AZgbRcnht9pDyhMWI7Mp3qC/jOKd3 a678wFu67UjzYeTgTjHaH6yQtWSUrqU8uMrZ6gDrI76R0ZLYhbD0/1Qub/r0DMVV Jd8m16Df8NAhoLbKgT27WJWCZ7WY8Hekld13ich59pRsMPrM2n6GNg9CvPPEYN8c 2RNRXZrcsSxCCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:21 2026 by rpki-client