This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json) Hash identifier: P0TxxkvFmDitla4CdLPiKUx/K2vGGY/MJjpHifVqjoc= Subject key identifier: 41:58:22:6D:A9:45:6F:BC:09:D9:14:8B:70:C7:C5:43:E7:94:36:65 Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019BF619F3F5035FFF66EBA9F090546AA283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft Manifest number: 1130 Signing time: Sun 25 Jan 2026 17:00:54 +0000 Manifest this update: Sun 25 Jan 2026 17:00:54 +0000 Manifest next update: Mon 26 Jan 2026 17:00:54 +0000 Files and hashes: 1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=) 2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=) 3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=) 4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=) 5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: uBgT0t1sD6hvqF4iycTiHpWMo2vBtH8P8R32LwDoDP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:f3:f5:03:5f:ff:66:eb:a9:f0:90:54:6a:a2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Jan 25 17:00:54 2026 GMT Not After : Jan 26 17:00:54 2026 GMT Subject: CN=4158226da9456fbc09d9148b70c7c543e7943665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:dc:f6:d6:02:b1:b9:98:9d:1b:c6:83:3d: 5b:f3:72:87:86:68:35:c8:a6:c6:91:13:04:e8:75: 8b:b4:47:75:5a:f6:ad:89:a8:c4:f6:27:48:a3:a7: 2c:e8:f6:29:f7:c3:4e:25:42:6e:70:91:aa:8f:68: 15:8f:b4:f0:43:23:6b:06:eb:c7:ce:ba:a0:e7:8e: 7c:23:8a:35:9b:a5:bc:5c:66:a4:26:d4:d2:bc:a7: 4e:5d:91:93:62:ef:31:0b:69:00:b3:a7:e8:e9:3b: a3:ba:21:fe:f8:fb:cb:c7:54:ba:a2:b4:db:73:c4: e7:03:5c:b7:6d:00:98:74:14:e4:31:76:76:75:30: e8:fa:ec:15:20:1d:b2:f9:e3:07:9b:9a:2e:4b:4a: a8:fc:a6:58:8e:c8:fa:65:f2:b5:5f:f3:64:ac:b3: 99:75:33:79:cc:4d:3d:68:2f:51:be:31:c0:e4:0f: e0:02:46:37:9f:1d:66:63:e0:f6:25:d2:1a:dc:6e: c0:2e:d9:84:f8:07:2d:68:b9:aa:0e:77:e2:04:8b: 83:4f:0a:5f:9b:2c:0b:de:2b:2c:72:4d:d2:cd:b4: 0f:5f:d6:56:1d:97:35:12:dd:8f:65:76:5e:76:05: 11:dc:7b:16:0a:0e:51:cf:49:a8:9a:43:be:be:12: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:58:22:6D:A9:45:6F:BC:09:D9:14:8B:70:C7:C5:43:E7:94:36:65 X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:8c:a4:27:9b:e1:64:47:fa:57:3d:80:cd:e6:a1:43:11:49: a2:76:00:70:f6:55:fb:20:bd:d5:8e:66:7e:20:b9:bc:d0:0a: 6f:b3:14:3d:da:0b:ef:73:a3:85:a9:eb:35:22:73:53:91:96: f7:07:33:67:88:d3:4b:97:44:ec:f8:41:09:61:12:a9:ed:31: 10:dd:a5:8a:20:cb:d8:cb:46:6b:b3:ad:c2:39:f2:0d:b2:66: e9:08:47:2e:f2:ba:14:ca:89:d2:32:fd:38:fb:a7:b4:f3:28: 15:64:40:1d:d1:c5:c0:6a:2c:09:90:e7:7c:8b:8b:65:3e:36: e8:4f:a9:68:12:21:6f:3e:ed:79:6d:1c:f5:8f:4f:2c:4d:5e: 82:e0:5e:1b:76:05:34:f1:e9:59:f3:3e:9c:f2:73:88:9b:67: df:08:28:41:8a:b5:e4:ac:6c:0d:a8:d2:00:c7:ee:1d:f4:43: 1b:6e:f5:4b:4f:78:a5:40:76:07:43:3e:26:0f:5c:c4:02:7b: c0:35:eb:60:65:40:f1:93:87:bf:69:a1:fa:ef:ef:27:61:31: f3:8b:96:4c:26:4b:a9:b4:90:de:7a:73:57:a7:5b:4e:17:94: d6:28:2d:bf:f4:b9:85:a2:22:43:57:1b:25:7f:6d:97:29:12: 94:56:c8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GfP1A1//Zuup8JBUaqKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjYwMTI1MTcwMDU0WhcNMjYwMTI2MTcwMDU0WjAzMTEwLwYDVQQD Eyg0MTU4MjI2ZGE5NDU2ZmJjMDlkOTE0OGI3MGM3YzU0M2U3OTQzNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxPc9tYCsbmYnRvGgz1b83KHhmg1 yKbGkRME6HWLtEd1WvatiajE9idIo6cs6PYp98NOJUJucJGqj2gVj7TwQyNrBuvH zrqg5458I4o1m6W8XGakJtTSvKdOXZGTYu8xC2kAs6fo6TujuiH++PvLx1S6orTb c8TnA1y3bQCYdBTkMXZ2dTDo+uwVIB2y+eMHm5ouS0qo/KZYjsj6ZfK1X/NkrLOZ dTN5zE09aC9RvjHA5A/gAkY3nx1mY+D2JdIa3G7ALtmE+ActaLmqDnfiBIuDTwpf mywL3issck3SzbQPX9ZWHZc1Et2PZXZedgUR3HsWCg5Rz0momkO+vhLFCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFYIm2pRW+8CdkUi3DHxUPnlDZlMB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoykJ5vh ZEf6Vz2AzeahQxFJonYAcPZV+yC91Y5mfiC5vNAKb7MUPdoL73OjhanrNSJzU5GW 9wczZ4jTS5dE7PhBCWESqe0xEN2liiDL2MtGa7OtwjnyDbJm6QhHLvK6FMqJ0jL9 OPuntPMoFWRAHdHFwGosCZDnfIuLZT426E+paBIhbz7teW0c9Y9PLE1eguBeG3YF NPHpWfM+nPJziJtn3wgoQYq15KxsDajSAMfuHfRDG271S094pUB2B0M+Jg9cxAJ7 wDXrYGVA8ZOHv2mh+u/vJ2Ex84uWTCZLqbSQ3npzV6dbTheU1igtv/S5haIiQ1cb JX9tlykSlFbIkg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:52 2026 by rpki-client