This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json) Hash identifier: h/kkXZwILYJ1N+Pkzk8GYWD4RCo01qVzJrTsGDe+PCo= Subject key identifier: C4:11:18:D4:B3:CB:25:69:58:18:03:2D:C2:D7:64:5B:CB:DB:1C:2E Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019BF4634CAF130E733A0A5E24616D621EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft Manifest number: 14FA Signing time: Sun 25 Jan 2026 09:01:46 +0000 Manifest this update: Sun 25 Jan 2026 09:01:46 +0000 Manifest next update: Mon 26 Jan 2026 09:01:46 +0000 Files and hashes: 1: INecSgDNWHvp6sU-WpJihfiFh4s.roa (hash: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno=) 2: f25A04rpXtD2_br_jQIVVfQ8etM.roa (hash: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY=) 3: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (hash: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ=) 4: gnB4DwAgCjyQcWFzJEdE7GWr73o.roa (hash: HW/BGej/dJUcVDYCwLRVJHa3/FSej9vAGH4VzbSF+To=) 5: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (hash: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s=) 6: w_ptOPR66g-2hUDEWzrs74clcAE.roa (hash: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI=) 7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: 07cSXrDRDS6sFsjx2mA6JvTGLouqQFuzreHI23IdUoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:4c:af:13:0e:73:3a:0a:5e:24:61:6d:62:1e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Jan 25 09:01:46 2026 GMT Not After : Jan 26 09:01:46 2026 GMT Subject: CN=c41118d4b3cb25695818032dc2d7645bcbdb1c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:2a:0c:82:f4:b7:ea:dd:ed:63:95:f8:dd: 00:64:25:ce:05:a2:2b:f7:39:8a:4c:9e:d0:50:01: 04:8c:b6:23:44:79:e2:e2:e9:25:88:fd:b3:34:32: 1c:ba:04:5b:ae:cb:f7:b2:13:57:b5:b2:22:04:12: 33:da:51:f9:7a:44:a1:4c:2f:4c:7f:0a:3d:9e:82: 86:c2:c8:3f:f9:02:90:2b:d9:1e:f9:df:99:89:25: c8:b0:ef:38:54:9e:f4:85:52:24:f4:e6:9f:61:0a: f6:4d:a8:6a:6d:52:d0:90:21:7a:79:c0:d8:03:4c: 19:0b:b2:9b:14:e6:c9:78:8e:7f:6a:1d:99:bb:6b: a8:ae:70:33:f5:60:d1:d9:0c:07:28:52:1a:bf:66: b5:57:86:b8:19:21:92:34:5a:1a:ee:35:4f:72:ab: fe:72:e3:e5:bc:04:67:08:08:30:61:3c:a0:28:40: af:f9:6d:d2:09:03:34:36:ea:88:01:34:0d:8e:30: 03:e9:08:91:a8:1e:86:ae:d9:1f:90:fb:b2:37:ea: 31:2f:8b:ff:6c:ac:93:7c:bd:77:7c:0b:be:c6:33: 4f:e3:73:59:a5:11:bc:13:92:40:7b:9c:a6:e4:2b: dd:c7:a8:6a:db:e8:89:be:b2:9f:90:05:de:b0:5a: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:11:18:D4:B3:CB:25:69:58:18:03:2D:C2:D7:64:5B:CB:DB:1C:2E X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a8:e1:98:c6:df:3e:b7:a0:ce:18:75:36:a7:5f:68:ad:c4: 34:45:f8:f9:e2:69:6f:f0:7b:6a:d4:db:4b:04:1e:37:48:bb: ff:0d:06:a9:a6:a6:e0:ae:c3:c2:db:cb:9b:ab:e8:fa:91:9c: d9:d3:62:a5:eb:47:8c:aa:57:80:6b:a1:2f:bc:2b:c8:1b:0d: 6d:e2:88:1a:8d:1b:9d:c9:8a:02:ca:58:da:d3:3b:e5:b2:33: 55:12:80:da:43:6b:af:08:14:b8:ae:6d:84:98:de:d0:10:95: 90:4b:8f:d9:f0:ca:a5:2e:ac:64:6a:54:d5:39:76:d9:43:42: 9b:42:ef:30:67:68:19:cf:18:2a:ad:d5:39:5e:58:f9:79:57: 6e:81:68:1c:34:f1:a7:aa:cb:db:bb:95:fb:e9:25:16:9c:e3: 59:9c:29:8e:38:58:08:89:43:f3:91:a5:14:20:64:0c:f0:35: a8:13:9a:e6:0f:36:69:d5:7c:4c:6e:5a:c5:50:4e:11:c1:ad: f6:8b:54:d8:5f:34:c9:c6:94:1d:29:08:3a:4d:eb:55:70:22: c3:79:15:07:7c:68:85:85:92:cf:41:92:c8:4b:13:db:4d:19: 10:56:68:e1:81:16:75:16:e0:1e:25:e2:7c:c9:55:81:d4:a8: a3:ba:b0:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Y0yvEw5zOgpeJGFtYh7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjYwMTI1MDkwMTQ2WhcNMjYwMTI2MDkwMTQ2WjAzMTEwLwYDVQQD EyhjNDExMThkNGIzY2IyNTY5NTgxODAzMmRjMmQ3NjQ1YmNiZGIxYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXEqDIL0t+rd7WOV+N0AZCXOBaIr 9zmKTJ7QUAEEjLYjRHni4ukliP2zNDIcugRbrsv3shNXtbIiBBIz2lH5ekShTC9M fwo9noKGwsg/+QKQK9ke+d+ZiSXIsO84VJ70hVIk9OafYQr2TahqbVLQkCF6ecDY A0wZC7KbFObJeI5/ah2Zu2uornAz9WDR2QwHKFIav2a1V4a4GSGSNFoa7jVPcqv+ cuPlvARnCAgwYTygKECv+W3SCQM0NuqIATQNjjAD6QiRqB6GrtkfkPuyN+oxL4v/ bKyTfL13fAu+xjNP43NZpRG8E5JAe5ym5Cvdx6hq2+iJvrKfkAXesFpNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQRGNSzyyVpWBgDLcLXZFvL2xwuMB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEajhmMbf Pregzhh1NqdfaK3ENEX4+eJpb/B7atTbSwQeN0i7/w0Gqaam4K7DwtvLm6vo+pGc 2dNipetHjKpXgGuhL7wryBsNbeKIGo0bncmKAspY2tM75bIzVRKA2kNrrwgUuK5t hJje0BCVkEuP2fDKpS6sZGpU1Tl22UNCm0LvMGdoGc8YKq3VOV5Y+XlXboFoHDTx p6rL27uV++klFpzjWZwpjjhYCIlD85GlFCBkDPA1qBOa5g82adV8TG5axVBOEcGt 9otU2F80ycaUHSkIOk3rVXAiw3kVB3xohYWSz0GSyEsT200ZEFZo4YEWdRbgHiXi fMlVgdSoo7qwHg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:05 2026 by rpki-client