This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json) Hash identifier: d/9xHQvqGTB82HKAbqtdIzvp4JhuNzuhfDDceI3colU= Subject key identifier: 44:D0:11:97:79:D3:B4:1D:D4:88:A8:30:70:21:3E:84:9D:3F:62:4D Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b Certificate serial: 019BF53DF5F08BA4542B734CB5324E7FDABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft Manifest number: 0126 Signing time: Sun 25 Jan 2026 13:00:37 +0000 Manifest this update: Sun 25 Jan 2026 13:00:37 +0000 Manifest next update: Mon 26 Jan 2026 13:00:37 +0000 Files and hashes: 1: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: 5EfZ86hvzCwE+FdLjgiDYKshInZBujL3stC5/w4V4IY=) 2: o-mtc665fbhvSfNUs9vwAj_na4c.roa (hash: CKoVltX9Hmfz+Z2sk8sI92L3m9MX0WVmDaQsoWexPl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:f5:f0:8b:a4:54:2b:73:4c:b5:32:4e:7f:da:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b Validity Not Before: Jan 25 13:00:37 2026 GMT Not After : Jan 26 13:00:37 2026 GMT Subject: CN=44d0119779d3b41dd488a83070213e849d3f624d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:f6:49:13:25:45:e5:ff:9d:f7:5c:7d:d6: 5f:4f:69:5d:9d:e9:46:8a:34:75:08:c6:97:d8:4b: 96:2a:cb:3e:58:d1:b3:26:31:10:70:d2:fa:73:58: 7a:73:39:53:b5:f7:a7:74:46:2d:c2:09:03:39:e4: 20:d4:b3:48:6a:72:d0:f4:a0:b3:07:03:9e:45:ec: fe:fd:f2:f6:8c:d5:33:08:be:3b:3e:91:6e:fd:dc: ed:dd:0b:73:ee:10:87:ed:9b:25:35:2f:0c:78:e2: 17:80:4c:e1:16:70:b9:f5:1d:9f:84:c0:f1:ec:b0: 1d:cd:a2:60:2d:54:4c:c9:64:57:34:13:a3:4f:7a: cd:0b:74:2c:17:bf:cb:fa:c5:54:00:24:50:e8:5b: 2e:d1:51:c2:9e:ee:8d:7d:96:20:71:d8:91:6e:a9: 9a:58:55:5b:6c:2a:a4:d4:5e:cc:b9:43:f3:ae:b5: 17:7c:29:88:c6:ef:9f:97:05:a0:11:fd:1d:a7:ca: 1c:68:3d:74:55:58:1c:4a:03:f5:03:f7:50:91:73: 3b:a3:6a:0a:ed:b5:de:8f:35:d6:b1:4e:ac:af:b6: 80:f6:9b:f7:00:3f:9e:e6:74:f3:73:f5:c8:e6:ad: 3e:b2:a7:13:11:96:f7:7e:96:46:c3:72:86:5c:e8: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D0:11:97:79:D3:B4:1D:D4:88:A8:30:70:21:3E:84:9D:3F:62:4D X509v3 Authority Key Identifier: keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8e:f4:ac:a0:c3:6c:91:cc:4c:f0:28:4b:77:7c:42:22:3b: fb:51:64:6d:37:c5:62:ed:bd:9c:f4:a1:38:1b:79:d2:9c:b4: 73:f2:91:02:b7:02:94:d6:fb:7e:bd:a9:c2:57:9b:2a:97:1a: 3b:21:a8:89:3f:93:39:9d:a0:e1:c5:16:eb:72:06:c0:ea:5c: cf:03:87:e9:11:66:f1:4f:a7:a2:0a:7b:12:ff:e3:47:71:94: 18:5d:d0:84:0d:9e:44:b8:75:ed:25:ad:20:67:71:8d:c3:b2: fb:fb:dd:44:89:5f:af:ad:ae:74:8f:37:1f:3b:b0:9a:89:72: 92:19:7d:61:b7:52:85:4d:12:93:37:76:aa:15:0d:8a:ee:3e: 30:24:a7:0f:5d:20:77:2a:ce:65:8e:d1:16:e0:cf:ec:cf:46: 25:ff:3b:e6:5c:f7:d9:4f:ef:29:4d:ad:bc:6d:2e:1a:76:57: 7b:43:45:65:63:d9:53:70:0b:83:75:b7:42:8b:3e:6c:82:41: 1a:d0:4c:70:15:a5:e5:99:22:fe:0b:75:ea:9c:7c:d3:a8:4a: c7:ee:fc:03:d0:44:3d:da:25:d4:ec:e8:81:9f:5a:e5:51:d9: bf:3b:bd:2d:31:de:0a:d2:7f:cd:c8:1e:7d:ce:e9:60:d9:e7: 54:00:2f:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PfXwi6RUK3NMtTJOf9q9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTRiYmY1Mzc4N2FmNGU5MzVkMzBhNDhlODgyNWEyZGEx NGEwOGIwHhcNMjYwMTI1MTMwMDM3WhcNMjYwMTI2MTMwMDM3WjAzMTEwLwYDVQQD Eyg0NGQwMTE5Nzc5ZDNiNDFkZDQ4OGE4MzA3MDIxM2U4NDlkM2Y2MjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9T2SRMlReX/nfdcfdZfT2ldnelG ijR1CMaX2EuWKss+WNGzJjEQcNL6c1h6czlTtfendEYtwgkDOeQg1LNIanLQ9KCz BwOeRez+/fL2jNUzCL47PpFu/dzt3Qtz7hCH7ZslNS8MeOIXgEzhFnC59R2fhMDx 7LAdzaJgLVRMyWRXNBOjT3rNC3QsF7/L+sVUACRQ6Fsu0VHCnu6NfZYgcdiRbqma WFVbbCqk1F7MuUPzrrUXfCmIxu+flwWgEf0dp8ocaD10VVgcSgP1A/dQkXM7o2oK 7bXejzXWsU6sr7aA9pv3AD+e5nTzc/XI5q0+sqcTEZb3fpZGw3KGXOhsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETQEZd507Qd1IioMHAhPoSdP2JNMB8GA1UdIwQY MBaAFEcUu/U3h69Ok10wpI6IJaLaFKCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMt ZTY5MGVkMjFmOTRmLzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMtZTY5MGVkMjFmOTRm LzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlY70rKDD bJHMTPAoS3d8QiI7+1FkbTfFYu29nPShOBt50py0c/KRArcClNb7fr2pwlebKpca OyGoiT+TOZ2g4cUW63IGwOpczwOH6RFm8U+nogp7Ev/jR3GUGF3QhA2eRLh17SWt IGdxjcOy+/vdRIlfr62udI83Hzuwmolykhl9YbdShU0Skzd2qhUNiu4+MCSnD10g dyrOZY7RFuDP7M9GJf875lz32U/vKU2tvG0uGnZXe0NFZWPZU3ALg3W3Qos+bIJB GtBMcBWl5Zki/gt16px806hKx+78A9BEPdol1OzogZ9a5VHZvzu9LTHeCtJ/zcge fc7pYNnnVAAv1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:49 2026 by rpki-client