This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: 4nJTvxVggzRoCk25/trtdF0JQ4khei+Ze2BYhidmSdk= Subject key identifier: 48:37:C3:4C:1E:54:BC:D6:E7:87:55:47:BF:EB:28:B5:B0:27:88:8B Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019BF49947C052DA42AD71870ED0AF657615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1804 Signing time: Sun 25 Jan 2026 10:00:44 +0000 Manifest this update: Sun 25 Jan 2026 10:00:44 +0000 Manifest next update: Mon 26 Jan 2026 10:00:44 +0000 Files and hashes: 1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=) 3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: u7A7kK3L54NxJIShl6E1iEivUr/xGTwtSEvGqYYq39Q=) 7: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=) 8: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 9: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 10: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 11: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:47:c0:52:da:42:ad:71:87:0e:d0:af:65:76:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Jan 25 10:00:44 2026 GMT Not After : Jan 26 10:00:44 2026 GMT Subject: CN=4837c34c1e54bcd6e7875547bfeb28b5b027888b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0a:cf:ef:63:73:23:bc:2a:86:74:4a:5b:2d: ab:99:fa:8b:ef:11:a6:f6:19:b2:e0:7a:ea:99:3b: bf:c5:db:a8:2f:27:d4:82:be:df:3a:8f:27:5c:a7: d9:cf:c5:ec:7f:ec:09:eb:89:d3:45:4f:54:14:4d: 2f:b0:f4:b6:79:d4:ab:ce:37:34:29:2d:99:8d:b0: e4:62:4e:b2:cd:84:2f:3a:b3:5c:9c:1b:90:87:2a: 52:55:7f:05:59:84:b8:78:be:4f:0e:da:ae:de:87: 87:12:77:95:db:15:29:c3:bf:7f:9c:a0:df:8c:37: f1:0a:1a:19:c7:1d:ec:96:02:7d:84:92:59:06:bd: 8c:e4:19:1a:c6:69:04:68:d1:3d:87:a5:9a:60:a0: c4:04:eb:b8:86:56:d9:0e:b7:05:42:9d:72:9d:91: b5:dc:4d:39:63:3a:32:fc:98:a9:ac:ee:7e:32:c9: 7c:c3:8f:cc:d1:c2:b4:67:78:c4:a0:c8:56:3c:a5: 6e:98:67:a2:2e:d3:e2:6a:9f:1f:41:dc:a5:e6:cc: c5:16:4f:5f:80:59:86:a2:bc:88:3d:a2:45:38:85: 99:04:5b:aa:8d:09:bd:c1:fc:ca:f9:d1:7b:39:16: aa:8a:7c:bd:b4:f2:7d:5c:0e:a8:56:a1:08:30:2c: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:C3:4C:1E:54:BC:D6:E7:87:55:47:BF:EB:28:B5:B0:27:88:8B X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0f:e4:23:84:ab:f8:44:69:70:0e:ab:42:28:2a:b5:b5:d5: 55:6e:4d:a8:b8:e3:a8:28:89:fe:67:04:36:e7:3d:d2:1b:71: 98:87:f4:76:01:ba:04:82:59:0d:87:8d:af:3d:bb:10:ae:bf: 6d:b8:a1:3a:c8:80:a6:a1:ee:e1:51:b4:51:74:fb:1c:5c:f3: 9e:e4:42:dc:aa:14:54:76:e1:48:84:50:dc:d8:cd:cb:2a:38: c0:6d:79:94:cf:de:c8:42:92:2c:12:44:b8:78:3b:33:39:f1: e5:ec:55:22:b8:e8:20:cc:76:73:27:2a:3f:b3:be:b4:20:17: 7a:0b:92:14:1f:ad:e8:d2:7a:5a:5a:4e:73:db:1e:85:5b:f7: 67:72:70:1f:54:90:1d:4a:38:70:30:d4:38:f1:68:82:16:63: 5e:f7:ce:c6:09:73:6c:fe:bd:7c:4e:75:44:ed:8b:21:73:c4: 42:cf:f6:a3:18:5a:af:44:85:7d:72:51:59:df:d1:3c:36:08: 9d:a7:5e:9f:f4:be:57:3c:a4:54:6b:85:83:bc:50:06:67:51: 35:1f:45:a5:b4:3a:07:03:90:23:b9:35:d8:42:53:4f:c3:47: ad:14:fe:5e:c9:21:d8:f4:cd:e1:15:e2:65:d9:69:8a:24:2b: 53:c1:c5:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mUfAUtpCrXGHDtCvZXYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMTI1MTAwMDQ0WhcNMjYwMTI2MTAwMDQ0WjAzMTEwLwYDVQQD Eyg0ODM3YzM0YzFlNTRiY2Q2ZTc4NzU1NDdiZmViMjhiNWIwMjc4ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkArP72NzI7wqhnRKWy2rmfqL7xGm 9hmy4HrqmTu/xduoLyfUgr7fOo8nXKfZz8Xsf+wJ64nTRU9UFE0vsPS2edSrzjc0 KS2ZjbDkYk6yzYQvOrNcnBuQhypSVX8FWYS4eL5PDtqu3oeHEneV2xUpw79/nKDf jDfxChoZxx3slgJ9hJJZBr2M5BkaxmkEaNE9h6WaYKDEBOu4hlbZDrcFQp1ynZG1 3E05Yzoy/JiprO5+Msl8w4/M0cK0Z3jEoMhWPKVumGeiLtPiap8fQdyl5szFFk9f gFmGoryIPaJFOIWZBFuqjQm9wfzK+dF7ORaqiny9tPJ9XA6oVqEIMCzTAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg3w0weVLzW54dVR7/rKLWwJ4iLMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQ/kI4Sr +ERpcA6rQigqtbXVVW5NqLjjqCiJ/mcENuc90htxmIf0dgG6BIJZDYeNrz27EK6/ bbihOsiApqHu4VG0UXT7HFzznuRC3KoUVHbhSIRQ3NjNyyo4wG15lM/eyEKSLBJE uHg7Mznx5exVIrjoIMx2cycqP7O+tCAXeguSFB+t6NJ6WlpOc9sehVv3Z3JwH1SQ HUo4cDDUOPFoghZjXvfOxglzbP69fE51RO2LIXPEQs/2oxhar0SFfXJRWd/RPDYI naden/S+VzykVGuFg7xQBmdRNR9FpbQ6BwOQI7k12EJTT8NHrRT+Xskh2PTN4RXi ZdlpiiQrU8HFhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:07 2026 by rpki-client