This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json) Hash identifier: ODoSG2oO8klVeK5j+OenDIwSoS3aDXCZiunFanpwikA= Subject key identifier: 5C:24:E9:38:63:C4:B3:6B:B5:6B:DA:7B:A5:7D:41:E7:97:1C:85:DD Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c Certificate serial: 019BFA2E6B1814633A0C42EA9E3CB93626AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft Manifest number: 0D19 Signing time: Mon 26 Jan 2026 12:01:44 +0000 Manifest this update: Mon 26 Jan 2026 12:01:44 +0000 Manifest next update: Tue 27 Jan 2026 12:01:44 +0000 Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=) 2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: 3ZC9nvfFJD88e3uP8OtEsu2eMXBqvrsO2liaFRVhjpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:6b:18:14:63:3a:0c:42:ea:9e:3c:b9:36:26:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c Validity Not Before: Jan 26 12:01:44 2026 GMT Not After : Jan 27 12:01:44 2026 GMT Subject: CN=5c24e93863c4b36bb56bda7ba57d41e7971c85dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c3:b9:29:0b:f5:44:8e:24:52:72:5a:98:af: 2e:e9:62:06:58:4e:20:ba:42:93:82:ee:3e:a3:bd: 1d:08:b8:cd:66:2f:b7:36:21:75:13:b2:be:39:41: 85:02:51:0c:b9:94:55:0e:c5:c7:bd:06:a7:9d:09: d3:c2:bd:5e:1b:30:95:44:60:cc:56:bd:7c:b3:be: b4:98:f0:ca:c2:70:a2:1a:e7:6f:e0:aa:34:4d:9c: fb:f0:40:86:d2:0e:33:99:e4:70:f5:73:fa:d0:2e: a5:7c:29:19:cc:34:48:c4:c2:2f:17:f9:43:5b:9e: e0:1f:45:95:94:ff:5d:f8:37:83:52:d3:68:dc:27: 0c:8d:af:8c:c1:4d:9e:19:73:f0:96:90:13:11:1a: 84:80:fb:29:5e:dd:f7:d8:8d:11:a2:28:22:32:13: 3f:2e:ad:4c:eb:85:3f:5f:76:5b:75:a7:a9:7b:a8: 8a:d4:87:58:31:7b:62:a3:07:3a:a5:0f:d3:20:25: d5:5b:c3:d3:03:44:40:a1:a0:07:52:ae:70:03:1d: 84:01:e1:b2:83:6a:cb:0b:d3:27:72:3e:30:09:b4: e8:c4:26:2d:dd:fa:75:0e:22:07:5e:37:46:45:44: df:af:09:ef:d2:0c:c9:62:17:0b:1b:d0:fb:d9:98: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:24:E9:38:63:C4:B3:6B:B5:6B:DA:7B:A5:7D:41:E7:97:1C:85:DD X509v3 Authority Key Identifier: keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:84:6c:9b:2b:9a:2d:15:0b:b7:2a:22:ff:52:16:a0:04:2c: 6d:66:a4:ff:06:f7:cb:e8:ae:fa:9d:b1:e9:b2:05:02:16:9e: e8:9d:95:4f:69:d4:76:14:9b:e7:0b:4c:6a:9c:e3:75:f5:96: c6:fc:0e:f3:9c:45:1e:4e:f5:bf:e2:fe:cc:fa:4d:d6:ff:d9: e4:27:a0:e9:b3:00:dc:d6:7d:f8:66:89:a5:ac:b9:cf:8b:3e: fe:63:25:4f:62:87:aa:9b:67:df:9c:c2:61:c9:97:26:cd:3e: d2:d4:63:4a:02:72:83:6b:92:38:e9:b4:1d:22:a7:9a:52:d6: 3c:ec:f0:c1:04:3e:37:04:0d:f2:1a:91:ad:d8:96:20:af:07: af:61:49:3b:7d:3a:ea:5e:5b:34:8b:6b:66:b6:68:6a:42:05: 01:0b:f6:1c:a7:b1:e7:d0:2b:62:be:13:2a:47:29:49:50:40: c4:f4:8f:d9:ac:6f:76:90:1d:d7:bd:d6:cb:21:55:0b:aa:49: 0f:d7:ce:0a:4d:d9:ac:03:84:a4:d0:2b:66:d3:b5:36:ae:71: d6:46:eb:23:53:23:36:17:ed:7c:b2:96:48:20:62:39:7a:02: fd:22:bf:c5:89:d1:28:7b:26:a6:16:42:05:79:e2:d7:4c:32: 6a:58:ac:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LmsYFGM6DELqnjy5NiarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw YzM0NmMwHhcNMjYwMTI2MTIwMTQ0WhcNMjYwMTI3MTIwMTQ0WjAzMTEwLwYDVQQD Eyg1YzI0ZTkzODYzYzRiMzZiYjU2YmRhN2JhNTdkNDFlNzk3MWM4NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98O5KQv1RI4kUnJamK8u6WIGWE4g ukKTgu4+o70dCLjNZi+3NiF1E7K+OUGFAlEMuZRVDsXHvQannQnTwr1eGzCVRGDM Vr18s760mPDKwnCiGudv4Ko0TZz78ECG0g4zmeRw9XP60C6lfCkZzDRIxMIvF/lD W57gH0WVlP9d+DeDUtNo3CcMja+MwU2eGXPwlpATERqEgPspXt332I0RoigiMhM/ Lq1M64U/X3Zbdaepe6iK1IdYMXtiowc6pQ/TICXVW8PTA0RAoaAHUq5wAx2EAeGy g2rLC9Mncj4wCbToxCYt3fp1DiIHXjdGRUTfrwnv0gzJYhcLG9D72Zji+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwk6ThjxLNrtWvae6V9QeeXHIXdMB8GA1UdIwQY MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt OTEwZTA4MTBjYTk0LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0 LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYRsmyua LRULtyoi/1IWoAQsbWak/wb3y+iu+p2x6bIFAhae6J2VT2nUdhSb5wtMapzjdfWW xvwO85xFHk71v+L+zPpN1v/Z5Ceg6bMA3NZ9+GaJpay5z4s+/mMlT2KHqptn35zC YcmXJs0+0tRjSgJyg2uSOOm0HSKnmlLWPOzwwQQ+NwQN8hqRrdiWIK8Hr2FJO306 6l5bNItrZrZoakIFAQv2HKex59ArYr4TKkcpSVBAxPSP2axvdpAd173WyyFVC6pJ D9fOCk3ZrAOEpNArZtO1Nq5x1kbrI1MjNhftfLKWSCBiOXoC/SK/xYnRKHsmphZC BXni10wyalisug== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:43 2026 by rpki-client