This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json) Hash identifier: 5ZO2rHLI1lWm3dq4get31NdR0T3REHTf/0vqz3psqgw= Subject key identifier: 6F:DB:2C:C3:42:A2:A2:C2:B4:B8:F3:40:C3:4D:95:18:35:36:72:A0 Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019BF23D8BF203CCCA5B3D669E64C8BF01C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft Manifest number: 1783 Signing time: Sat 24 Jan 2026 23:01:18 +0000 Manifest this update: Sat 24 Jan 2026 23:01:18 +0000 Manifest next update: Sun 25 Jan 2026 23:01:18 +0000 Files and hashes: 1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=) 2: 3H8BLKzmkCfljUjNrQGOgxtelOg.roa (hash: v8PSaEUxks+gqrCM9n7vdattQCJR6qYVTo0H/ICFPWs=) 3: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: Qa56mj6XcgkM9HCBdH1hrBq6mgvrJIVpAErX82t19zA=) 4: OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa (hash: 7l0K8yYViyqwamqByXDtNcYGRuw4fCtQkRZ/3UwAsLE=) 5: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=) 6: wJWgNl2_DEPkp8xIgpJ8Ss_Z-T0.roa (hash: K0uXWKkS6wxjXv7wfhBBrFl5U+Bu+M5GtGmTqQt8DU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:8b:f2:03:cc:ca:5b:3d:66:9e:64:c8:bf:01:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Jan 24 23:01:18 2026 GMT Not After : Jan 25 23:01:18 2026 GMT Subject: CN=6fdb2cc342a2a2c2b4b8f340c34d9518353672a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:8e:e2:46:77:73:48:bd:7e:5d:72:fe:d9: a9:10:ab:7a:df:b0:e8:96:e8:bb:0e:65:33:30:05: ed:e2:39:d3:5b:04:02:3c:0e:83:ea:23:e6:78:fd: ac:42:21:ac:20:dd:86:b9:ef:d1:01:21:c3:03:37: f9:90:27:9b:87:db:3b:17:57:a1:aa:32:a2:85:bc: c2:82:bd:a7:87:9a:3c:cc:f5:13:df:6e:43:53:90: 51:7f:61:a9:a3:3b:eb:9b:1a:eb:f1:a8:de:94:7a: fc:56:0f:21:30:a7:62:56:99:25:d8:c1:9f:6c:37: 6b:da:a8:d8:fd:a8:08:d2:ee:91:2a:bf:94:2f:d6: 65:a3:d5:db:54:45:9a:c8:19:40:95:c1:26:f8:14: 2b:a9:6a:22:ec:a9:81:0f:a5:9b:72:53:bd:5a:d4: 80:e4:98:5c:ad:03:03:1b:0e:a8:5a:8a:08:61:db: 27:64:cc:c4:ab:28:cb:c2:39:2c:9e:35:b2:48:59: 67:11:87:ec:97:e6:b1:54:52:a5:c1:07:a5:39:8c: 08:9a:f9:56:c7:47:06:00:96:a2:71:22:07:a1:8b: dd:15:ba:19:b4:af:fa:ec:33:2e:17:c1:2c:65:1d: af:37:1a:38:d6:6a:d5:9c:2e:16:ec:ed:18:e0:ae: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DB:2C:C3:42:A2:A2:C2:B4:B8:F3:40:C3:4D:95:18:35:36:72:A0 X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9a:0e:a8:81:c4:08:d1:8c:c0:0b:fd:d6:65:6e:45:e1:3b: f0:e5:f0:20:b5:c3:48:12:67:4c:ad:fb:90:1f:d2:3a:6b:2d: 3a:66:b5:16:f6:13:67:75:79:dd:0d:7f:0c:00:57:27:a4:87: d2:ff:e8:a2:35:20:26:7b:88:77:83:b3:e2:1f:99:8f:01:3c: bb:6b:69:01:ca:23:01:62:5d:b5:b0:32:a8:48:4b:1a:7b:35: e2:6b:ea:a5:7a:8f:16:b5:4d:6a:45:93:ab:2a:e4:6d:56:bb: 33:8e:ae:ef:b9:21:f5:cc:0e:63:5a:30:1f:89:20:6f:09:d5: db:57:52:64:c6:e2:87:82:1f:a6:7c:62:41:16:73:b8:ce:33: 01:59:da:80:f9:c2:63:8a:2c:95:7a:90:b1:c6:f8:43:bd:ae: 1e:50:c9:a1:25:15:6c:c6:94:a9:4e:4b:dd:55:6e:cd:f8:81: 44:e9:df:f6:44:52:15:6f:a9:34:21:29:03:37:4b:2a:43:25: 21:3e:64:d4:88:40:78:71:d9:86:14:14:f8:3f:0b:c4:1b:11: 43:5d:d9:2d:f0:e9:e1:04:fd:48:a6:17:ae:a8:e4:e0:d2:f0: 32:fe:c6:d1:30:db:23:bd:08:ce:a9:a3:5a:2b:16:fd:f6:d9: cc:e1:e5:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPYvyA8zKWz1mnmTIvwHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjYwMTI0MjMwMTE4WhcNMjYwMTI1MjMwMTE4WjAzMTEwLwYDVQQD Eyg2ZmRiMmNjMzQyYTJhMmMyYjRiOGYzNDBjMzRkOTUxODM1MzY3MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEqO4kZ3c0i9fl1y/tmpEKt637Do lui7DmUzMAXt4jnTWwQCPA6D6iPmeP2sQiGsIN2Gue/RASHDAzf5kCebh9s7F1eh qjKihbzCgr2nh5o8zPUT325DU5BRf2Gpozvrmxrr8ajelHr8Vg8hMKdiVpkl2MGf bDdr2qjY/agI0u6RKr+UL9Zlo9XbVEWayBlAlcEm+BQrqWoi7KmBD6WbclO9WtSA 5JhcrQMDGw6oWooIYdsnZMzEqyjLwjksnjWySFlnEYfsl+axVFKlwQelOYwImvlW x0cGAJaicSIHoYvdFboZtK/67DMuF8EsZR2vNxo41mrVnC4W7O0Y4K6uKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/bLMNCoqLCtLjzQMNNlRg1NnKgMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5oOqIHE CNGMwAv91mVuReE78OXwILXDSBJnTK37kB/SOmstOma1FvYTZ3V53Q1/DABXJ6SH 0v/oojUgJnuId4Oz4h+ZjwE8u2tpAcojAWJdtbAyqEhLGns14mvqpXqPFrVNakWT qyrkbVa7M46u77kh9cwOY1owH4kgbwnV21dSZMbih4IfpnxiQRZzuM4zAVnagPnC Y4oslXqQscb4Q72uHlDJoSUVbMaUqU5L3VVuzfiBROnf9kRSFW+pNCEpAzdLKkMl IT5k1IhAeHHZhhQU+D8LxBsRQ13ZLfDp4QT9SKYXrqjk4NLwMv7G0TDbI70Izqmj WisW/fbZzOHlUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:20:12 2026 by rpki-client