This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: nqiZrz0AioQjIf/wmOCTkZTrKoVr64YER5e622XJICk= Subject key identifier: 99:AA:61:09:B4:DF:20:D6:9D:2A:BA:01:21:7C:AC:88:86:CF:F7:D0 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019BF2AAD47E378B79935ABEC5216C6E9B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 13A2 Signing time: Sun 25 Jan 2026 01:00:40 +0000 Manifest this update: Sun 25 Jan 2026 01:00:40 +0000 Manifest next update: Mon 26 Jan 2026 01:00:40 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: P9iZqoxuCT_faQ_VmOItL5eeI3w.roa (hash: vyjNIFB4l6R6SblkqwaOxyYaaYx/koFd/Fz2EeWD6hY=) 7: Pw_nbjWJOP9tFjLlL6TuUPFhrIg.roa (hash: TrLYpO7jB7Oy0CQoGdlJxP66iYA8T+o+o2EcugMjmRs=) 8: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=) 11: snU0F1xcSWMYFQ2eQd5gZYlccBE.roa (hash: JdJmPKAnAhiR1J0EFD0dsDA9MKwuUlfNp7RQdQdV3Wk=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: ivEgW3HbiC5TiSeQK90Bteef+iqzaCqlUO4qiB46/ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:d4:7e:37:8b:79:93:5a:be:c5:21:6c:6e:9b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 25 01:00:40 2026 GMT Not After : Jan 26 01:00:40 2026 GMT Subject: CN=99aa6109b4df20d69d2aba01217cac8886cff7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:f7:8e:de:8b:23:20:9b:19:6d:67:8c:54: 9e:25:93:da:0c:1d:70:1f:23:df:99:12:f5:8b:98: 45:7b:46:b6:c7:c8:90:71:93:63:3f:29:ce:bf:6c: c0:f7:31:82:8a:f9:35:db:53:b7:0f:bd:61:cf:07: ff:49:b3:c8:ce:aa:c3:97:f0:4b:a0:e7:05:cf:3b: 5e:a4:db:10:11:10:3d:28:83:5c:9e:18:c4:aa:68: 06:67:1e:8f:fc:7d:d0:53:77:30:e2:64:92:af:c3: 74:6e:c0:c7:9c:b2:79:56:24:fa:bb:18:97:c6:5e: c1:51:52:21:e4:d6:63:0a:3d:4f:0c:a6:23:33:7b: cb:3c:bd:19:f0:4f:9e:62:69:cb:78:77:73:f4:28: 5a:3b:1d:c7:20:64:1d:6e:8e:a8:38:37:f8:2a:73: 6f:bf:46:c5:af:fb:9c:55:a6:80:f6:b5:d8:17:f5: a4:de:ee:4a:11:37:75:62:06:d6:a9:0c:1f:1d:04: 5e:b4:81:0b:3c:29:f8:55:7f:67:9f:30:d1:99:67: 4f:0f:c6:27:4f:10:90:dc:60:c0:56:b3:dc:e9:3e: 5d:c0:65:1c:b1:77:ec:d4:e8:6f:2c:c1:d9:45:dd: 77:96:fe:7b:3e:c8:6f:af:73:d8:0f:4a:8b:59:dc: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AA:61:09:B4:DF:20:D6:9D:2A:BA:01:21:7C:AC:88:86:CF:F7:D0 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c7:a7:b9:c3:f1:d4:c9:40:4d:1e:c2:c1:9d:d6:c2:eb:6c: 5a:b7:6b:ee:1b:2a:eb:f8:4f:14:43:c5:f0:5c:3b:e1:2a:6c: d1:57:c4:f3:25:00:41:e8:be:07:cf:de:2d:2b:3a:c9:7f:42: f9:76:aa:b1:88:1a:96:a9:2a:59:44:a2:e4:a9:ed:7e:d6:a7: e9:55:19:28:33:54:f4:7c:63:3c:e9:a0:3f:49:ff:22:f3:4d: 3d:88:fd:40:cb:f0:f9:f8:44:0f:77:d8:b8:18:64:8f:41:2e: 35:18:af:a3:7e:d2:2b:6a:87:d5:98:6c:66:7c:b0:42:44:28: 60:0e:94:e3:2a:68:c3:e5:9f:52:4e:d2:93:23:c7:c0:89:43: ff:7b:c6:24:88:4f:48:a9:15:3e:4e:ba:33:39:fb:4a:39:b1: e1:d8:37:d2:da:3e:93:c4:ab:05:3c:cd:be:be:ba:d2:d0:a5: 11:eb:d9:65:29:ca:e5:e6:74:89:e9:7c:78:53:cc:d8:d0:08: e4:cb:d5:cb:11:7c:b2:41:52:0a:2c:22:43:de:d3:0d:ed:b2: cc:5f:32:1e:ad:63:39:ad:0a:40:f4:df:46:45:97:a9:20:ac: 3c:b1:bc:92:bb:51:95:aa:89:a3:e2:b2:ce:3f:bf:57:3e:7a: 6c:03:c0:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqtR+N4t5k1q+xSFsbpuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTI1MDEwMDQwWhcNMjYwMTI2MDEwMDQwWjAzMTEwLwYDVQQD Eyg5OWFhNjEwOWI0ZGYyMGQ2OWQyYWJhMDEyMTdjYWM4ODg2Y2ZmN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9/3jt6LIyCbGW1njFSeJZPaDB1w HyPfmRL1i5hFe0a2x8iQcZNjPynOv2zA9zGCivk121O3D71hzwf/SbPIzqrDl/BL oOcFzztepNsQERA9KINcnhjEqmgGZx6P/H3QU3cw4mSSr8N0bsDHnLJ5ViT6uxiX xl7BUVIh5NZjCj1PDKYjM3vLPL0Z8E+eYmnLeHdz9ChaOx3HIGQdbo6oODf4KnNv v0bFr/ucVaaA9rXYF/Wk3u5KETd1YgbWqQwfHQRetIELPCn4VX9nnzDRmWdPD8Yn TxCQ3GDAVrPc6T5dwGUcsXfs1OhvLMHZRd13lv57Pshvr3PYD0qLWdwl/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmqYQm03yDWnSq6ASF8rIiGz/fQMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcenucPx 1MlATR7CwZ3WwutsWrdr7hsq6/hPFEPF8Fw74Sps0VfE8yUAQei+B8/eLSs6yX9C +XaqsYgalqkqWUSi5Kntftan6VUZKDNU9HxjPOmgP0n/IvNNPYj9QMvw+fhED3fY uBhkj0EuNRivo37SK2qH1ZhsZnywQkQoYA6U4ypow+WfUk7SkyPHwIlD/3vGJIhP SKkVPk66Mzn7Sjmx4dg30to+k8SrBTzNvr660tClEevZZSnK5eZ0iel8eFPM2NAI 5MvVyxF8skFSCiwiQ97TDe2yzF8yHq1jOa0KQPTfRkWXqSCsPLG8krtRlaqJo+Ky zj+/Vz56bAPAhg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:57 2026 by rpki-client