This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json) Hash identifier: P9MzBQfEtKzyXKXgVQgpe2VFd4KnJKhJEkq1Ppt5Yh8= Subject key identifier: 73:AA:95:D4:A2:35:D5:89:80:C9:76:1F:86:23:2B:92:1A:5C:87:8E Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d Certificate serial: 019BF79A567B6C4C094A597E4C370209AF0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft Manifest number: 129E Signing time: Mon 26 Jan 2026 00:00:45 +0000 Manifest this update: Mon 26 Jan 2026 00:00:45 +0000 Manifest next update: Tue 27 Jan 2026 00:00:45 +0000 Files and hashes: 1: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: EBUkzQfsFz0q0IXbBUTeYZ8fBbvzUYuLTimOYr44nEs=) 2: qJDNQCIShiElkTydihRoQ4bZNh8.roa (hash: boKmhzMkJFM950qaKYC/IewwayfQB6vcVhEgjzqGKmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:56:7b:6c:4c:09:4a:59:7e:4c:37:02:09:af:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d Validity Not Before: Jan 26 00:00:45 2026 GMT Not After : Jan 27 00:00:45 2026 GMT Subject: CN=73aa95d4a235d58980c9761f86232b921a5c878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:ce:6f:c6:2a:fd:02:84:d0:1b:6c:af:07: ee:42:7c:cd:db:55:72:c2:e9:27:a1:09:6d:3d:d2: 85:29:49:d3:a8:1c:48:14:99:1f:71:ea:6c:d0:7a: 58:86:61:e1:d6:4f:6a:bd:07:49:b3:09:bf:a8:42: 03:38:9b:d5:70:97:e7:90:a9:b4:d0:2e:b6:36:35: 36:4e:b5:fd:cd:89:98:d9:8c:63:a6:00:6c:78:00: f8:43:c4:c9:58:ab:e9:10:a4:64:b0:0c:fc:b2:28: b9:a2:d5:c0:d8:29:9e:a9:43:3e:44:3d:3d:bd:5b: bc:34:2e:ab:3b:46:1d:cb:36:c4:bd:7f:21:64:74: c9:c7:7b:8c:98:91:10:2a:4b:a6:1b:71:30:34:69: 59:4b:da:a0:32:df:2c:a3:eb:bb:89:17:54:2e:d2: 77:b5:d3:5c:25:68:e5:4c:03:e7:87:d0:76:59:dc: 26:de:a3:bf:c0:d8:5b:b6:79:52:82:a7:7b:dd:24: 96:33:30:6e:91:cf:94:50:80:48:45:2a:1a:8b:3a: c4:b7:ad:c3:10:a9:dd:53:a6:90:dc:29:ae:75:2b: 45:10:94:47:be:7a:ea:9d:84:55:73:db:5a:74:5d: ff:62:1f:31:9f:54:1c:0c:74:cf:34:c9:32:d3:f2: 58:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:95:D4:A2:35:D5:89:80:C9:76:1F:86:23:2B:92:1A:5C:87:8E X509v3 Authority Key Identifier: keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:80:bb:de:bb:f5:97:e5:ec:a4:e6:52:c3:1d:f0:e5:87:e2: 9f:30:35:e2:e3:8d:b9:78:05:2b:02:34:16:16:ef:a8:9a:0a: 93:24:53:b1:5f:56:01:06:14:74:09:b3:e4:6b:fc:f3:ad:bf: 00:14:f1:2c:45:6e:11:54:2a:cd:11:ff:1d:00:60:9e:39:7d: f1:cb:ce:33:61:b8:08:20:ea:1e:5d:6d:10:a7:3d:5e:84:72: 1b:ce:14:fc:2a:a8:33:65:30:1a:e6:b8:37:6c:9c:66:ae:38: f3:0a:84:f8:d0:bb:80:6a:ba:e6:fb:c0:41:4f:66:14:e8:4a: 5e:d3:37:e2:f9:9c:bb:ff:d9:03:99:31:96:19:82:1b:22:03: 17:9b:10:5e:30:d7:c4:2f:34:82:6a:e3:95:f2:39:aa:a9:8e: db:87:b4:76:b8:1c:f0:2e:da:b3:af:67:c0:f1:66:9d:ea:f2: c0:70:11:0d:8b:8a:0e:a0:38:b2:f3:00:92:08:98:fa:51:30: 93:43:7d:13:76:f8:85:89:a5:ef:8b:6b:b1:18:7a:e4:2c:11: d0:39:b8:32:d4:d0:b9:87:c5:72:75:09:d4:70:34:36:d5:c9: 08:15:f1:b8:0f:2c:5c:53:22:1c:a7:07:52:a0:da:1a:db:57: bf:67:18:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mlZ7bEwJSll+TDcCCa8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NzBkMjhmYzQ5YWEwYWU4MDhjMzgzZjU4N2YzZWE0Y2Zl YjA0OWQwHhcNMjYwMTI2MDAwMDQ1WhcNMjYwMTI3MDAwMDQ1WjAzMTEwLwYDVQQD Eyg3M2FhOTVkNGEyMzVkNTg5ODBjOTc2MWY4NjIzMmI5MjFhNWM4NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZvOb8Yq/QKE0BtsrwfuQnzN21Vy wuknoQltPdKFKUnTqBxIFJkfceps0HpYhmHh1k9qvQdJswm/qEIDOJvVcJfnkKm0 0C62NjU2TrX9zYmY2YxjpgBseAD4Q8TJWKvpEKRksAz8sii5otXA2CmeqUM+RD09 vVu8NC6rO0YdyzbEvX8hZHTJx3uMmJEQKkumG3EwNGlZS9qgMt8so+u7iRdULtJ3 tdNcJWjlTAPnh9B2Wdwm3qO/wNhbtnlSgqd73SSWMzBukc+UUIBIRSoaizrEt63D EKndU6aQ3CmudStFEJRHvnrqnYRVc9tadF3/Yh8xn1QcDHTPNMky0/JYdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOqldSiNdWJgMl2H4YjK5IaXIeOMB8GA1UdIwQY MBaAFEVw0o/EmqCugIw4P1h/PqTP6wSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjct ZWIwNzM3OTdhYzY2LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjctZWIwNzM3OTdhYzY2 LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4C73rv1 l+XspOZSwx3w5YfinzA14uONuXgFKwI0FhbvqJoKkyRTsV9WAQYUdAmz5Gv8862/ ABTxLEVuEVQqzRH/HQBgnjl98cvOM2G4CCDqHl1tEKc9XoRyG84U/CqoM2UwGua4 N2ycZq448wqE+NC7gGq65vvAQU9mFOhKXtM34vmcu//ZA5kxlhmCGyIDF5sQXjDX xC80gmrjlfI5qqmO24e0drgc8C7as69nwPFmnerywHARDYuKDqA4svMAkgiY+lEw k0N9E3b4hYml74trsRh65CwR0Dm4MtTQuYfFcnUJ1HA0NtXJCBXxuA8sXFMiHKcH UqDaGttXv2cY4A== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:48 2026 by rpki-client