This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: a8XoghVIqJztqiznkal8sC80NcL9Y4uZXo1+PkKjk/U= Subject key identifier: 3A:00:68:EA:DC:5D:13:F2:30:79:79:BC:2B:66:72:CD:C9:4B:29:BE Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019BF2AB3AECBBD2E787F7682C97A88A675C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1800 Signing time: Sun 25 Jan 2026 01:01:06 +0000 Manifest this update: Sun 25 Jan 2026 01:01:06 +0000 Manifest next update: Mon 26 Jan 2026 01:01:06 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: 9tVl0OudtWaiiEvwscrGSSX56jU.roa (hash: th1F5H92mnPFNJ3P0FMgp4iOub0klsX+xg8MmiRJg5A=) 6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=) 7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 15: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 16: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=) 17: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=) 18: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 19: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 20: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 21: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 22: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 23: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 24: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 25: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 26: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=) 32: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 33: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: xyMkHW4WjaQKLT2Z0IwTe9GFMmyosn42uSgxSilNnv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:3a:ec:bb:d2:e7:87:f7:68:2c:97:a8:8a:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 25 01:01:06 2026 GMT Not After : Jan 26 01:01:06 2026 GMT Subject: CN=3a0068eadc5d13f2307979bc2b6672cdc94b29be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:a2:06:66:83:54:58:97:0b:12:28:9d:ff: d8:fd:3f:5e:47:c7:6b:05:28:c9:18:09:fe:45:3f: c9:1e:5e:bc:6a:f7:46:b1:dd:c3:aa:21:eb:8d:df: 1b:38:7a:84:13:bb:6b:cc:03:77:38:3f:90:d9:5c: 6d:8e:1b:57:e1:45:43:d1:3e:9e:81:04:13:dd:ee: bc:c3:a8:ae:2a:12:1e:bd:f3:df:ae:23:8f:37:d2: 36:fe:51:49:c1:f5:9f:26:a1:5a:31:48:b3:f2:74: 8a:be:b5:c8:21:59:b6:c1:38:f1:07:04:a0:5b:1f: 24:74:2d:31:14:35:c0:38:0c:86:a3:8e:2d:5f:83: c1:bc:19:7e:cb:2f:4e:79:f3:fa:29:d5:5a:22:43: 1f:7b:97:ac:08:62:3a:38:e7:25:aa:40:61:0d:f3: ad:2e:f7:62:e5:56:92:4a:4b:fb:fc:e9:c4:56:58: a6:97:98:84:f9:51:c3:73:b8:bb:b9:21:09:e2:95: fb:1e:91:23:33:6e:0e:33:ae:ed:65:82:5f:4b:f7: 3a:db:b6:f2:18:d6:07:36:b7:99:01:82:f4:53:1c: 7d:18:1b:c0:db:95:84:a8:8a:a1:c8:ed:6f:ce:1f: 6c:52:e3:75:a7:1b:04:61:5a:11:de:c2:f3:9c:9d: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:00:68:EA:DC:5D:13:F2:30:79:79:BC:2B:66:72:CD:C9:4B:29:BE X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:72:14:40:df:8b:98:59:2c:67:a4:0e:f5:e6:a3:a7:3e: c7:d1:30:6c:ec:ad:ca:7f:0d:d6:d6:ec:d2:af:66:b3:af:a5: 8a:71:19:60:5a:5c:33:bf:4e:5d:78:3d:45:86:30:e3:95:3c: a7:6e:c2:c9:58:54:62:25:19:d5:99:94:3d:3f:ce:a6:60:63: 37:34:f2:28:07:6b:1a:df:70:7a:42:f2:13:f0:4d:1a:2a:11: 99:70:63:ac:86:f6:1b:7c:b7:c1:50:14:e6:00:85:6c:48:97: b8:bb:77:6c:26:0c:d4:c0:3b:c1:b3:b6:23:25:62:a7:4e:40: 50:dd:ae:92:56:d0:47:18:7c:a8:dc:a6:4d:f2:7a:41:c6:54: 04:2a:af:c0:7a:ca:e4:61:b6:38:c2:11:83:d3:df:f4:5f:1f: 57:86:cd:0b:52:b5:7b:8a:73:e5:66:a0:35:7c:ac:33:18:46: 92:64:24:e4:88:c4:d3:fb:7c:c8:43:e7:7e:b4:58:ed:04:95: 51:99:48:90:fb:a9:0b:fb:d1:f3:ed:1c:cf:da:bc:76:25:af: a3:3f:9c:20:57:ad:46:38:28:fc:00:7f:c3:c2:36:ae:a4:ba: 97:de:bb:3a:05:d1:e5:c1:b1:a5:5e:7c:76:24:49:e9:4c:10: cc:a4:91:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqzrsu9Lnh/doLJeoimdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTI1MDEwMTA2WhcNMjYwMTI2MDEwMTA2WjAzMTEwLwYDVQQD EygzYTAwNjhlYWRjNWQxM2YyMzA3OTc5YmMyYjY2NzJjZGM5NGIyOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBeiBmaDVFiXCxIonf/Y/T9eR8dr BSjJGAn+RT/JHl68avdGsd3DqiHrjd8bOHqEE7trzAN3OD+Q2VxtjhtX4UVD0T6e gQQT3e68w6iuKhIevfPfriOPN9I2/lFJwfWfJqFaMUiz8nSKvrXIIVm2wTjxBwSg Wx8kdC0xFDXAOAyGo44tX4PBvBl+yy9OefP6KdVaIkMfe5esCGI6OOclqkBhDfOt Lvdi5VaSSkv7/OnEVliml5iE+VHDc7i7uSEJ4pX7HpEjM24OM67tZYJfS/c627by GNYHNreZAYL0Uxx9GBvA25WEqIqhyO1vzh9sUuN1pxsEYVoR3sLznJ1DnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoAaOrcXRPyMHl5vCtmcs3JSym+MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChJyFEDf i5hZLGekDvXmo6c+x9EwbOytyn8N1tbs0q9ms6+linEZYFpcM79OXXg9RYYw45U8 p27CyVhUYiUZ1ZmUPT/OpmBjNzTyKAdrGt9wekLyE/BNGioRmXBjrIb2G3y3wVAU 5gCFbEiXuLt3bCYM1MA7wbO2IyVip05AUN2uklbQRxh8qNymTfJ6QcZUBCqvwHrK 5GG2OMIRg9Pf9F8fV4bNC1K1e4pz5WagNXysMxhGkmQk5IjE0/t8yEPnfrRY7QSV UZlIkPupC/vR8+0cz9q8diWvoz+cIFetRjgo/AB/w8I2rqS6l967OgXR5cGxpV58 diRJ6UwQzKSR7g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:09:45 2026 by rpki-client