This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json) Hash identifier: qD/vA/POEOnuSMMZeaO9x1U9wLCVh4an2a7e+Vf2HDo= Subject key identifier: FC:00:4F:6B:27:C5:53:6B:31:B7:62:92:71:18:C9:61:03:19:AC:59 Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Certificate serial: 019BF6519772AEA2866A6CDDEE21B8365568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft Manifest number: 031B Signing time: Sun 25 Jan 2026 18:01:40 +0000 Manifest this update: Sun 25 Jan 2026 18:01:40 +0000 Manifest next update: Mon 26 Jan 2026 18:01:40 +0000 Files and hashes: 1: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: a/MyAuwKciPe1wOPtCe8fDrtNCUqGuKAHO6k0istdL0=) 2: ZS49NoR0xEt4EkcswjIY6hISabQ.roa (hash: l3Du0mInbrihmNOTEOBYAtuZ0coi5mG0KsyicEw3aoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:97:72:ae:a2:86:6a:6c:dd:ee:21:b8:36:55:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Validity Not Before: Jan 25 18:01:40 2026 GMT Not After : Jan 26 18:01:40 2026 GMT Subject: CN=fc004f6b27c5536b31b762927118c9610319ac59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:0e:2d:1f:73:e0:3b:5a:19:3a:f4:58:08: 09:1e:22:5a:29:9f:e4:28:1c:27:f6:19:12:54:24: ab:b0:71:bf:46:3c:f9:08:d0:e1:11:09:2e:af:3c: 87:8f:1f:81:a7:34:fc:e9:95:a9:87:b6:7f:68:c9: b8:04:19:1c:34:d2:5b:cd:38:dd:d6:13:85:f7:cb: 94:e3:ba:dc:51:14:95:5a:eb:11:82:23:41:6d:d9: c4:cf:e2:3e:b6:f2:39:91:87:e9:2d:d4:90:e7:27: d5:41:a4:79:47:aa:ac:a2:79:37:69:3f:2f:f4:bb: 00:ca:de:d5:8c:ba:42:ec:f8:23:7f:b0:99:c6:66: 68:9b:e6:d9:ee:2c:d4:e6:d4:1c:3f:67:fd:76:72: 99:0e:5c:de:a0:7a:e6:88:6d:51:ed:f4:7f:49:a3: d0:c4:60:4d:19:27:42:d2:81:ba:ed:c0:28:84:48: b3:a6:02:cb:c6:ad:d8:fb:12:6b:94:fb:6c:c9:ea: df:6a:98:28:4a:82:d0:fe:97:18:9d:a1:db:87:ff: aa:25:b0:ae:31:47:68:70:94:b6:3a:01:3f:3e:0f: 4c:0e:71:7b:10:73:a2:11:f0:07:1f:35:92:cc:2a: 74:81:bd:a5:7b:e9:c1:85:a6:3a:79:49:9a:55:73: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:00:4F:6B:27:C5:53:6B:31:B7:62:92:71:18:C9:61:03:19:AC:59 X509v3 Authority Key Identifier: keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bd:7f:20:82:f3:a2:fb:d1:07:21:a3:fe:ac:cd:43:19:1d: a2:97:8c:70:3f:d8:9e:48:a7:7a:14:ba:a7:39:90:b6:34:a1: e2:b2:41:14:c7:5c:ef:89:fc:09:ab:8f:78:1e:12:fd:d4:ba: fe:bb:ca:35:48:aa:eb:51:31:4f:0c:96:e9:6c:4e:92:47:b4: 4b:e4:bc:e7:55:1a:7d:ad:b5:3b:b5:da:29:7f:73:35:f0:42: 31:fe:64:7b:09:ed:db:12:32:dc:f2:8b:b2:02:5f:d2:4e:a3: 6c:b5:a5:d9:0b:51:eb:9a:13:2f:7d:d6:06:52:b9:12:2b:cb: 1a:fb:f6:aa:83:6f:d5:2d:c7:70:e9:c2:0a:57:56:33:87:95: 76:ed:ae:d7:c4:59:db:35:d9:54:3b:a9:62:06:a7:b8:07:a3: 54:58:fc:bf:a4:67:04:d7:a5:0c:a9:0e:b6:38:07:48:89:02: 36:9c:f6:e9:5b:83:53:26:75:dc:16:e7:67:eb:9c:0b:8e:f0: f9:00:50:af:16:8b:fe:13:58:0b:85:5d:6f:40:6a:42:22:d1: 63:a1:d2:b3:d1:e2:f1:db:47:1c:50:79:17:5a:31:07:71:7a: 32:bf:db:6b:b6:f1:fb:da:3d:14:1c:bf:77:9f:a2:76:1d:b7: 3e:ff:01:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UZdyrqKGamzd7iG4NlVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTQzZGQ2Njc2OWRiMTgzYjhiZDc5YjkwZmM4M2Q5NWQ2 ZTQ4ZmIwHhcNMjYwMTI1MTgwMTQwWhcNMjYwMTI2MTgwMTQwWjAzMTEwLwYDVQQD EyhmYzAwNGY2YjI3YzU1MzZiMzFiNzYyOTI3MTE4Yzk2MTAzMTlhYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8sOLR9z4DtaGTr0WAgJHiJaKZ/k KBwn9hkSVCSrsHG/Rjz5CNDhEQkurzyHjx+BpzT86ZWph7Z/aMm4BBkcNNJbzTjd 1hOF98uU47rcURSVWusRgiNBbdnEz+I+tvI5kYfpLdSQ5yfVQaR5R6qsonk3aT8v 9LsAyt7VjLpC7Pgjf7CZxmZom+bZ7izU5tQcP2f9dnKZDlzeoHrmiG1R7fR/SaPQ xGBNGSdC0oG67cAohEizpgLLxq3Y+xJrlPtsyerfapgoSoLQ/pcYnaHbh/+qJbCu MUdocJS2OgE/Pg9MDnF7EHOiEfAHHzWSzCp0gb2le+nBhaY6eUmaVXOX0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwAT2snxVNrMbdiknEYyWEDGaxZMB8GA1UdIwQY MBaAFEcUPdZnadsYO4vXm5D8g9ldbkj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It MzQ2MDI2MjQ1NWIyLzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy LzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV71/IILz ovvRByGj/qzNQxkdopeMcD/YnkinehS6pzmQtjSh4rJBFMdc74n8CauPeB4S/dS6 /rvKNUiq61ExTwyW6WxOkke0S+S851Uafa21O7XaKX9zNfBCMf5kewnt2xIy3PKL sgJf0k6jbLWl2QtR65oTL33WBlK5EivLGvv2qoNv1S3HcOnCCldWM4eVdu2u18RZ 2zXZVDupYganuAejVFj8v6RnBNelDKkOtjgHSIkCNpz26VuDUyZ13BbnZ+ucC47w +QBQrxaL/hNYC4Vdb0BqQiLRY6HSs9Hi8dtHHFB5F1oxB3F6Mr/ba7bx+9o9FBy/ d5+idh23Pv8Baw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:14 2026 by rpki-client