This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json) Hash identifier: k/LwjsBSIsAU5772BIhJoJcqG+O3EtOEvKZhGyoj2co= Subject key identifier: 1A:D5:48:99:EE:69:64:90:59:FE:2A:1A:A2:96:AB:9F:6E:BE:8E:C4 Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Certificate serial: 019BF5071D1AA6FC0112A6735D2005E9CF05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 12:00:42 +0000 Manifest this update: Sun 25 Jan 2026 12:00:42 +0000 Manifest next update: Mon 26 Jan 2026 12:00:42 +0000 Files and hashes: 1: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (hash: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM=) 2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: JElcLASwJ4dwyhv4jKBdelnh2c8qyXoLbxSGOOVRp5U=) 3: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (hash: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:1d:1a:a6:fc:01:12:a6:73:5d:20:05:e9:cf:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Validity Not Before: Jan 25 12:00:42 2026 GMT Not After : Jan 26 12:00:42 2026 GMT Subject: CN=1ad54899ee69649059fe2a1aa296ab9f6ebe8ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:0e:2a:1d:ee:0a:ee:32:2a:10:d6:70:19: 0a:03:d5:fd:8c:d0:1f:42:5a:3f:e9:3f:d0:1d:af: 81:ad:da:b2:64:03:8b:cd:bf:09:6d:7a:cb:d6:ac: 60:5b:b9:4a:a9:6c:d4:c3:cd:ea:ed:31:a3:86:4c: 59:39:97:20:2d:c6:ec:4b:6c:bc:e4:4e:46:aa:38: 90:a4:01:02:74:19:0e:d0:a3:9f:6d:0e:58:68:7e: 2a:78:99:c9:89:36:0b:ae:62:ec:55:15:60:90:49: 91:1c:3c:87:2d:19:88:01:a5:c4:cd:b6:a7:13:19: 3a:34:53:1f:c6:3a:e7:fc:e0:ff:eb:d5:92:c8:01: 78:24:f7:9c:70:8f:bf:c0:62:a4:53:0d:29:bf:b9: 39:2a:0a:62:53:70:59:be:90:e3:e5:58:6c:e8:0b: bf:37:e5:14:76:ee:d5:dc:81:61:a8:7a:59:9d:27: f1:18:e5:7c:c3:3f:6a:6b:d3:e6:50:94:a0:a8:67: 5a:14:ae:10:9b:55:3f:43:64:a4:85:15:8b:ed:b0: a8:46:56:44:96:94:f2:d5:0f:69:2b:39:0c:a9:25: 1f:be:4a:1b:52:93:8b:1d:af:5f:50:35:56:1f:98: 94:60:be:bf:53:16:6c:e8:35:a5:d1:bc:92:55:ff: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D5:48:99:EE:69:64:90:59:FE:2A:1A:A2:96:AB:9F:6E:BE:8E:C4 X509v3 Authority Key Identifier: keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5a:34:38:13:a9:4b:d9:3b:76:13:8e:3b:35:62:de:8b:fc: f9:34:11:82:a2:60:1b:34:06:5c:b0:1e:64:4c:4f:bd:a6:96: be:4c:b6:01:fb:0c:20:2a:e2:e2:68:67:70:a6:1d:eb:c5:43: 87:01:b0:c5:d8:94:8f:af:3f:b3:7f:5f:19:47:ee:20:12:86: 40:25:25:d3:b4:36:1e:6e:0e:10:9b:2e:db:8a:e4:9f:1c:95: be:12:2d:50:67:22:03:61:02:3d:97:9b:0c:30:62:7f:0d:78: 6a:cf:b7:4a:19:6f:99:86:8f:bc:a7:f0:d7:1d:f6:08:a2:6b: 6a:0f:5c:4e:af:7a:e3:5a:e3:90:62:de:58:3d:9b:42:9d:21: ac:30:30:2c:8c:b3:91:17:a5:b8:53:ac:be:01:79:07:18:0e: 7d:c7:d5:5a:c9:5d:d9:3f:a5:c8:6d:84:49:a8:d5:3b:22:ce: 4b:0b:8e:f0:12:22:a0:63:51:56:d5:1a:f0:92:74:f9:8c:75: d7:7c:1f:8b:83:5c:fe:b4:01:50:a2:8e:bb:56:02:e0:5a:4f: e8:2c:cc:09:a5:71:e0:e7:39:f6:a3:cc:da:3f:6b:15:18:93: 4c:ee:02:65:42:bd:0e:e3:cb:3c:c7:3a:78:71:3d:d0:69:69: 27:74:0a:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Bx0apvwBEqZzXSAF6c8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3 MWFiZjUwHhcNMjYwMTI1MTIwMDQyWhcNMjYwMTI2MTIwMDQyWjAzMTEwLwYDVQQD EygxYWQ1NDg5OWVlNjk2NDkwNTlmZTJhMWFhMjk2YWI5ZjZlYmU4ZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWsOKh3uCu4yKhDWcBkKA9X9jNAf Qlo/6T/QHa+BrdqyZAOLzb8JbXrL1qxgW7lKqWzUw83q7TGjhkxZOZcgLcbsS2y8 5E5GqjiQpAECdBkO0KOfbQ5YaH4qeJnJiTYLrmLsVRVgkEmRHDyHLRmIAaXEzban Exk6NFMfxjrn/OD/69WSyAF4JPeccI+/wGKkUw0pv7k5KgpiU3BZvpDj5Vhs6Au/ N+UUdu7V3IFhqHpZnSfxGOV8wz9qa9PmUJSgqGdaFK4Qm1U/Q2SkhRWL7bCoRlZE lpTy1Q9pKzkMqSUfvkobUpOLHa9fUDVWH5iUYL6/UxZs6DWl0bySVf+EJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrVSJnuaWSQWf4qGqKWq59uvo7EMB8GA1UdIwQY MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt NTllNmE2ZDRkNTc2LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2 LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFo0OBOp S9k7dhOOOzVi3ov8+TQRgqJgGzQGXLAeZExPvaaWvky2AfsMICri4mhncKYd68VD hwGwxdiUj68/s39fGUfuIBKGQCUl07Q2Hm4OEJsu24rknxyVvhItUGciA2ECPZeb DDBifw14as+3ShlvmYaPvKfw1x32CKJrag9cTq9641rjkGLeWD2bQp0hrDAwLIyz kReluFOsvgF5BxgOfcfVWsld2T+lyG2ESajVOyLOSwuO8BIioGNRVtUa8JJ0+Yx1 13wfi4Nc/rQBUKKOu1YC4FpP6CzMCaVx4Oc59qPM2j9rFRiTTO4CZUK9DuPLPMc6 eHE90GlpJ3QKMg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:41 2026 by rpki-client