This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json) Hash identifier: LnNkUjO5fMmwbFLDA8FJ1peP0NIiZGsrZT36twTB5a4= Subject key identifier: 81:CB:77:13:77:D5:13:E5:67:7D:D6:DC:FC:A5:A8:85:D5:AA:FC:BE Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9 Certificate serial: 019BF79A5FA54A475ACCEC8535BAFEDABAB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 00:00:47 +0000 Manifest this update: Mon 26 Jan 2026 00:00:47 +0000 Manifest next update: Tue 27 Jan 2026 00:00:47 +0000 Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=) 2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: spPoXXniC6viEJ4CuNJaIIK28DjH0smc4bKgv+Nx1jk=) 3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:5f:a5:4a:47:5a:cc:ec:85:35:ba:fe:da:ba:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9 Validity Not Before: Jan 26 00:00:47 2026 GMT Not After : Jan 27 00:00:47 2026 GMT Subject: CN=81cb771377d513e5677dd6dcfca5a885d5aafcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:d6:24:9d:97:46:b1:04:98:61:f5:54:ec: 0b:cb:ff:1f:c6:c0:0a:d2:63:09:64:a0:36:ff:9c: 06:e3:a1:9b:f4:bf:56:b2:83:43:e9:c6:51:71:1d: 93:d9:f8:6a:a7:0d:c7:7f:23:c1:11:15:bf:7c:b0: 8c:f9:1d:98:e8:54:54:70:7a:ee:66:5b:94:62:50: 8b:e1:87:a1:ec:34:eb:a2:c7:a6:5f:b3:37:44:02: d2:07:09:9e:72:b6:b1:4e:44:ec:84:18:46:cc:ef: 56:ee:bd:59:82:8e:84:e4:3b:4b:d1:41:b8:e5:db: d5:8c:04:5c:59:54:27:a1:9a:67:aa:9b:77:9e:57: 85:05:90:29:d8:38:4c:87:08:90:88:3a:c3:54:76: 49:c6:4f:6f:62:56:86:ab:0b:74:46:4c:36:d9:d4: ac:6f:94:ab:ab:d1:55:8d:b6:74:dd:7e:ee:f8:86: 17:be:6f:ca:1f:e5:e8:59:39:bd:87:a3:63:03:4f: 12:c6:b2:ca:ec:39:f8:f8:09:6e:91:fc:34:00:43: 75:37:39:ac:10:5f:65:15:94:55:82:77:76:2d:1e: 47:d3:66:86:0e:07:5b:98:0b:5b:30:83:e6:5c:c5: 1a:fc:02:b0:7e:dc:96:1d:6f:c8:3e:6f:ca:0b:a0: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CB:77:13:77:D5:13:E5:67:7D:D6:DC:FC:A5:A8:85:D5:AA:FC:BE X509v3 Authority Key Identifier: keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:61:e8:5d:cf:48:85:cd:c6:a5:28:d1:be:0b:66:96:f6:f5: 4c:4c:66:28:c9:75:02:16:c5:a8:d2:87:6f:2a:78:0c:92:5e: 98:77:bb:43:8b:4c:b3:ba:e0:23:7f:a1:f0:82:a3:e3:4e:cf: 5e:46:87:1e:f3:0d:56:d4:74:b9:62:4f:19:6a:08:20:c2:5b: 3c:19:ca:35:cb:2e:b4:81:0c:d2:4f:5f:4e:e1:95:a6:93:2e: 7a:0e:10:66:7e:14:68:88:d6:5f:9a:d8:4b:b3:5a:77:88:2f: 88:6f:19:38:63:b2:2c:dd:2d:d5:c0:b0:74:f1:5a:21:e8:68: 9a:8b:2e:2b:c1:42:83:d9:a5:ad:6c:0c:eb:b8:c8:d2:cc:1c: 86:fc:84:68:69:07:a1:46:e3:55:87:5a:02:3e:66:f1:27:30: ef:c8:e9:55:3d:d1:a5:5b:86:82:49:81:46:55:aa:95:32:f5: 5e:8d:0d:3e:90:81:58:7c:c6:1c:39:8a:f8:37:88:12:f7:90: 8c:e0:50:40:aa:7c:f0:0c:53:84:74:c8:42:08:86:4e:58:33: 65:7e:11:b0:5b:b0:bd:b9:24:7b:95:50:51:45:14:0e:b1:a1: 8a:e6:64:a0:2d:f6:5c:2e:9a:8c:00:29:bc:ea:1a:4a:e4:ba: 9f:91:0c:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3ml+lSkdazOyFNbr+2rq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy NGQ0YzkwHhcNMjYwMTI2MDAwMDQ3WhcNMjYwMTI3MDAwMDQ3WjAzMTEwLwYDVQQD Eyg4MWNiNzcxMzc3ZDUxM2U1Njc3ZGQ2ZGNmY2E1YTg4NWQ1YWFmY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDjWJJ2XRrEEmGH1VOwLy/8fxsAK 0mMJZKA2/5wG46Gb9L9WsoND6cZRcR2T2fhqpw3HfyPBERW/fLCM+R2Y6FRUcHru ZluUYlCL4Yeh7DTrosemX7M3RALSBwmecraxTkTshBhGzO9W7r1Zgo6E5DtL0UG4 5dvVjARcWVQnoZpnqpt3nleFBZAp2DhMhwiQiDrDVHZJxk9vYlaGqwt0Rkw22dSs b5Srq9FVjbZ03X7u+IYXvm/KH+XoWTm9h6NjA08SxrLK7Dn4+Alukfw0AEN1Nzms EF9lFZRVgnd2LR5H02aGDgdbmAtbMIPmXMUa/AKwftyWHW/IPm/KC6D2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHLdxN31RPlZ33W3PylqIXVqvy+MB8GA1UdIwQY MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0 LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGHoXc9I hc3GpSjRvgtmlvb1TExmKMl1AhbFqNKHbyp4DJJemHe7Q4tMs7rgI3+h8IKj407P XkaHHvMNVtR0uWJPGWoIIMJbPBnKNcsutIEM0k9fTuGVppMueg4QZn4UaIjWX5rY S7Nad4gviG8ZOGOyLN0t1cCwdPFaIehomosuK8FCg9mlrWwM67jI0swchvyEaGkH oUbjVYdaAj5m8Scw78jpVT3RpVuGgkmBRlWqlTL1Xo0NPpCBWHzGHDmK+DeIEveQ jOBQQKp88AxThHTIQgiGTlgzZX4RsFuwvbkke5VQUUUUDrGhiuZkoC32XC6ajAAp vOoaSuS6n5EMcw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:59 2026 by rpki-client