This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json) Hash identifier: 5CN1onp90Tmdg15imEY7lMURvnKZ3c6xlzXAIck7Y8Y= Subject key identifier: EB:AA:FD:31:A4:D7:95:2B:E6:8C:34:4F:26:53:FF:1F:50:4F:DC:96 Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8 Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8 Certificate serial: 019BF763489093BC3EF4AA1817971E2B18A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft Manifest number: 0217 Signing time: Sun 25 Jan 2026 23:00:37 +0000 Manifest this update: Sun 25 Jan 2026 23:00:37 +0000 Manifest next update: Mon 26 Jan 2026 23:00:37 +0000 Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=) 2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: Qqnx+vbqYaB7IsQ5T/F/nHu2+91eII8lFQ9U1QW/Els=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:48:90:93:bc:3e:f4:aa:18:17:97:1e:2b:18:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8 Validity Not Before: Jan 25 23:00:37 2026 GMT Not After : Jan 26 23:00:37 2026 GMT Subject: CN=ebaafd31a4d7952be68c344f2653ff1f504fdc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:0a:7d:a4:e6:40:33:01:47:87:ac:42:8b: 4f:94:a7:fa:f3:15:5d:c2:2e:a1:8e:a1:c6:85:3b: 28:a9:bc:5b:35:c8:50:7c:63:38:da:f7:83:e9:0f: 07:72:12:b3:bf:5a:0c:84:5a:c9:68:c3:e2:2b:99: 31:e9:40:0d:c5:7d:e2:3c:74:9f:90:2d:a9:5f:f9: 62:f6:5f:e5:16:3c:49:8b:b6:93:49:29:b5:08:b6: d8:97:5e:df:d5:be:6a:4a:43:2c:c0:01:e1:52:57: 96:b3:f9:7e:ee:a9:6c:b8:22:9a:5f:54:70:69:50: 1f:63:d5:ff:aa:67:54:03:39:9f:71:fb:c7:39:a4: 96:94:16:ea:52:c8:38:6d:ea:91:80:a6:ad:81:bd: 48:c3:6e:3c:dd:a4:3e:8a:23:58:ef:f2:50:18:87: f4:e0:9d:1f:14:9a:d5:e3:c4:54:53:99:eb:a1:aa: 09:25:89:13:64:aa:a0:f0:ef:09:1d:a2:19:aa:1e: 23:02:23:0b:94:96:aa:77:4c:5d:f0:a5:58:c7:b5: c2:be:49:3c:b9:21:81:cd:e6:5b:11:20:6f:68:a4: 4e:58:4f:67:7c:19:4e:09:61:a4:6b:6b:18:28:e2: 71:b4:8d:d5:3b:aa:d6:6b:43:6e:16:0e:63:df:75: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AA:FD:31:A4:D7:95:2B:E6:8C:34:4F:26:53:FF:1F:50:4F:DC:96 X509v3 Authority Key Identifier: keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5c:e4:de:ba:37:51:f0:79:19:ea:f8:42:22:24:ac:4b:b5: 4c:4d:ad:e3:38:d8:87:07:fb:e2:6f:4d:38:49:83:81:ea:e6: 25:ed:23:0c:9d:07:05:a4:d9:5c:ae:5f:fb:94:54:27:28:f1: aa:27:86:fb:8b:cc:f7:66:df:2b:c1:3b:10:6d:a8:d6:a0:3f: 1b:dc:0f:69:fa:af:db:5a:f5:35:27:b8:7c:19:24:30:4d:7a: 51:39:8f:50:1c:2e:ff:d6:4f:20:e4:cc:16:ba:50:fc:79:4a: de:6b:95:05:3e:a3:8d:3a:26:63:13:b7:5b:c9:dc:29:f6:91: 53:9e:f7:78:4a:6b:74:6f:85:bf:9c:a5:2b:0e:da:39:86:42: be:b8:47:85:fa:fb:ff:57:15:52:7e:85:82:74:0b:33:49:e4: 54:4f:57:c0:91:cf:86:2d:c9:38:49:4e:56:d5:6e:e4:fa:a8: 3d:b8:5f:d5:84:1a:98:a2:ff:f7:f6:29:f0:32:69:dc:e2:25: b9:7f:4b:cc:d0:d4:69:14:25:01:87:20:a7:b4:61:db:a0:aa: e7:f2:4d:f8:61:5c:10:75:25:e4:7d:00:21:93:72:ec:90:78: e4:76:96:59:3e:a5:f4:a6:54:33:b8:e7:a4:c6:3c:11:db:ac: 15:f0:05:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0iQk7w+9KoYF5ceKximMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTdjY2NlNzRjMWFmYmE4M2I3YmE4NWQ5NzcxMmIyYmNj NGE1ZTgwHhcNMjYwMTI1MjMwMDM3WhcNMjYwMTI2MjMwMDM3WjAzMTEwLwYDVQQD EyhlYmFhZmQzMWE0ZDc5NTJiZTY4YzM0NGYyNjUzZmYxZjUwNGZkYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxsKfaTmQDMBR4esQotPlKf68xVd wi6hjqHGhTsoqbxbNchQfGM42veD6Q8HchKzv1oMhFrJaMPiK5kx6UANxX3iPHSf kC2pX/li9l/lFjxJi7aTSSm1CLbYl17f1b5qSkMswAHhUleWs/l+7qlsuCKaX1Rw aVAfY9X/qmdUAzmfcfvHOaSWlBbqUsg4beqRgKatgb1Iw2483aQ+iiNY7/JQGIf0 4J0fFJrV48RUU5nroaoJJYkTZKqg8O8JHaIZqh4jAiMLlJaqd0xd8KVYx7XCvkk8 uSGBzeZbESBvaKROWE9nfBlOCWGka2sYKOJxtI3VO6rWa0NuFg5j33Vj9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuq/TGk15Ur5ow0TyZT/x9QT9yWMB8GA1UdIwQY MBaAFK8XzM50wa+6g7e6hdl3ErK8xKXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEt YTU3NTdhYWFmZmZhLzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEtYTU3NTdhYWFmZmZh LzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVzk3ro3 UfB5Ger4QiIkrEu1TE2t4zjYhwf74m9NOEmDgermJe0jDJ0HBaTZXK5f+5RUJyjx qieG+4vM92bfK8E7EG2o1qA/G9wPafqv21r1NSe4fBkkME16UTmPUBwu/9ZPIOTM FrpQ/HlK3muVBT6jjTomYxO3W8ncKfaRU573eEprdG+Fv5ylKw7aOYZCvrhHhfr7 /1cVUn6FgnQLM0nkVE9XwJHPhi3JOElOVtVu5PqoPbhf1YQamKL/9/Yp8DJp3OIl uX9LzNDUaRQlAYcgp7Rh26Cq5/JN+GFcEHUl5H0AIZNy7JB45HaWWT6l9KZUM7jn pMY8EdusFfAF3A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:40 2026 by rpki-client