This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: cWil45U8r269KWZ70I7vMfOY4XPMklwriTHquWfP9Qk= Subject key identifier: FA:2B:DA:31:57:A0:CA:8E:31:4C:FE:D4:B6:E6:B5:3A:64:26:DF:41 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019BF3BDFBF3DA996F934F6A61107A024BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 13C1 Signing time: Sun 25 Jan 2026 06:01:12 +0000 Manifest this update: Sun 25 Jan 2026 06:01:12 +0000 Manifest next update: Mon 26 Jan 2026 06:01:12 +0000 Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 2: 7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa (hash: J9SJjSKqLYuFsUDjJoCt3JIVxoO5phlJCjXL8OymbCw=) 3: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: QKbUTIjKp6lAYKjYNTlVhDybLv3fb++L2ZD1nQ28nqQ=) 7: euBDK0teiudHQhrJi2_JfLpHbIo.roa (hash: 9Ch3Z5Y1YUurOyFvZ1PubLvXMBKJAt06gWqZgpWHSfM=) 8: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 10: q0DtQiqbRO1kiEzIVX5k6xXoq10.roa (hash: VGW6dfujXrAz0Uz3C08uLwMIn29nKSm2vfftvsO0bU8=) 11: tqoYIoJqozwAy_oQQoUSMn_UbDo.roa (hash: gw5mlh4GqpBE0X4qpdSCk5ZoQB0cwmYNXSfT/Fs8hD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:fb:f3:da:99:6f:93:4f:6a:61:10:7a:02:4b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 25 06:01:12 2026 GMT Not After : Jan 26 06:01:12 2026 GMT Subject: CN=fa2bda3157a0ca8e314cfed4b6e6b53a6426df41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:59:cc:c0:64:74:d2:f8:c9:56:8f:1c:93: 89:b5:98:65:f2:d1:fd:a0:cc:6c:ac:16:f7:98:b1: 69:89:dd:69:cc:f6:e0:e1:8b:7a:20:14:65:4e:40: 90:57:c8:4a:40:21:a5:d2:ba:af:03:a0:27:11:89: 65:82:89:eb:b8:17:56:ec:ff:24:46:be:65:72:32: 3d:2b:44:d7:3c:c0:96:d2:c4:96:3d:3b:f8:e6:c9: 0f:a3:19:be:2b:1b:2f:d2:68:81:51:a7:be:07:f3: 1b:ba:91:9a:23:5b:38:c8:d6:ff:96:29:28:8a:a4: 1a:21:b6:88:9b:93:74:3f:df:9b:85:da:7a:f2:ac: 0e:79:a1:97:a4:fd:bb:cc:df:49:dc:c8:11:87:99: 4e:99:ed:4b:8a:92:35:fd:f9:b8:cb:ee:33:52:cd: 49:f6:37:f0:77:8d:a1:58:16:3a:a2:cc:d1:fe:93: c2:5a:49:ea:57:52:3f:ab:88:d2:14:7a:31:c2:ac: f6:a7:f3:2a:fa:00:29:0c:85:28:32:de:69:85:f7: c1:70:4a:6d:31:cc:f6:d3:67:47:e6:18:10:19:de: fe:29:0d:2b:d5:ce:d7:c4:df:ad:75:86:87:a7:51: 6d:44:ef:79:09:fc:fd:6c:1f:19:29:b3:88:8a:96: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:DA:31:57:A0:CA:8E:31:4C:FE:D4:B6:E6:B5:3A:64:26:DF:41 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8f:67:d1:84:0b:f9:68:d1:28:7c:08:19:4b:31:10:9f:16: 76:12:06:b2:ab:79:91:ed:a8:ac:f2:10:06:cd:16:de:d9:3c: a1:0b:83:6f:04:27:31:b6:f6:e0:67:3e:9f:96:23:b1:80:ea: e9:dd:28:d6:16:1c:6c:df:c0:b1:08:08:ac:5a:2e:b3:f4:1d: 50:ac:fc:23:d0:33:2f:c6:d7:1e:af:1a:0a:8f:b3:44:e6:fe: fc:b8:99:aa:f7:a7:8e:ab:59:07:95:f0:f4:d4:1e:b4:ba:6f: 64:fc:9b:d7:90:9f:96:32:1b:2c:2a:81:6b:ea:b2:81:e9:bc: f5:72:f8:d7:bc:33:b8:77:88:5b:8f:e3:a6:68:a7:92:49:4b: 3b:8c:20:69:47:d3:c1:64:96:14:00:e0:8e:b2:92:7f:01:61: 2d:1b:ae:45:b1:98:61:cc:37:30:87:47:d7:72:12:0b:c2:93: ed:90:57:87:48:18:d4:66:16:74:ca:d1:83:83:30:bb:50:b9: f0:d1:a2:2c:1f:05:fe:fc:51:52:80:fd:d7:ad:90:f5:74:41: 0b:ad:e0:eb:a0:d3:bf:fb:bc:71:c1:7a:a6:0d:cc:4b:09:82: 3a:a9:aa:48:b2:f4:f2:83:77:63:bf:b5:25:14:9d:5b:3f:5b: 56:a7:27:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvfvz2plvk09qYRB6Akv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTI1MDYwMTEyWhcNMjYwMTI2MDYwMTEyWjAzMTEwLwYDVQQD EyhmYTJiZGEzMTU3YTBjYThlMzE0Y2ZlZDRiNmU2YjUzYTY0MjZkZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ1ZzMBkdNL4yVaPHJOJtZhl8tH9 oMxsrBb3mLFpid1pzPbg4Yt6IBRlTkCQV8hKQCGl0rqvA6AnEYllgonruBdW7P8k Rr5lcjI9K0TXPMCW0sSWPTv45skPoxm+Kxsv0miBUae+B/MbupGaI1s4yNb/liko iqQaIbaIm5N0P9+bhdp68qwOeaGXpP27zN9J3MgRh5lOme1LipI1/fm4y+4zUs1J 9jfwd42hWBY6oszR/pPCWknqV1I/q4jSFHoxwqz2p/Mq+gApDIUoMt5phffBcEpt Mcz202dH5hgQGd7+KQ0r1c7XxN+tdYaHp1FtRO95Cfz9bB8ZKbOIipZchQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPor2jFXoMqOMUz+1LbmtTpkJt9BMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiI9n0YQL +WjRKHwIGUsxEJ8WdhIGsqt5ke2orPIQBs0W3tk8oQuDbwQnMbb24Gc+n5YjsYDq 6d0o1hYcbN/AsQgIrFous/QdUKz8I9AzL8bXHq8aCo+zROb+/LiZqvenjqtZB5Xw 9NQetLpvZPyb15CfljIbLCqBa+qygem89XL417wzuHeIW4/jpminkklLO4wgaUfT wWSWFADgjrKSfwFhLRuuRbGYYcw3MIdH13ISC8KT7ZBXh0gY1GYWdMrRg4Mwu1C5 8NGiLB8F/vxRUoD9162Q9XRBC63g66DTv/u8ccF6pg3MSwmCOqmqSLL08oN3Y7+1 JRSdWz9bVqcnjA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:22:26 2026 by rpki-client