This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json) Hash identifier: t4SSU7HZIQXEDuzPfrwBANDQQTDfKOxNo1iobxB09NQ= Subject key identifier: 10:ED:AC:D9:AA:1F:CE:B9:B3:96:2A:62:69:9B:CB:B8:3D:1B:40:ED Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01 Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001 Certificate serial: 019BF72C841B301139355A3F51AD8B51423B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft Manifest number: 1757 Signing time: Sun 25 Jan 2026 22:00:48 +0000 Manifest this update: Sun 25 Jan 2026 22:00:48 +0000 Manifest next update: Mon 26 Jan 2026 22:00:48 +0000 Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: 8hWOirOflaXMXolnPoPVx+k2wD87EdpjP2awxrGY3fw=) 2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:84:1b:30:11:39:35:5a:3f:51:ad:8b:51:42:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001 Validity Not Before: Jan 25 22:00:48 2026 GMT Not After : Jan 26 22:00:48 2026 GMT Subject: CN=10edacd9aa1fceb9b3962a62699bcbb83d1b40ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:b7:d4:75:42:31:8f:26:2c:23:f5:23:5b: 58:fd:96:3d:8d:15:3f:96:5e:d3:7b:ed:90:db:29: 6a:23:87:5f:dc:42:f0:d4:45:57:1d:b0:39:f4:d9: 17:36:33:d1:ad:07:fc:af:c4:03:18:f3:a5:14:7c: 57:83:cc:f7:f7:35:f6:81:0f:14:ee:9c:39:bc:b2: 9b:aa:07:64:69:e7:7a:0e:0c:b0:54:d9:ab:c9:c3: 5c:0f:46:3e:b8:30:2d:d8:ea:d4:66:fc:fc:24:d9: b8:f4:2b:ce:75:e0:da:95:5b:89:3b:ef:8d:51:10: 98:b6:ac:10:d9:6e:e2:38:bc:6c:38:5b:29:a4:ae: 4a:0f:c4:68:5a:f5:69:39:bd:cf:93:f1:53:a2:c2: fc:14:b6:ff:3f:a5:d5:14:b4:b5:85:38:d5:81:e3: 0f:d6:a6:8c:61:41:ab:c8:cf:39:1f:ad:1a:15:9a: 7d:7b:86:b6:a2:43:76:b7:46:4a:66:2a:ab:1a:15: 83:1e:bf:ff:86:db:a4:a9:c2:57:2a:36:e8:63:31: 42:98:66:dd:68:76:6c:23:ab:52:51:b7:a8:83:ba: 28:bb:94:be:ed:99:69:a1:1f:7e:55:c2:80:1a:4c: 6f:39:6b:fc:8d:5d:f1:6a:02:5b:8e:7d:ec:66:ed: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:ED:AC:D9:AA:1F:CE:B9:B3:96:2A:62:69:9B:CB:B8:3D:1B:40:ED X509v3 Authority Key Identifier: keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:81:54:80:5c:9e:fa:44:ea:e5:f6:c9:dd:d7:a0:ff:98:be: 5e:9a:9b:00:9b:3b:bd:65:12:ab:28:70:c9:40:28:65:98:d7: 62:e4:25:9c:e2:f2:e2:94:4c:b0:10:eb:2e:48:d3:14:ad:7c: 30:cc:2d:aa:51:54:40:ef:b2:cf:2a:d7:c5:d8:b0:76:93:69: 1c:c6:19:e3:eb:00:a1:cb:85:fb:24:68:f9:09:9d:3a:98:b3: f7:bf:d2:a2:e7:41:bc:bc:12:79:f1:92:7e:93:b0:7f:04:5d: cd:b4:d2:36:22:9c:70:63:17:48:9e:27:03:ba:3e:5f:a2:df: 5e:82:c7:77:e0:02:4b:fb:48:f5:23:e3:ae:0e:48:f5:47:67: ad:55:4b:3c:ff:60:b1:cc:ec:71:65:2b:10:0e:d9:61:ad:94: df:64:54:38:f8:5c:1b:8b:51:b3:eb:d5:28:ba:5b:f6:8a:63: dc:e9:fe:c8:91:70:bf:6a:ab:6e:19:74:3a:57:4c:aa:01:72: cc:90:18:f3:1d:e8:9e:e1:02:6d:30:77:7f:6e:45:74:52:9a: b3:71:39:56:ef:1a:83:0e:45:51:1e:db:ee:1c:b5:0d:05:76: 2f:cc:7a:0e:5a:a2:2c:e9:1a:98:b3:2e:63:fc:1c:cd:15:ba: e4:03:3d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LIQbMBE5NVo/Ua2LUUI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNzBmZTFkNzVmN2RhNzZkMmUzZGMzNDRmYjFmMGIwYjY5 ZGUwMDEwHhcNMjYwMTI1MjIwMDQ4WhcNMjYwMTI2MjIwMDQ4WjAzMTEwLwYDVQQD EygxMGVkYWNkOWFhMWZjZWI5YjM5NjJhNjI2OTliY2JiODNkMWI0MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVy31HVCMY8mLCP1I1tY/ZY9jRU/ ll7Te+2Q2ylqI4df3ELw1EVXHbA59NkXNjPRrQf8r8QDGPOlFHxXg8z39zX2gQ8U 7pw5vLKbqgdkaed6DgywVNmrycNcD0Y+uDAt2OrUZvz8JNm49CvOdeDalVuJO++N URCYtqwQ2W7iOLxsOFsppK5KD8RoWvVpOb3Pk/FTosL8FLb/P6XVFLS1hTjVgeMP 1qaMYUGryM85H60aFZp9e4a2okN2t0ZKZiqrGhWDHr//htukqcJXKjboYzFCmGbd aHZsI6tSUbeog7oou5S+7ZlpoR9+VcKAGkxvOWv8jV3xagJbjn3sZu0O+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDtrNmqH865s5YqYmmby7g9G0DtMB8GA1UdIwQY MBaAFD1w/h1199p20uPcNE+x8LC2neABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYt Yjg1MmJkODEyM2YwLzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYtYjg1MmJkODEyM2Yw LzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoFUgFye +kTq5fbJ3deg/5i+XpqbAJs7vWUSqyhwyUAoZZjXYuQlnOLy4pRMsBDrLkjTFK18 MMwtqlFUQO+yzyrXxdiwdpNpHMYZ4+sAocuF+yRo+QmdOpiz97/SoudBvLwSefGS fpOwfwRdzbTSNiKccGMXSJ4nA7o+X6LfXoLHd+ACS/tI9SPjrg5I9UdnrVVLPP9g sczscWUrEA7ZYa2U32RUOPhcG4tRs+vVKLpb9opj3On+yJFwv2qrbhl0OldMqgFy zJAY8x3onuECbTB3f25FdFKas3E5Vu8agw5FUR7b7hy1DQV2L8x6DlqiLOkamLMu Y/wczRW65AM9yA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:58 2026 by rpki-client