This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json) Hash identifier: xAC6t0tCeORQ0relb030TcZJfTSNb57z7yUMuTE0hd0= Subject key identifier: 5F:7E:D3:99:D3:C5:D4:F0:E2:06:60:01:96:6D:0E:FA:4D:11:71:AE Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Certificate serial: 019BF619A4C0658F11848B91F372345C0745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft Manifest number: 0995 Signing time: Sun 25 Jan 2026 17:00:34 +0000 Manifest this update: Sun 25 Jan 2026 17:00:34 +0000 Manifest next update: Mon 26 Jan 2026 17:00:34 +0000 Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=) 2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: u9ADEAZScFQgJlcA5T48CMpIQt2M5JGMuRLFERkwM9I=) 3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:a4:c0:65:8f:11:84:8b:91:f3:72:34:5c:07:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Validity Not Before: Jan 25 17:00:34 2026 GMT Not After : Jan 26 17:00:34 2026 GMT Subject: CN=5f7ed399d3c5d4f0e2066001966d0efa4d1171ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:2c:37:b0:6a:10:0f:be:b1:9a:1b:9d:5a: 2c:9e:bd:52:f4:70:ce:dd:22:b7:6d:8a:4e:80:08: e2:20:a7:33:02:7f:38:e1:58:03:0e:96:8a:c5:8d: 88:2e:48:42:a1:b9:ff:b2:67:91:af:7d:ce:71:d2: 0c:37:e1:1f:20:2a:6d:2d:28:dc:67:1f:43:2d:f3: c3:f8:02:5d:29:fa:d7:94:1a:a6:ff:87:52:2e:8f: 7f:7d:66:85:71:de:a8:3e:06:af:33:7b:f5:5a:39: c7:54:66:f6:a1:5e:b6:29:86:63:90:60:3c:ca:b8: a8:94:05:83:98:fc:e0:fb:44:6c:0c:e8:2e:10:35: 02:38:45:fc:79:88:28:d4:a4:8e:a6:9c:7d:cb:c3: 2a:11:5d:04:18:c6:bd:3f:bc:39:b0:e5:9a:c7:c8: d0:a3:41:a0:70:09:98:69:54:56:91:ae:79:3b:4b: d1:9d:45:5b:c1:98:be:45:c8:7f:db:c3:1b:c3:27: 67:0a:6e:28:15:6c:6c:9c:d7:18:2f:e1:97:b4:e5: 54:07:06:79:a4:1d:36:ab:d3:62:75:8f:34:dd:9a: 04:6e:e1:c9:ea:09:1c:b6:8b:2a:f1:dc:30:e4:59: 38:ed:4d:57:ca:45:58:a1:af:f7:0c:a4:b1:31:d0: 15:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7E:D3:99:D3:C5:D4:F0:E2:06:60:01:96:6D:0E:FA:4D:11:71:AE X509v3 Authority Key Identifier: keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:83:30:a4:5f:db:79:61:ec:5b:f8:0d:2f:02:3c:e9:1c:f9: 47:2d:b3:9b:e3:74:f2:f7:78:ce:ac:ff:8c:9d:29:fc:69:6f: 86:22:00:2e:0f:41:e0:e1:cf:32:68:19:64:67:df:90:24:bf: a9:65:ff:c3:9d:63:67:a5:89:64:b8:7d:0f:df:b6:72:01:54: 20:16:32:69:ba:82:fc:2a:e1:73:7c:fb:d1:c6:8a:e7:45:a1: d7:c5:ac:d9:9d:33:16:f6:5c:80:d5:56:7e:06:0a:eb:7f:cb: d2:af:c0:16:98:65:cc:1e:91:7a:da:87:42:bf:2a:78:d8:bb: 01:ae:c7:8d:b7:47:e2:d7:75:8d:a6:19:aa:93:15:f7:b9:74: 33:ed:e7:d2:dd:56:f2:15:c6:33:20:17:2e:08:af:57:42:9a: 58:75:dc:64:1f:44:d3:bf:5d:6a:84:bb:f4:ab:d3:2c:82:58: 10:55:70:11:de:a2:41:d1:cd:ff:3f:25:b2:b4:b1:1c:af:df: 09:39:a1:5f:a6:3c:e3:c3:ff:c4:aa:9b:cb:7c:14:81:82:49: de:f0:f4:22:57:5d:55:f7:a1:0e:06:e7:89:d7:6c:92:35:b5: 19:de:a2:7a:12:c3:f3:0e:60:cd:98:ee:2f:15:b7:ca:3f:3d: b1:40:7f:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GaTAZY8RhIuR83I0XAdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3 ZGU1YzQwHhcNMjYwMTI1MTcwMDM0WhcNMjYwMTI2MTcwMDM0WjAzMTEwLwYDVQQD Eyg1ZjdlZDM5OWQzYzVkNGYwZTIwNjYwMDE5NjZkMGVmYTRkMTE3MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CIsN7BqEA++sZobnVosnr1S9HDO 3SK3bYpOgAjiIKczAn844VgDDpaKxY2ILkhCobn/smeRr33OcdIMN+EfICptLSjc Zx9DLfPD+AJdKfrXlBqm/4dSLo9/fWaFcd6oPgavM3v1WjnHVGb2oV62KYZjkGA8 yriolAWDmPzg+0RsDOguEDUCOEX8eYgo1KSOppx9y8MqEV0EGMa9P7w5sOWax8jQ o0GgcAmYaVRWka55O0vRnUVbwZi+Rch/28MbwydnCm4oFWxsnNcYL+GXtOVUBwZ5 pB02q9NidY803ZoEbuHJ6gkctosq8dww5Fk47U1XykVYoa/3DKSxMdAV4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9+05nTxdTw4gZgAZZtDvpNEXGuMB8GA1UdIwQY MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5 LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIMwpF/b eWHsW/gNLwI86Rz5Ry2zm+N08vd4zqz/jJ0p/GlvhiIALg9B4OHPMmgZZGffkCS/ qWX/w51jZ6WJZLh9D9+2cgFUIBYyabqC/Crhc3z70caK50Wh18Ws2Z0zFvZcgNVW fgYK63/L0q/AFphlzB6RetqHQr8qeNi7Aa7HjbdH4td1jaYZqpMV97l0M+3n0t1W 8hXGMyAXLgivV0KaWHXcZB9E079daoS79KvTLIJYEFVwEd6iQdHN/z8lsrSxHK/f CTmhX6Y848P/xKqby3wUgYJJ3vD0IlddVfehDgbniddskjW1Gd6iehLD8w5gzZju LxW3yj89sUB/tw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:34 2026 by rpki-client