This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: 9E0MNtkMQIUE2N63JhhFW++s6BaZhcZrdc5yJ6xw30Y= Subject key identifier: 3B:B4:12:B1:A1:E8:0F:4F:EA:E7:C7:65:3C:7F:35:E6:B6:78:A7:1B Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019B7C01B110E11703AC1BA714FE7E0E0023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1364 Signing time: Fri 02 Jan 2026 00:00:44 +0000 Manifest this update: Fri 02 Jan 2026 00:00:44 +0000 Manifest next update: Sat 03 Jan 2026 00:00:44 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: Li6t5QbkIz0jcTjPhBlXG53uZ84.roa (hash: Xkhf/ddZBNOU+LF5tFYFJFsECaQY2nXPXrUZaL0jirY=) 5: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 6: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 7: P9iZqoxuCT_faQ_VmOItL5eeI3w.roa (hash: vyjNIFB4l6R6SblkqwaOxyYaaYx/koFd/Fz2EeWD6hY=) 8: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=) 11: snU0F1xcSWMYFQ2eQd5gZYlccBE.roa (hash: JdJmPKAnAhiR1J0EFD0dsDA9MKwuUlfNp7RQdQdV3Wk=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: /7ieAYk8Bk7q4hR2REc2kNT/IhNKbxpL3yd5/LMdKsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:01:b1:10:e1:17:03:ac:1b:a7:14:fe:7e:0e:00:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 2 00:00:44 2026 GMT Not After : Jan 3 00:00:44 2026 GMT Subject: CN=3bb412b1a1e80f4feae7c7653c7f35e6b678a71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dc:e6:5c:04:a7:fe:4c:19:a5:38:07:64:d3: c2:d5:df:59:83:0b:a7:7e:2b:b1:57:7d:02:57:1d: 26:12:c5:56:3c:c8:2a:3e:e4:75:05:13:a3:47:ca: 96:00:c1:b7:cb:ea:26:67:de:45:c9:ea:b1:df:32: 12:fb:3c:d9:d8:37:57:97:dd:50:21:8a:74:7e:85: 80:5c:69:71:e4:b6:f7:d7:db:ca:d5:27:4a:b0:6e: e6:9d:c7:c6:90:8f:45:9d:ae:ef:e4:14:c9:cf:e6: 4c:4e:15:8e:34:ed:43:39:d6:d8:5f:b8:9b:fe:43: ed:4e:a4:85:88:d0:5c:d1:80:01:e0:d0:0a:76:33: b3:77:dd:8b:3c:d5:03:1d:e7:bf:67:cf:53:d3:04: ea:94:1f:f0:cf:36:7f:01:0f:82:01:de:7d:ec:76: 49:74:45:bc:06:a1:8d:05:42:6e:48:af:ad:16:b5: 59:16:77:42:01:a1:69:25:f4:49:99:72:01:4b:37: e5:9b:1c:04:a6:6e:a7:64:54:12:4f:51:26:3b:21: fe:4d:c0:1a:40:3f:1e:20:ab:96:33:91:20:d4:4a: 43:d8:22:3b:5e:bf:83:de:95:34:61:fb:b2:04:e6: de:29:dd:06:4a:e9:fb:6d:ca:ae:5b:96:73:75:19: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:12:B1:A1:E8:0F:4F:EA:E7:C7:65:3C:7F:35:E6:B6:78:A7:1B X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e5:aa:32:25:ca:38:37:dd:64:81:3f:4a:12:18:06:ce:e9: 18:76:06:68:4e:17:b6:1e:54:5a:35:12:b6:17:1f:3c:e6:11: 33:00:69:29:1e:1a:8e:80:86:94:f0:2a:51:73:1c:45:eb:f4: ba:a9:8e:72:28:e5:02:72:32:14:85:fa:a8:63:bd:b5:d9:73: 7a:ee:33:1a:8a:9f:bb:25:8b:10:a9:f6:7b:90:8f:8f:fb:e5: d6:1d:70:f7:d8:ee:5f:f9:62:77:6b:b6:30:af:61:d1:6c:86: 32:d0:30:de:24:25:89:8e:87:ee:7e:9e:24:ad:fc:a6:9c:1a: ed:2b:66:a9:35:84:f8:e6:a0:55:8b:3f:51:da:71:86:d7:ab: f9:ec:00:cc:80:4b:02:c1:53:95:03:94:b4:20:09:3d:da:1b: 90:87:d8:5e:6f:7b:69:1f:9c:8d:37:6a:24:d1:8a:bc:89:06: ef:ef:10:75:3c:d1:c8:11:f4:73:7f:3d:96:a6:15:16:8b:d4: d4:04:ce:d7:19:1d:57:c7:99:cc:44:8a:79:6e:a1:66:57:84: 22:9d:db:37:1e:ad:c2:ae:f0:f1:3e:ce:fd:f7:d7:88:02:e3: 4b:da:84:d6:bd:7e:cf:32:4b:08:ab:55:ef:53:f0:06:0d:87: 2a:5b:7f:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8AbEQ4RcDrBunFP5+DgAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTAyMDAwMDQ0WhcNMjYwMTAzMDAwMDQ0WjAzMTEwLwYDVQQD EygzYmI0MTJiMWExZTgwZjRmZWFlN2M3NjUzYzdmMzVlNmI2NzhhNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9zmXASn/kwZpTgHZNPC1d9Zgwun fiuxV30CVx0mEsVWPMgqPuR1BROjR8qWAMG3y+omZ95Fyeqx3zIS+zzZ2DdXl91Q IYp0foWAXGlx5Lb319vK1SdKsG7mncfGkI9Fna7v5BTJz+ZMThWONO1DOdbYX7ib /kPtTqSFiNBc0YAB4NAKdjOzd92LPNUDHee/Z89T0wTqlB/wzzZ/AQ+CAd597HZJ dEW8BqGNBUJuSK+tFrVZFndCAaFpJfRJmXIBSzflmxwEpm6nZFQST1EmOyH+TcAa QD8eIKuWM5Eg1EpD2CI7Xr+D3pU0YfuyBObeKd0GSun7bcquW5ZzdRnFUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu0ErGh6A9P6ufHZTx/Nea2eKcbMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeWqMiXK ODfdZIE/ShIYBs7pGHYGaE4Xth5UWjUSthcfPOYRMwBpKR4ajoCGlPAqUXMcRev0 uqmOcijlAnIyFIX6qGO9tdlzeu4zGoqfuyWLEKn2e5CPj/vl1h1w99juX/lid2u2 MK9h0WyGMtAw3iQliY6H7n6eJK38ppwa7StmqTWE+OagVYs/Udpxhter+ewAzIBL AsFTlQOUtCAJPdobkIfYXm97aR+cjTdqJNGKvIkG7+8QdTzRyBH0c389lqYVFovU 1ATO1xkdV8eZzESKeW6hZleEIp3bNx6twq7w8T7O/ffXiALjS9qE1r1+zzJLCKtV 71PwBg2HKlt/Iw== -----END CERTIFICATE-----Generated at Fri Jan 2 08:19:27 2026 by rpki-client