This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json) Hash identifier: TYIhghxbA0kbAEQ8it+gYEaMVkJkYKzIKiI13qnC23s= Subject key identifier: 67:8B:8D:04:92:62:34:15:B6:64:72:EC:F8:36:68:90:96:35:FA:FF Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45 Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45 Certificate serial: 019BB215774355EB71ABC65D77BA2C82C32E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft Manifest number: 0643 Signing time: Mon 12 Jan 2026 12:01:49 +0000 Manifest this update: Mon 12 Jan 2026 12:01:49 +0000 Manifest next update: Tue 13 Jan 2026 12:01:49 +0000 Files and hashes: 1: PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa (hash: 19NEYDyyhBU0DYdUPGu2u1lBZKeokSrHjnAnkDsiz24=) 2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: YVxAV+yVrHl/c7uOIUKtFOC+RcuyN658VeOj/fTbLmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:15:77:43:55:eb:71:ab:c6:5d:77:ba:2c:82:c3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45 Validity Not Before: Jan 12 12:01:49 2026 GMT Not After : Jan 13 12:01:49 2026 GMT Subject: CN=678b8d0492623415b66472ecf83668909635faff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:44:8d:9a:de:f8:c9:0b:d8:1c:a2:9d:95: a9:41:d8:41:e5:37:49:89:87:96:55:27:52:24:30: 42:98:be:c9:70:69:02:28:14:96:3c:34:78:c5:69: 67:91:2a:cd:e2:29:e7:d5:9e:43:8b:15:47:5c:f6: 12:de:4f:81:65:78:ff:ea:25:c9:7f:0b:8e:7c:41: 8d:82:0b:27:43:7e:cb:20:e1:24:ab:d8:7a:85:cc: 0e:a1:cd:73:26:2a:e1:96:46:f6:61:e1:e3:3a:6c: 20:48:e8:f5:33:40:5b:11:74:99:f9:20:80:48:46: 3a:8a:3c:4d:7f:f5:c0:f6:05:77:61:7f:59:68:e9: 8d:9b:b8:f7:40:77:3d:1d:f1:6c:63:ae:a1:e0:0b: 36:51:80:96:f0:93:08:e2:69:29:5f:11:b4:a7:4a: d1:fb:84:be:23:2b:76:49:13:4c:63:c3:c5:35:a7: ff:4a:28:26:de:b6:94:04:92:63:f6:18:38:a1:8e: 59:db:6f:b1:65:55:3d:89:c5:6a:be:09:1f:0e:77: a9:2f:4f:a6:9d:94:f3:a3:d4:07:94:a7:f7:51:e5: c2:99:6c:0b:aa:17:98:be:db:15:b6:93:b2:4b:2d: 58:62:93:aa:20:06:73:0e:f5:79:ce:42:e1:1c:d7: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8B:8D:04:92:62:34:15:B6:64:72:EC:F8:36:68:90:96:35:FA:FF X509v3 Authority Key Identifier: keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8d:7e:ec:c4:69:72:d9:0f:ca:fb:40:ec:29:e7:7e:a8:cc: 67:77:54:8e:b8:59:a1:9c:a7:e0:d8:c2:6d:77:c5:b8:16:c1: 7a:d8:64:35:7b:52:08:e0:87:94:a9:85:89:1b:68:e0:2d:6d: 47:8d:e6:30:df:a3:35:d2:ac:57:5c:bc:9d:9e:9e:2a:5b:8c: e1:91:aa:c6:cd:29:37:18:a6:95:59:3e:d1:32:c4:23:60:22: be:6a:3a:23:9d:71:9c:7c:af:99:51:21:af:9f:af:65:a5:ee: 9e:3f:b0:e1:9e:e7:a2:f5:ad:45:39:49:fd:5c:83:92:f8:6c: f9:1f:0a:49:bb:d3:83:42:96:ab:e0:e1:ce:5d:c7:79:ca:81: d4:fb:b1:89:9e:65:8f:40:9a:70:bf:a8:c8:4e:1e:6c:9e:01: 90:f7:ca:bf:80:b7:54:c8:42:21:67:8f:4e:de:4a:14:f6:4d: 82:28:8f:01:fd:f3:44:0f:ca:33:06:75:c0:12:ea:98:49:1d: 8d:04:38:e7:91:0f:bf:9c:cd:d0:16:28:72:a0:78:f8:a6:23: 9e:ec:47:e4:e5:dd:51:62:f6:7c:75:2b:39:7f:5b:e1:27:c5: 66:1b:75:24:8d:76:a6:46:3d:0c:2b:7e:b5:66:ea:3b:80:2b: ac:78:f7:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFXdDVetxq8Zdd7osgsMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTZhMDY4NGQxZDM4YmFjZjQzMzhjMmIwMWRiM2I0MTM3 MGViNDUwHhcNMjYwMTEyMTIwMTQ5WhcNMjYwMTEzMTIwMTQ5WjAzMTEwLwYDVQQD Eyg2NzhiOGQwNDkyNjIzNDE1YjY2NDcyZWNmODM2Njg5MDk2MzVmYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBpEjZre+MkL2ByinZWpQdhB5TdJ iYeWVSdSJDBCmL7JcGkCKBSWPDR4xWlnkSrN4inn1Z5DixVHXPYS3k+BZXj/6iXJ fwuOfEGNggsnQ37LIOEkq9h6hcwOoc1zJirhlkb2YeHjOmwgSOj1M0BbEXSZ+SCA SEY6ijxNf/XA9gV3YX9ZaOmNm7j3QHc9HfFsY66h4As2UYCW8JMI4mkpXxG0p0rR +4S+Iyt2SRNMY8PFNaf/Sigm3raUBJJj9hg4oY5Z22+xZVU9icVqvgkfDnepL0+m nZTzo9QHlKf3UeXCmWwLqheYvtsVtpOySy1YYpOqIAZzDvV5zkLhHNdBSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeLjQSSYjQVtmRy7Pg2aJCWNfr/MB8GA1UdIwQY MBaAFLMWoGhNHTi6z0M4wrAds7QTcOtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjct MTRiOTdjZmJhZDQ3LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjctMTRiOTdjZmJhZDQ3 LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo41+7MRp ctkPyvtA7CnnfqjMZ3dUjrhZoZyn4NjCbXfFuBbBethkNXtSCOCHlKmFiRto4C1t R43mMN+jNdKsV1y8nZ6eKluM4ZGqxs0pNximlVk+0TLEI2Aivmo6I51xnHyvmVEh r5+vZaXunj+w4Z7novWtRTlJ/VyDkvhs+R8KSbvTg0KWq+Dhzl3HecqB1PuxiZ5l j0CacL+oyE4ebJ4BkPfKv4C3VMhCIWePTt5KFPZNgiiPAf3zRA/KMwZ1wBLqmEkd jQQ455EPv5zN0BYocqB4+KYjnuxH5OXdUWL2fHUrOX9b4SfFZht1JI12pkY9DCt+ tWbqO4ArrHj3Ag== -----END CERTIFICATE-----Generated at Mon Jan 12 14:28:25 2026 by rpki-client