This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json) Hash identifier: iP6K/aPaqHl9Tf9miC2MjGoTYINswlDPL999jD5XrbE= Subject key identifier: 6C:CE:0F:45:03:AF:B2:31:8F:CD:E0:F7:01:30:88:8F:4B:24:A0:2B Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8 Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8 Certificate serial: 019BAE6F62B5B88995A76E1C6AB026967753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 19:01:33 +0000 Manifest this update: Sun 11 Jan 2026 19:01:33 +0000 Manifest next update: Mon 12 Jan 2026 19:01:33 +0000 Files and hashes: 1: 5SqsuyoErucRezmQTfvpY2XQz9g.roa (hash: 2gIJFCrAFvF4esdLzO2MxH+s496fv76stiFCWqMIITM=) 2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: BLO7cF+AWrBstKK9LdVGAwnsgME0mY32nR0NWNa4Z3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:62:b5:b8:89:95:a7:6e:1c:6a:b0:26:96:77:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8 Validity Not Before: Jan 11 19:01:33 2026 GMT Not After : Jan 12 19:01:33 2026 GMT Subject: CN=6cce0f4503afb2318fcde0f70130888f4b24a02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:d9:2d:02:0d:e5:60:69:24:4c:3f:15:95: 2b:8b:53:ef:05:2d:60:51:99:df:9f:97:1a:62:74: 6b:fc:2f:09:35:fb:e4:85:c5:f9:4a:8e:9f:8e:be: b9:a4:cb:0a:d8:94:4d:ce:98:e2:40:d6:e2:d2:03: 31:c8:a9:25:ff:a0:f1:12:bd:6b:8a:d6:61:c6:e4: 20:1e:62:51:6a:e5:11:bf:f6:4f:6d:33:90:02:82: d3:12:58:ba:9d:48:ae:95:57:fb:94:cf:d7:6a:e2: 4b:ea:c7:f2:32:4f:aa:59:80:f5:a8:01:85:9f:a5: 42:53:a1:77:a9:fe:96:27:4c:4b:d3:0f:eb:e6:fe: d8:44:7d:cb:7d:0d:32:be:4e:53:ba:95:af:be:c0: 38:c5:29:a6:ef:bd:91:97:9f:67:14:d6:c9:77:de: b3:86:03:52:6a:95:53:6c:0d:da:15:8b:87:1a:98: ae:e7:bd:19:b0:23:56:6c:7e:b1:38:7e:85:24:f4: 36:85:37:ea:4e:a5:23:39:6a:3a:18:6f:18:17:6b: 17:00:98:a5:c4:ce:1a:30:10:fd:8c:64:cf:4f:26: e8:98:81:7b:a9:05:6c:ec:66:83:2d:2d:ff:b6:07: 8d:38:c6:a3:83:21:70:ae:0f:74:91:92:74:32:64: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CE:0F:45:03:AF:B2:31:8F:CD:E0:F7:01:30:88:8F:4B:24:A0:2B X509v3 Authority Key Identifier: keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:c9:fb:f5:78:51:45:6c:9a:57:0c:de:c6:81:58:35:61: f8:cb:b1:d2:f2:07:15:22:fc:aa:fd:0d:0e:c8:76:1b:16:d8: a6:a2:ea:53:7f:67:ac:6d:5a:ed:7c:71:48:72:b0:2a:f2:ca: 72:fa:40:50:3f:97:86:9e:b3:a4:a1:20:aa:36:78:3c:9d:07: 4f:f6:07:fe:b2:d9:48:d1:5b:e3:b7:01:ad:2c:be:e6:39:00: 49:b4:38:72:f3:a0:ba:e3:25:89:0a:90:6a:05:41:b6:e2:46: 37:58:d1:5d:d9:15:52:a8:77:7e:19:fb:2f:30:8b:ce:7c:a2: 08:cb:61:53:de:5d:93:f4:2d:30:a1:d8:6b:62:b6:25:0c:53: 1d:1b:9d:3e:01:24:26:1a:c5:da:11:48:c4:8c:a6:66:19:4f: f5:2b:8f:77:a8:fa:f4:9d:1d:ac:84:e4:4c:f0:db:15:67:1d: 70:a5:bc:c6:b2:08:f6:26:83:4b:b9:62:fc:3b:14:a1:95:a9: e2:75:dd:9b:84:dc:05:6b:ee:e5:5d:5d:49:17:f3:8d:a1:9a: 05:af:9e:39:36:30:01:18:98:4e:31:60:f6:48:d9:d8:87:73: e7:a3:d1:b3:46:69:50:23:28:44:79:0c:40:14:6e:a3:e1:3d: 3e:b8:b7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub2K1uImVp24carAmlndTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NDZhZGQ4ZGFmZTk5ZjZhN2Q3ODdkNDQ3OTU0NWE2NDZm NmRlZDgwHhcNMjYwMTExMTkwMTMzWhcNMjYwMTEyMTkwMTMzWjAzMTEwLwYDVQQD Eyg2Y2NlMGY0NTAzYWZiMjMxOGZjZGUwZjcwMTMwODg4ZjRiMjRhMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7zZLQIN5WBpJEw/FZUri1PvBS1g UZnfn5caYnRr/C8JNfvkhcX5So6fjr65pMsK2JRNzpjiQNbi0gMxyKkl/6DxEr1r itZhxuQgHmJRauURv/ZPbTOQAoLTEli6nUiulVf7lM/XauJL6sfyMk+qWYD1qAGF n6VCU6F3qf6WJ0xL0w/r5v7YRH3LfQ0yvk5TupWvvsA4xSmm772Rl59nFNbJd96z hgNSapVTbA3aFYuHGpiu570ZsCNWbH6xOH6FJPQ2hTfqTqUjOWo6GG8YF2sXAJil xM4aMBD9jGTPTybomIF7qQVs7GaDLS3/tgeNOMajgyFwrg90kZJ0MmTgawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzOD0UDr7Ixj83g9wEwiI9LJKArMB8GA1UdIwQY MBaAFMdGrdja/pn2p9eH1EeVRaZG9t7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2It N2NiZmU3MzdhODI3LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2ItN2NiZmU3MzdhODI3 LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwrJ+/V4 UUVsmlcM3saBWDVh+Mux0vIHFSL8qv0NDsh2GxbYpqLqU39nrG1a7XxxSHKwKvLK cvpAUD+Xhp6zpKEgqjZ4PJ0HT/YH/rLZSNFb47cBrSy+5jkASbQ4cvOguuMliQqQ agVBtuJGN1jRXdkVUqh3fhn7LzCLznyiCMthU95dk/QtMKHYa2K2JQxTHRudPgEk JhrF2hFIxIymZhlP9SuPd6j69J0drITkTPDbFWcdcKW8xrII9iaDS7li/DsUoZWp 4nXdm4TcBWvu5V1dSRfzjaGaBa+eOTYwARiYTjFg9kjZ2Idz56PRs0ZpUCMoRHkM QBRuo+E9Pri3HQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:28:36 2026 by rpki-client