This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: afv4s0lc2vm8E4dR/d1IopjOoCkikFZXE1CAAHATiVo= Subject key identifier: F3:81:75:12:5D:65:EC:9A:53:86:15:7B:3C:FF:BB:24:3A:14:91:4D Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019BF8E3FF7C8A966D9088F7FF4ACE608CC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1802 Signing time: Mon 26 Jan 2026 06:00:50 +0000 Manifest this update: Mon 26 Jan 2026 06:00:50 +0000 Manifest next update: Tue 27 Jan 2026 06:00:50 +0000 Files and hashes: 1: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 2: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (hash: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY=) 3: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 4: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 5: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: ETQ5aoGRgCXblE4RAI+aMX5NylKlGLDk1vP3xk8rAFA=) 6: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 7: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 8: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 9: e_Y8m6hQnaU1_F275I-kuLokN-4.roa (hash: IKlSVsHkmxTdflTQC2UglUrzLaalL2q7STsM2XkFnP4=) 10: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (hash: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:ff:7c:8a:96:6d:90:88:f7:ff:4a:ce:60:8c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 26 06:00:50 2026 GMT Not After : Jan 27 06:00:50 2026 GMT Subject: CN=f38175125d65ec9a5386157b3cffbb243a14914d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:2d:52:da:99:72:0b:8d:bf:e7:87:f3:07: 37:6c:14:ae:b6:a3:ff:8e:bc:da:2b:f7:49:28:cd: f0:21:c6:02:4a:b0:00:ef:69:9d:e1:97:99:27:4c: ea:d7:57:62:fb:92:d6:d0:43:b8:bb:d8:14:c1:fe: a3:67:16:84:50:3a:27:a1:ce:ba:21:c0:c1:ef:bf: e5:47:73:d6:05:1f:ef:ec:b6:0f:0b:b3:6c:a4:ac: 92:f2:31:cf:75:2b:b2:52:41:f9:5b:50:e7:f2:64: 3e:eb:40:c1:48:f4:65:54:84:f7:cf:64:a4:f5:fe: e5:2e:13:b4:b6:8f:fe:dc:f7:62:2f:9e:1f:ea:54: 5f:e3:ca:62:c9:b6:56:ca:d1:fd:27:75:7b:cf:6b: 34:0d:da:87:0d:aa:44:87:1f:fb:23:ae:36:6e:af: 7e:5f:c8:fe:43:7d:c2:6d:02:49:d7:4d:3e:ab:04: 91:ae:8e:91:6d:30:3d:2d:02:0c:30:25:f0:d9:a1: cc:01:4b:b6:70:61:1d:fb:40:e9:d2:f4:c5:54:6e: 00:e2:47:04:b6:2d:5e:46:25:01:e0:ff:89:ff:b3: b9:23:59:41:4d:ee:69:b6:ac:c5:14:78:11:03:b7: fc:60:35:e2:d2:87:da:b5:36:3d:0d:b5:6a:13:a2: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:75:12:5D:65:EC:9A:53:86:15:7B:3C:FF:BB:24:3A:14:91:4D X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f4:94:e7:94:89:11:10:33:50:bc:58:47:4d:63:50:94:10: 08:bd:df:e5:ed:3e:f5:3a:f8:57:ce:27:3b:7f:b7:2d:cf:47: 34:da:4e:58:62:14:71:ac:1a:a7:af:68:1e:ae:64:3f:b5:6a: 30:90:06:b7:cd:9b:ac:4b:c9:1a:7d:d8:a0:7b:38:d4:78:96: c3:ba:5c:1a:ef:e1:08:5a:23:4e:aa:1f:a0:21:11:58:d5:c7: c3:ee:fb:f5:ab:cd:d9:7a:d1:7e:22:98:a4:b4:a4:11:e8:75: 1d:21:b9:8d:1d:84:c2:55:a6:a0:27:4c:1e:1a:e2:92:68:7a: b9:94:60:a0:04:c2:b7:48:ec:bc:8e:79:99:a1:ac:0b:15:93: ad:68:9f:28:a9:f8:c4:e5:f5:cd:4f:ad:c4:9b:1f:bc:a9:0a: aa:2b:88:ba:65:a3:76:e3:a8:87:db:29:f8:39:24:14:5b:49: c8:8a:d0:b7:88:f7:bd:37:2d:fa:d5:ad:f7:2c:e0:15:39:72: 57:12:9d:ec:11:2b:b0:a2:12:03:e8:ec:fa:e6:58:34:0e:06: 72:39:fd:ec:bb:74:e9:8a:d2:2c:58:47:e8:35:a1:9c:37:62: 57:e6:0f:d0:d4:a4:e5:de:fd:9b:10:35:4d:21:e0:b7:e4:c9: 88:29:c1:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv44/98ipZtkIj3/0rOYIzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTI2MDYwMDUwWhcNMjYwMTI3MDYwMDUwWjAzMTEwLwYDVQQD EyhmMzgxNzUxMjVkNjVlYzlhNTM4NjE1N2IzY2ZmYmIyNDNhMTQ5MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGEtUtqZcguNv+eH8wc3bBSutqP/ jrzaK/dJKM3wIcYCSrAA72md4ZeZJ0zq11di+5LW0EO4u9gUwf6jZxaEUDonoc66 IcDB77/lR3PWBR/v7LYPC7NspKyS8jHPdSuyUkH5W1Dn8mQ+60DBSPRlVIT3z2Sk 9f7lLhO0to/+3PdiL54f6lRf48piybZWytH9J3V7z2s0DdqHDapEhx/7I642bq9+ X8j+Q33CbQJJ100+qwSRro6RbTA9LQIMMCXw2aHMAUu2cGEd+0Dp0vTFVG4A4kcE ti1eRiUB4P+J/7O5I1lBTe5ptqzFFHgRA7f8YDXi0ofatTY9DbVqE6KYZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOBdRJdZeyaU4YVezz/uyQ6FJFNMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvSU55SJ ERAzULxYR01jUJQQCL3f5e0+9Tr4V84nO3+3Lc9HNNpOWGIUcawap69oHq5kP7Vq MJAGt82brEvJGn3YoHs41HiWw7pcGu/hCFojTqofoCERWNXHw+779avN2XrRfiKY pLSkEeh1HSG5jR2EwlWmoCdMHhrikmh6uZRgoATCt0jsvI55maGsCxWTrWifKKn4 xOX1zU+txJsfvKkKqiuIumWjduOoh9sp+DkkFFtJyIrQt4j3vTct+tWt9yzgFTly VxKd7BErsKISA+js+uZYNA4Gcjn97Lt06YrSLFhH6DWhnDdiV+YP0NSk5d79mxA1 TSHgt+TJiCnBFw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:35 2026 by rpki-client