This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: UzYN11S+z2elJSSP2igh3Xv3n2nCXipX8PJBv7H+kdM=
Subject key identifier: 56:9C:0A:86:D4:0D:1A:5A:B1:50:CA:01:4C:19:08:FB:4D:E4:8C:8A
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019BF79A7F7EAB44C8F78BAF882B80E01246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 17EA
Signing time: Mon 26 Jan 2026 00:00:56 +0000
Manifest this update: Mon 26 Jan 2026 00:00:56 +0000
Manifest next update: Tue 27 Jan 2026 00:00:56 +0000
Files and hashes: 1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: UqvcuPRmNXKj0AG6UYARp+fdlvwE7jdG+a2B6BUkKpc=)
4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:7f:7e:ab:44:c8:f7:8b:af:88:2b:80:e0:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jan 26 00:00:56 2026 GMT
Not After : Jan 27 00:00:56 2026 GMT
Subject: CN=569c0a86d40d1a5ab150ca014c1908fb4de48c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:b9:37:4f:f6:fc:57:ee:d7:4b:2a:03:df:
67:5e:16:d7:41:be:84:26:25:6b:6a:5b:4a:67:68:
52:b4:9d:8b:79:bd:8f:97:31:26:44:2a:4b:43:1d:
dc:1a:fb:d3:7e:d7:d8:d8:58:52:59:e2:df:16:f2:
9e:da:af:b5:b9:8a:c4:48:f6:bd:99:18:0e:ef:49:
e9:1a:b5:c0:67:f8:50:6a:90:cb:9f:0e:7c:98:99:
d2:5d:f5:6b:c0:95:eb:3b:7c:46:23:6e:9c:a1:cb:
6b:7a:7c:2d:c2:d2:94:65:88:2a:53:e5:de:11:82:
6c:57:1e:d3:81:e9:e3:12:02:cf:79:d0:16:d0:41:
0d:70:b9:67:e0:8b:06:ec:18:6b:e9:70:d0:a2:f2:
1f:74:33:fe:91:bf:bc:8b:36:66:5d:57:a0:95:56:
3a:e9:50:40:25:b2:09:35:4f:10:b7:12:fe:d2:ee:
44:0f:2e:e6:ab:99:76:b5:c9:13:d5:10:34:e7:8f:
d4:27:af:f3:88:59:fe:ed:31:62:9f:cd:29:b0:ff:
dd:28:21:39:e0:06:e0:a6:70:55:e6:4b:59:b2:f4:
43:d5:cc:a2:31:7d:6c:3c:b3:c6:c2:14:7d:86:a1:
8f:f8:57:5b:6d:ad:82:2f:98:ef:cc:5a:61:3c:c7:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9C:0A:86:D4:0D:1A:5A:B1:50:CA:01:4C:19:08:FB:4D:E4:8C:8A
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e2:09:12:ab:eb:5d:76:b9:c4:b3:be:e2:47:3c:11:8c:2c:
32:dd:d1:55:fb:8d:3b:d8:a7:15:de:bc:2e:a6:b7:8b:c7:9f:
39:c5:dc:8c:41:51:35:6f:36:4c:62:6a:58:90:3a:7e:1a:19:
21:2d:97:2e:63:a6:7d:b0:ba:b8:4b:cb:01:b3:4b:25:aa:f3:
86:23:c4:19:96:2c:b3:39:35:f9:be:ef:2c:c8:be:e6:2d:1a:
e3:60:74:8f:54:80:10:49:8d:d7:06:57:21:84:ac:b1:cb:ff:
ef:70:74:5e:24:38:fa:e0:b1:5b:03:a1:84:43:d9:0d:21:8d:
c9:e4:54:83:a3:89:ad:10:57:ee:bc:c2:ef:c1:2d:d6:1d:4d:
42:e5:ac:89:c1:1e:7c:cd:50:b9:b8:3e:0c:64:ed:ce:20:1a:
db:0b:e7:86:6a:bc:0a:8a:6b:3d:53:0e:f6:7f:82:78:59:fe:
f4:ff:f2:67:02:2d:15:81:c6:d7:93:97:e1:32:7b:d6:e0:6a:
73:d9:20:09:d4:d1:de:2d:41:37:9c:7a:67:9f:85:f7:6e:ac:
d2:a0:88:0a:1a:4a:82:a1:3f:f1:16:6e:e3:c1:91:c4:4c:b6:
db:90:cb:a5:4c:26:0a:56:07:4b:99:5d:40:4f:93:ea:96:77:
5f:92:e0:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mn9+q0TI94uviCuA4BJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2NiN2NkMWI5ZDZmYzM5ZDcxNThmMmZlOWNmNTIxN2Ex
MmQzNzQwHhcNMjYwMTI2MDAwMDU2WhcNMjYwMTI3MDAwMDU2WjAzMTEwLwYDVQQD
Eyg1NjljMGE4NmQ0MGQxYTVhYjE1MGNhMDE0YzE5MDhmYjRkZTQ4YzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0m5N0/2/Ffu10sqA99nXhbXQb6E
JiVraltKZ2hStJ2Leb2PlzEmRCpLQx3cGvvTftfY2FhSWeLfFvKe2q+1uYrESPa9
mRgO70npGrXAZ/hQapDLnw58mJnSXfVrwJXrO3xGI26coctrenwtwtKUZYgqU+Xe
EYJsVx7TgenjEgLPedAW0EENcLln4IsG7Bhr6XDQovIfdDP+kb+8izZmXVeglVY6
6VBAJbIJNU8QtxL+0u5EDy7mq5l2tckT1RA054/UJ6/ziFn+7TFin80psP/dKCE5
4AbgpnBV5ktZsvRD1cyiMX1sPLPGwhR9hqGP+Fdbba2CL5jvzFphPMeLLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFacCobUDRpasVDKAUwZCPtN5IyKMB8GA1UdIwQY
MBaAFF7Mt80bnW/DnXFY8v6c9SF6EtN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQt
ZDIyOTY3ZTIyZWYwLzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQtZDIyOTY3ZTIyZWYw
LzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOIJEqvr
XXa5xLO+4kc8EYwsMt3RVfuNO9inFd68Lqa3i8efOcXcjEFRNW82TGJqWJA6fhoZ
IS2XLmOmfbC6uEvLAbNLJarzhiPEGZYsszk1+b7vLMi+5i0a42B0j1SAEEmN1wZX
IYSsscv/73B0XiQ4+uCxWwOhhEPZDSGNyeRUg6OJrRBX7rzC78Et1h1NQuWsicEe
fM1Qubg+DGTtziAa2wvnhmq8CoprPVMO9n+CeFn+9P/yZwItFYHG15OX4TJ71uBq
c9kgCdTR3i1BN5x6Z5+F926s0qCIChpKgqE/8RZu48GRxEy225DLpUwmClYHS5ld
QE+T6pZ3X5LglQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:16 2026 by rpki-client