This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: ndYnPg4MLP+KCd2nqlGmj635OFgXJz/xsYcu3UTkEUg= Subject key identifier: CF:0D:33:9E:FE:51:EE:D7:DC:F9:BA:DB:46:25:6E:3F:BD:27:77:9A Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019BF507360A24B88D5D284A714D84BEEF8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 16CA Signing time: Sun 25 Jan 2026 12:00:49 +0000 Manifest this update: Sun 25 Jan 2026 12:00:49 +0000 Manifest next update: Mon 26 Jan 2026 12:00:49 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: oAImJiDvDrkmSROxQ6/bi2LJlWV9uJDpIIFvlOxDJ40=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:36:0a:24:b8:8d:5d:28:4a:71:4d:84:be:ef:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 25 12:00:49 2026 GMT Not After : Jan 26 12:00:49 2026 GMT Subject: CN=cf0d339efe51eed7dcf9badb46256e3fbd27779a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ef:29:cb:4a:e3:e8:fc:a0:e5:90:57:fe:ca: b3:96:71:b4:68:d1:91:46:74:c5:9b:7e:ab:a9:14: 3b:f1:ce:9d:36:92:69:6a:cf:d7:56:ee:2c:d8:fa: 33:bb:9d:f7:f4:70:cd:95:44:02:ed:ac:6c:06:ea: 37:8d:4a:7a:04:11:96:17:78:11:c9:61:29:40:04: e1:e0:3f:f0:22:70:1c:15:bc:51:b5:70:29:d3:8c: cc:0b:42:3b:9a:06:a1:7e:84:9d:02:61:ce:97:6f: e7:29:91:b4:57:1f:8e:26:ae:8e:a6:aa:a9:16:0f: ed:1f:db:1a:ca:b8:ce:1f:ac:eb:80:df:ec:85:ba: 23:ef:7d:89:45:74:4e:17:c5:00:cb:61:0d:f9:74: 5f:2b:a4:ea:b5:28:63:db:bc:84:e7:24:13:f1:45: 54:6c:07:d2:4d:39:02:9f:1a:c2:c8:2d:6d:9d:ac: 83:93:83:ed:d0:63:57:f4:e3:51:34:38:a4:17:7b: 0d:a4:eb:fa:ee:00:3f:71:df:47:c5:94:a7:25:64: cd:97:8b:db:ce:e0:56:f9:52:c9:5b:a3:5e:c5:1d: 8e:10:91:c4:f6:f1:7a:7d:a6:39:1f:d6:87:9d:ab: aa:88:f5:00:ad:4e:df:68:99:20:e5:19:64:17:85: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0D:33:9E:FE:51:EE:D7:DC:F9:BA:DB:46:25:6E:3F:BD:27:77:9A X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f0:b1:b6:2a:66:82:a0:ae:88:10:72:b5:fa:0d:34:75:2b: 24:fd:93:bd:9b:f3:5d:6d:15:e9:ba:4f:6b:28:b3:c0:83:7a: 51:d9:ee:09:61:10:e5:32:ff:ea:65:f7:9b:78:61:27:ac:07: af:90:fb:5e:60:13:cd:08:0a:fe:56:75:9d:d8:e7:9a:0b:6e: 93:5f:2a:3a:62:2c:ea:be:08:50:3a:dc:04:3b:28:e7:7c:37: f8:21:b6:3e:04:a1:3f:73:d9:2a:56:75:14:14:86:8c:88:41: 7f:d3:28:9e:fc:7c:1a:20:14:64:d8:92:3d:f1:4d:ce:8c:30: e5:22:6d:87:61:b5:be:18:79:50:15:6f:80:00:e4:83:fe:e3: 41:ca:ee:56:ff:ea:43:1d:f1:7e:70:a5:c4:b1:c8:d5:23:a6: ca:0d:d8:14:62:d4:50:31:75:a3:6c:73:d8:23:9c:72:92:0d: 96:85:3a:4d:61:c3:c2:6b:d6:b0:79:fc:3c:c8:40:97:65:a3: 2b:da:cc:73:8f:77:46:16:f8:ad:38:ca:f3:51:2e:24:48:c8: 6a:c7:79:33:e7:d5:4a:b7:0b:22:8d:56:2d:45:2a:1d:6f:42: 11:46:70:63:f1:73:47:1f:4e:6c:28:3a:8c:0a:85:53:db:38: ae:93:24:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzYKJLiNXShKcU2Evu+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTI1MTIwMDQ5WhcNMjYwMTI2MTIwMDQ5WjAzMTEwLwYDVQQD EyhjZjBkMzM5ZWZlNTFlZWQ3ZGNmOWJhZGI0NjI1NmUzZmJkMjc3NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8u8py0rj6Pyg5ZBX/sqzlnG0aNGR RnTFm36rqRQ78c6dNpJpas/XVu4s2Pozu5339HDNlUQC7axsBuo3jUp6BBGWF3gR yWEpQATh4D/wInAcFbxRtXAp04zMC0I7mgahfoSdAmHOl2/nKZG0Vx+OJq6Opqqp Fg/tH9sayrjOH6zrgN/shboj732JRXROF8UAy2EN+XRfK6TqtShj27yE5yQT8UVU bAfSTTkCnxrCyC1tnayDk4Pt0GNX9ONRNDikF3sNpOv67gA/cd9HxZSnJWTNl4vb zuBW+VLJW6NexR2OEJHE9vF6faY5H9aHnauqiPUArU7faJkg5RlkF4UwQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8NM57+Ue7X3Pm620Ylbj+9J3eaMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifCxtipm gqCuiBBytfoNNHUrJP2TvZvzXW0V6bpPayizwIN6UdnuCWEQ5TL/6mX3m3hhJ6wH r5D7XmATzQgK/lZ1ndjnmgtuk18qOmIs6r4IUDrcBDso53w3+CG2PgShP3PZKlZ1 FBSGjIhBf9Monvx8GiAUZNiSPfFNzoww5SJth2G1vhh5UBVvgADkg/7jQcruVv/q Qx3xfnClxLHI1SOmyg3YFGLUUDF1o2xz2COccpINloU6TWHDwmvWsHn8PMhAl2Wj K9rMc493Rhb4rTjK81EuJEjIasd5M+fVSrcLIo1WLUUqHW9CEUZwY/FzRx9ObCg6 jAqFU9s4rpMkKQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:16 2026 by rpki-client