This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json) Hash identifier: nx5E2okJlaqK0XblASx2GNlCF4EIZXn8Jb67vSPUySo= Subject key identifier: 2E:EE:F6:62:CE:F3:04:65:F6:62:04:57:95:95:57:94:C7:FD:C7:80 Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01 Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101 Certificate serial: 019BF7D26BC74000752ACFB49941734A865E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 01:02:00 +0000 Manifest this update: Mon 26 Jan 2026 01:02:00 +0000 Manifest next update: Tue 27 Jan 2026 01:02:00 +0000 Files and hashes: 1: 2hbC2fRcwVVGLuxr3y8s9IdUqJ0.roa (hash: WENyhbzOdCYh/WeleDC3Eb7ZL7vwxD85NmDsUD+Ca/o=) 2: rJ0B3_PG0rjHq-_hS6K9nBrn-PY.roa (hash: m7Zi/TNYib5gTH6m2mPeaQUI4WRQNMe1ierjcvG2bOc=) 3: xOCpqHIGWYpMZiK0D_GduGL-xNY.roa (hash: EH/6F7DAxWGzLP0f7IyWGiPlk48ND1XykF58xtVXDcQ=) 4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: AfByhOzd7Q6oGiXdha7BMVBe3ZdRXHlyL+KUgpi3/Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:6b:c7:40:00:75:2a:cf:b4:99:41:73:4a:86:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101 Validity Not Before: Jan 26 01:02:00 2026 GMT Not After : Jan 27 01:02:00 2026 GMT Subject: CN=2eeef662cef30465f662045795955794c7fdc780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:f5:0d:7f:77:30:10:5e:69:3c:ba:95:2a: 6c:7b:fe:c9:23:35:13:a2:41:c7:44:85:3e:7b:cf: ba:60:dc:91:90:c3:73:d0:0d:64:1a:b5:58:02:e1: f9:48:b6:99:09:f8:bc:d0:dc:52:6f:c8:fc:fe:e6: 76:27:fd:ad:bb:78:2a:da:8c:b3:19:dc:e5:a0:b2: 06:66:db:21:91:cf:83:ba:fc:7f:53:6b:62:ea:d4: bb:57:5f:60:13:bf:09:f1:8e:6e:ca:a9:69:e9:49: f0:0e:87:04:05:49:22:5e:46:cd:f9:90:ac:9b:8d: c6:9f:c3:6f:a2:9f:af:11:49:14:e2:9d:8a:ff:8c: 13:d3:3e:4e:88:50:5b:e0:61:c7:20:9c:ab:2c:00: a4:f3:db:a3:ad:a5:16:9e:fe:15:44:08:3d:c0:51: 84:2a:8f:53:cf:97:ef:44:52:ad:63:48:98:5d:9a: 10:21:fa:27:4f:74:88:fb:0b:c1:db:73:ed:f9:64: ee:a6:ac:ce:21:a8:cc:e2:57:16:dc:36:b7:d1:80: c5:ac:a2:34:21:75:39:39:1a:23:7d:e9:5d:39:e9: bc:f9:5f:ac:4f:c8:ce:fd:1e:53:ce:97:fb:41:b1: 29:31:7f:f0:43:9e:e2:94:9d:f9:34:69:e7:0a:10: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:F6:62:CE:F3:04:65:F6:62:04:57:95:95:57:94:C7:FD:C7:80 X509v3 Authority Key Identifier: keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:da:f2:31:e5:72:53:5e:f0:67:c7:5c:67:32:e9:77:2c:11: f9:17:0b:50:53:d0:8a:92:d9:89:39:36:57:22:9e:80:fe:f4: bb:8d:b6:32:ea:83:7c:24:90:81:2b:a1:b2:a9:0e:7d:c1:ec: df:5c:76:18:b9:e7:ef:a9:1a:94:e2:31:2f:72:51:af:eb:24: 07:3a:52:5a:a1:a6:d5:9d:83:8e:55:67:ca:fe:21:d6:56:8f: b2:e6:6e:f4:94:d7:81:2e:c4:cb:85:3b:8c:27:74:d8:57:8c: fa:f4:df:1a:44:c0:ab:93:0d:7e:f1:e5:6e:06:8f:8d:7f:00: cd:1e:32:5b:2b:01:ed:80:a2:f0:37:0d:25:2c:b9:20:92:b0: 0a:af:4b:e3:be:50:fa:f8:2e:b8:b8:0a:8b:69:8b:a0:16:4d: 1b:9e:59:7a:f8:43:3f:28:a6:b0:bb:26:6b:9e:7b:e8:29:ee: 00:5b:99:50:c7:0e:a2:66:15:9b:c8:8d:94:0e:7c:02:38:44: 2c:d5:80:d1:48:5c:29:df:76:fc:9c:51:bf:76:a7:bf:e8:99: 3e:72:f9:05:cb:ba:1a:c7:8e:d2:d7:5d:50:98:19:29:75:2e: 31:09:54:b6:40:6c:42:a2:a9:c4:82:5d:f4:e3:9a:f4:09:4c: 8c:99:66:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30mvHQAB1Ks+0mUFzSoZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTdjM2Y0YjE0NjkzNTEyMjAyNTk1YThhNGY5NWIwZDZi N2ExMDEwHhcNMjYwMTI2MDEwMjAwWhcNMjYwMTI3MDEwMjAwWjAzMTEwLwYDVQQD EygyZWVlZjY2MmNlZjMwNDY1ZjY2MjA0NTc5NTk1NTc5NGM3ZmRjNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhj1DX93MBBeaTy6lSpse/7JIzUT okHHRIU+e8+6YNyRkMNz0A1kGrVYAuH5SLaZCfi80NxSb8j8/uZ2J/2tu3gq2oyz GdzloLIGZtshkc+Duvx/U2ti6tS7V19gE78J8Y5uyqlp6UnwDocEBUkiXkbN+ZCs m43Gn8Nvop+vEUkU4p2K/4wT0z5OiFBb4GHHIJyrLACk89ujraUWnv4VRAg9wFGE Ko9Tz5fvRFKtY0iYXZoQIfonT3SI+wvB23Pt+WTupqzOIajM4lcW3Da30YDFrKI0 IXU5ORojfeldOem8+V+sT8jO/R5Tzpf7QbEpMX/wQ57ilJ35NGnnChAtdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7u9mLO8wRl9mIEV5WVV5TH/ceAMB8GA1UdIwQY MBaAFMWnw/SxRpNRIgJZWopPlbDWt6EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgt ZDEyZjFlMjQ1NmJhLzEveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgtZDEyZjFlMjQ1NmJh LzEveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtryMeVy U17wZ8dcZzLpdywR+RcLUFPQipLZiTk2VyKegP70u422MuqDfCSQgSuhsqkOfcHs 31x2GLnn76kalOIxL3JRr+skBzpSWqGm1Z2DjlVnyv4h1laPsuZu9JTXgS7Ey4U7 jCd02FeM+vTfGkTAq5MNfvHlbgaPjX8AzR4yWysB7YCi8DcNJSy5IJKwCq9L475Q +vguuLgKi2mLoBZNG55ZevhDPyimsLsma5576CnuAFuZUMcOomYVm8iNlA58AjhE LNWA0UhcKd92/JxRv3anv+iZPnL5Bcu6GseO0tddUJgZKXUuMQlUtkBsQqKpxIJd 9OOa9AlMjJlmPw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:14 2026 by rpki-client