This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json) Hash identifier: 1TmNTqthQh68ytxMARBsredPJLZsBC0kLi/TdqQyTt0= Subject key identifier: C0:78:6D:3E:E4:16:CE:71:A6:39:2D:BF:41:F7:D8:D2:0B:8F:DA:E7 Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d Certificate serial: 019BF5AC60708C65669B45E18707C4FBF8FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 15:01:13 +0000 Manifest this update: Sun 25 Jan 2026 15:01:13 +0000 Manifest next update: Mon 26 Jan 2026 15:01:13 +0000 Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=) 2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: Tw4xAhgDIJmGG0KFa9OqJOxQNQhyLipAZfFo699bL/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:60:70:8c:65:66:9b:45:e1:87:07:c4:fb:f8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d Validity Not Before: Jan 25 15:01:13 2026 GMT Not After : Jan 26 15:01:13 2026 GMT Subject: CN=c0786d3ee416ce71a6392dbf41f7d8d20b8fdae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:bd:b9:a2:43:8c:da:6c:b1:63:f4:3e:e2: 07:a4:dc:8e:b0:6e:bf:98:9c:9f:f1:fd:d8:30:60: d6:59:1e:4f:a5:42:e1:c2:4f:ff:af:16:f0:b9:1b: ea:15:0b:04:fe:6b:15:d8:a8:60:8d:29:30:42:fa: 09:52:8a:14:cf:b2:92:b6:e0:dd:3f:d0:5e:65:98: bc:1a:12:50:24:f8:18:8a:64:7e:7c:41:a9:68:e9: f7:c3:e1:0c:3d:e4:f7:54:2b:46:21:ba:98:dc:14: 6d:38:e7:89:3e:ed:3f:ed:5e:23:a0:b8:33:e3:02: 42:7f:6e:3b:97:b5:8a:7b:c2:12:f1:f8:34:7e:72: d3:53:2f:a5:9a:b6:49:14:e8:0c:7e:8a:7f:be:43: 97:68:ab:67:8a:b1:64:c5:29:1c:94:50:f5:d9:3e: 01:41:d7:14:00:fd:29:4f:75:4a:dd:65:ee:39:84: 8e:5c:06:b0:70:34:61:4e:41:af:00:b0:be:8a:7f: 83:53:3a:d3:4f:1c:80:64:51:de:65:49:d3:bb:aa: 9a:87:99:a7:45:48:84:58:91:f2:5f:c7:8d:82:1a: 11:37:42:2d:88:f2:c2:a9:fc:25:41:39:41:52:9b: b5:50:98:b0:ab:e2:77:96:86:ef:c8:2a:ad:eb:c9: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:78:6D:3E:E4:16:CE:71:A6:39:2D:BF:41:F7:D8:D2:0B:8F:DA:E7 X509v3 Authority Key Identifier: keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c3:c6:8d:7f:7a:9d:0a:9e:c2:97:31:8f:59:4e:7e:fc:4d: f8:b0:c4:48:5c:31:ae:82:cc:52:93:8f:d4:35:e0:06:bd:ca: 21:c5:06:70:60:31:5e:89:74:44:e9:d2:53:c5:38:b9:ac:4c: 0a:2a:9a:11:1d:22:4e:1d:46:94:c8:03:01:a0:f6:5c:d1:ea: 64:b6:a7:bc:78:ec:f1:16:4f:0d:45:02:89:92:3f:00:41:84: f3:09:4a:6b:04:25:87:67:ef:fd:16:19:d5:82:68:ba:9e:83: 8b:ad:24:3c:fc:e3:01:70:52:35:b7:23:e8:ea:0f:60:5c:07: c6:3c:31:6a:fc:20:73:dd:53:5a:fe:0d:6a:25:81:1b:98:35: 33:09:01:0d:89:db:94:8f:99:ce:81:a5:f1:1e:2d:18:79:7a: f2:11:d4:81:3e:e3:6e:6b:dd:3d:ad:84:21:41:e1:ff:39:5f: 00:a9:a8:6a:71:1f:ae:d8:d8:b1:1f:92:12:04:21:d8:6b:88: 3a:66:2b:c3:21:2a:15:a4:8e:6b:8f:27:1b:68:4a:65:50:9a: 43:66:34:25:93:ad:78:ff:9b:f4:4f:dd:89:9f:93:a5:e8:34: 4b:9b:6b:4f:99:b1:9b:5f:b1:9d:4d:57:72:09:df:d7:7b:c4: 99:de:f5:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rGBwjGVmm0XhhwfE+/j7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZmZmMWJkNzcxMjg3Y2VkNGM0ZGQ2ZDhhODUxZDJhZDc3 MDY2MWQwHhcNMjYwMTI1MTUwMTEzWhcNMjYwMTI2MTUwMTEzWjAzMTEwLwYDVQQD EyhjMDc4NmQzZWU0MTZjZTcxYTYzOTJkYmY0MWY3ZDhkMjBiOGZkYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fW9uaJDjNpssWP0PuIHpNyOsG6/ mJyf8f3YMGDWWR5PpULhwk//rxbwuRvqFQsE/msV2KhgjSkwQvoJUooUz7KStuDd P9BeZZi8GhJQJPgYimR+fEGpaOn3w+EMPeT3VCtGIbqY3BRtOOeJPu0/7V4joLgz 4wJCf247l7WKe8IS8fg0fnLTUy+lmrZJFOgMfop/vkOXaKtnirFkxSkclFD12T4B QdcUAP0pT3VK3WXuOYSOXAawcDRhTkGvALC+in+DUzrTTxyAZFHeZUnTu6qah5mn RUiEWJHyX8eNghoRN0ItiPLCqfwlQTlBUpu1UJiwq+J3lobvyCqt68mkzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB4bT7kFs5xpjktv0H32NILj9rnMB8GA1UdIwQY MBaAFK3/8b13EofO1MTdbYqFHSrXcGYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMt NDk0M2I0YjQyZWJiLzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMtNDk0M2I0YjQyZWJi LzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcPGjX96 nQqewpcxj1lOfvxN+LDESFwxroLMUpOP1DXgBr3KIcUGcGAxXol0ROnSU8U4uaxM CiqaER0iTh1GlMgDAaD2XNHqZLanvHjs8RZPDUUCiZI/AEGE8wlKawQlh2fv/RYZ 1YJoup6Di60kPPzjAXBSNbcj6OoPYFwHxjwxavwgc91TWv4NaiWBG5g1MwkBDYnb lI+ZzoGl8R4tGHl68hHUgT7jbmvdPa2EIUHh/zlfAKmoanEfrtjYsR+SEgQh2GuI OmYrwyEqFaSOa48nG2hKZVCaQ2Y0JZOteP+b9E/diZ+Tpeg0S5trT5mxm1+xnU1X cgnf13vEmd71Gg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:18 2026 by rpki-client