This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json) Hash identifier: /E2Wa2NCj8z57aOzg3Abr96FSEVEaop+pOrX06j6QvI= Subject key identifier: 22:C2:A4:EF:B8:B4:95:87:C9:60:9A:95:E7:6A:8A:56:59:4D:57:A9 Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019BF53E8BD3AB3987CDAF81AE3080465803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 13:01:15 +0000 Manifest this update: Sun 25 Jan 2026 13:01:15 +0000 Manifest next update: Mon 26 Jan 2026 13:01:15 +0000 Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=) 2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=) 3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=) 4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: 16cCGsw596vc15ARqEL/Cj7v2ObNF+chp6CUSrke1A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:8b:d3:ab:39:87:cd:af:81:ae:30:80:46:58:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Jan 25 13:01:15 2026 GMT Not After : Jan 26 13:01:15 2026 GMT Subject: CN=22c2a4efb8b49587c9609a95e76a8a56594d57a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:d3:56:fc:c5:dc:b8:0e:3b:a5:dc:4d:8a: 8b:4c:7f:be:ce:b3:c2:e0:45:1f:91:bb:02:65:bb: c3:62:56:c7:19:fa:0e:fb:c7:53:89:a0:2d:a3:79: 86:02:9a:81:5d:01:f3:68:91:4f:8b:e6:fb:fa:5c: d6:73:be:8d:c4:9f:9d:3e:92:09:e2:6b:d1:60:bc: e0:3f:da:e7:1f:1b:75:c0:12:13:18:63:bb:49:5e: e1:d3:27:9e:c0:99:aa:c3:c3:a2:50:2b:28:99:83: 44:78:95:32:17:12:d5:f1:5e:f1:26:1d:5c:81:92: 54:ef:72:01:ba:e1:36:70:9d:3d:56:5e:e6:8e:12: d3:e4:9a:48:18:c7:ef:4a:ca:89:46:34:a8:e4:c3: c0:48:c2:96:73:10:90:82:73:f4:95:5a:8d:ec:4d: 8d:ee:40:08:15:82:a6:a9:38:09:f8:c8:70:80:f2: 89:b9:5a:7a:10:bd:bd:fc:b3:d1:cd:a1:e6:ea:66: 6a:5c:0f:7d:4c:45:ff:fe:59:9d:c2:46:d8:a6:c4: 74:0c:ae:bf:fc:1f:5a:c0:10:74:c5:12:3d:99:f0: 17:18:17:9d:cd:26:5a:dc:27:88:4d:8b:0a:78:b7: b0:2f:65:6c:93:b5:fc:40:40:1c:6d:05:72:2c:03: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C2:A4:EF:B8:B4:95:87:C9:60:9A:95:E7:6A:8A:56:59:4D:57:A9 X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:94:da:47:97:31:55:57:0f:91:1e:5b:40:ca:c7:96:98:11: 46:2e:5c:64:f3:a7:f4:2d:9a:11:7a:fa:4b:a6:1f:a5:77:2f: be:2a:23:e2:e7:b3:e0:1d:85:0c:72:80:8d:96:6b:86:1e:14: d0:23:3a:a6:7a:f7:3b:fe:0c:c1:86:f5:8f:59:a2:6d:b7:3e: 8b:11:44:6e:17:d3:41:63:1c:9a:d5:83:81:f0:77:63:d6:5e: b8:18:ab:fc:f0:27:c3:8d:c1:e6:1c:23:25:94:6f:f8:66:e9: 5c:19:7e:29:2d:ff:54:42:be:69:bf:a4:29:ca:a4:7f:7c:5d: a6:a7:76:25:5a:8c:89:92:67:d2:3b:7a:c0:af:1f:07:99:1f: 6d:eb:15:7b:e6:ad:2c:15:35:b7:24:f0:f4:db:b9:37:8c:11: 62:dc:8e:b5:8b:62:ae:97:a8:39:a7:cd:a6:5a:53:ae:33:56: 1b:16:d5:99:47:88:4a:36:c8:17:82:96:89:ac:32:05:7b:e2: 80:69:22:d4:4b:9b:78:8a:45:38:0b:39:81:00:ce:ef:0a:fc: 32:2b:7b:97:16:40:73:57:cf:70:a2:05:4b:a1:5e:76:19:be: c1:8f:cf:1f:10:69:16:b9:7f:76:8c:29:d2:7c:72:9a:33:01: f2:8e:b2:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PovTqzmHza+BrjCARlgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjYwMTI1MTMwMTE1WhcNMjYwMTI2MTMwMTE1WjAzMTEwLwYDVQQD EygyMmMyYTRlZmI4YjQ5NTg3Yzk2MDlhOTVlNzZhOGE1NjU5NGQ1N2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4jTVvzF3LgOO6XcTYqLTH++zrPC 4EUfkbsCZbvDYlbHGfoO+8dTiaAto3mGApqBXQHzaJFPi+b7+lzWc76NxJ+dPpIJ 4mvRYLzgP9rnHxt1wBITGGO7SV7h0yeewJmqw8OiUCsomYNEeJUyFxLV8V7xJh1c gZJU73IBuuE2cJ09Vl7mjhLT5JpIGMfvSsqJRjSo5MPASMKWcxCQgnP0lVqN7E2N 7kAIFYKmqTgJ+MhwgPKJuVp6EL29/LPRzaHm6mZqXA99TEX//lmdwkbYpsR0DK6/ /B9awBB0xRI9mfAXGBedzSZa3CeITYsKeLewL2Vsk7X8QEAcbQVyLAMIfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLCpO+4tJWHyWCaledqilZZTVepMB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ZTaR5cx VVcPkR5bQMrHlpgRRi5cZPOn9C2aEXr6S6YfpXcvvioj4uez4B2FDHKAjZZrhh4U 0CM6pnr3O/4MwYb1j1mibbc+ixFEbhfTQWMcmtWDgfB3Y9ZeuBir/PAnw43B5hwj JZRv+GbpXBl+KS3/VEK+ab+kKcqkf3xdpqd2JVqMiZJn0jt6wK8fB5kfbesVe+at LBU1tyTw9Nu5N4wRYtyOtYtirpeoOafNplpTrjNWGxbVmUeISjbIF4KWiawyBXvi gGki1EubeIpFOAs5gQDO7wr8Mit7lxZAc1fPcKIFS6Fedhm+wY/PHxBpFrl/dowp 0nxymjMB8o6yag== -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:05 2026 by rpki-client