This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json) Hash identifier: HS9WwxZm9qwhQ42F+yqvo9BBSGnJdn5RsjzNvOQYpnQ= Subject key identifier: 42:69:22:1F:EF:11:24:6D:58:93:EC:BB:C3:C1:C9:66:76:8B:EE:FF Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019BF8767146F78D76108E0946C3B94B2CD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 04:01:10 +0000 Manifest this update: Mon 26 Jan 2026 04:01:10 +0000 Manifest next update: Tue 27 Jan 2026 04:01:10 +0000 Files and hashes: 1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=) 2: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=) 3: Oh5NfZAAYPNWepq-IUky8lhGK3Q.roa (hash: G68B7K3ln08i2iRP9Hn3HZxsrH3w3zUOZ6LC+Oev1Yo=) 4: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=) 5: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=) 6: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: 6UrCZe5dvze2mNUTChw5i4nwzxgj7S+/TWnxC1xBDcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:71:46:f7:8d:76:10:8e:09:46:c3:b9:4b:2c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Jan 26 04:01:10 2026 GMT Not After : Jan 27 04:01:10 2026 GMT Subject: CN=4269221fef11246d5893ecbbc3c1c966768beeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:eb:a4:82:e7:fb:a6:0a:ab:24:f6:cc:47: f6:77:65:9d:72:5d:bb:1e:74:d9:7c:d1:d3:83:95: 6d:78:49:e5:93:66:6b:cc:55:e2:68:fc:95:dd:e4: b9:14:2f:1a:59:b9:08:e5:8f:58:99:08:d5:e4:e7: 96:aa:c8:89:33:35:44:cd:6e:17:53:8b:37:4a:51: 4a:27:c4:08:cf:41:f8:81:c7:51:ef:49:bd:8e:7d: df:39:a2:c7:2e:f5:98:4c:96:41:25:4a:1b:df:03: 98:83:1f:ba:05:13:4f:be:b8:44:42:a1:c2:35:a9: 86:bf:30:ba:bf:04:4f:c7:f5:78:e3:e1:70:0e:91: b3:6f:67:29:44:3d:e0:42:2f:85:48:2a:75:89:37: cd:49:c6:90:09:d4:33:2a:04:f7:b9:cc:0e:06:eb: 01:50:5e:cd:3f:24:e3:14:e0:ad:38:51:55:e8:ba: 91:20:42:78:aa:76:51:fd:fd:70:2e:39:b7:02:27: 4d:28:b7:c2:c1:ad:f5:c7:9a:a7:9b:ec:72:ba:71: f3:b6:ed:84:99:ae:82:84:e0:82:76:72:3a:36:da: 62:e5:68:3f:d9:34:0e:25:9a:f8:74:03:5f:b4:10: 8f:0e:54:48:37:a4:8c:64:bb:e7:b4:0c:41:ce:a0: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:69:22:1F:EF:11:24:6D:58:93:EC:BB:C3:C1:C9:66:76:8B:EE:FF X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:29:2c:50:d0:d6:d4:9f:79:47:5c:a7:3d:fb:8a:b0:ce:1a: b4:e3:2c:c9:ca:49:53:b4:28:a7:60:6d:ef:1f:77:67:3e:b6: 92:14:61:86:d4:c4:1a:a4:23:4e:c4:ec:51:47:cc:bc:bf:f7: e7:f6:e3:e9:f7:5f:48:62:6c:b3:fd:d0:82:f8:57:f9:6b:76: c8:a9:30:38:ad:c0:1f:5a:5a:4e:14:82:a8:02:ac:a8:c1:51: ce:00:c1:12:64:62:94:f5:91:47:01:8b:c0:fe:9d:68:05:5c: 43:58:0b:01:51:09:a6:a8:92:44:29:c8:89:09:61:f4:58:08: 8b:37:95:0c:7e:f1:3b:da:31:ac:4b:b1:00:a1:b4:ba:56:2f: ed:b2:e9:89:9a:43:19:d7:11:9f:7c:b4:2e:c0:04:3f:d8:1e: 41:bb:ba:fb:aa:31:23:5a:f3:28:68:73:42:e5:95:7f:9d:7b: d1:65:6e:e8:bc:37:11:98:9f:49:23:26:ed:e7:3e:1e:f4:88: ef:96:34:2f:b2:6a:27:15:38:fe:9a:5b:3c:ff:56:15:6d:76: 5b:01:d1:1f:1c:24:27:b1:39:fb:4a:5f:67:83:a1:49:b2:b8: 6a:42:c8:20:fb:36:f3:0a:f1:2f:56:f3:99:a0:62:3a:86:d4: c2:d1:cc:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dnFG9412EI4JRsO5SyzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjYwMTI2MDQwMTEwWhcNMjYwMTI3MDQwMTEwWjAzMTEwLwYDVQQD Eyg0MjY5MjIxZmVmMTEyNDZkNTg5M2VjYmJjM2MxYzk2Njc2OGJlZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzafrpILn+6YKqyT2zEf2d2Wdcl27 HnTZfNHTg5VteEnlk2ZrzFXiaPyV3eS5FC8aWbkI5Y9YmQjV5OeWqsiJMzVEzW4X U4s3SlFKJ8QIz0H4gcdR70m9jn3fOaLHLvWYTJZBJUob3wOYgx+6BRNPvrhEQqHC NamGvzC6vwRPx/V44+FwDpGzb2cpRD3gQi+FSCp1iTfNScaQCdQzKgT3ucwOBusB UF7NPyTjFOCtOFFV6LqRIEJ4qnZR/f1wLjm3AidNKLfCwa31x5qnm+xyunHztu2E ma6ChOCCdnI6Ntpi5Wg/2TQOJZr4dANftBCPDlRIN6SMZLvntAxBzqAdrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJpIh/vESRtWJPsu8PByWZ2i+7/MB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASksUNDW 1J95R1ynPfuKsM4atOMsycpJU7Qop2Bt7x93Zz62khRhhtTEGqQjTsTsUUfMvL/3 5/bj6fdfSGJss/3QgvhX+Wt2yKkwOK3AH1paThSCqAKsqMFRzgDBEmRilPWRRwGL wP6daAVcQ1gLAVEJpqiSRCnIiQlh9FgIizeVDH7xO9oxrEuxAKG0ulYv7bLpiZpD GdcRn3y0LsAEP9geQbu6+6oxI1rzKGhzQuWVf5170WVu6Lw3EZifSSMm7ec+HvSI 75Y0L7JqJxU4/ppbPP9WFW12WwHRHxwkJ7E5+0pfZ4OhSbK4akLIIPs28wrxL1bz maBiOobUwtHMJg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:01 2026 by rpki-client