This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json) Hash identifier: yyw/dfgIt+Uiy5jTg4yD3vIsyyLZQH+Nc8y/reC1h+Y= Subject key identifier: B1:51:85:92:0A:80:6B:C2:43:5B:44:2C:F7:85:A7:50:1D:3A:68:81 Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Certificate serial: 019BF8AD7566E3CE8765FFE75BC69925C093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 05:01:15 +0000 Manifest this update: Mon 26 Jan 2026 05:01:15 +0000 Manifest next update: Tue 27 Jan 2026 05:01:15 +0000 Files and hashes: 1: b1Qwm_5QWeWaYa07OwOrAEvIr6g.roa (hash: g68cSRc8Cg84IXqWu7P5/olB56DrAkI5bkbVwe94gj8=) 2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: 4TUZlWPXAXx9I4EUSV2XHFzc8EBitGlmjfH+zMUP4js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:75:66:e3:ce:87:65:ff:e7:5b:c6:99:25:c0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Validity Not Before: Jan 26 05:01:15 2026 GMT Not After : Jan 27 05:01:15 2026 GMT Subject: CN=b15185920a806bc2435b442cf785a7501d3a6881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:49:39:f9:82:74:a8:20:9b:3c:3b:98:9d: b5:37:c5:4b:5c:35:f4:82:4d:9d:7d:ab:54:ad:c7: 72:a4:6e:1a:89:0d:54:92:5c:3e:7d:a5:43:10:1b: ca:9d:2b:8c:d3:33:d7:62:e6:d9:d2:36:61:40:14: 58:7a:53:12:ec:c2:dd:46:bd:8b:0c:32:c1:05:2b: 95:55:ff:a0:a7:42:70:f9:41:af:a9:cb:4e:c4:8a: 64:5e:87:2d:c9:08:7c:1f:23:ef:9e:19:59:21:36: 5e:9d:65:3b:ad:15:f1:58:cb:30:98:d1:37:f4:66: 89:b9:14:dc:80:fc:08:88:ec:8e:34:a7:8a:de:67: 80:9a:05:a2:8b:6b:bb:98:67:69:a2:29:57:e5:f1: 4a:a2:63:bc:42:b7:50:10:f8:5d:c0:f4:a2:44:d7: 67:40:0a:63:c5:d3:b6:00:85:48:23:80:8b:7e:48: e4:79:65:91:cc:91:65:95:7a:04:3d:2b:af:2e:92: cd:9d:d2:74:ba:10:0c:d4:b8:2f:d1:dc:51:9f:07: 62:17:41:2e:64:02:01:f9:f6:a3:e3:51:40:12:ff: 0e:04:f2:f3:5b:28:a8:bd:93:95:66:d7:75:7e:80: 9f:18:9b:88:e3:6b:95:0b:a4:14:74:33:72:b6:80: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:51:85:92:0A:80:6B:C2:43:5B:44:2C:F7:85:A7:50:1D:3A:68:81 X509v3 Authority Key Identifier: keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cb:2e:e9:43:ee:1a:40:1a:13:3f:60:6b:51:f8:bf:43:53: 16:82:ea:a4:48:b6:14:32:e7:c1:bd:ef:d3:ca:ed:94:b9:b7: 19:8b:7a:77:6e:14:5f:ba:30:0a:00:f2:da:6b:6a:70:33:fc: 34:56:07:87:f3:4b:36:c9:8a:0e:34:42:41:90:ca:e8:2c:5a: 68:94:85:92:c7:33:50:66:aa:0d:7f:b0:b4:d5:88:03:73:d2: ae:b0:0b:48:d3:20:90:ca:ea:ab:67:50:3d:29:5e:8b:38:f0: b8:37:bc:43:10:c3:27:b7:c5:48:63:dd:1f:84:68:c9:42:71: 5d:21:0c:67:bc:8d:0d:c5:4b:d0:8c:f2:b0:f8:d5:bd:f6:5d: cd:9c:bd:37:83:3b:d0:ca:32:1d:cc:90:a9:ce:55:25:a6:d5: 95:e8:94:b3:98:83:df:fb:db:f1:8f:d9:e3:3b:c7:b1:1d:3a: 5e:00:ad:a0:22:66:36:e6:90:43:c6:e7:6b:46:28:17:97:00: 85:8e:46:07:e3:47:e5:a8:61:93:08:5b:9b:cc:00:6f:a8:5a: f0:33:d5:92:1b:49:f1:a8:1e:a3:28:7e:4b:3c:16:b1:41:bc: 5e:d5:85:95:54:98:51:11:fc:6a:b8:6b:2c:cc:b3:86:09:42: 71:19:69:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rXVm486HZf/nW8aZJcCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj ZTc4MjgwHhcNMjYwMTI2MDUwMTE1WhcNMjYwMTI3MDUwMTE1WjAzMTEwLwYDVQQD EyhiMTUxODU5MjBhODA2YmMyNDM1YjQ0MmNmNzg1YTc1MDFkM2E2ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZZJOfmCdKggmzw7mJ21N8VLXDX0 gk2dfatUrcdypG4aiQ1Uklw+faVDEBvKnSuM0zPXYubZ0jZhQBRYelMS7MLdRr2L DDLBBSuVVf+gp0Jw+UGvqctOxIpkXoctyQh8HyPvnhlZITZenWU7rRXxWMswmNE3 9GaJuRTcgPwIiOyONKeK3meAmgWii2u7mGdpoilX5fFKomO8QrdQEPhdwPSiRNdn QApjxdO2AIVII4CLfkjkeWWRzJFllXoEPSuvLpLNndJ0uhAM1Lgv0dxRnwdiF0Eu ZAIB+faj41FAEv8OBPLzWyiovZOVZtd1foCfGJuI42uVC6QUdDNytoALlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFRhZIKgGvCQ1tELPeFp1AdOmiBMB8GA1UdIwQY MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMsu6UPu GkAaEz9ga1H4v0NTFoLqpEi2FDLnwb3v08rtlLm3GYt6d24UX7owCgDy2mtqcDP8 NFYHh/NLNsmKDjRCQZDK6CxaaJSFksczUGaqDX+wtNWIA3PSrrALSNMgkMrqq2dQ PSleizjwuDe8QxDDJ7fFSGPdH4RoyUJxXSEMZ7yNDcVL0IzysPjVvfZdzZy9N4M7 0MoyHcyQqc5VJabVleiUs5iD3/vb8Y/Z4zvHsR06XgCtoCJmNuaQQ8bna0YoF5cA hY5GB+NH5ahhkwhbm8wAb6ha8DPVkhtJ8ageoyh+SzwWsUG8XtWFlVSYURH8arhr LMyzhglCcRlpJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:03 2026 by rpki-client