This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json) Hash identifier: Ia+qPqDnWcwno8YgdKmBzOYxYcGjbedkxsPmZwizlC4= Subject key identifier: 84:D0:18:E4:6F:8D:85:E6:F1:FF:AE:37:CD:C4:2D:5A:AA:A8:C4:DE Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019BF83FFCFA09806040EF1E9922BED94413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft Manifest number: 180A Signing time: Mon 26 Jan 2026 03:01:41 +0000 Manifest this update: Mon 26 Jan 2026 03:01:41 +0000 Manifest next update: Tue 27 Jan 2026 03:01:41 +0000 Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=) 2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=) 3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=) 4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=) 5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=) 6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=) 7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: mzRDwJK0xA2t5mK0Zu0yL6ItQaktH2kGFadfzPqDo2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:fc:fa:09:80:60:40:ef:1e:99:22:be:d9:44:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Jan 26 03:01:41 2026 GMT Not After : Jan 27 03:01:41 2026 GMT Subject: CN=84d018e46f8d85e6f1ffae37cdc42d5aaaa8c4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:d7:7f:82:50:86:c2:15:6e:30:37:d2:42: 15:9f:ab:01:1e:3e:3d:d3:88:a0:8b:34:70:88:1e: 70:f9:53:91:2e:8a:b0:1d:b6:e2:67:d5:1b:76:d9: 58:ec:7c:48:bb:ab:87:d8:6e:d6:7f:7b:43:09:98: 0b:6c:c5:44:d1:96:98:2c:70:65:cd:a8:26:fe:37: 33:ab:12:5c:a2:67:48:19:fc:d6:ab:13:ba:59:f6: 1c:c3:63:eb:13:d6:76:c3:f7:c3:44:23:eb:21:88: 9e:28:d3:1e:c8:d0:ac:24:5a:85:94:1b:9b:6c:f0: da:51:ad:86:48:f5:5f:f9:ce:08:de:23:bc:f3:45: 56:24:6c:38:f4:b4:89:78:02:75:e2:6e:2d:97:33: fb:bd:21:1b:cc:52:82:a0:13:e1:50:53:40:33:91: 65:a7:86:b2:2e:c5:f3:d8:10:cc:62:e7:69:88:99: a8:c8:b9:06:33:ae:e1:59:23:c5:71:26:47:21:54: 17:d0:12:a8:bb:17:68:3f:d5:bb:d9:ad:6b:72:1c: a0:bd:93:c3:8c:e3:61:44:6f:52:f3:c2:17:bb:ad: 5b:58:1f:6d:b5:ca:73:f5:4d:78:9e:07:30:6d:19: 38:2e:f1:a4:53:9e:a5:95:29:e4:1c:6e:d6:8d:c8: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:18:E4:6F:8D:85:E6:F1:FF:AE:37:CD:C4:2D:5A:AA:A8:C4:DE X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:84:31:c9:4a:79:fa:68:23:90:a2:aa:f6:be:a4:f3:28:39: bd:45:27:44:76:d3:a2:69:99:19:8c:cb:b3:ac:d7:4e:e4:77: fb:25:2a:32:7a:0b:1f:97:f6:0f:57:65:62:71:1f:cc:8e:b8: 72:a0:83:81:c4:8b:f9:89:43:61:73:09:03:fb:27:66:86:a1: b4:16:0f:bd:8e:44:be:50:58:f1:15:7c:48:56:ea:b1:bd:71: a9:bc:b3:cc:1a:c1:cb:cb:e2:a1:c4:bb:83:19:0e:1d:41:23: 1e:6d:c3:a4:bb:be:83:dd:d0:c4:13:75:c3:c1:6f:45:b9:e6: db:40:eb:87:65:61:f0:77:74:8b:f4:b4:b2:e8:90:e0:46:71: 1c:fc:94:0b:f8:f7:33:a7:e7:93:01:e5:ea:5f:a3:24:6c:d9: 2a:c4:6a:f7:9d:fb:9b:c7:51:e7:db:9f:37:e2:41:41:0d:b8: 88:2d:97:5f:eb:e8:dd:56:a7:c9:9b:d5:2b:1b:54:53:82:ce: 74:26:5e:7b:91:cd:71:62:b5:90:bd:fd:26:dc:0f:88:45:08: a6:79:8b:f9:92:32:e1:ec:c8:ee:cc:bf:34:fa:b4:7b:95:d3: f5:4a:c8:1c:58:47:87:1f:ff:51:ac:e7:b9:33:80:48:c7:55: eb:46:bb:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P/z6CYBgQO8emSK+2UQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjYwMTI2MDMwMTQxWhcNMjYwMTI3MDMwMTQxWjAzMTEwLwYDVQQD Eyg4NGQwMThlNDZmOGQ4NWU2ZjFmZmFlMzdjZGM0MmQ1YWFhYThjNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3Xf4JQhsIVbjA30kIVn6sBHj49 04igizRwiB5w+VORLoqwHbbiZ9UbdtlY7HxIu6uH2G7Wf3tDCZgLbMVE0ZaYLHBl zagm/jczqxJcomdIGfzWqxO6WfYcw2PrE9Z2w/fDRCPrIYieKNMeyNCsJFqFlBub bPDaUa2GSPVf+c4I3iO880VWJGw49LSJeAJ14m4tlzP7vSEbzFKCoBPhUFNAM5Fl p4ayLsXz2BDMYudpiJmoyLkGM67hWSPFcSZHIVQX0BKouxdoP9W72a1rchygvZPD jONhRG9S88IXu61bWB9ttcpz9U14ngcwbRk4LvGkU56llSnkHG7WjcjOwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITQGORvjYXm8f+uN83ELVqqqMTeMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4QxyUp5 +mgjkKKq9r6k8yg5vUUnRHbTommZGYzLs6zXTuR3+yUqMnoLH5f2D1dlYnEfzI64 cqCDgcSL+YlDYXMJA/snZoahtBYPvY5EvlBY8RV8SFbqsb1xqbyzzBrBy8viocS7 gxkOHUEjHm3DpLu+g93QxBN1w8FvRbnm20Drh2Vh8Hd0i/S0suiQ4EZxHPyUC/j3 M6fnkwHl6l+jJGzZKsRq9537m8dR59ufN+JBQQ24iC2XX+vo3VanyZvVKxtUU4LO dCZee5HNcWK1kL39JtwPiEUIpnmL+ZIy4ezI7sy/NPq0e5XT9UrIHFhHhx//Uazn uTOASMdV60a7dw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:58 2026 by rpki-client