This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json) Hash identifier: IR6yFIAQFH4V+7Ed2u6k+jGyDIjxq73xN+T2DfPLRLs= Subject key identifier: D7:B1:B3:9E:A3:A6:91:1E:27:AF:E9:AD:91:88:8F:BC:D1:52:22:A9 Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Certificate serial: 019BF8ACE92CD9B75BD15B571B4F7E1AD920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 05:00:39 +0000 Manifest this update: Mon 26 Jan 2026 05:00:39 +0000 Manifest next update: Tue 27 Jan 2026 05:00:39 +0000 Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=) 2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: GprlYRpRNr/GmpAEkYylwLDbuo/jzUdui5/c5HgHNT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:e9:2c:d9:b7:5b:d1:5b:57:1b:4f:7e:1a:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Validity Not Before: Jan 26 05:00:39 2026 GMT Not After : Jan 27 05:00:39 2026 GMT Subject: CN=d7b1b39ea3a6911e27afe9ad91888fbcd15222a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:e4:20:52:87:9b:bd:79:f1:d3:69:c3:68: 7c:40:c9:b4:e5:d8:8a:fd:00:4e:89:2a:48:a3:41: ff:a9:a2:f5:a9:cb:67:e2:ff:49:2f:2e:e8:80:79: 81:06:4f:85:af:67:51:15:17:9f:93:3e:53:05:86: f6:68:26:10:27:5f:f7:35:59:6b:3a:c6:10:38:1e: a5:d4:4f:65:6f:8a:63:d5:44:59:17:e5:14:95:7a: ba:51:d7:6b:03:d3:cd:79:03:35:35:63:2f:e3:2a: a9:37:97:77:35:63:eb:60:f0:de:cb:95:17:19:93: 31:1a:1e:c0:e9:0e:27:f2:54:be:d6:23:f8:8d:65: 08:c3:ff:5d:89:4d:84:fe:c8:69:84:83:b2:4b:f7: e9:6b:20:a9:9a:81:97:85:d3:b0:fe:1f:4b:fb:be: 6d:e8:9b:5f:36:20:f3:a6:46:4a:fd:9c:d4:1d:06: e7:51:cf:a8:9b:fd:a5:0c:3d:09:37:36:c2:02:0c: 3d:85:a1:21:a9:39:ea:90:65:b8:23:f7:ae:a4:95: 6a:80:84:0e:bd:76:44:be:fc:cc:a5:77:30:09:d8: 86:8d:cc:c9:95:dc:60:08:6f:3e:27:c2:76:7a:9e: e2:2e:ab:f1:e3:81:2f:8c:61:5c:16:9c:62:d5:6a: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B1:B3:9E:A3:A6:91:1E:27:AF:E9:AD:91:88:8F:BC:D1:52:22:A9 X509v3 Authority Key Identifier: keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:da:38:51:7a:77:fa:47:7b:2f:22:44:d1:73:dd:e9:36:36: de:8b:77:56:80:17:ac:da:0f:94:bf:55:57:c5:f5:fd:cf:b9: 06:97:ae:cd:b2:d6:28:07:96:05:59:5b:3b:fd:57:ac:52:d9: f8:79:65:bb:9e:e7:98:41:0d:20:4e:1f:2d:4c:f9:cb:34:ad: 47:57:73:0d:41:15:75:38:33:09:56:6e:66:0f:4c:ac:ae:cc: 51:60:82:5b:7c:90:f8:c0:de:48:d6:53:e6:d9:4b:2c:42:f2: ea:0d:08:ef:4c:45:42:05:97:c3:37:ff:1c:3c:6f:1c:22:8f: 9f:fe:73:ce:19:fa:4e:0f:c9:69:7f:74:28:2a:ae:ea:32:54: 71:90:7e:89:91:1d:3c:c9:22:88:ff:bd:5e:32:2b:dc:4c:4d: fd:b9:86:d8:73:1c:0e:16:be:5e:67:2a:47:4e:a2:d7:d7:68: 7a:c0:0e:e1:30:e1:63:7e:1b:29:f3:53:41:68:59:2c:eb:0c: 4b:d0:4c:a6:96:67:2b:69:05:37:f0:e7:07:59:11:1a:0a:b5: 0d:44:18:c0:15:cc:cd:ad:53:96:97:c3:d6:b5:2b:49:b7:c3: 68:bb:f8:5a:4d:b9:ef:af:90:78:15:c8:ed:1e:97:ea:33:05: 0f:00:9e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOks2bdb0VtXG09+GtkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi NjdlNDkwHhcNMjYwMTI2MDUwMDM5WhcNMjYwMTI3MDUwMDM5WjAzMTEwLwYDVQQD EyhkN2IxYjM5ZWEzYTY5MTFlMjdhZmU5YWQ5MTg4OGZiY2QxNTIyMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLfkIFKHm7158dNpw2h8QMm05diK /QBOiSpIo0H/qaL1qctn4v9JLy7ogHmBBk+Fr2dRFRefkz5TBYb2aCYQJ1/3NVlr OsYQOB6l1E9lb4pj1URZF+UUlXq6UddrA9PNeQM1NWMv4yqpN5d3NWPrYPDey5UX GZMxGh7A6Q4n8lS+1iP4jWUIw/9diU2E/shphIOyS/fpayCpmoGXhdOw/h9L+75t 6JtfNiDzpkZK/ZzUHQbnUc+om/2lDD0JNzbCAgw9haEhqTnqkGW4I/eupJVqgIQO vXZEvvzMpXcwCdiGjczJldxgCG8+J8J2ep7iLqvx44EvjGFcFpxi1WrQ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNexs56jppEeJ6/prZGIj7zRUiKpMB8GA1UdIwQY MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3 LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9o4UXp3 +kd7LyJE0XPd6TY23ot3VoAXrNoPlL9VV8X1/c+5BpeuzbLWKAeWBVlbO/1XrFLZ +Hllu57nmEENIE4fLUz5yzStR1dzDUEVdTgzCVZuZg9MrK7MUWCCW3yQ+MDeSNZT 5tlLLELy6g0I70xFQgWXwzf/HDxvHCKPn/5zzhn6Tg/JaX90KCqu6jJUcZB+iZEd PMkiiP+9XjIr3ExN/bmG2HMcDha+XmcqR06i19doesAO4TDhY34bKfNTQWhZLOsM S9BMppZnK2kFN/DnB1kRGgq1DUQYwBXMza1TlpfD1rUrSbfDaLv4Wk2576+QeBXI 7R6X6jMFDwCemA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:44 2026 by rpki-client