This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json) Hash identifier: QM0LEsXJQSOjHcrpPJv7sQuMjLG0JHSUNfCnyyHhAeU= Subject key identifier: 33:51:BF:AD:75:15:78:15:7C:93:40:AB:2D:C6:7D:8F:1E:65:15:6A Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Certificate serial: 019BF4D012B3D1B9063745A9E16D9F735045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft Manifest number: 0736 Signing time: Sun 25 Jan 2026 11:00:35 +0000 Manifest this update: Sun 25 Jan 2026 11:00:35 +0000 Manifest next update: Mon 26 Jan 2026 11:00:35 +0000 Files and hashes: 1: CQU1i8i4vqvuY4KqJGZlaSLhz1o.roa (hash: CuYb2a2XddVX7SxALr1d1KIhl+UGwYzhtlyXuVxbI4M=) 2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: 67qEMe46yCkCqSJ9YlE0OmWkU7oVb61jIZ575vmpNa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:12:b3:d1:b9:06:37:45:a9:e1:6d:9f:73:50:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Validity Not Before: Jan 25 11:00:35 2026 GMT Not After : Jan 26 11:00:35 2026 GMT Subject: CN=3351bfad751578157c9340ab2dc67d8f1e65156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:79:77:08:90:26:63:d4:31:17:3c:68:07: c5:87:ca:d4:67:9c:97:77:e6:4d:81:77:1b:a8:98: 2d:87:19:3c:d6:41:97:ac:24:cc:ca:7f:06:63:d7: 69:3d:ac:e5:96:50:ee:10:87:3e:bc:89:a0:71:bb: ad:54:c9:fe:19:b7:8f:55:06:46:d4:b0:1c:96:e0: c2:04:ad:97:23:8f:b9:7e:b5:86:4e:31:c5:cc:ef: d4:06:4c:13:bb:5f:59:8a:b8:e5:ba:1d:d4:3d:6c: 30:9b:9c:96:20:76:41:3a:e1:c0:47:f6:a0:52:03: 31:eb:58:da:05:0e:a7:5f:23:bf:a0:10:50:93:ae: 59:13:48:b6:eb:15:65:dc:67:cc:78:98:23:98:a6: 15:93:a6:62:6d:47:ea:32:7e:b1:35:a1:34:0e:1e: b8:c3:55:30:59:1f:16:59:26:52:f9:a4:64:eb:ac: c7:69:22:48:34:fd:7f:b2:69:97:d4:83:69:19:54: 81:95:6d:c3:ae:8d:69:db:df:ce:ce:4d:79:fc:9f: eb:d5:aa:79:a0:88:24:c4:35:b0:2d:c9:12:64:68: 95:d5:a9:9a:94:cc:88:a7:94:d2:41:f4:93:63:85: c9:f1:cc:b6:25:7d:8f:34:35:fe:38:bb:54:12:be: ec:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:51:BF:AD:75:15:78:15:7C:93:40:AB:2D:C6:7D:8F:1E:65:15:6A X509v3 Authority Key Identifier: keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1a:f9:c9:32:4d:3d:ad:e3:57:e0:6f:ec:3f:83:9c:2e:ea: 87:8c:ee:26:ef:c6:7d:6d:79:10:c8:99:46:6d:3a:b3:7a:86: 87:6d:31:e6:b5:93:ff:44:ec:3f:0f:ab:02:f1:e3:5c:56:fd: 00:9b:a7:a3:0b:4f:9e:8f:97:b1:3f:8c:cc:cb:6e:65:ab:f6: e1:78:b0:4e:69:c2:58:f4:61:37:bd:88:c9:60:c6:66:8e:ee: 73:b7:89:4d:79:b5:f4:5e:35:db:34:7e:78:66:80:35:89:2b: 2a:2a:99:7c:81:c2:96:73:1c:82:03:19:3f:8c:b4:d6:48:56: ab:12:03:96:f2:21:49:03:7c:58:9d:2b:4b:4e:e6:15:4b:c1: e0:e2:42:84:8b:48:46:3e:7c:76:5d:29:df:09:bc:ab:be:ce: 79:35:3d:47:5a:09:a7:b5:ca:40:aa:06:50:42:8e:4b:94:7a: 6d:db:bb:97:d0:bc:28:05:6a:a1:df:06:00:72:a2:a1:87:1e: d6:61:1d:3c:01:0f:a9:37:6f:bd:83:5b:27:67:82:f6:80:d2: 0a:25:e1:e8:e1:32:9d:9d:cd:ea:90:4c:6d:9b:a0:1e:13:01: 54:98:4b:6c:51:f6:ed:da:76:ac:56:48:16:b7:d9:78:ed:f8: e4:41:af:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00BKz0bkGN0Wp4W2fc1BFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi ZmJiN2EwHhcNMjYwMTI1MTEwMDM1WhcNMjYwMTI2MTEwMDM1WjAzMTEwLwYDVQQD EygzMzUxYmZhZDc1MTU3ODE1N2M5MzQwYWIyZGM2N2Q4ZjFlNjUxNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthF5dwiQJmPUMRc8aAfFh8rUZ5yX d+ZNgXcbqJgthxk81kGXrCTMyn8GY9dpPazlllDuEIc+vImgcbutVMn+GbePVQZG 1LAcluDCBK2XI4+5frWGTjHFzO/UBkwTu19Zirjluh3UPWwwm5yWIHZBOuHAR/ag UgMx61jaBQ6nXyO/oBBQk65ZE0i26xVl3GfMeJgjmKYVk6ZibUfqMn6xNaE0Dh64 w1UwWR8WWSZS+aRk66zHaSJINP1/smmX1INpGVSBlW3Dro1p29/Ozk15/J/r1ap5 oIgkxDWwLckSZGiV1amalMyIp5TSQfSTY4XJ8cy2JX2PNDX+OLtUEr7spQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNRv611FXgVfJNAqy3GfY8eZRVqMB8GA1UdIwQY MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthr5yTJN Pa3jV+Bv7D+DnC7qh4zuJu/GfW15EMiZRm06s3qGh20x5rWT/0TsPw+rAvHjXFb9 AJunowtPno+XsT+MzMtuZav24XiwTmnCWPRhN72IyWDGZo7uc7eJTXm19F412zR+ eGaANYkrKiqZfIHClnMcggMZP4y01khWqxIDlvIhSQN8WJ0rS07mFUvB4OJChItI Rj58dl0p3wm8q77OeTU9R1oJp7XKQKoGUEKOS5R6bdu7l9C8KAVqod8GAHKioYce 1mEdPAEPqTdvvYNbJ2eC9oDSCiXh6OEynZ3N6pBMbZugHhMBVJhLbFH27dp2rFZI FrfZeO345EGvuw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:15 2026 by rpki-client