This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json) Hash identifier: 1b9TJpFNxWmm138iwiZebHHmy1XbmWS3RztnQrGHZeY= Subject key identifier: 29:5E:14:C2:4F:9C:6C:78:11:E1:C2:76:E5:8C:9C:2C:09:76:50:19 Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb Certificate serial: 019BF0F3822AD83ACBDA3118C0ECA94EFB0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft Manifest number: 1779 Signing time: Sat 24 Jan 2026 17:00:48 +0000 Manifest this update: Sat 24 Jan 2026 17:00:48 +0000 Manifest next update: Sun 25 Jan 2026 17:00:48 +0000 Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=) 2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: N1aBR0wJxJ7YDtI8Zy8YpITraIWL9ry6cb63RzNAYIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f0:f3:82:2a:d8:3a:cb:da:31:18:c0:ec:a9:4e:fb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb Validity Not Before: Jan 24 17:00:48 2026 GMT Not After : Jan 25 17:00:48 2026 GMT Subject: CN=295e14c24f9c6c7811e1c276e58c9c2c09765019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b8:d8:52:6b:59:89:90:2c:61:41:fd:c1:94: 92:29:0f:77:c9:35:12:e0:e9:9e:56:13:31:21:02: 12:76:fc:0d:ec:3e:d7:6c:83:1b:e5:40:19:e9:55: 9b:b1:52:e6:f8:a0:fc:7a:19:fd:c9:b1:ce:8f:cb: 9e:43:6c:ee:ae:5f:22:e7:2c:eb:b6:23:4d:94:72: 6d:7b:14:c3:99:78:cd:55:0e:89:21:a0:59:8e:cf: fc:65:09:66:98:3a:18:a5:46:55:7f:7d:bb:46:b7: 79:8b:b1:8e:d3:fe:bd:1e:68:f8:ac:cf:73:0b:70: 67:ff:e0:59:ea:f9:86:46:71:ab:d5:93:07:df:83: 2f:6b:8f:d0:3b:19:9a:24:52:4b:84:bb:f5:63:7d: 75:81:15:1e:f8:60:51:b5:cd:98:13:47:7f:0b:74: a1:98:ac:90:ef:e5:c4:be:57:aa:80:04:79:f8:45: ac:8d:97:ef:2c:e3:ba:2e:75:ef:a1:29:c5:75:26: 2b:f5:62:f9:83:bc:7f:ae:c1:6f:85:8c:72:c5:89: b9:cc:b7:b1:5e:90:21:42:76:37:b5:14:a3:c9:42: 52:71:8a:7a:b9:a8:78:ae:4c:8c:c9:9a:ee:e5:e0: 3f:09:dd:27:28:9c:bb:ea:c2:60:72:14:c0:86:62: 71:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5E:14:C2:4F:9C:6C:78:11:E1:C2:76:E5:8C:9C:2C:09:76:50:19 X509v3 Authority Key Identifier: keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:eb:a4:0a:00:ae:02:40:94:8e:d8:e1:27:11:90:f3:5c:3d: 0c:af:ff:c0:57:1d:69:8a:ae:92:41:84:6e:9c:a9:d2:f1:a7: a3:da:1c:37:b6:3b:dc:9d:b9:31:13:21:60:8d:ef:8c:be:d7: 81:5a:93:49:77:3c:0f:0b:76:4a:68:80:c1:92:48:33:54:87: b6:c6:af:07:8c:76:17:16:2c:1f:f4:4c:27:b5:03:52:52:b7: df:0b:49:7b:45:17:0f:38:e5:06:06:49:7f:20:84:93:bd:46: 4f:4a:85:d5:27:29:9d:eb:8d:f2:8e:49:03:66:a1:c6:87:5b: a4:20:3d:e6:8a:80:4d:21:d9:00:6f:b4:5b:ef:a7:e6:b8:e5: f1:87:29:bf:9e:fb:70:4f:14:e9:ec:ee:c8:ce:ff:51:d5:3b: 25:ac:15:b1:79:67:37:0c:6a:02:92:d5:d2:89:b1:75:81:32: 63:43:b8:41:bc:19:be:c5:de:ed:84:1a:6b:dc:ff:19:46:98: ab:a2:35:c6:98:1c:02:fe:e3:e6:9e:1e:14:08:d4:0e:3c:85: 67:2a:6c:81:f7:70:ac:00:1b:e8:77:27:de:36:de:e9:84:92: d9:aa:45:1f:79:a0:43:10:b3:d5:3c:60:fd:59:9d:cb:4f:73: c7:26:ac:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvw84Iq2DrL2jEYwOypTvsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTAxOWNiNTRkNzAwYTFiMWM1MGU4ZjkwZWJlZTJhNWVl YTU3YmIwHhcNMjYwMTI0MTcwMDQ4WhcNMjYwMTI1MTcwMDQ4WjAzMTEwLwYDVQQD EygyOTVlMTRjMjRmOWM2Yzc4MTFlMWMyNzZlNThjOWMyYzA5NzY1MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77jYUmtZiZAsYUH9wZSSKQ93yTUS 4OmeVhMxIQISdvwN7D7XbIMb5UAZ6VWbsVLm+KD8ehn9ybHOj8ueQ2zurl8i5yzr tiNNlHJtexTDmXjNVQ6JIaBZjs/8ZQlmmDoYpUZVf327Rrd5i7GO0/69Hmj4rM9z C3Bn/+BZ6vmGRnGr1ZMH34Mva4/QOxmaJFJLhLv1Y311gRUe+GBRtc2YE0d/C3Sh mKyQ7+XEvleqgAR5+EWsjZfvLOO6LnXvoSnFdSYr9WL5g7x/rsFvhYxyxYm5zLex XpAhQnY3tRSjyUJScYp6uah4rkyMyZru5eA/Cd0nKJy76sJgchTAhmJxjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCleFMJPnGx4EeHCduWMnCwJdlAZMB8GA1UdIwQY MBaAFMWgGctU1wChscUOj5Dr7ipe6le7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQt MzFhM2VjZjFiZGI2LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQtMzFhM2VjZjFiZGI2 LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+ukCgCu AkCUjtjhJxGQ81w9DK//wFcdaYqukkGEbpyp0vGno9ocN7Y73J25MRMhYI3vjL7X gVqTSXc8Dwt2SmiAwZJIM1SHtsavB4x2FxYsH/RMJ7UDUlK33wtJe0UXDzjlBgZJ fyCEk71GT0qF1ScpneuN8o5JA2ahxodbpCA95oqATSHZAG+0W++n5rjl8Ycpv577 cE8U6ezuyM7/UdU7JawVsXlnNwxqApLV0omxdYEyY0O4QbwZvsXe7YQaa9z/GUaY q6I1xpgcAv7j5p4eFAjUDjyFZypsgfdwrAAb6Hcn3jbe6YSS2apFH3mgQxCz1Txg /Vmdy09zxyas1g== -----END CERTIFICATE-----Generated at Sat Jan 24 22:11:29 2026 by rpki-client