This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json) Hash identifier: J9jN5NPC/pKXN1jhfUhu7FjIDV7EhQDVNBrpKF9TIZk= Subject key identifier: 90:3D:C6:D3:60:4E:87:4B:BD:70:CC:6A:75:59:91:50:24:50:91:37 Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Certificate serial: 019BF619AF8AAB4E57736D78F5305E2D210C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 17:00:37 +0000 Manifest this update: Sun 25 Jan 2026 17:00:37 +0000 Manifest next update: Mon 26 Jan 2026 17:00:37 +0000 Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: tT/TRcW313j0VbdN4jXR4lbYSQfXUHZMHDD/4Dm9Irc=) 2: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (hash: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:af:8a:ab:4e:57:73:6d:78:f5:30:5e:2d:21:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Validity Not Before: Jan 25 17:00:37 2026 GMT Not After : Jan 26 17:00:37 2026 GMT Subject: CN=903dc6d3604e874bbd70cc6a7559915024509137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:3e:52:e6:58:9b:e8:ac:18:c2:bf:56:d5: 0b:45:26:a9:46:6a:bf:52:4e:c4:cc:cf:62:02:3d: 5e:02:56:b9:ef:9f:07:ea:9c:9a:98:12:f5:90:a7: e7:20:36:a5:51:cf:1f:be:da:44:b0:cf:44:8e:43: b7:8f:f2:9e:de:40:f5:7a:c1:6c:62:e4:04:4c:2f: 65:e8:69:a6:70:9b:22:2c:81:d8:f2:b4:b5:77:b5: c7:8b:01:bf:56:a1:a1:5b:66:f6:6b:05:50:74:4b: e4:a0:27:6b:c0:c8:b4:9f:de:dd:51:90:25:97:8d: 47:9b:3b:00:93:27:52:88:2b:b1:15:c1:08:4e:65: 95:9f:e5:c0:c6:db:10:b6:46:21:64:8f:ed:a3:34: e5:98:7d:89:2b:08:36:26:16:b8:6f:b7:10:95:1a: 0b:c4:a2:1c:5b:2c:d6:41:6f:0c:8c:e7:80:5b:3f: 15:73:54:1a:aa:7c:58:49:71:ea:53:52:ac:c3:bc: bd:5d:b6:48:11:36:bb:f7:5f:0c:b9:b3:24:3b:61: 2c:8f:85:af:e4:90:36:df:cc:32:89:98:b1:08:cc: c5:3a:11:cf:57:64:2f:55:ff:b0:5e:74:fb:61:b5: c5:ff:35:d0:87:d0:8f:d6:43:fb:a5:bb:fc:a0:50: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3D:C6:D3:60:4E:87:4B:BD:70:CC:6A:75:59:91:50:24:50:91:37 X509v3 Authority Key Identifier: keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ae:24:01:55:8d:47:81:b2:6f:d4:e1:d8:a6:85:b2:1b:04: cc:03:83:a1:ee:ee:3b:43:27:c0:ae:f6:8c:ed:94:7a:60:82: 6d:2d:dc:cb:a0:15:a0:8b:e4:87:66:3b:5c:b4:1c:ff:b7:e8: d4:6e:f4:bd:86:5c:f0:66:95:e7:fc:14:d7:42:7e:6b:58:21: fb:b6:30:05:79:49:bb:fa:28:e5:6d:6c:17:25:0d:e5:b1:9b: 86:14:2c:42:1a:c4:31:ae:3a:ed:73:e2:14:33:d6:14:6b:d7: 31:a4:cf:29:c6:f3:98:3a:36:49:a1:c8:0b:18:78:a4:3b:a9: a3:58:ea:74:5c:49:21:23:2c:a7:ca:44:de:2a:02:3d:05:08: 51:ff:58:24:d2:4d:7f:7d:a6:93:33:16:1b:e2:d5:37:56:08: a0:70:70:69:48:ff:23:c9:6d:d5:20:6a:7b:e3:b2:00:49:f3: 4e:a5:63:85:f1:4a:c0:27:59:b5:27:01:81:5e:e8:c6:ed:c9: cd:6b:c3:26:c6:f1:11:0c:58:0d:3c:71:dc:dc:c6:5c:2e:86: 1c:a5:70:a9:84:3b:72:19:f0:e8:21:e9:a9:c4:8b:bf:01:59: 31:fd:7b:d9:db:7f:ab:7a:05:10:78:bc:d9:70:ba:40:17:76: d7:24:b3:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ga+Kq05Xc2149TBeLSEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi Yzk5MjMwHhcNMjYwMTI1MTcwMDM3WhcNMjYwMTI2MTcwMDM3WjAzMTEwLwYDVQQD Eyg5MDNkYzZkMzYwNGU4NzRiYmQ3MGNjNmE3NTU5OTE1MDI0NTA5MTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj4+UuZYm+isGMK/VtULRSapRmq/ Uk7EzM9iAj1eAla5758H6pyamBL1kKfnIDalUc8fvtpEsM9EjkO3j/Ke3kD1esFs YuQETC9l6GmmcJsiLIHY8rS1d7XHiwG/VqGhW2b2awVQdEvkoCdrwMi0n97dUZAl l41HmzsAkydSiCuxFcEITmWVn+XAxtsQtkYhZI/tozTlmH2JKwg2Jha4b7cQlRoL xKIcWyzWQW8MjOeAWz8Vc1QaqnxYSXHqU1Ksw7y9XbZIETa7918MubMkO2Esj4Wv 5JA238wyiZixCMzFOhHPV2QvVf+wXnT7YbXF/zXQh9CP1kP7pbv8oFAd7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA9xtNgTodLvXDManVZkVAkUJE3MB8GA1UdIwQY MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa4kAVWN R4Gyb9Th2KaFshsEzAODoe7uO0MnwK72jO2UemCCbS3cy6AVoIvkh2Y7XLQc/7fo 1G70vYZc8GaV5/wU10J+a1gh+7YwBXlJu/oo5W1sFyUN5bGbhhQsQhrEMa467XPi FDPWFGvXMaTPKcbzmDo2SaHICxh4pDupo1jqdFxJISMsp8pE3ioCPQUIUf9YJNJN f32mkzMWG+LVN1YIoHBwaUj/I8lt1SBqe+OyAEnzTqVjhfFKwCdZtScBgV7oxu3J zWvDJsbxEQxYDTxx3NzGXC6GHKVwqYQ7chnw6CHpqcSLvwFZMf172dt/q3oFEHi8 2XC6QBd21ySzHw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:14 2026 by rpki-client