This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: eWzATVSRcH/K4hzTdW+A8C0nCGeIcC11UASMLxbTNGo= Subject key identifier: 58:90:5E:F0:96:9E:6F:04:A5:FB:3A:FC:C6:25:84:FB:53:0B:D7:32 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019BF687FD32F16563D56F87BFD69F6A3874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 17F8 Signing time: Sun 25 Jan 2026 19:01:05 +0000 Manifest this update: Sun 25 Jan 2026 19:01:05 +0000 Manifest next update: Mon 26 Jan 2026 19:01:05 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: y7FAu+cJ9Z2L2s7U+zzkxol+7tEaYo8z7iGvQxnNHt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fd:32:f1:65:63:d5:6f:87:bf:d6:9f:6a:38:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 25 19:01:05 2026 GMT Not After : Jan 26 19:01:05 2026 GMT Subject: CN=58905ef0969e6f04a5fb3afcc62584fb530bd732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:b3:58:31:d4:de:08:2c:a1:a6:46:d1:fa: f3:a4:7b:3f:05:0b:41:fd:6d:a8:89:6e:fc:50:e1: 89:5b:d0:4f:89:57:e8:f4:14:d6:da:c7:cf:13:b8: cc:79:35:c1:dd:de:24:3a:86:54:fd:47:d9:b5:46: 74:cb:3d:3e:e9:4a:c5:28:36:40:fc:f0:31:89:74: 3e:11:79:31:ad:bb:c4:a9:ac:11:fb:52:ec:89:2d: b8:f3:5f:8b:43:09:98:88:9d:b6:db:14:68:44:8c: e4:a2:74:b8:f7:c4:74:a6:b9:39:ba:6b:50:4f:bd: d0:51:f7:f6:4f:bf:9e:f2:4e:4f:db:a0:80:75:d1: d9:0d:d1:cd:d7:04:64:ab:3e:98:cb:94:db:eb:d0: 19:70:f0:df:67:cf:8e:9e:00:52:df:5c:78:47:92: 86:b6:a7:d2:60:02:37:e8:9c:13:5d:83:8f:d7:19: f7:04:bd:cb:a1:07:29:d0:88:40:59:9d:68:a0:de: 6b:b7:1d:e2:19:50:c8:75:8f:fb:aa:38:9f:49:d6: 0f:ba:e3:7b:45:49:6e:73:04:93:9e:8e:16:81:1b: 74:53:35:03:46:50:6c:92:70:0c:e5:ba:c5:c5:7c: 8d:ad:f6:58:ef:64:a5:57:ca:aa:63:86:15:22:5d: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:90:5E:F0:96:9E:6F:04:A5:FB:3A:FC:C6:25:84:FB:53:0B:D7:32 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d1:6a:2a:af:2e:73:28:fa:86:b7:70:fa:03:f0:96:41:bc: e5:48:b9:d5:cd:2d:ef:96:b5:e2:7b:d8:15:01:3e:51:e3:8e: 44:8a:a3:12:40:0d:de:0a:46:c6:25:ab:26:81:97:47:be:07: 22:30:e3:db:91:85:e5:93:a4:86:19:fe:9b:21:96:98:aa:0e: 9f:5e:af:48:c8:d3:d6:e7:2c:8a:16:59:05:56:93:b9:bb:c4: b4:5f:99:3f:02:1f:10:07:52:b4:c6:04:a7:e0:d1:68:04:b8: b8:67:9c:a6:d6:ed:42:21:57:a0:d8:a1:1b:1e:90:3c:28:3e: 0b:8f:51:de:05:02:26:6a:a4:36:91:9a:f9:7b:77:87:bb:3e: 46:4b:5a:34:82:ec:6f:ad:b4:cb:23:47:8b:51:a8:96:c7:38: 85:45:dd:52:71:26:ac:de:c3:4c:ac:7b:20:b1:49:85:eb:13: a7:fc:ec:58:00:da:1d:a5:ee:37:30:f3:bf:cd:fc:d7:5c:71: 71:16:31:47:97:5b:85:5e:81:fd:51:1c:33:65:cf:cc:4e:9a: 51:37:7c:46:c8:59:ca:13:67:a1:50:a8:e1:c5:0d:ad:7b:9b: 65:bb:69:14:63:8d:b6:79:7b:72:d4:6e:43:8f:db:59:f8:2c: 4d:52:42:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/0y8WVj1W+Hv9afajh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTI1MTkwMTA1WhcNMjYwMTI2MTkwMTA1WjAzMTEwLwYDVQQD Eyg1ODkwNWVmMDk2OWU2ZjA0YTVmYjNhZmNjNjI1ODRmYjUzMGJkNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyKzWDHU3ggsoaZG0frzpHs/BQtB /W2oiW78UOGJW9BPiVfo9BTW2sfPE7jMeTXB3d4kOoZU/UfZtUZ0yz0+6UrFKDZA /PAxiXQ+EXkxrbvEqawR+1LsiS2481+LQwmYiJ222xRoRIzkonS498R0prk5umtQ T73QUff2T7+e8k5P26CAddHZDdHN1wRkqz6Yy5Tb69AZcPDfZ8+OngBS31x4R5KG tqfSYAI36JwTXYOP1xn3BL3LoQcp0IhAWZ1ooN5rtx3iGVDIdY/7qjifSdYPuuN7 RUlucwSTno4WgRt0UzUDRlBsknAM5brFxXyNrfZY72SlV8qqY4YVIl0hrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiQXvCWnm8Epfs6/MYlhPtTC9cyMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNFqKq8u cyj6hrdw+gPwlkG85Ui51c0t75a14nvYFQE+UeOORIqjEkAN3gpGxiWrJoGXR74H IjDj25GF5ZOkhhn+myGWmKoOn16vSMjT1ucsihZZBVaTubvEtF+ZPwIfEAdStMYE p+DRaAS4uGecptbtQiFXoNihGx6QPCg+C49R3gUCJmqkNpGa+Xt3h7s+RktaNILs b620yyNHi1Golsc4hUXdUnEmrN7DTKx7ILFJhesTp/zsWADaHaXuNzDzv83811xx cRYxR5dbhV6B/VEcM2XPzE6aUTd8RshZyhNnoVCo4cUNrXubZbtpFGONtnl7ctRu Q4/bWfgsTVJCZg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:13 2026 by rpki-client