This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json) Hash identifier: YanHNsYiEIH+Si/5jaxNQrOhf+VM7mt8XE7E+Ehh3y0= Subject key identifier: F0:5F:27:07:82:71:2B:4A:63:DB:54:56:82:07:09:08:F1:4E:61:0D Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Certificate serial: 019BF5E3FF80E592628856DFA8B4FFD5CA38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft Manifest number: 0503 Signing time: Sun 25 Jan 2026 16:01:58 +0000 Manifest this update: Sun 25 Jan 2026 16:01:58 +0000 Manifest next update: Mon 26 Jan 2026 16:01:58 +0000 Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=) 2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: QUt4j6B/YocBUQwoeACXBf7YzDiBkegEO2j1iQEK4s4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:ff:80:e5:92:62:88:56:df:a8:b4:ff:d5:ca:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Validity Not Before: Jan 25 16:01:58 2026 GMT Not After : Jan 26 16:01:58 2026 GMT Subject: CN=f05f270782712b4a63db545682070908f14e610d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:6d:3e:a4:bf:00:b6:8f:02:b6:36:47:f2: a1:c5:ee:e6:56:12:ab:11:6b:4f:75:95:a8:e2:78: 98:47:56:1e:6e:9c:c4:5b:ec:60:55:02:3b:70:31: be:6c:b2:ec:b1:1e:04:eb:e1:28:f2:bc:4e:da:65: b9:8c:5a:94:56:2b:5e:b2:a6:93:bb:87:1d:34:f2: 6a:45:21:b2:fc:63:fd:1c:c6:10:8f:eb:2d:93:fa: c4:d2:05:81:98:31:6b:9f:83:ec:aa:bf:f9:3e:d8: 0d:a8:0c:51:17:4e:19:af:2a:c7:cf:5b:e2:73:12: 6d:70:bc:18:95:93:52:2b:16:65:59:08:5d:a8:5d: 16:ff:56:ec:2b:9b:88:d3:a9:b9:4b:af:b5:85:a0: 7e:87:a9:53:bd:ef:c6:99:f6:26:aa:97:5b:48:11: b0:2b:92:2d:c3:3c:b8:0d:af:29:9b:33:11:9e:0f: 3e:ec:3e:35:73:42:b7:33:15:18:ae:2a:88:df:45: ba:00:eb:7c:62:12:f9:10:7a:c5:91:07:06:fb:23: 5d:92:aa:06:f4:1e:d6:f5:f4:18:ed:1a:e8:22:fd: 58:03:44:46:57:18:91:70:b7:ff:69:70:40:ff:41: 9d:e6:45:8e:24:da:a4:bc:23:89:bb:c3:dd:39:a0: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:27:07:82:71:2B:4A:63:DB:54:56:82:07:09:08:F1:4E:61:0D X509v3 Authority Key Identifier: keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a8:3d:e7:d2:54:1c:95:a1:01:5c:0e:46:1e:ae:d8:91:4e: 20:62:32:43:b2:cf:7d:7f:15:bc:ae:4f:fd:fc:84:dc:74:e6: b2:99:49:c4:3e:e1:76:15:94:81:1f:6e:33:1a:2f:55:20:ec: 7c:a5:3d:c1:95:85:47:e2:22:e1:28:4d:32:f1:3b:1c:86:38: 54:93:40:cd:b8:a7:ce:f1:fd:53:45:f7:5d:d1:c0:40:79:92: 5c:07:69:7c:ed:ac:e3:18:57:0c:6d:c2:54:a2:bb:e7:8b:58: 42:29:ad:aa:8a:f7:fd:c8:93:0c:ee:04:e6:8f:00:fd:94:5b: 81:0f:c1:77:1b:74:1d:a9:b9:e0:2a:60:aa:71:bc:af:c1:a8: 6d:b5:f8:d6:00:06:a5:50:67:26:b6:b9:92:50:79:68:f5:f9: a7:6b:15:3e:a6:6f:6e:b3:ca:6e:b4:35:d8:6c:0e:ee:09:ba: 73:b0:a3:9c:6d:71:7d:5c:4f:e5:6c:0c:f3:c4:b4:a7:66:8d: a2:ea:c6:43:97:0f:76:bd:0f:cd:2f:84:ea:bf:23:de:84:51: b4:4e:3e:20:f8:b1:0d:ea:ee:4a:bc:41:79:46:2e:15:c0:df: 26:9b:25:fe:14:3f:bf:12:4b:90:2a:d5:00:7a:57:38:d6:80: 2c:9c:4e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/+A5ZJiiFbfqLT/1co4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmQ1NzM3MjRjYjFjMDk1YjliNjFiMmRmMDVlZTNmYzFh ODcxNmQwHhcNMjYwMTI1MTYwMTU4WhcNMjYwMTI2MTYwMTU4WjAzMTEwLwYDVQQD EyhmMDVmMjcwNzgyNzEyYjRhNjNkYjU0NTY4MjA3MDkwOGYxNGU2MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypxtPqS/ALaPArY2R/Khxe7mVhKr EWtPdZWo4niYR1YebpzEW+xgVQI7cDG+bLLssR4E6+Eo8rxO2mW5jFqUVitesqaT u4cdNPJqRSGy/GP9HMYQj+stk/rE0gWBmDFrn4Psqr/5PtgNqAxRF04ZryrHz1vi cxJtcLwYlZNSKxZlWQhdqF0W/1bsK5uI06m5S6+1haB+h6lTve/GmfYmqpdbSBGw K5Itwzy4Da8pmzMRng8+7D41c0K3MxUYriqI30W6AOt8YhL5EHrFkQcG+yNdkqoG 9B7W9fQY7RroIv1YA0RGVxiRcLf/aXBA/0Gd5kWOJNqkvCOJu8PdOaArcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBfJweCcStKY9tUVoIHCQjxTmENMB8GA1UdIwQY MBaAFMYtVzckyxwJW5thst8F7j/BqHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgt ZjY3ZWNjNTg1YmI4LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgtZjY3ZWNjNTg1YmI4 LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6g959JU HJWhAVwORh6u2JFOIGIyQ7LPfX8VvK5P/fyE3HTmsplJxD7hdhWUgR9uMxovVSDs fKU9wZWFR+Ii4ShNMvE7HIY4VJNAzbinzvH9U0X3XdHAQHmSXAdpfO2s4xhXDG3C VKK754tYQimtqor3/ciTDO4E5o8A/ZRbgQ/Bdxt0Ham54CpgqnG8r8GobbX41gAG pVBnJra5klB5aPX5p2sVPqZvbrPKbrQ12GwO7gm6c7CjnG1xfVxP5WwM88S0p2aN ourGQ5cPdr0PzS+E6r8j3oRRtE4+IPixDeruSrxBeUYuFcDfJpsl/hQ/vxJLkCrV AHpXONaALJxOQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:06 2026 by rpki-client