This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json) Hash identifier: 204lGjaHkJiHjYG1TuDz4IrYItpQzddMGxXHH9Ij5ZM= Subject key identifier: 2D:9D:BD:81:3E:7E:61:F0:47:1B:9D:87:FF:09:A0:C8:EA:8B:D2:AE Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019BF763B77DFC1F8F3A1DD75D7371CF6665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 23:01:05 +0000 Manifest this update: Sun 25 Jan 2026 23:01:05 +0000 Manifest next update: Mon 26 Jan 2026 23:01:05 +0000 Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=) 2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 6DSbugYbuyuU8NpWOD4YYN6r7JqVee+fIpJBYIa4GQ4=) 3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:b7:7d:fc:1f:8f:3a:1d:d7:5d:73:71:cf:66:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Jan 25 23:01:05 2026 GMT Not After : Jan 26 23:01:05 2026 GMT Subject: CN=2d9dbd813e7e61f0471b9d87ff09a0c8ea8bd2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:e7:76:9b:78:34:dc:e5:f6:94:eb:11:67: 32:24:ef:47:17:95:e0:dc:da:25:47:8c:10:1e:a1: ae:02:d1:70:b9:c2:07:cf:74:7a:f4:01:22:18:0d: ce:3a:a4:80:f5:99:4e:e5:1e:26:7f:40:f7:c6:ab: fe:80:ec:48:5d:0d:c2:ab:97:01:5d:30:71:68:a8: 79:61:c4:64:e0:2f:6e:18:ba:af:82:f4:fa:0a:8b: 6f:51:1a:33:9c:cb:cc:6d:a2:68:68:1f:d0:65:00: 1f:f0:e4:6c:87:24:8c:2d:6b:8f:c9:a9:44:1b:41: c9:91:af:23:d8:16:44:0f:2a:a8:97:2a:50:d5:94: 30:87:42:02:5f:fb:6d:f3:b5:1b:3f:84:bc:85:ce: 79:d2:48:84:be:5c:e4:c3:dc:c0:bc:c9:cc:17:b4: 7b:57:38:cc:67:cf:ac:85:8f:85:33:6c:c5:2f:ec: a9:cd:82:dd:de:2e:0f:ae:be:7e:c0:c9:93:13:87: 30:ca:58:81:77:2c:b0:9b:8b:5c:67:05:50:8e:51: 90:44:a4:62:b8:00:ff:15:37:ca:b4:3a:44:f4:1f: d5:98:84:af:30:77:f7:fc:2d:d0:9b:ce:22:d3:a1: 00:b5:46:a5:33:b5:bf:f6:cb:d8:a5:be:b4:ac:eb: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9D:BD:81:3E:7E:61:F0:47:1B:9D:87:FF:09:A0:C8:EA:8B:D2:AE X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1d:a1:9c:bf:e6:4a:69:af:85:22:4b:11:2b:0d:14:ff:be: f6:43:44:9c:c1:b4:f6:b9:c8:30:3e:77:6c:35:ee:ba:15:5c: 46:c5:53:13:a1:f1:03:94:17:a4:ff:46:96:86:24:bf:72:b3: 05:7e:5e:c4:3d:ca:da:a7:7b:48:29:41:d4:a0:a8:2a:34:4b: 95:84:b5:bf:55:34:39:cb:77:09:64:9d:55:a3:dc:f9:1b:79: 63:ac:36:9b:15:33:d7:e8:74:e7:8d:b3:2b:8b:a6:a5:69:d4: b9:2b:d0:dc:a6:f4:bd:06:14:d3:4e:19:28:c4:48:0a:5e:27: 14:c1:86:1f:61:fc:ca:ad:50:3b:79:c4:b4:50:98:19:fe:55: 61:bb:e9:7f:45:53:03:73:60:d3:66:49:06:f1:15:a9:52:f2: 79:30:12:16:cb:10:e9:26:44:27:64:1a:e5:81:6e:01:eb:be: e9:6d:29:fc:47:b8:ad:2a:41:ec:5f:0c:36:92:63:69:45:8e: f2:47:52:81:09:a3:09:2a:69:b0:a4:d3:3e:c3:eb:37:b3:17: 64:32:f5:18:fe:1f:f0:2a:de:76:ef:9f:00:10:f6:df:5e:cf: 83:f0:e7:c0:d3:4f:6f:43:a5:cb:08:81:dc:5f:42:8a:5a:47: ff:b4:ee:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7d9/B+POh3XXXNxz2ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjYwMTI1MjMwMTA1WhcNMjYwMTI2MjMwMTA1WjAzMTEwLwYDVQQD EygyZDlkYmQ4MTNlN2U2MWYwNDcxYjlkODdmZjA5YTBjOGVhOGJkMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop3ndpt4NNzl9pTrEWcyJO9HF5Xg 3NolR4wQHqGuAtFwucIHz3R69AEiGA3OOqSA9ZlO5R4mf0D3xqv+gOxIXQ3Cq5cB XTBxaKh5YcRk4C9uGLqvgvT6CotvURoznMvMbaJoaB/QZQAf8ORshySMLWuPyalE G0HJka8j2BZEDyqolypQ1ZQwh0ICX/tt87UbP4S8hc550kiEvlzkw9zAvMnMF7R7 VzjMZ8+shY+FM2zFL+ypzYLd3i4Prr5+wMmTE4cwyliBdyywm4tcZwVQjlGQRKRi uAD/FTfKtDpE9B/VmISvMHf3/C3Qm84i06EAtUalM7W/9svYpb60rOu6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2dvYE+fmHwRxudh/8JoMjqi9KuMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGx2hnL/m SmmvhSJLESsNFP++9kNEnMG09rnIMD53bDXuuhVcRsVTE6HxA5QXpP9GloYkv3Kz BX5exD3K2qd7SClB1KCoKjRLlYS1v1U0Oct3CWSdVaPc+Rt5Y6w2mxUz1+h0542z K4umpWnUuSvQ3Kb0vQYU004ZKMRICl4nFMGGH2H8yq1QO3nEtFCYGf5VYbvpf0VT A3Ng02ZJBvEVqVLyeTASFssQ6SZEJ2Qa5YFuAeu+6W0p/Ee4rSpB7F8MNpJjaUWO 8kdSgQmjCSppsKTTPsPrN7MXZDL1GP4f8Credu+fABD2317Pg/DnwNNPb0OlywiB 3F9CilpH/7Tu2w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:25 2026 by rpki-client