This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json) Hash identifier: 7q/iguSpO0ZbyDiz68xEr2/UPip5d3JY7SQCsB0jDNA= Subject key identifier: E9:E3:91:CE:75:AA:06:EB:32:0D:74:C7:CA:67:DD:C3:BC:0C:A1:5F Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b Certificate serial: 019BF79A3BD29615D4AD4B0957A63A5FAB9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft Manifest number: 07D6 Signing time: Mon 26 Jan 2026 00:00:38 +0000 Manifest this update: Mon 26 Jan 2026 00:00:38 +0000 Manifest next update: Tue 27 Jan 2026 00:00:38 +0000 Files and hashes: 1: RgWi-aprHOGj2N0T2_M-Cs4Yuhc.roa (hash: FwSEX5ZWPDMp7ATa85IYHEA7kyGOC21zknxdskogO04=) 2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: mQlX2NxkjUTPtYeVC9kVJCQ8jlQoNXi3O6o3CKTiVIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:3b:d2:96:15:d4:ad:4b:09:57:a6:3a:5f:ab:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b Validity Not Before: Jan 26 00:00:38 2026 GMT Not After : Jan 27 00:00:38 2026 GMT Subject: CN=e9e391ce75aa06eb320d74c7ca67ddc3bc0ca15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c8:10:f3:94:7d:2b:ec:37:c6:20:2d:68:12: 91:0c:6f:3b:61:61:2a:98:98:ab:b3:5d:ae:a7:14: 7b:b7:61:e8:f1:92:5a:35:91:6e:0b:b9:0d:f9:06: d9:18:91:87:50:f0:f6:a5:7a:11:15:f7:f3:93:98: 5f:5d:d8:1d:75:49:9b:2d:72:c9:45:f3:2d:36:bd: a1:11:bc:39:de:59:89:16:1c:22:e8:62:66:33:09: 35:8d:31:89:fe:df:46:36:27:6c:35:75:3c:68:05: ca:5a:85:1e:a1:8e:56:e5:f0:ca:ba:63:3a:84:46: 4c:27:7f:9f:95:6a:77:02:09:63:c3:9d:8c:b6:13: 60:24:a2:0c:bd:e1:cd:0f:7b:85:94:a6:e5:a7:e2: bf:aa:59:77:c7:53:d0:97:42:cb:12:14:1e:bb:6f: 5a:85:cb:f1:51:8a:e5:12:fc:0f:30:02:2e:f2:09: fe:b5:57:b2:0c:ce:14:1d:6b:2f:76:e3:7c:c5:ba: d9:33:79:ea:52:6b:36:00:67:bb:7a:15:b7:f8:4a: 1e:78:9d:b4:7b:83:4e:8b:a1:98:2b:54:11:c7:17: c9:b2:03:b8:ce:29:68:f7:d5:b3:6a:6e:2e:ec:18: a6:2e:90:b8:3e:fb:96:58:5b:95:0d:4d:d9:a7:27: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E3:91:CE:75:AA:06:EB:32:0D:74:C7:CA:67:DD:C3:BC:0C:A1:5F X509v3 Authority Key Identifier: keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:76:7f:2d:59:cb:6d:23:b1:68:37:87:cb:ba:78:b8:b8:a1: 61:3d:6b:68:e4:44:32:fd:38:21:e0:8d:31:c0:b8:2a:93:56: 5b:18:be:91:44:a6:bb:7e:2d:ab:2b:14:46:a9:37:8b:1f:59: 9d:ec:0f:df:8e:a9:0e:f4:71:1e:98:9e:88:4b:3c:e4:86:76: 00:c9:5e:43:88:fd:99:6b:40:98:10:da:68:83:19:03:bc:1e: 2e:d1:3d:db:19:52:31:b6:e2:98:17:9a:be:c9:bf:10:c7:be: 6d:c9:a6:cf:77:e6:28:78:32:f1:27:49:78:86:5d:50:f2:24: 64:39:36:9a:8c:89:ab:05:a2:19:ea:43:87:12:10:99:89:8a: 3f:a9:61:57:25:6b:30:1d:08:46:d7:7e:21:15:1a:bf:ab:21: 76:12:4d:5e:f0:7f:5f:69:52:46:7d:76:84:94:ea:4a:11:14: f3:2a:a4:58:e6:87:98:5d:5a:78:27:e3:35:b0:d5:43:9a:b3: 48:ba:95:f8:16:ca:28:97:df:3c:7f:fa:b7:00:18:01:8b:2c: b0:36:e8:37:4f:c5:d8:b4:a7:32:e5:54:cf:08:b0:be:85:b5: aa:11:ac:bc:39:ec:6b:04:77:3d:00:ef:8c:90:71:55:c9:d5: db:1e:45:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mjvSlhXUrUsJV6Y6X6ucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MjA4YThiODViY2I4MDdjYWQ2NDEzODU0MzI2M2FjYjIw NDQ0OGIwHhcNMjYwMTI2MDAwMDM4WhcNMjYwMTI3MDAwMDM4WjAzMTEwLwYDVQQD EyhlOWUzOTFjZTc1YWEwNmViMzIwZDc0YzdjYTY3ZGRjM2JjMGNhMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMgQ85R9K+w3xiAtaBKRDG87YWEq mJirs12upxR7t2Ho8ZJaNZFuC7kN+QbZGJGHUPD2pXoRFffzk5hfXdgddUmbLXLJ RfMtNr2hEbw53lmJFhwi6GJmMwk1jTGJ/t9GNidsNXU8aAXKWoUeoY5W5fDKumM6 hEZMJ3+flWp3Agljw52MthNgJKIMveHND3uFlKblp+K/qll3x1PQl0LLEhQeu29a hcvxUYrlEvwPMAIu8gn+tVeyDM4UHWsvduN8xbrZM3nqUms2AGe7ehW3+EoeeJ20 e4NOi6GYK1QRxxfJsgO4zilo99Wzam4u7BimLpC4PvuWWFuVDU3Zpyf28QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnjkc51qgbrMg10x8pn3cO8DKFfMB8GA1UdIwQY MBaAFMcgiouFvLgHytZBOFQyY6yyBESLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgt MGY2YzQxMmNmM2RmLzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgtMGY2YzQxMmNmM2Rm LzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXZ/LVnL bSOxaDeHy7p4uLihYT1raOREMv04IeCNMcC4KpNWWxi+kUSmu34tqysURqk3ix9Z newP346pDvRxHpieiEs85IZ2AMleQ4j9mWtAmBDaaIMZA7weLtE92xlSMbbimBea vsm/EMe+bcmmz3fmKHgy8SdJeIZdUPIkZDk2moyJqwWiGepDhxIQmYmKP6lhVyVr MB0IRtd+IRUav6shdhJNXvB/X2lSRn12hJTqShEU8yqkWOaHmF1aeCfjNbDVQ5qz SLqV+BbKKJffPH/6twAYAYsssDboN0/F2LSnMuVUzwiwvoW1qhGsvDnsawR3PQDv jJBxVcnV2x5F0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:30 2026 by rpki-client