This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json) Hash identifier: 8JvLS8v7kL3pMGEQF2fd/5CU+wGrfhkkj/k14v/ATpo= Subject key identifier: C1:1B:15:0B:06:98:B9:61:81:1D:00:6F:E7:5A:9B:E9:A3:D9:F0:DA Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa Certificate serial: 019BF8769234DCC7FC8DE094C41E41C45A84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft Manifest number: 04D0 Signing time: Mon 26 Jan 2026 04:01:18 +0000 Manifest this update: Mon 26 Jan 2026 04:01:18 +0000 Manifest next update: Tue 27 Jan 2026 04:01:18 +0000 Files and hashes: 1: EhoGVGxSzJ85EDf-pwsVPGfHrjk.roa (hash: bYaigFFh4NG+rmCpPKbaSMIoScBrwWuRStJPl8NxmHQ=) 2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: rtz18+cNvV066mNTPQxbu5XAIbxklpHc5KgsCgJrTqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:92:34:dc:c7:fc:8d:e0:94:c4:1e:41:c4:5a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa Validity Not Before: Jan 26 04:01:18 2026 GMT Not After : Jan 27 04:01:18 2026 GMT Subject: CN=c11b150b0698b961811d006fe75a9be9a3d9f0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ef:5e:fa:ee:4e:1b:69:c3:46:10:21:48:81: cb:21:bd:8b:d7:3b:17:69:09:75:8c:41:92:7e:08: ae:2c:4e:9b:c8:ca:1b:66:3c:fa:f6:af:e3:89:f3: 1b:b2:eb:c8:8a:80:99:2e:33:f2:be:49:61:a7:15: 28:73:ce:90:1b:aa:6b:b3:2b:66:3a:c4:72:29:7e: 41:95:6d:bb:1c:98:9a:72:a3:1f:58:66:6f:0a:7d: 2d:9a:56:85:20:cf:7e:c6:dd:54:6b:8b:20:ff:0d: fd:d7:d4:b6:3e:bb:75:88:a5:6d:0d:f1:6c:9b:cf: 07:ed:3f:00:5e:87:47:76:21:06:f8:ce:a1:e2:04: ee:88:2a:8d:3a:51:f5:6d:0f:a1:b9:48:3d:fb:af: bb:3f:59:29:0b:7a:9c:3f:f3:dd:f4:0f:5e:ea:db: 2d:d6:ac:18:42:16:09:63:e0:8d:5e:80:aa:64:7f: f2:4d:9c:5b:cb:6b:2f:9c:7b:2c:60:13:53:01:3f: 23:76:56:f5:7b:d8:64:f4:57:b9:65:68:a8:a1:7f: 34:a8:cf:00:21:75:d3:0d:52:c2:8a:bf:b3:61:1e: 4b:91:14:95:38:0f:83:c1:e4:22:d5:79:db:13:45: ec:e1:98:7b:6a:78:66:62:82:31:6d:96:ca:25:60: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:15:0B:06:98:B9:61:81:1D:00:6F:E7:5A:9B:E9:A3:D9:F0:DA X509v3 Authority Key Identifier: keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3f:f4:0d:31:95:7a:06:a6:dc:cd:9c:cb:51:e9:d9:33:9d: 7c:6c:21:a9:4d:fa:cb:da:c9:e0:d5:62:84:d2:76:38:dc:d8: 25:06:61:0b:20:00:0c:ae:e1:88:ae:bf:df:77:c2:05:f0:42: 29:00:62:05:aa:42:82:09:21:d2:2d:10:f8:2e:8c:a7:0a:a8: a3:1f:c8:cd:2d:92:f4:6a:96:3b:76:fd:2d:7a:07:ec:9b:aa: 15:e8:99:45:25:7d:b6:ea:26:f8:8c:43:d4:ce:e3:f0:63:67: ab:63:61:e0:3e:26:a3:88:ef:25:75:4a:9b:8d:14:4f:2d:a6: 5c:df:a9:81:72:be:0a:af:f0:77:8b:1f:f9:70:33:68:6a:1d: 8b:b8:9e:39:31:1a:bf:dd:65:b9:ac:b7:5c:f9:8b:4d:55:e9: 09:48:9b:93:9a:a5:6b:f8:c6:f7:e1:dd:6a:98:70:13:6a:4c: 32:7a:98:17:6e:6d:cb:a7:33:ad:5f:a6:7c:08:93:3e:b2:20: 6b:ac:9a:39:9e:81:39:ab:94:3d:de:76:ed:22:d9:d4:d2:b0: 60:5a:f8:b9:a1:9d:b4:ff:4a:d6:c8:93:c2:72:4a:2c:53:45: 8a:ca:d2:f3:ea:d8:11:a9:c9:19:b5:a7:2b:b7:0e:56:61:72: 0e:e9:f0:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpI03Mf8jeCUxB5BxFqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGNkOGQwYTJhYmFlOGMyNTM5MWYyMzA1MWNjM2YwZjI0 NzkzYWEwHhcNMjYwMTI2MDQwMTE4WhcNMjYwMTI3MDQwMTE4WjAzMTEwLwYDVQQD EyhjMTFiMTUwYjA2OThiOTYxODExZDAwNmZlNzVhOWJlOWEzZDlmMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9O9e+u5OG2nDRhAhSIHLIb2L1zsX aQl1jEGSfgiuLE6byMobZjz69q/jifMbsuvIioCZLjPyvklhpxUoc86QG6prsytm OsRyKX5BlW27HJiacqMfWGZvCn0tmlaFIM9+xt1Ua4sg/w3919S2Prt1iKVtDfFs m88H7T8AXodHdiEG+M6h4gTuiCqNOlH1bQ+huUg9+6+7P1kpC3qcP/Pd9A9e6tst 1qwYQhYJY+CNXoCqZH/yTZxby2svnHssYBNTAT8jdlb1e9hk9Fe5ZWiooX80qM8A IXXTDVLCir+zYR5LkRSVOA+DweQi1XnbE0Xs4Zh7anhmYoIxbZbKJWDSgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEbFQsGmLlhgR0Ab+dam+mj2fDaMB8GA1UdIwQY MBaAFMXc2NCiq66MJTkfIwUcw/DyR5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQt Yzc5ZDQ2YTkyMzliLzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQtYzc5ZDQ2YTkyMzli LzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApj/0DTGV egam3M2cy1Hp2TOdfGwhqU36y9rJ4NVihNJ2ONzYJQZhCyAADK7hiK6/33fCBfBC KQBiBapCggkh0i0Q+C6Mpwqoox/IzS2S9GqWO3b9LXoH7JuqFeiZRSV9tuom+IxD 1M7j8GNnq2Nh4D4mo4jvJXVKm40UTy2mXN+pgXK+Cq/wd4sf+XAzaGodi7ieOTEa v91luay3XPmLTVXpCUibk5qla/jG9+HdaphwE2pMMnqYF25ty6czrV+mfAiTPrIg a6yaOZ6BOauUPd527SLZ1NKwYFr4uaGdtP9K1siTwnJKLFNFisrS8+rYEanJGbWn K7cOVmFyDunwkw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:49 2026 by rpki-client