This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json) Hash identifier: XuFQt2FLeuS7Tro+uGcEZkZhIGYRlmRD1LaTEoFy4oY= Subject key identifier: C7:35:6B:7B:2C:23:69:22:25:6C:7A:65:11:E1:57:8B:C2:B1:D0:C0 Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a Certificate serial: 019BFD2E56CC5F0A4F1FC369BDCBE200712C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 02:00:31 +0000 Manifest this update: Tue 27 Jan 2026 02:00:31 +0000 Manifest next update: Wed 28 Jan 2026 02:00:31 +0000 Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: 5BZQbYUK7EuBS3abpM5hTXk7uHT7dC6Wz8oA9Az5oZk=) 2: yGB3G9JvJrN2ebP00_hjVPvgDtg.roa (hash: bHuIB6ZCObrwj4J53cKXr7Vc20aEn6p9E11VTiZdX7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:56:cc:5f:0a:4f:1f:c3:69:bd:cb:e2:00:71:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a Validity Not Before: Jan 27 02:00:31 2026 GMT Not After : Jan 28 02:00:31 2026 GMT Subject: CN=c7356b7b2c236922256c7a6511e1578bc2b1d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:d8:6c:6c:85:56:ce:a9:af:14:5b:99:0c: 8d:73:7e:d8:8e:32:6c:8d:e3:3d:56:66:80:e4:70: 39:1d:87:11:aa:e4:32:b9:05:b9:be:2e:c5:9b:44: 4d:96:c1:fb:8e:89:69:1f:1a:69:a4:f9:79:bc:c8: b6:3a:82:2e:dd:f0:80:ac:6f:da:30:6f:68:17:65: b3:ff:cd:d1:d7:0d:49:67:ea:b2:34:09:f6:86:a5: 57:63:85:f5:2f:54:d9:d7:1b:3d:94:5a:1e:b7:87: 30:eb:20:9c:df:38:24:f2:37:ef:64:b0:ae:bc:5a: 95:f8:8e:28:e6:3a:f7:4d:f6:a2:93:78:64:91:5d: e6:77:73:67:bc:d8:54:7f:86:2e:68:ad:87:bb:49: e1:96:e5:a8:ba:fe:57:d7:fa:ca:62:e5:a3:73:fa: 96:2d:fa:42:d6:55:1b:4e:2e:f6:11:1f:e9:fa:a7: f8:98:38:a6:2c:19:86:96:0b:07:b4:a1:75:69:e7: 0f:81:85:ab:b0:3e:82:1e:f1:ea:6e:72:95:5c:78: 7a:c2:82:96:c4:e3:85:e4:a8:9f:aa:cd:84:f0:64: ae:aa:7f:22:2a:05:e6:b0:48:9e:d9:ea:9d:a3:15: a9:5a:4c:3a:ff:4f:46:f6:97:d5:71:1f:fd:2c:79: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:6B:7B:2C:23:69:22:25:6C:7A:65:11:E1:57:8B:C2:B1:D0:C0 X509v3 Authority Key Identifier: keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e5:ff:2e:94:ec:ba:5a:12:30:6d:38:a2:ad:8e:c9:8c:0f: 44:d4:86:f8:e5:62:6c:46:5b:10:5f:a8:7c:94:e0:da:b9:14: 7e:b1:d0:fc:18:4f:99:0f:e1:da:32:10:ce:f7:18:e0:9f:33: 0d:15:36:0b:8f:b5:99:a3:54:28:e2:25:e3:8c:93:07:15:8e: ec:4c:cf:05:23:6c:2f:22:17:e7:0c:73:b5:4c:86:8b:74:d6: 88:f9:f9:39:29:36:ee:bf:0d:f4:3e:68:52:eb:07:a5:a5:6a: ac:7e:90:90:e0:b8:f6:a5:b8:6d:f3:c5:6b:72:68:02:30:aa: 90:2c:06:4e:04:95:ac:f3:0e:62:27:51:62:78:05:9f:38:ea: a3:a3:0a:00:1c:4b:30:5c:79:eb:31:d4:60:7b:64:c2:f9:c2: bb:86:4d:ea:92:48:ca:38:8f:e4:b7:15:31:0c:ec:b9:9d:c4: 31:4e:54:29:3f:1c:92:d2:25:a2:ef:d9:65:64:9d:aa:c7:f2: 62:4b:68:d9:80:3c:db:15:7b:9d:0b:c3:bc:c5:10:fe:67:1d: 32:0d:f0:de:46:29:a2:9f:49:33:ce:a7:27:7f:36:13:a6:0f: af:1d:00:95:e3:c2:53:5f:2f:0b:ce:4c:44:45:65:32:92:7c: 0a:98:cd:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LlbMXwpPH8NpvcviAHEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZmZmMjU3OGEwZTYyMTVkYzYwZTJkYTk0NmYzMGQyNWM2 M2NkNmEwHhcNMjYwMTI3MDIwMDMxWhcNMjYwMTI4MDIwMDMxWjAzMTEwLwYDVQQD EyhjNzM1NmI3YjJjMjM2OTIyMjU2YzdhNjUxMWUxNTc4YmMyYjFkMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6fYbGyFVs6prxRbmQyNc37YjjJs jeM9VmaA5HA5HYcRquQyuQW5vi7Fm0RNlsH7jolpHxpppPl5vMi2OoIu3fCArG/a MG9oF2Wz/83R1w1JZ+qyNAn2hqVXY4X1L1TZ1xs9lFoet4cw6yCc3zgk8jfvZLCu vFqV+I4o5jr3Tfaik3hkkV3md3NnvNhUf4YuaK2Hu0nhluWouv5X1/rKYuWjc/qW LfpC1lUbTi72ER/p+qf4mDimLBmGlgsHtKF1aecPgYWrsD6CHvHqbnKVXHh6woKW xOOF5Kifqs2E8GSuqn8iKgXmsEie2eqdoxWpWkw6/09G9pfVcR/9LHlBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc1a3ssI2kiJWx6ZRHhV4vCsdDAMB8GA1UdIwQY MBaAFF7/8leKDmIV3GDi2pRvMNJcY81qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3Nzgt YjY5NzkwN2ZmZGM4LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3NzgtYjY5NzkwN2ZmZGM4 LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuX/LpTs uloSMG04oq2OyYwPRNSG+OVibEZbEF+ofJTg2rkUfrHQ/BhPmQ/h2jIQzvcY4J8z DRU2C4+1maNUKOIl44yTBxWO7EzPBSNsLyIX5wxztUyGi3TWiPn5OSk27r8N9D5o UusHpaVqrH6QkOC49qW4bfPFa3JoAjCqkCwGTgSVrPMOYidRYngFnzjqo6MKABxL MFx56zHUYHtkwvnCu4ZN6pJIyjiP5LcVMQzsuZ3EMU5UKT8cktIlou/ZZWSdqsfy Ykto2YA82xV7nQvDvMUQ/mcdMg3w3kYpop9JM86nJ382E6YPrx0AlePCU18vC85M REVlMpJ8CpjNFA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:10:23 2026 by rpki-client