This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json) Hash identifier: X0dzUx/shoTuMcbenx/hMluXdu9Mo3N5+eNsxvS/Za8= Subject key identifier: AB:94:FA:B0:F4:6C:E1:1F:29:04:28:8A:E2:AD:72:2B:C4:6A:F4:97 Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21 Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21 Certificate serial: 019BF79A9B66929E0C24783FD27AD6C646B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 00:01:03 +0000 Manifest this update: Mon 26 Jan 2026 00:01:03 +0000 Manifest next update: Tue 27 Jan 2026 00:01:03 +0000 Files and hashes: 1: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (hash: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ=) 2: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (hash: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys=) 3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: pp7qs1lywKQvYqc2+a56La73LMfn2peCdhXZ+It8NRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:9b:66:92:9e:0c:24:78:3f:d2:7a:d6:c6:46:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21 Validity Not Before: Jan 26 00:01:03 2026 GMT Not After : Jan 27 00:01:03 2026 GMT Subject: CN=ab94fab0f46ce11f2904288ae2ad722bc46af497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:bb:e3:dd:fd:78:c5:e3:0b:32:f1:ab:c9: 99:25:a2:2c:67:2a:6e:7d:fa:48:fb:1d:ca:6e:69: 30:77:6c:75:65:5a:bd:ee:91:f8:cc:67:a0:8d:ed: 6b:33:c6:66:2e:de:2a:51:74:d9:25:b8:db:27:3f: 2f:a7:c0:10:d4:b3:42:b0:b1:1b:87:23:a4:8e:93: e5:fb:98:41:31:6b:6e:c0:17:90:e1:56:18:fd:9e: 09:c4:2f:bd:ee:f2:db:f6:ee:78:8e:28:2c:33:a9: af:0d:2d:13:f1:63:a2:a6:d1:58:92:47:d0:5b:71: 06:d4:31:f1:28:c3:15:50:67:a3:bc:be:5f:af:d2: 97:fd:e9:56:43:7c:ae:02:3a:a6:02:f3:e0:b6:da: 12:a8:ca:d1:da:1f:1b:a9:13:ac:6a:08:bd:4b:5a: 9e:59:af:df:77:e7:e8:cb:c4:c4:08:a9:8b:b2:bd: fc:8f:82:8b:d4:ce:a7:04:b8:ef:5b:59:90:f4:bf: 1b:6a:45:fd:78:00:d4:eb:7d:ec:da:e7:4a:73:b3: df:61:2e:3b:74:f5:ed:f8:9b:9d:41:0f:0a:16:d8: 3e:43:20:00:fb:c3:1c:f7:76:cd:13:09:f8:2d:89: 28:07:61:9c:44:52:30:2e:1f:d8:7c:7e:53:14:af: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:FA:B0:F4:6C:E1:1F:29:04:28:8A:E2:AD:72:2B:C4:6A:F4:97 X509v3 Authority Key Identifier: keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6a:f4:6a:ff:c3:b7:76:d6:e7:7c:93:d6:77:e8:6a:47:12: 8a:d8:90:95:98:52:74:2f:46:fa:44:a3:06:39:2d:d7:e7:13: 43:2b:d3:9f:13:45:65:37:6f:a2:58:12:25:1b:d6:d2:60:6e: d5:dd:8e:2f:32:fc:7e:9d:ad:32:a9:c4:0c:9d:5b:35:7a:ed: 35:73:7a:32:b1:9a:a1:29:b4:eb:8a:32:5d:49:1d:4a:63:c3: 98:55:b1:fa:94:b5:e0:a0:32:d8:c6:48:09:7c:ea:3a:bf:18: fd:ec:a6:cd:51:a9:c2:9d:2c:dc:b4:50:b7:a7:71:0a:0a:8b: 66:cb:48:4d:84:1c:53:39:3e:a9:80:7a:69:4c:33:ff:3b:62: b2:29:09:d0:3d:39:8e:03:a0:6a:e3:e5:3d:75:c6:3a:23:76: 4d:fc:99:d5:68:11:87:21:77:c5:14:c9:48:7b:a5:50:87:e3: aa:1e:ed:b3:d5:ab:3d:2b:5c:24:43:ab:2c:8f:9a:63:47:3d: 87:6b:cc:7e:8f:b4:f9:7e:6f:50:31:71:2a:11:6d:2b:15:b8: de:4a:64:ad:2a:e1:de:dd:2f:dc:fc:c3:e9:62:ab:de:c0:9c: a8:2f:9a:36:60:ff:53:9e:4e:26:08:5d:42:26:03:8a:02:2f: 12:5c:73:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mptmkp4MJHg/0nrWxka3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OWNlYjEyNDA4NDRjZGU4YTE2ODg5N2U0N2MxZGY1ZDZl Y2JmMjEwHhcNMjYwMTI2MDAwMTAzWhcNMjYwMTI3MDAwMTAzWjAzMTEwLwYDVQQD EyhhYjk0ZmFiMGY0NmNlMTFmMjkwNDI4OGFlMmFkNzIyYmM0NmFmNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWm74939eMXjCzLxq8mZJaIsZypu ffpI+x3Kbmkwd2x1ZVq97pH4zGegje1rM8ZmLt4qUXTZJbjbJz8vp8AQ1LNCsLEb hyOkjpPl+5hBMWtuwBeQ4VYY/Z4JxC+97vLb9u54jigsM6mvDS0T8WOiptFYkkfQ W3EG1DHxKMMVUGejvL5fr9KX/elWQ3yuAjqmAvPgttoSqMrR2h8bqROsagi9S1qe Wa/fd+foy8TECKmLsr38j4KL1M6nBLjvW1mQ9L8bakX9eADU633s2udKc7PfYS47 dPXt+JudQQ8KFtg+QyAA+8Mc93bNEwn4LYkoB2GcRFIwLh/YfH5TFK+0vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuU+rD0bOEfKQQoiuKtcivEavSXMB8GA1UdIwQY MBaAFMac6xJAhEzeihaIl+R8HfXW7L8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMt OGJlOTU3MWViMTBkLzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMtOGJlOTU3MWViMTBk LzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGr0av/D t3bW53yT1nfoakcSitiQlZhSdC9G+kSjBjkt1+cTQyvTnxNFZTdvolgSJRvW0mBu 1d2OLzL8fp2tMqnEDJ1bNXrtNXN6MrGaoSm064oyXUkdSmPDmFWx+pS14KAy2MZI CXzqOr8Y/eymzVGpwp0s3LRQt6dxCgqLZstITYQcUzk+qYB6aUwz/ztisikJ0D05 jgOgauPlPXXGOiN2TfyZ1WgRhyF3xRTJSHulUIfjqh7ts9WrPStcJEOrLI+aY0c9 h2vMfo+0+X5vUDFxKhFtKxW43kpkrSrh3t0v3PzD6WKr3sCcqC+aNmD/U55OJghd QiYDigIvElxzEQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:00 2026 by rpki-client