This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json) Hash identifier: 1PEEM6isHVcGTaNwzfi7hPRI6PlRMstXqa//0g5/buA= Subject key identifier: 4F:1A:3C:26:96:4E:E1:53:DD:91:60:DA:DD:D6:E6:5E:68:02:1F:44 Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09 Certificate serial: 019BF574FD4D455DD94E0942376410D0FBA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft Manifest number: 0404 Signing time: Sun 25 Jan 2026 14:00:43 +0000 Manifest this update: Sun 25 Jan 2026 14:00:43 +0000 Manifest next update: Mon 26 Jan 2026 14:00:43 +0000 Files and hashes: 1: XsPBZYDmZQXk-P0aqcX7IcYNL6s.roa (hash: orTb8e31BmqYC4t4GQUVMdSeajjCevLwDiZIoKJFTaw=) 2: YCz7-CkEVhCfF1Yx2osR16ioZHU.asa (hash: HqY7WylV2rDv4zE6nPFV+XcytLTw/YOLekrTPYUG/rs=) 3: _InFEIoYoBff0XPi6Qu-BDtEOeA.roa (hash: 1FQgWq9bmnmW/hqAWc6TQBl0/lSLnU+yUMWdU6LEwbc=) 4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: Jux3OESjtMVb9gicgX+KRjaxQbb1MSVlDZEZ2yO/fLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:fd:4d:45:5d:d9:4e:09:42:37:64:10:d0:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09 Validity Not Before: Jan 25 14:00:43 2026 GMT Not After : Jan 26 14:00:43 2026 GMT Subject: CN=4f1a3c26964ee153dd9160daddd6e65e68021f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:5d:c8:62:0c:e1:21:33:f4:f4:4f:16:82: 8c:a9:34:cd:91:64:39:ad:cf:3c:5c:11:63:70:c1: 1c:c4:51:d5:42:dd:f1:40:95:6b:6b:63:44:e2:27: 46:db:e5:80:6b:72:b5:67:39:9d:8b:db:6c:cc:72: e8:ea:2d:82:9c:43:ba:9f:10:c3:9e:bc:10:d3:ac: 73:91:ad:ba:24:d4:86:94:a3:d6:26:d2:81:7b:7a: c8:cf:94:9c:b8:27:ab:58:85:f9:df:62:71:53:78: b1:93:f0:f0:d0:fc:50:c6:e5:20:0b:60:26:54:3d: fd:a5:e6:46:d5:56:ba:a8:3e:b2:60:1a:d8:c2:e9: 79:cf:fe:61:91:58:d0:e4:c9:96:cb:52:ee:93:b2: f5:06:cd:10:89:86:61:6c:ad:fe:03:87:89:c5:c5: 74:cd:40:66:83:4b:bf:81:98:25:eb:d1:8c:56:ef: f1:0f:84:9e:97:bd:1e:2a:c7:f1:2a:ef:ad:8c:12: 9e:d9:ec:bf:7c:f9:f8:ee:ab:39:85:37:dc:34:1a: 82:74:b3:38:34:74:3a:2d:70:a4:76:ad:a4:da:c5: 23:b9:c2:12:ac:92:79:5c:9e:28:fa:7f:77:ab:e1: 57:65:47:c6:fa:00:16:70:7b:55:de:16:06:ef:f9: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1A:3C:26:96:4E:E1:53:DD:91:60:DA:DD:D6:E6:5E:68:02:1F:44 X509v3 Authority Key Identifier: keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b9:15:22:a6:ed:9e:5b:a7:83:f5:5b:62:ea:e5:32:0b:a9: a7:db:45:82:a8:0e:7a:6f:b4:30:a4:a6:90:60:76:49:88:9e: 80:b6:67:06:7e:be:65:e1:b6:a9:3c:92:7a:25:e0:f8:0f:49: 19:c3:1e:10:95:24:17:d5:a5:36:65:22:54:9e:50:9d:03:20: 76:ae:aa:f6:d3:b0:4a:8c:6e:74:5e:88:49:a7:b2:f1:2a:23: e4:17:53:57:be:8f:63:0b:0a:d1:bd:db:5f:84:03:8d:c2:f9: f3:8a:12:db:1e:3c:9f:02:bb:3d:c2:0b:a2:08:7f:d5:65:54: 6c:81:a3:cd:c7:b8:94:eb:b2:2d:62:2e:88:c0:6c:d6:02:8e: 08:5d:b7:3f:10:49:0f:f0:ea:0f:4b:b1:79:68:0e:bb:7d:0a: 91:8a:87:d4:11:01:16:80:60:91:c2:0c:18:db:73:ee:8b:0f: 2c:83:85:f7:f4:cd:ba:12:e2:55:e9:89:7f:c8:53:78:ed:03: 4a:bf:6e:30:fa:4b:11:9d:8f:b1:d1:56:0e:4b:31:e2:a7:e5: de:00:5a:f7:ff:2c:8b:33:0c:b5:12:2c:41:b7:5b:21:a6:99: 5a:48:ca:75:39:bd:4a:79:2e:80:da:86:82:0e:80:ab:00:6e: ca:d5:2a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dP1NRV3ZTglCN2QQ0PugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTYxM2Q1OTk5ZjM2MzI5ODVlZDg5YTAyZWZhYWJkMTg5 MGJhMDkwHhcNMjYwMTI1MTQwMDQzWhcNMjYwMTI2MTQwMDQzWjAzMTEwLwYDVQQD Eyg0ZjFhM2MyNjk2NGVlMTUzZGQ5MTYwZGFkZGQ2ZTY1ZTY4MDIxZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEBdyGIM4SEz9PRPFoKMqTTNkWQ5 rc88XBFjcMEcxFHVQt3xQJVra2NE4idG2+WAa3K1Zzmdi9tszHLo6i2CnEO6nxDD nrwQ06xzka26JNSGlKPWJtKBe3rIz5ScuCerWIX532JxU3ixk/Dw0PxQxuUgC2Am VD39peZG1Va6qD6yYBrYwul5z/5hkVjQ5MmWy1Luk7L1Bs0QiYZhbK3+A4eJxcV0 zUBmg0u/gZgl69GMVu/xD4Sel70eKsfxKu+tjBKe2ey/fPn47qs5hTfcNBqCdLM4 NHQ6LXCkdq2k2sUjucISrJJ5XJ4o+n93q+FXZUfG+gAWcHtV3hYG7/nw5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8aPCaWTuFT3ZFg2t3W5l5oAh9EMB8GA1UdIwQY MBaAFMZWE9WZnzYymF7YmgLvqr0YkLoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2Ut NjUwOTkyZjJhMTc0LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2UtNjUwOTkyZjJhMTc0 LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbkVIqbt nlung/VbYurlMgupp9tFgqgOem+0MKSmkGB2SYiegLZnBn6+ZeG2qTySeiXg+A9J GcMeEJUkF9WlNmUiVJ5QnQMgdq6q9tOwSoxudF6ISaey8Soj5BdTV76PYwsK0b3b X4QDjcL584oS2x48nwK7PcILogh/1WVUbIGjzce4lOuyLWIuiMBs1gKOCF23PxBJ D/DqD0uxeWgOu30KkYqH1BEBFoBgkcIMGNtz7osPLIOF9/TNuhLiVemJf8hTeO0D Sr9uMPpLEZ2PsdFWDksx4qfl3gBa9/8sizMMtRIsQbdbIaaZWkjKdTm9SnkugNqG gg6AqwBuytUqeg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:39 2026 by rpki-client