This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json) Hash identifier: EXC8uLokX5YD5MHvEI1b2cjGVqXTwzdkB83xkGsJzw0= Subject key identifier: 47:13:9E:B9:05:CC:E0:F1:5F:EB:6F:02:A8:24:FE:D6:CD:27:EA:4E Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Certificate serial: 019BF6F5838D56C96C501CFFF91CC3BE0B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:00:43 +0000 Manifest this update: Sun 25 Jan 2026 21:00:43 +0000 Manifest next update: Mon 26 Jan 2026 21:00:43 +0000 Files and hashes: 1: lXZ70sH06yN7K7WcAZYGhagQGQU.roa (hash: eJ37tNCDP1cEuP29zNg/vJT6DSno9tiJhEXL9Ek6IDY=) 2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: u8fKh5mBtBZeWgH2p51dywF+eQsFtUDkwK2dS4/+dlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:83:8d:56:c9:6c:50:1c:ff:f9:1c:c3:be:0b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Validity Not Before: Jan 25 21:00:43 2026 GMT Not After : Jan 26 21:00:43 2026 GMT Subject: CN=47139eb905cce0f15feb6f02a824fed6cd27ea4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:3f:82:23:34:ac:ae:bf:bc:64:69:87:9b: b3:c9:2c:22:f1:80:f5:c3:48:ab:f8:02:98:b1:fc: c6:66:2d:bb:2f:0c:f3:98:ca:da:6a:4f:05:7d:09: 7f:54:f0:c4:12:ea:59:35:cf:c3:6f:b7:a5:fb:ff: 93:c4:e0:8d:5f:52:b7:60:a5:8b:ac:7a:78:e4:88: 18:43:d2:f3:92:42:fa:72:6b:76:f9:bd:36:a6:b0: 96:ed:cd:8b:7d:90:45:d8:d3:89:e0:54:65:a3:30: ea:f4:29:cf:67:8e:93:35:c1:9e:75:76:7a:dc:b2: 88:0a:ff:ac:d6:5f:de:06:2c:b8:c4:08:bb:c4:3b: e9:de:52:04:4a:6e:dd:d9:c0:73:ea:6d:88:1c:b3: e8:19:42:44:a9:0d:54:08:f0:17:60:1e:4f:38:f4: 67:0e:e3:05:20:b3:02:3e:1c:51:76:4e:0a:14:f1: 79:65:93:26:37:19:eb:b5:ff:82:71:b0:3b:11:2d: ad:92:c8:d4:9f:ee:31:a0:fb:99:78:c2:72:f9:b0: 19:25:82:f8:5f:74:9a:4d:6b:b9:c8:ce:f2:22:85: df:d0:fc:65:56:90:90:96:cf:07:73:89:08:47:9d: b0:fe:5f:aa:65:c3:59:9a:76:f8:3c:cf:5c:da:2f: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:13:9E:B9:05:CC:E0:F1:5F:EB:6F:02:A8:24:FE:D6:CD:27:EA:4E X509v3 Authority Key Identifier: keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ef:d1:a7:bb:1c:4f:13:15:17:2f:cf:33:ad:a8:bf:8f:63: 1f:d9:c5:b3:76:b9:d2:79:e7:6a:5c:24:15:99:f8:aa:7d:71: 48:34:cb:54:31:34:39:70:b4:1f:ce:5c:4b:c4:19:6d:e2:65: 85:47:41:79:5c:ff:68:9b:1e:bc:4e:df:ab:25:5d:d6:f0:cc: 40:54:6e:31:67:31:36:e3:ba:86:e1:91:fb:1b:7c:60:cd:3b: 42:04:e1:79:47:f8:e7:86:6a:a5:c3:a1:5c:f9:c1:66:af:d4: 1a:37:2e:76:d8:32:04:06:f9:0a:54:af:3e:35:3c:0b:5a:2a: b6:dc:74:00:c4:b8:05:6c:43:bd:c0:9b:6d:4e:7f:b7:f1:7d: 4b:aa:4c:e9:b4:5b:38:ce:5f:ac:aa:1c:95:a6:45:e3:a7:12: 6f:96:c1:da:46:e9:73:ab:92:d1:72:6a:87:58:b5:11:b6:a2: 1f:e2:15:70:2e:84:d7:38:8f:da:a7:3d:29:7b:a5:22:8c:61: 94:91:cb:53:1c:a3:1e:5d:7b:5f:94:1b:f4:8f:f0:81:a5:e8: 85:a2:51:ff:2e:b9:d8:c0:79:82:a2:65:1b:44:c4:fc:0f:ba: ce:0e:17:b2:45:f5:20:ef:06:53:90:63:ea:36:13:fd:3f:40: b8:93:82:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YONVslsUBz/+RzDvgtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjZmMDdiMTczMzYwZjIxNWYxNTE4Yzg3MTJhNGIwNTRk ODVjMDcwHhcNMjYwMTI1MjEwMDQzWhcNMjYwMTI2MjEwMDQzWjAzMTEwLwYDVQQD Eyg0NzEzOWViOTA1Y2NlMGYxNWZlYjZmMDJhODI0ZmVkNmNkMjdlYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Y/giM0rK6/vGRph5uzySwi8YD1 w0ir+AKYsfzGZi27LwzzmMraak8FfQl/VPDEEupZNc/Db7el+/+TxOCNX1K3YKWL rHp45IgYQ9LzkkL6cmt2+b02prCW7c2LfZBF2NOJ4FRlozDq9CnPZ46TNcGedXZ6 3LKICv+s1l/eBiy4xAi7xDvp3lIESm7d2cBz6m2IHLPoGUJEqQ1UCPAXYB5POPRn DuMFILMCPhxRdk4KFPF5ZZMmNxnrtf+CcbA7ES2tksjUn+4xoPuZeMJy+bAZJYL4 X3SaTWu5yM7yIoXf0PxlVpCQls8Hc4kIR52w/l+qZcNZmnb4PM9c2i9EkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcTnrkFzODxX+tvAqgk/tbNJ+pOMB8GA1UdIwQY MBaAFMa28HsXM2DyFfFRjIcSpLBU2FwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTct MjhkOTRmY2IxMDg4LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTctMjhkOTRmY2IxMDg4 LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMO/Rp7sc TxMVFy/PM62ov49jH9nFs3a50nnnalwkFZn4qn1xSDTLVDE0OXC0H85cS8QZbeJl hUdBeVz/aJsevE7fqyVd1vDMQFRuMWcxNuO6huGR+xt8YM07QgTheUf454ZqpcOh XPnBZq/UGjcudtgyBAb5ClSvPjU8C1oqttx0AMS4BWxDvcCbbU5/t/F9S6pM6bRb OM5frKoclaZF46cSb5bB2kbpc6uS0XJqh1i1EbaiH+IVcC6E1ziP2qc9KXulIoxh lJHLUxyjHl17X5Qb9I/wgaXohaJR/y652MB5gqJlG0TE/A+6zg4XskX1IO8GU5Bj 6jYT/T9AuJOCvg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:34 2026 by rpki-client