This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json) Hash identifier: dWWBmMS2L322SO91nDrCDAXvwdhW3lXQJdstROCc2x0= Subject key identifier: C8:F2:50:17:FD:77:C2:9C:3E:56:59:0C:40:93:85:E5:F6:6A:2D:A8 Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019BF7639562E838A0B7CB5E2F314089E45D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 23:00:57 +0000 Manifest this update: Sun 25 Jan 2026 23:00:57 +0000 Manifest next update: Mon 26 Jan 2026 23:00:57 +0000 Files and hashes: 1: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (hash: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o=) 2: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (hash: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM=) 3: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (hash: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g=) 4: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (hash: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI=) 5: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (hash: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk=) 6: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (hash: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI=) 7: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (hash: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0=) 8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: SD4ZXXn0BXDVeyVq6g6Sn974APc3l5KJyRiM07oI+pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:95:62:e8:38:a0:b7:cb:5e:2f:31:40:89:e4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 25 23:00:57 2026 GMT Not After : Jan 26 23:00:57 2026 GMT Subject: CN=c8f25017fd77c29c3e56590c409385e5f66a2da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:6e:59:4e:a5:ac:08:87:40:8e:ea:3c:eb: cf:ce:5c:bc:82:8f:45:40:a4:45:71:d4:a9:0b:64: f9:fa:50:50:09:09:e2:ef:72:27:1f:77:d8:54:9d: 99:ac:23:52:00:40:23:64:df:72:c6:be:0f:23:ed: e9:5b:2f:e2:68:2e:bb:a7:ba:f6:a2:b7:7a:26:a2: 65:36:48:40:1c:cf:b8:3b:31:01:41:b1:53:9b:bd: b9:bd:7d:7b:5f:2a:04:00:54:8a:de:f8:71:29:d2: af:56:47:ed:86:60:f2:c8:80:f3:10:31:08:9e:17: 50:aa:c0:34:14:27:61:7c:06:ee:ca:42:cd:0c:9e: 9b:57:c0:ca:3c:eb:38:91:a2:62:4e:eb:98:83:e3: 0d:11:18:0b:a3:68:b7:e5:79:aa:9d:38:59:39:4c: 24:37:b2:f1:36:b6:23:a2:ae:03:b3:8b:5c:64:08: fb:e3:66:29:7c:c9:6b:c4:e3:fb:b6:58:98:2e:8d: d7:f4:37:a4:5f:67:be:b0:fd:79:0a:5c:0d:e4:91: 6c:f0:eb:47:3c:b3:87:79:09:b6:4e:1d:c8:b6:15: e1:fa:de:f8:e9:5f:18:8f:9c:3e:c5:c3:14:a6:22: 79:7c:53:75:f1:4d:44:e8:d1:e9:71:be:96:8a:b4: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:50:17:FD:77:C2:9C:3E:56:59:0C:40:93:85:E5:F6:6A:2D:A8 X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:28:b7:df:fe:54:56:5f:fe:fa:3c:04:2f:d1:f1:6e:83:05: cc:7d:3a:46:3e:de:a3:64:2e:ba:72:f1:f4:3b:51:02:fd:38: 4a:40:94:e5:ab:3e:73:af:32:38:e2:c0:d9:81:e7:f4:81:c1: eb:ca:3e:4b:3d:a1:b9:bb:13:5c:c2:36:89:5e:be:52:90:b0: ff:90:e4:10:5c:1a:e1:a4:20:86:06:3a:1f:5d:13:03:0a:8d: 9c:41:a1:67:f1:c6:60:5f:f8:5b:e5:9d:66:fd:10:ba:98:31: 71:75:33:96:eb:24:6b:13:eb:98:2a:7f:93:dc:04:e8:cd:bf: a9:58:51:21:69:94:60:39:45:dc:0f:c5:dc:9a:2a:44:72:5d: 1a:56:6e:fd:96:73:93:55:07:e4:e7:d3:be:89:50:56:da:08: 6b:eb:e7:29:fe:9a:9c:4c:b7:fb:31:00:b5:4c:7b:5e:16:63: 99:8f:bf:fa:7d:4f:57:a0:b1:ac:f9:de:24:20:9a:b4:88:45: 4e:91:8b:76:12:50:d2:d5:a8:19:12:39:b7:ac:8c:f5:ad:d6: 1f:e4:1c:5c:74:b0:55:4e:91:80:70:97:8d:80:ac:db:cc:76: c1:12:60:7c:9d:3e:97:6e:55:0a:cf:3b:bd:79:a0:56:bb:fe: 53:39:cc:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5Vi6Digt8teLzFAieRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTI1MjMwMDU3WhcNMjYwMTI2MjMwMDU3WjAzMTEwLwYDVQQD EyhjOGYyNTAxN2ZkNzdjMjljM2U1NjU5MGM0MDkzODVlNWY2NmEyZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0xuWU6lrAiHQI7qPOvPzly8go9F QKRFcdSpC2T5+lBQCQni73InH3fYVJ2ZrCNSAEAjZN9yxr4PI+3pWy/iaC67p7r2 ord6JqJlNkhAHM+4OzEBQbFTm725vX17XyoEAFSK3vhxKdKvVkfthmDyyIDzEDEI nhdQqsA0FCdhfAbuykLNDJ6bV8DKPOs4kaJiTuuYg+MNERgLo2i35XmqnThZOUwk N7LxNrYjoq4Ds4tcZAj742YpfMlrxOP7tliYLo3X9DekX2e+sP15ClwN5JFs8OtH PLOHeQm2Th3IthXh+t746V8Yj5w+xcMUpiJ5fFN18U1E6NHpcb6WirQD5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjyUBf9d8KcPlZZDECTheX2ai2oMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCi33/5U Vl/++jwEL9HxboMFzH06Rj7eo2QuunLx9DtRAv04SkCU5as+c68yOOLA2YHn9IHB 68o+Sz2hubsTXMI2iV6+UpCw/5DkEFwa4aQghgY6H10TAwqNnEGhZ/HGYF/4W+Wd Zv0QupgxcXUzluskaxPrmCp/k9wE6M2/qVhRIWmUYDlF3A/F3JoqRHJdGlZu/ZZz k1UH5OfTvolQVtoIa+vnKf6anEy3+zEAtUx7XhZjmY+/+n1PV6CxrPneJCCatIhF TpGLdhJQ0tWoGRI5t6yM9a3WH+QcXHSwVU6RgHCXjYCs28x2wRJgfJ0+l25VCs87 vXmgVrv+UznMRw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:04 2026 by rpki-client