This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json) Hash identifier: rhq0i55fLtX86K+lhmbmkrPOmcBwd+footMVK7owsfc= Subject key identifier: EC:B8:1C:47:14:6B:FB:C4:7A:27:AD:F4:07:F3:6C:83:C1:46:76:CF Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Certificate serial: 019BF65113D88C3D71A317E0EF7FCA5B0E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft Manifest number: 03C6 Signing time: Sun 25 Jan 2026 18:01:06 +0000 Manifest this update: Sun 25 Jan 2026 18:01:06 +0000 Manifest next update: Mon 26 Jan 2026 18:01:06 +0000 Files and hashes: 1: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: hhER20szoMYnkGL9kazGb+YPDKJ5Aqnk/kR3BDgC0w0=) 2: ua_e8PovLDNf56za3RBEa7cuuaQ.roa (hash: AeMBv+klAL3WpkSagPgkjuVi+j0J2ixa7AC/uv/cJ9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:13:d8:8c:3d:71:a3:17:e0:ef:7f:ca:5b:0e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Validity Not Before: Jan 25 18:01:06 2026 GMT Not After : Jan 26 18:01:06 2026 GMT Subject: CN=ecb81c47146bfbc47a27adf407f36c83c14676cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:35:86:c6:6b:57:da:96:97:f5:d8:57:b0: 13:c3:c6:59:80:0c:17:09:4a:00:aa:03:72:77:37: 1b:37:dd:46:3f:b6:89:a6:62:00:7a:57:21:6d:03: e2:56:96:9c:e4:23:e5:8b:b4:0d:37:4e:fc:7f:ac: 1c:f8:2f:f1:e6:6c:13:87:ce:00:50:40:1a:29:0e: 54:3b:14:ef:dd:06:00:ef:ef:8b:67:52:ee:e7:cf: 46:45:39:4e:e9:fc:41:90:4e:c7:97:1b:6e:02:24: 42:65:12:2c:f0:2e:c3:e9:b6:be:00:c9:44:f5:3f: f5:e3:53:32:1e:8f:38:a0:4b:62:be:ed:6b:82:84: 9e:56:e7:4d:e9:fa:b4:be:ca:ab:39:5e:14:27:8f: 62:a5:70:b6:2c:fa:f0:ba:d1:57:59:4c:b7:a0:d5: bf:07:ec:fb:c0:e9:9d:f1:0e:8b:53:c6:4e:14:6d: 61:68:67:a9:36:de:62:c0:a8:81:24:37:0b:51:27: b6:b3:d8:59:a5:d7:89:c5:81:84:ba:33:1f:97:03: 6f:a0:87:23:a2:63:30:c1:77:80:16:e9:8c:66:02: 7c:26:1c:3a:54:ee:84:f9:54:e4:05:7f:d2:ae:ae: 67:c3:fb:29:90:69:c5:a5:09:c5:45:27:6c:ab:25: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B8:1C:47:14:6B:FB:C4:7A:27:AD:F4:07:F3:6C:83:C1:46:76:CF X509v3 Authority Key Identifier: keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:66:f3:a0:f0:ce:79:c3:29:3d:2b:f5:9c:0d:d8:19:69:e2: 54:1d:00:88:b2:7b:20:59:9c:92:fb:e1:dd:7b:e0:af:19:6a: 5b:d3:66:d2:9b:fb:e1:ca:34:9d:7a:c3:ce:fc:47:ec:d8:92: 26:1f:d0:ca:31:16:07:dc:fd:08:a4:31:78:e2:54:80:18:b1: 1f:6b:2f:d3:20:27:90:d5:f7:d4:88:66:cb:17:cf:ec:c6:ec: f0:0a:8a:5d:e0:e7:a2:53:80:e8:a6:98:d8:c8:b3:8d:79:3a: c9:b2:d7:a5:cb:e3:a6:3c:45:1e:14:da:25:e5:6d:af:ed:92: 28:27:f3:92:3d:07:4f:cb:fe:e5:ad:67:91:0f:98:c9:46:01: 93:b3:93:a7:e0:7e:f0:ae:af:b0:9c:85:41:62:97:3b:05:9b: 31:c2:ed:68:94:5f:c3:a4:7f:bd:de:8b:02:a1:0b:10:b2:00: b0:25:63:3b:3e:08:10:46:cb:5e:e6:e0:03:dc:5e:b2:b3:16: 8f:59:b7:35:32:4c:65:90:c8:ea:3f:70:ca:90:e3:57:21:2c: 56:65:a0:1d:77:6b:2b:46:79:9d:54:88:e7:4b:72:a0:d1:a7: 2f:75:00:45:27:41:24:f6:dd:84:f9:e9:c7:3e:a9:c9:8e:b9: c6:f7:03:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URPYjD1xoxfg73/KWw5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjllODU2ZjA0OTVjODQ5MGQ1MTI0ZThjZmJhZjA4ZDcw ZGZiMTcwHhcNMjYwMTI1MTgwMTA2WhcNMjYwMTI2MTgwMTA2WjAzMTEwLwYDVQQD EyhlY2I4MWM0NzE0NmJmYmM0N2EyN2FkZjQwN2YzNmM4M2MxNDY3NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BE1hsZrV9qWl/XYV7ATw8ZZgAwX CUoAqgNydzcbN91GP7aJpmIAelchbQPiVpac5CPli7QNN078f6wc+C/x5mwTh84A UEAaKQ5UOxTv3QYA7++LZ1Lu589GRTlO6fxBkE7HlxtuAiRCZRIs8C7D6ba+AMlE 9T/141MyHo84oEtivu1rgoSeVudN6fq0vsqrOV4UJ49ipXC2LPrwutFXWUy3oNW/ B+z7wOmd8Q6LU8ZOFG1haGepNt5iwKiBJDcLUSe2s9hZpdeJxYGEujMflwNvoIcj omMwwXeAFumMZgJ8Jhw6VO6E+VTkBX/Srq5nw/spkGnFpQnFRSdsqyVBcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy4HEcUa/vEeiet9AfzbIPBRnbPMB8GA1UdIwQY MBaAFF356FbwSVyEkNUSToz7rwjXDfsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAt ZTFlYTQ1M2M1MjU3LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAtZTFlYTQ1M2M1MjU3 LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGbzoPDO ecMpPSv1nA3YGWniVB0AiLJ7IFmckvvh3XvgrxlqW9Nm0pv74co0nXrDzvxH7NiS Jh/QyjEWB9z9CKQxeOJUgBixH2sv0yAnkNX31IhmyxfP7Mbs8AqKXeDnolOA6KaY 2MizjXk6ybLXpcvjpjxFHhTaJeVtr+2SKCfzkj0HT8v+5a1nkQ+YyUYBk7OTp+B+ 8K6vsJyFQWKXOwWbMcLtaJRfw6R/vd6LAqELELIAsCVjOz4IEEbLXubgA9xesrMW j1m3NTJMZZDI6j9wypDjVyEsVmWgHXdrK0Z5nVSI50tyoNGnL3UARSdBJPbdhPnp xz6pyY65xvcDIA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:06 2026 by rpki-client