This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json) Hash identifier: yOX9rv6uozASfxPq2/Cj//6GEOnMG6xB9bcKE0rfIqI= Subject key identifier: 3D:4C:12:8D:8F:B1:BC:37:3C:3C:91:84:D5:8C:86:79:22:41:6C:E5 Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0 Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0 Certificate serial: 019BF72CAE2C5532FE4E8A30F0BBB2841325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 22:00:58 +0000 Manifest this update: Sun 25 Jan 2026 22:00:58 +0000 Manifest next update: Mon 26 Jan 2026 22:00:58 +0000 Files and hashes: 1: F7bFWfa8raW6YPzNQdPQYhccFpw.roa (hash: XVhjnbPUE5xdXqpegewxKMJvfafoKnZU90EE9D+PlOg=) 2: JpOEIniBJHts2084NOqMHq98Ajc.roa (hash: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=) 3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: cgXPumz3+Ddc1/vdVZ++5dz0d04WoqJn/bhO2psWQ/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ae:2c:55:32:fe:4e:8a:30:f0:bb:b2:84:13:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0 Validity Not Before: Jan 25 22:00:58 2026 GMT Not After : Jan 26 22:00:58 2026 GMT Subject: CN=3d4c128d8fb1bc373c3c9184d58c867922416ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:c1:a9:6b:89:c2:98:42:09:16:8c:32:b3: a2:b5:33:36:ad:a3:a8:42:c3:9f:c7:36:6c:6c:7b: 3e:bd:b9:81:dc:41:f1:85:08:92:fe:12:b9:ec:9f: 3e:7f:73:a5:fb:64:e7:e2:52:89:10:82:80:bd:fb: 4b:ed:76:73:be:7f:d9:b8:cd:e3:c8:5c:e6:35:55: eb:37:7c:60:28:e6:e4:c1:76:b3:6b:d1:d2:33:70: 50:2c:96:f1:e3:7b:25:aa:3c:9b:5e:c8:12:97:63: 7a:8d:36:7b:81:11:bb:73:bd:31:b9:66:75:fd:ba: cc:51:91:c0:da:62:03:fc:53:0c:f3:8d:c5:57:02: 17:5c:db:76:19:af:17:04:86:7f:83:39:28:43:a8: 2d:70:b8:c0:2a:51:57:19:22:a8:10:3d:91:3e:4a: b9:30:a4:8b:1e:6c:5c:51:b4:15:36:0c:19:dd:04: 44:da:50:e9:68:ea:44:83:31:d7:5a:8f:a2:92:60: a7:49:d0:99:94:61:be:8c:7a:b1:53:9b:9e:af:04: 22:28:fd:29:5d:25:18:6c:0a:b9:15:d3:58:53:fe: 55:64:b7:fe:73:0d:6d:b3:4b:53:3b:dc:a7:d7:0a: dc:bf:59:9f:5a:d9:f5:71:d0:6e:94:2a:fc:17:2a: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4C:12:8D:8F:B1:BC:37:3C:3C:91:84:D5:8C:86:79:22:41:6C:E5 X509v3 Authority Key Identifier: keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:63:89:38:8b:0b:34:a0:26:ec:3a:6b:0d:3e:87:b7:07:ef: f4:07:99:84:b8:78:11:3d:53:de:30:df:f4:21:5d:0c:e8:74: 98:27:0a:df:d5:00:e9:9c:f5:ee:ad:76:a1:05:3c:fe:c8:b2: 71:69:07:b2:0e:c4:55:91:1a:7b:c9:b0:e8:b6:c9:6a:d4:f6: fe:51:cc:ed:03:46:6b:b1:a5:74:bc:c7:9a:51:b4:9b:c3:30: 19:65:cd:49:56:0e:34:5a:ae:d8:5c:cc:f7:ad:5c:f4:9d:6d: 93:d3:2b:e5:9e:09:cd:c3:f1:56:c4:ec:4d:27:ad:6a:09:4b: 43:ed:cd:c5:43:7e:82:cf:36:0a:bd:03:7c:86:41:c4:b3:17: e3:33:11:9c:b2:20:f0:5d:74:cc:04:af:15:1a:e2:de:c4:a1: ef:3e:6e:72:51:53:8d:79:e9:47:64:17:f6:1b:15:02:f6:0f: 03:50:45:ee:b3:b4:54:6f:a9:f9:dc:e9:dd:c8:f4:8c:d7:4a: 1f:86:07:fe:cd:fb:b3:ce:41:7b:e8:a9:76:1e:b1:aa:ff:a9: 5f:85:cd:e2:8b:79:97:1b:4b:3c:31:be:bd:aa:dc:82:22:72: 07:b7:18:d6:b2:48:fe:01:a9:1d:3b:06:5e:40:f7:31:35:4d: 96:62:42:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LK4sVTL+Toow8LuyhBMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MjIxZTQwMjk5OGFiYzFmMDM1NDc1ZTE1OGI3NGU4Yzc2 OTIwYzAwHhcNMjYwMTI1MjIwMDU4WhcNMjYwMTI2MjIwMDU4WjAzMTEwLwYDVQQD EygzZDRjMTI4ZDhmYjFiYzM3M2MzYzkxODRkNThjODY3OTIyNDE2Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBTBqWuJwphCCRaMMrOitTM2raOo QsOfxzZsbHs+vbmB3EHxhQiS/hK57J8+f3Ol+2Tn4lKJEIKAvftL7XZzvn/ZuM3j yFzmNVXrN3xgKObkwXaza9HSM3BQLJbx43slqjybXsgSl2N6jTZ7gRG7c70xuWZ1 /brMUZHA2mID/FMM843FVwIXXNt2Ga8XBIZ/gzkoQ6gtcLjAKlFXGSKoED2RPkq5 MKSLHmxcUbQVNgwZ3QRE2lDpaOpEgzHXWo+ikmCnSdCZlGG+jHqxU5uerwQiKP0p XSUYbAq5FdNYU/5VZLf+cw1ts0tTO9yn1wrcv1mfWtn1cdBulCr8FyomiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1MEo2Psbw3PDyRhNWMhnkiQWzlMB8GA1UdIwQY MBaAFMciHkApmKvB8DVHXhWLdOjHaSDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYt Y2M1NDA2MDhjNDFkLzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYtY2M1NDA2MDhjNDFk LzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmOJOIsL NKAm7DprDT6Htwfv9AeZhLh4ET1T3jDf9CFdDOh0mCcK39UA6Zz17q12oQU8/siy cWkHsg7EVZEae8mw6LbJatT2/lHM7QNGa7GldLzHmlG0m8MwGWXNSVYONFqu2FzM 961c9J1tk9Mr5Z4JzcPxVsTsTSetaglLQ+3NxUN+gs82Cr0DfIZBxLMX4zMRnLIg 8F10zASvFRri3sSh7z5uclFTjXnpR2QX9hsVAvYPA1BF7rO0VG+p+dzp3cj0jNdK H4YH/s37s85Be+ipdh6xqv+pX4XN4ot5lxtLPDG+varcgiJyB7cY1rJI/gGpHTsG XkD3MTVNlmJCIg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:02 2026 by rpki-client