This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json) Hash identifier: riYQMG+g0Tt5tc0t6AZcPqFM15zyWcjnoDI1a/vksAA= Subject key identifier: EF:42:0B:85:15:8C:36:BF:B0:47:B1:DE:CD:9C:29:72:6E:29:3E:23 Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Certificate serial: 019BF651FAC6DEF15B185C5596748C4F7AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 18:02:06 +0000 Manifest this update: Sun 25 Jan 2026 18:02:06 +0000 Manifest next update: Mon 26 Jan 2026 18:02:06 +0000 Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=) 2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=) 3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=) 4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: csXm3BU0rAr4i9artp/bv2wH2hLx9wRwa86fWnYUmX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:fa:c6:de:f1:5b:18:5c:55:96:74:8c:4f:7a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Validity Not Before: Jan 25 18:02:06 2026 GMT Not After : Jan 26 18:02:06 2026 GMT Subject: CN=ef420b85158c36bfb047b1decd9c29726e293e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:03:02:cf:49:bb:c2:83:45:3a:a4:e5:d7:09: 7b:f1:ec:08:40:d1:8c:39:b4:0a:9f:19:d6:8a:32: 68:ee:2a:23:a5:8c:2c:66:9b:af:a9:3c:03:ce:f0: 7f:e7:50:2c:e5:93:7b:86:c2:57:d7:6b:94:fd:f2: c0:4b:3a:df:4b:a0:3e:b5:da:2a:44:c4:42:dd:d8: fe:b4:47:c2:43:93:f0:8b:67:16:8f:2e:c2:27:66: 6d:28:56:35:ab:a2:b6:89:3e:5d:03:29:b0:1b:cf: 62:4c:db:51:eb:e6:ed:a2:b6:15:b0:8d:b8:e1:d4: ac:cd:84:95:38:eb:08:fd:25:94:fd:2f:37:d9:49: ac:2c:78:0d:0b:3d:2e:b9:84:3a:d7:cb:b7:fe:88: 49:86:d7:bf:15:8f:2b:5d:25:b6:86:07:17:e7:c2: 9d:f0:b9:ab:fa:e7:55:00:15:04:8a:c2:db:83:b6: 61:05:0a:b6:d8:aa:2a:42:9c:03:b1:cc:fc:e9:4a: 19:2c:88:b4:88:34:73:03:5b:73:a0:d8:14:a5:a2: 7f:ea:d4:ce:97:10:8b:9d:36:9d:6e:63:90:6e:dc: 97:68:3a:2b:67:25:6a:43:5a:e7:3c:cc:aa:99:8e: 4e:af:f4:b2:a9:37:57:50:26:6f:91:75:46:5f:7c: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:0B:85:15:8C:36:BF:B0:47:B1:DE:CD:9C:29:72:6E:29:3E:23 X509v3 Authority Key Identifier: keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fa:29:0a:b8:37:95:e5:57:37:2a:53:5a:f4:22:22:0b:43: 69:38:d5:51:4b:b4:af:38:d1:d1:10:e4:57:a3:77:e9:5e:be: 8e:cb:52:e7:c0:12:df:9b:dc:97:b0:dd:1b:f9:3b:bc:db:ce: c8:c1:b4:90:df:d1:3e:a2:b0:e7:8e:70:5d:2b:87:5f:aa:9e: 77:92:cc:7a:90:ba:70:e7:58:28:96:17:61:13:f9:3b:8f:54: 97:8e:38:73:a9:56:39:c0:b8:aa:dd:03:8b:49:c4:c6:c8:b5: 62:ef:79:ee:94:a4:55:2e:f6:6c:cd:06:9f:2f:67:1f:7f:c0: d4:6b:05:48:03:24:2e:7b:24:b4:06:33:38:17:eb:f3:df:68: 9a:d6:de:cb:ef:86:75:21:45:72:0b:a1:58:8e:54:bb:c9:d9: 35:e1:8d:30:9f:ee:ff:40:6e:35:06:9c:86:ab:d3:c5:75:59: 87:e6:eb:28:0a:2d:e2:b1:15:9d:0f:26:40:26:a2:6d:da:35: d0:48:8f:f9:54:2b:87:c2:10:0b:c3:42:d4:9d:0e:76:3c:ec: 4f:52:60:e5:63:7e:3f:c0:3a:91:33:12:26:fa:ad:83:c8:3f: 15:38:0b:21:31:91:36:98:84:5b:bc:8b:2c:5b:d6:f7:6b:dd: bc:34:e8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UfrG3vFbGFxVlnSMT3r1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDhjMTk4NWM1MGM3ZWFkNGNmZDhkM2E5M2Q2M2U1NjEx ZjZmYjYwHhcNMjYwMTI1MTgwMjA2WhcNMjYwMTI2MTgwMjA2WjAzMTEwLwYDVQQD EyhlZjQyMGI4NTE1OGMzNmJmYjA0N2IxZGVjZDljMjk3MjZlMjkzZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gMCz0m7woNFOqTl1wl78ewIQNGM ObQKnxnWijJo7iojpYwsZpuvqTwDzvB/51As5ZN7hsJX12uU/fLASzrfS6A+tdoq RMRC3dj+tEfCQ5Pwi2cWjy7CJ2ZtKFY1q6K2iT5dAymwG89iTNtR6+btorYVsI24 4dSszYSVOOsI/SWU/S832UmsLHgNCz0uuYQ618u3/ohJhte/FY8rXSW2hgcX58Kd 8Lmr+udVABUEisLbg7ZhBQq22KoqQpwDscz86UoZLIi0iDRzA1tzoNgUpaJ/6tTO lxCLnTadbmOQbtyXaDorZyVqQ1rnPMyqmY5Or/SyqTdXUCZvkXVGX3xxeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9CC4UVjDa/sEex3s2cKXJuKT4jMB8GA1UdIwQY MBaAFMTYwZhcUMfq1M/Y06k9Y+VhH2+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjct MmZkYTk3MDc5YzAxLzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjctMmZkYTk3MDc5YzAx LzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvopCrg3 leVXNypTWvQiIgtDaTjVUUu0rzjR0RDkV6N36V6+jstS58AS35vcl7DdG/k7vNvO yMG0kN/RPqKw545wXSuHX6qed5LMepC6cOdYKJYXYRP5O49Ul444c6lWOcC4qt0D i0nExsi1Yu957pSkVS72bM0Gny9nH3/A1GsFSAMkLnsktAYzOBfr899omtbey++G dSFFcguhWI5Uu8nZNeGNMJ/u/0BuNQachqvTxXVZh+brKAot4rEVnQ8mQCaibdo1 0EiP+VQrh8IQC8NC1J0OdjzsT1Jg5WN+P8A6kTMSJvqtg8g/FTgLITGRNpiEW7yL LFvW92vdvDTo8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:54 2026 by rpki-client