This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json) Hash identifier: 2MbjscZb0/gRmF+l/lzMdKjT2Ntc9mBLKwe8n/t3H8A= Subject key identifier: 15:40:E4:F6:CE:30:E6:14:D2:17:F2:46:46:0A:BE:8D:31:AD:6F:56 Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Certificate serial: 019BF6BF4E924264C54EA0C8FBCD68929980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft Manifest number: 163E Signing time: Sun 25 Jan 2026 20:01:31 +0000 Manifest this update: Sun 25 Jan 2026 20:01:31 +0000 Manifest next update: Mon 26 Jan 2026 20:01:31 +0000 Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=) 2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: 2BzoDi9/AEC17YdPYvRFtb366lzd1ql+aTpD6ekwO48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:4e:92:42:64:c5:4e:a0:c8:fb:cd:68:92:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Validity Not Before: Jan 25 20:01:31 2026 GMT Not After : Jan 26 20:01:31 2026 GMT Subject: CN=1540e4f6ce30e614d217f246460abe8d31ad6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:5b:00:58:66:46:2b:af:60:d9:76:40:a3: 9c:58:0f:0e:ea:a4:57:c5:ce:b6:f3:41:4a:56:c5: d6:67:51:e8:9a:93:44:5d:19:ef:54:1c:d1:e8:22: d8:d9:40:5a:f6:f8:b5:ab:93:b8:59:07:f2:31:34: 3e:ab:a1:29:b6:b7:b5:c2:97:49:0e:02:44:95:4a: 00:02:3d:3f:f6:23:d0:62:d5:05:fa:2d:91:84:95: 11:0f:66:40:36:e8:78:8c:aa:4d:5d:b0:f1:6d:89: c0:1b:40:56:1b:0a:26:32:ab:fa:64:76:da:87:fe: cb:9c:dd:03:92:58:ac:82:7a:50:04:dc:81:ad:07: 89:f2:4b:7f:dc:c5:be:14:5a:12:ff:23:1e:b7:a7: 2d:a4:1d:00:eb:c9:57:d2:8f:e4:d4:dd:7b:7c:43: 93:b2:d2:09:46:f9:53:d5:f4:19:f9:d9:4f:c6:d3: a1:aa:ac:8d:e1:f4:67:48:75:8e:e0:76:0a:a3:22: 97:3f:d0:c2:42:9f:ea:84:32:d1:c9:75:79:9e:1b: 43:48:16:3b:f1:b2:3b:a4:a9:27:5a:3e:f9:95:8d: 3b:43:d7:17:98:f5:ac:95:25:fa:a7:54:1d:f3:fb: 8f:dd:05:c8:06:8e:be:ba:96:82:80:5e:37:ec:5d: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:E4:F6:CE:30:E6:14:D2:17:F2:46:46:0A:BE:8D:31:AD:6F:56 X509v3 Authority Key Identifier: keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:30:6d:fd:d2:a1:14:7c:b8:f1:19:5c:33:d6:e0:11:43:75: 09:ac:7f:eb:a9:35:6a:24:0e:6d:5f:43:d7:a5:db:f3:3e:ba: 66:72:26:0b:5e:19:c3:cf:4d:d2:b9:99:4e:5d:80:9e:ee:9b: 2f:83:a7:62:17:fd:84:ae:76:be:6f:c2:bd:2a:0d:1a:87:99: eb:a5:78:e7:e9:95:44:3b:5f:22:8d:d0:42:9c:62:3a:6f:7c: 70:99:49:79:40:77:c5:65:82:2f:fb:86:4a:74:bc:f7:09:86: a2:54:bc:30:15:17:7c:c8:b4:b3:09:e5:1a:d5:15:68:e3:9e: 2a:e1:cf:8b:9d:de:52:b9:4d:cb:00:ea:37:c8:7d:f2:b9:cb: 5c:40:e8:f6:3c:1f:1d:21:00:b8:fb:a6:1f:4f:0a:d3:8f:41: 20:05:9a:0f:14:1b:fa:79:58:a4:b1:d9:b4:ce:c4:95:97:a6: 05:2d:48:98:33:e3:47:15:55:67:69:f3:f6:8b:46:b4:2c:8e: 04:06:7b:11:a6:96:93:1b:23:87:a4:97:86:ca:59:b2:14:22: 56:f4:3f:17:ed:ad:5a:28:30:87:cf:81:6e:cf:78:e4:b9:27: 1d:a2:d1:9a:bc:d7:19:72:95:4c:20:0a:61:a4:c5:87:d1:93: a9:55:69:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v06SQmTFTqDI+81okpmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MTljYWQ5OTIyMTE1YmNmYTc0NTJiYTBhNmU0M2E2YWY0 ZTRjMjQwHhcNMjYwMTI1MjAwMTMxWhcNMjYwMTI2MjAwMTMxWjAzMTEwLwYDVQQD EygxNTQwZTRmNmNlMzBlNjE0ZDIxN2YyNDY0NjBhYmU4ZDMxYWQ2ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqppbAFhmRiuvYNl2QKOcWA8O6qRX xc6280FKVsXWZ1HompNEXRnvVBzR6CLY2UBa9vi1q5O4WQfyMTQ+q6Eptre1wpdJ DgJElUoAAj0/9iPQYtUF+i2RhJURD2ZANuh4jKpNXbDxbYnAG0BWGwomMqv6ZHba h/7LnN0DklisgnpQBNyBrQeJ8kt/3MW+FFoS/yMet6ctpB0A68lX0o/k1N17fEOT stIJRvlT1fQZ+dlPxtOhqqyN4fRnSHWO4HYKoyKXP9DCQp/qhDLRyXV5nhtDSBY7 8bI7pKknWj75lY07Q9cXmPWslSX6p1Qd8/uP3QXIBo6+upaCgF437F2bsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVA5PbOMOYU0hfyRkYKvo0xrW9WMB8GA1UdIwQY MBaAFMcZytmSIRW8+nRSugpuQ6avTkwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEt N2MyYzA4YjVlZTQ5LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEtN2MyYzA4YjVlZTQ5 LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjBt/dKh FHy48RlcM9bgEUN1Cax/66k1aiQObV9D16Xb8z66ZnImC14Zw89N0rmZTl2Anu6b L4OnYhf9hK52vm/CvSoNGoeZ66V45+mVRDtfIo3QQpxiOm98cJlJeUB3xWWCL/uG SnS89wmGolS8MBUXfMi0swnlGtUVaOOeKuHPi53eUrlNywDqN8h98rnLXEDo9jwf HSEAuPumH08K049BIAWaDxQb+nlYpLHZtM7ElZemBS1ImDPjRxVVZ2nz9otGtCyO BAZ7EaaWkxsjh6SXhspZshQiVvQ/F+2tWigwh8+Bbs945LknHaLRmrzXGXKVTCAK YaTFh9GTqVVp4w== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:21 2026 by rpki-client