This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json) Hash identifier: T6XYSDvjRobaAw9rkXbQGHFAvMnfmqBNnQMkz1jKthM= Subject key identifier: B5:5F:F3:6F:14:63:68:22:AF:98:84:7C:99:35:0C:89:4B:EF:7B:41 Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Certificate serial: 019BF5AC490ED4CF4029F621723D9CA5D470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft Manifest number: 1785 Signing time: Sun 25 Jan 2026 15:01:07 +0000 Manifest this update: Sun 25 Jan 2026 15:01:07 +0000 Manifest next update: Mon 26 Jan 2026 15:01:07 +0000 Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=) 2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: C3F1TpkNF6svGpb4v+ojS0OwwCUs9stgy4OirdUl0JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:49:0e:d4:cf:40:29:f6:21:72:3d:9c:a5:d4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Validity Not Before: Jan 25 15:01:07 2026 GMT Not After : Jan 26 15:01:07 2026 GMT Subject: CN=b55ff36f14636822af98847c99350c894bef7b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:fe:3e:fa:5c:fe:a6:bb:bf:dd:67:bc:ef: 55:7a:34:9b:db:21:b7:9f:97:66:d2:a0:1a:47:52: de:61:f5:0b:95:cc:00:21:d2:88:e8:66:f7:39:8d: 47:12:e1:b6:ea:3d:c7:e9:a4:35:d6:d0:8f:f2:ed: e6:59:2c:67:4f:6b:00:43:65:7f:83:10:9d:58:60: ed:fb:c3:02:6f:cd:a3:a0:15:00:df:48:de:6a:da: 52:db:14:d5:58:8c:ce:83:e6:f8:ee:10:0c:7f:05: 45:0c:f1:0b:c9:6f:34:35:7e:e7:25:f2:f0:2f:6b: 1c:2b:95:c0:55:67:34:48:35:75:18:52:22:92:9c: 71:23:a1:b9:4a:9b:97:f6:34:43:54:8e:76:c7:f8: 41:4d:d2:87:7b:e0:db:c3:f3:bd:12:67:b1:4b:57: 79:0d:54:a8:b2:88:e0:e6:1c:08:7e:7d:e2:86:00: 15:1a:7d:cf:66:21:93:76:bd:40:d0:aa:07:31:89: 38:c6:bd:c7:5b:ab:7a:5e:59:4e:7d:43:38:bc:d5: 95:07:66:df:a0:46:d9:23:9b:a3:0e:8b:04:04:79: 73:91:5e:d5:62:ce:c2:cb:5d:ae:7e:4b:fb:d3:db: 36:56:0c:19:dd:95:a3:69:b7:8a:d9:60:3d:1e:b3: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5F:F3:6F:14:63:68:22:AF:98:84:7C:99:35:0C:89:4B:EF:7B:41 X509v3 Authority Key Identifier: keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:99:9c:09:62:cb:31:bb:11:56:3f:10:06:aa:96:38:e0:9e: ed:9b:81:f1:4c:4b:b9:ae:c1:6e:8f:14:dc:d0:e2:fb:6b:ac: 43:20:21:ff:90:63:9a:85:2e:c6:4d:68:2d:70:aa:21:d1:b4: b8:1c:0a:77:45:91:c2:23:80:0e:ff:b5:bf:ab:0c:c4:f9:6f: 7d:40:39:60:10:e2:0a:95:b5:e8:e3:e6:05:ff:bd:ed:55:7d: 5e:f6:dc:6d:c0:30:41:bf:4e:c7:67:e4:d3:d2:dc:f1:3f:d9: 5f:20:0b:2e:cc:36:86:32:ed:1c:c0:c6:f5:2d:51:18:f8:20: 8e:c2:6e:4b:c3:2b:49:9e:bc:59:87:36:16:37:7f:8c:75:d3: c0:8f:88:e4:31:cc:a2:13:c9:3f:28:4f:6d:4e:5a:f0:59:4a: 4c:db:6e:a1:50:df:c2:13:0b:83:de:dc:01:24:8c:60:64:d2: 45:41:de:05:fd:6c:48:1b:9c:8b:27:52:41:43:39:83:e2:68: 3a:e9:59:80:8a:06:06:3d:d9:d6:f4:f6:15:dd:0a:3a:c8:ee: 35:a8:4e:cd:39:0a:c5:a5:1a:fa:ae:b1:a9:c0:20:b7:bb:e1: 55:e6:55:b0:68:07:30:9d:08:ce:ed:f6:0a:e1:80:03:89:31: 37:54:fd:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rEkO1M9AKfYhcj2cpdRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw YjdlZjgwHhcNMjYwMTI1MTUwMTA3WhcNMjYwMTI2MTUwMTA3WjAzMTEwLwYDVQQD EyhiNTVmZjM2ZjE0NjM2ODIyYWY5ODg0N2M5OTM1MGM4OTRiZWY3YjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJr+Pvpc/qa7v91nvO9VejSb2yG3 n5dm0qAaR1LeYfULlcwAIdKI6Gb3OY1HEuG26j3H6aQ11tCP8u3mWSxnT2sAQ2V/ gxCdWGDt+8MCb82joBUA30jeatpS2xTVWIzOg+b47hAMfwVFDPELyW80NX7nJfLw L2scK5XAVWc0SDV1GFIikpxxI6G5SpuX9jRDVI52x/hBTdKHe+Dbw/O9EmexS1d5 DVSosojg5hwIfn3ihgAVGn3PZiGTdr1A0KoHMYk4xr3HW6t6XllOfUM4vNWVB2bf oEbZI5ujDosEBHlzkV7VYs7Cy12ufkv709s2VgwZ3ZWjabeK2WA9HrMmJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVf828UY2gir5iEfJk1DIlL73tBMB8GA1UdIwQY MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1 LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZmcCWLL MbsRVj8QBqqWOOCe7ZuB8UxLua7Bbo8U3NDi+2usQyAh/5BjmoUuxk1oLXCqIdG0 uBwKd0WRwiOADv+1v6sMxPlvfUA5YBDiCpW16OPmBf+97VV9XvbcbcAwQb9Ox2fk 09Lc8T/ZXyALLsw2hjLtHMDG9S1RGPggjsJuS8MrSZ68WYc2Fjd/jHXTwI+I5DHM ohPJPyhPbU5a8FlKTNtuoVDfwhMLg97cASSMYGTSRUHeBf1sSBuciydSQUM5g+Jo OulZgIoGBj3Z1vT2Fd0KOsjuNahOzTkKxaUa+q6xqcAgt7vhVeZVsGgHMJ0Izu32 CuGAA4kxN1T9kg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:43 2026 by rpki-client