This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json) Hash identifier: nlDk5qgMiKFhDT4iNqA81AgGi3KmTiSQP/XwkBqBeqs= Subject key identifier: AA:3F:7A:C4:E7:A6:A4:F2:63:B1:94:7E:17:B6:B2:8B:11:9F:8F:DB Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Certificate serial: 019BF5AC5548DFEEBAEACA92C8F06870CE0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 15:01:10 +0000 Manifest this update: Sun 25 Jan 2026 15:01:10 +0000 Manifest next update: Mon 26 Jan 2026 15:01:10 +0000 Files and hashes: 1: YYRSpcNyohXAVMmCQRhhQXcor54.roa (hash: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI=) 2: iKpp3qI47nAdkGSzRA3WViJJwfU.roa (hash: cua53JtZVRFiG1D02IQc2WZ6uSxKMIhsPK5IrnlN2iI=) 3: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (hash: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc=) 4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: afl3cjvRctytFdVRDJZOWBuwxRHMzqqsBiFwpkAAy0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:55:48:df:ee:ba:ea:ca:92:c8:f0:68:70:ce:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Validity Not Before: Jan 25 15:01:10 2026 GMT Not After : Jan 26 15:01:10 2026 GMT Subject: CN=aa3f7ac4e7a6a4f263b1947e17b6b28b119f8fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:14:b6:37:97:3c:01:a9:fa:f0:d4:7a:3e:38: 4a:92:cb:75:3f:02:e7:12:93:0e:58:00:fd:33:c2: 09:8d:47:e0:6a:1a:95:c8:28:bb:df:9f:47:0f:fa: 3b:02:d9:13:19:18:46:bd:ac:ba:55:00:d7:ba:a6: 44:ce:99:81:43:09:fd:ba:7e:02:69:b8:c8:20:c6: e0:d0:89:c6:ea:c5:b9:2a:02:eb:9f:a2:77:4c:a3: 34:5d:4a:4a:1c:5f:9f:f7:71:0b:f2:ed:33:67:eb: ba:71:be:93:59:6a:12:c7:80:24:b4:08:43:37:cf: 57:19:74:0b:95:cf:b7:ca:0b:86:07:0b:1c:f2:f1: 9d:12:65:5d:43:ac:5f:ea:90:96:ef:a8:90:26:c4: 12:e7:40:c4:59:7e:df:d8:04:a1:9f:33:9b:ce:fd: 59:53:ba:f3:b6:37:65:36:6d:be:61:c2:df:8a:0f: a4:6d:9e:fc:e4:61:7f:18:69:9f:19:87:55:54:ec: 80:e2:e1:c8:de:13:0b:fe:80:f8:fd:55:11:69:58: 72:15:0d:9d:6d:33:21:d3:0b:c0:f7:70:fa:35:71: e1:ac:3e:3b:17:ec:16:2c:44:0e:67:e7:59:64:92: 26:c7:3c:ae:54:3d:b8:89:ee:b8:ac:34:59:44:5a: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3F:7A:C4:E7:A6:A4:F2:63:B1:94:7E:17:B6:B2:8B:11:9F:8F:DB X509v3 Authority Key Identifier: keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:aa:8a:b0:c1:56:a1:11:0c:a3:c1:bb:7c:4a:cf:22:09:f9: ec:ec:3e:63:1c:f4:11:fb:a7:7a:5f:65:a4:38:b0:7b:b6:49: 0d:bb:19:2c:1e:2e:60:23:ef:67:8a:61:27:22:73:7f:5a:1d: 97:ca:84:8f:a5:7d:3e:e6:42:31:d8:5a:74:31:2b:bc:2a:78: b9:6e:47:30:58:8a:af:de:b8:19:79:69:c2:c6:4c:90:0e:06: 69:b1:c1:ec:30:a9:71:b0:b3:5a:24:b5:f2:bf:aa:d7:46:1d: 71:26:69:05:11:b2:23:e5:63:db:04:32:15:28:de:65:9b:fd: a7:82:9b:ca:4f:02:31:4f:63:1f:b3:d8:90:21:3b:51:77:7e: 75:21:e0:64:5e:42:8e:0e:6f:34:ce:fb:d2:ba:42:37:1d:15: aa:ee:04:e3:df:cc:ff:66:47:6c:10:61:d6:1b:3f:26:6b:9b: f0:42:71:81:c8:e5:7a:21:4e:0b:18:ab:9c:3d:4a:dc:f9:71: d1:08:d9:b9:f9:e6:ed:09:74:90:bb:23:ac:c9:41:36:b0:25: a0:60:01:87:80:48:37:fc:5d:e5:5e:58:b6:ff:74:f3:67:eb: 6b:15:07:10:84:60:e0:b8:83:18:1c:2e:a6:71:76:e8:e6:06: 27:26:f5:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rFVI3+666sqSyPBocM4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy NDkxYzUwHhcNMjYwMTI1MTUwMTEwWhcNMjYwMTI2MTUwMTEwWjAzMTEwLwYDVQQD EyhhYTNmN2FjNGU3YTZhNGYyNjNiMTk0N2UxN2I2YjI4YjExOWY4ZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphS2N5c8Aan68NR6PjhKkst1PwLn EpMOWAD9M8IJjUfgahqVyCi7359HD/o7AtkTGRhGvay6VQDXuqZEzpmBQwn9un4C abjIIMbg0InG6sW5KgLrn6J3TKM0XUpKHF+f93EL8u0zZ+u6cb6TWWoSx4AktAhD N89XGXQLlc+3yguGBwsc8vGdEmVdQ6xf6pCW76iQJsQS50DEWX7f2AShnzObzv1Z U7rztjdlNm2+YcLfig+kbZ785GF/GGmfGYdVVOyA4uHI3hML/oD4/VURaVhyFQ2d bTMh0wvA93D6NXHhrD47F+wWLEQOZ+dZZJImxzyuVD24ie64rDRZRFrHPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo/esTnpqTyY7GUfhe2sosRn4/bMB8GA1UdIwQY MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKqKsMFW oREMo8G7fErPIgn57Ow+Yxz0Efunel9lpDiwe7ZJDbsZLB4uYCPvZ4phJyJzf1od l8qEj6V9PuZCMdhadDErvCp4uW5HMFiKr964GXlpwsZMkA4GabHB7DCpcbCzWiS1 8r+q10YdcSZpBRGyI+Vj2wQyFSjeZZv9p4Kbyk8CMU9jH7PYkCE7UXd+dSHgZF5C jg5vNM770rpCNx0Vqu4E49/M/2ZHbBBh1hs/Jmub8EJxgcjleiFOCxirnD1K3Plx 0QjZufnm7Ql0kLsjrMlBNrAloGABh4BIN/xd5V5Ytv9082fraxUHEIRg4LiDGBwu pnF26OYGJyb1vg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:44 2026 by rpki-client