This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json) Hash identifier: +jEf21IU2+UwXU15zhPiewxsiyO+XnLQFdQofZEWepE= Subject key identifier: 94:35:C9:5D:5C:FD:16:A8:8E:C4:D7:F4:5D:99:7D:75:A7:2C:BD:06 Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c Certificate serial: 019BFA2DA0B53652558428C71B21E9D3A880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 12:00:52 +0000 Manifest this update: Mon 26 Jan 2026 12:00:52 +0000 Manifest next update: Tue 27 Jan 2026 12:00:52 +0000 Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=) 2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=) 3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: py2aTaY3NvN48xXa5dmwpcC2w3POD2E6iGDXEdmm3Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:a0:b5:36:52:55:84:28:c7:1b:21:e9:d3:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c Validity Not Before: Jan 26 12:00:52 2026 GMT Not After : Jan 27 12:00:52 2026 GMT Subject: CN=9435c95d5cfd16a88ec4d7f45d997d75a72cbd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:86:e7:f0:52:be:42:51:3d:0d:2d:2a:2a: e7:60:7a:50:ba:a6:ac:32:89:09:f5:92:5c:2e:f9: cf:6d:de:8f:27:98:b0:9d:e1:d4:80:3e:f2:3e:0d: de:96:99:7a:e8:d2:ec:a6:91:42:d7:6f:60:fc:9f: 3a:c2:cf:b8:a4:d8:15:b9:7e:43:78:3f:f6:d6:d8: f1:b1:0a:34:b3:55:00:50:c6:af:87:94:c3:03:31: 86:9d:b4:99:04:4c:a6:b9:a4:99:38:89:4b:a6:7d: 05:70:54:c5:a6:c4:71:f6:d0:b8:88:dc:db:7f:b2: d0:ae:bf:7f:04:76:34:84:08:25:70:62:57:fd:0a: 92:9e:a6:a3:d4:d9:4c:64:15:5e:00:1f:00:39:9e: 05:b8:f4:b0:56:3c:14:ed:7d:a7:77:04:1e:0f:c7: fa:23:13:1a:73:36:5f:36:97:77:d4:29:80:0e:64: 91:28:4b:c5:15:ed:81:f1:0e:b0:97:11:ec:29:bf: c1:07:db:aa:62:e9:40:83:27:a3:3f:f0:00:f1:8f: da:26:d8:a8:47:22:73:44:04:f8:76:d6:fb:39:fd: e3:6a:44:2a:81:0f:0a:b8:78:9d:65:5d:66:b8:a7: 18:44:80:7c:24:24:4b:ae:74:7c:97:c6:e7:8c:41: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:35:C9:5D:5C:FD:16:A8:8E:C4:D7:F4:5D:99:7D:75:A7:2C:BD:06 X509v3 Authority Key Identifier: keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e0:72:cd:54:95:fe:c8:8b:41:d8:39:c6:89:fe:de:76:7c: e3:6f:58:2a:09:22:32:81:bf:6d:be:4e:92:1b:84:f7:d5:01: ba:91:07:5f:16:77:3e:0b:d2:99:15:12:f8:d3:04:bc:53:ff: 5c:44:ec:a3:0d:de:6c:2e:9d:2f:49:da:13:1c:91:2d:7e:66: 78:75:36:68:dd:97:f1:8b:c9:0e:1d:71:78:0c:06:67:91:e9: 08:bc:06:b6:26:7c:6c:ea:3c:51:46:7a:35:05:cf:62:c1:0c: a2:25:ad:b5:73:64:f1:c9:72:6c:55:44:1f:f8:7a:9a:1e:5b: cd:4a:36:7d:1b:ad:69:21:77:d8:05:2a:2b:f8:93:37:4c:62: e8:5b:81:da:81:3b:7c:96:61:d6:1c:ff:86:9f:46:36:f5:e7: 66:52:27:c4:4c:b9:87:ea:ea:f8:ce:58:56:7b:4e:98:60:43: 2f:92:0b:aa:07:6c:3a:78:e9:64:ab:45:a5:0d:39:29:dc:6f: e3:3c:e4:04:46:eb:0c:7b:4a:b9:ed:02:67:35:cd:a4:ab:5c: 93:82:3c:6f:f8:c6:1d:7a:55:74:a0:0b:4b:12:7d:83:8e:5c: aa:43:b4:7e:b9:4a:a7:1a:eb:c5:8b:19:73:b4:e0:bc:02:95: c9:f0:ad:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LaC1NlJVhCjHGyHp06iAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDY0NDc2YzJjNDdmNzc4NDc0YTE0ODE2YzFlMDZhNDA4 MTNlNWMwHhcNMjYwMTI2MTIwMDUyWhcNMjYwMTI3MTIwMDUyWjAzMTEwLwYDVQQD Eyg5NDM1Yzk1ZDVjZmQxNmE4OGVjNGQ3ZjQ1ZDk5N2Q3NWE3MmNiZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspKG5/BSvkJRPQ0tKirnYHpQuqas MokJ9ZJcLvnPbd6PJ5iwneHUgD7yPg3elpl66NLsppFC129g/J86ws+4pNgVuX5D eD/21tjxsQo0s1UAUMavh5TDAzGGnbSZBEymuaSZOIlLpn0FcFTFpsRx9tC4iNzb f7LQrr9/BHY0hAglcGJX/QqSnqaj1NlMZBVeAB8AOZ4FuPSwVjwU7X2ndwQeD8f6 IxMaczZfNpd31CmADmSRKEvFFe2B8Q6wlxHsKb/BB9uqYulAgyejP/AA8Y/aJtio RyJzRAT4dtb7Of3jakQqgQ8KuHidZV1muKcYRIB8JCRLrnR8l8bnjEHrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQ1yV1c/RaojsTX9F2ZfXWnLL0GMB8GA1UdIwQY MBaAFMQGRHbCxH93hHShSBbB4GpAgT5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEt NzQ2Nzc3ZTIxYzViLzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEtNzQ2Nzc3ZTIxYzVi LzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+ByzVSV /siLQdg5xon+3nZ8429YKgkiMoG/bb5OkhuE99UBupEHXxZ3PgvSmRUS+NMEvFP/ XETsow3ebC6dL0naExyRLX5meHU2aN2X8YvJDh1xeAwGZ5HpCLwGtiZ8bOo8UUZ6 NQXPYsEMoiWttXNk8clybFVEH/h6mh5bzUo2fRutaSF32AUqK/iTN0xi6FuB2oE7 fJZh1hz/hp9GNvXnZlInxEy5h+rq+M5YVntOmGBDL5ILqgdsOnjpZKtFpQ05Kdxv 4zzkBEbrDHtKue0CZzXNpKtck4I8b/jGHXpVdKALSxJ9g45cqkO0frlKpxrrxYsZ c7TgvAKVyfCtfA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:43 2026 by rpki-client