This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json) Hash identifier: UxwLMitkIYHk/qusBvTSQYyg+Yn1qZzDKytKHWLQfQc= Subject key identifier: 8E:C2:72:81:DF:13:98:20:C1:3E:3B:19:4F:40:B6:B4:D8:54:AA:6B Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Certificate serial: 019BF34FCDBF423E1983A8161D57735A4CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft Manifest number: 0375 Signing time: Sun 25 Jan 2026 04:00:51 +0000 Manifest this update: Sun 25 Jan 2026 04:00:51 +0000 Manifest next update: Mon 26 Jan 2026 04:00:51 +0000 Files and hashes: 1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=) 2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: 8jggI1dHhPiA3pwXUUM9rNnU7u6kMOblQsdciO/Z/AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:cd:bf:42:3e:19:83:a8:16:1d:57:73:5a:4c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Validity Not Before: Jan 25 04:00:51 2026 GMT Not After : Jan 26 04:00:51 2026 GMT Subject: CN=8ec27281df139820c13e3b194f40b6b4d854aa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:3f:90:d0:25:de:c9:c7:67:2d:ee:77:b4: 6d:ee:af:86:69:20:3d:79:b4:fd:72:46:58:b6:26: 7f:48:e9:40:12:ba:ff:04:b4:b1:8c:59:ac:e6:fc: 6b:a8:0d:0d:c6:f9:c4:a3:fb:d6:db:f3:5c:bb:13: 3e:6c:e1:56:5c:71:b2:67:a8:36:29:ff:ed:69:4e: 67:0c:d2:a1:e5:ee:45:4c:43:c6:ac:ca:8d:33:7f: dc:30:b4:cc:77:d8:5d:b9:6f:d2:8f:d7:9e:29:4e: c8:70:d8:d9:d1:40:4a:31:bd:86:b1:40:63:9d:e8: de:ce:c8:95:24:ca:5a:25:89:d6:5c:d2:fc:31:35: 58:36:5b:0b:00:dc:56:08:cd:ed:0b:07:bb:21:ab: 27:37:35:fe:de:41:bd:b6:19:b3:7e:24:5a:e0:13: 50:7c:ad:ac:30:ee:03:9a:18:24:3d:4b:06:1c:11: a0:52:d9:45:00:00:0b:0d:a1:00:10:40:86:39:36: eb:a8:1c:b9:28:98:aa:c6:79:2a:bc:2a:0f:49:2c: 0f:cc:c1:9f:7d:c7:e7:42:26:b2:7a:53:da:ac:da: 1a:9e:5b:0f:fa:17:79:e9:81:63:11:2a:aa:6e:e9: 5b:78:2b:38:ab:1f:ce:e2:df:1f:38:c8:f9:ac:32: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C2:72:81:DF:13:98:20:C1:3E:3B:19:4F:40:B6:B4:D8:54:AA:6B X509v3 Authority Key Identifier: keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9f:1b:1d:3b:52:56:c1:da:6b:7f:d9:ac:88:d8:0f:f4:d8: 5a:eb:92:80:eb:8d:9c:d9:71:ae:98:ee:19:b5:a6:e9:2c:81: 9d:74:5f:51:18:ee:2e:5f:33:65:28:d1:bb:2a:56:3e:c8:e5: 22:77:40:8d:73:d0:98:eb:4f:25:e4:c1:6d:8f:e0:26:b1:8b: 1e:96:9f:c1:46:6d:a2:43:2d:ee:c5:8a:68:58:e4:cd:fe:2b: 90:d4:b7:8f:3c:2d:2b:13:40:aa:24:2d:fd:6e:75:df:45:fb: 20:86:5a:7a:cd:07:8f:8d:da:3e:41:d0:ab:37:e7:77:36:2c: 59:63:a6:f3:b9:f0:43:09:94:96:28:8f:ae:20:14:48:8b:48: 22:12:88:a1:5f:f5:f0:9d:b8:81:cd:ab:6a:0e:9b:cd:c4:f2: 0e:0e:1e:dd:e3:8a:07:16:ad:21:19:e6:5f:7e:bf:47:fe:af: 5e:d5:27:f9:b3:63:c2:34:ba:fb:fc:3f:4b:2e:50:01:3d:35: 5d:d7:ee:88:cc:ca:8f:6d:de:3d:42:a5:39:ab:33:7d:3e:d7: 8d:be:99:9f:b6:3a:46:19:25:2e:55:4a:25:a9:43:d9:97:1c: 2a:aa:57:1f:fb:3b:c7:65:12:6b:b3:7f:44:33:51:47:a5:37: bd:10:79:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT82/Qj4Zg6gWHVdzWkzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm YWZlMGMwHhcNMjYwMTI1MDQwMDUxWhcNMjYwMTI2MDQwMDUxWjAzMTEwLwYDVQQD Eyg4ZWMyNzI4MWRmMTM5ODIwYzEzZTNiMTk0ZjQwYjZiNGQ4NTRhYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIk/kNAl3snHZy3ud7Rt7q+GaSA9 ebT9ckZYtiZ/SOlAErr/BLSxjFms5vxrqA0NxvnEo/vW2/NcuxM+bOFWXHGyZ6g2 Kf/taU5nDNKh5e5FTEPGrMqNM3/cMLTMd9hduW/Sj9eeKU7IcNjZ0UBKMb2GsUBj nejezsiVJMpaJYnWXNL8MTVYNlsLANxWCM3tCwe7IasnNzX+3kG9thmzfiRa4BNQ fK2sMO4DmhgkPUsGHBGgUtlFAAALDaEAEECGOTbrqBy5KJiqxnkqvCoPSSwPzMGf fcfnQiayelParNoanlsP+hd56YFjESqqbulbeCs4qx/O4t8fOMj5rDJmtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7CcoHfE5ggwT47GU9AtrTYVKprMB8GA1UdIwQY MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0 LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAap8bHTtS VsHaa3/ZrIjYD/TYWuuSgOuNnNlxrpjuGbWm6SyBnXRfURjuLl8zZSjRuypWPsjl IndAjXPQmOtPJeTBbY/gJrGLHpafwUZtokMt7sWKaFjkzf4rkNS3jzwtKxNAqiQt /W5130X7IIZaes0Hj43aPkHQqzfndzYsWWOm87nwQwmUliiPriAUSItIIhKIoV/1 8J24gc2rag6bzcTyDg4e3eOKBxatIRnmX36/R/6vXtUn+bNjwjS6+/w/Sy5QAT01 XdfuiMzKj23ePUKlOaszfT7Xjb6Zn7Y6RhklLlVKJalD2ZccKqpXH/s7x2USa7N/ RDNRR6U3vRB5OA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:26 2026 by rpki-client