This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json) Hash identifier: yFDnqBmqxKQ9Q0K8IjJ28QP3dJHSORMF+9pdMVN5p68= Subject key identifier: 3F:90:87:DB:23:7B:42:A2:0B:68:CC:05:A7:0D:C3:A4:2C:3D:18:69 Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e Certificate serial: 019BF4D0B8BE7C4FAE4339F1A2BB4CEEA13D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 11:01:18 +0000 Manifest this update: Sun 25 Jan 2026 11:01:18 +0000 Manifest next update: Mon 26 Jan 2026 11:01:18 +0000 Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=) 2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=) 3: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=) 4: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: JlrKNvz6969PtLPb2pgAclBJgb9VrsoKWth+98MPpp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:b8:be:7c:4f:ae:43:39:f1:a2:bb:4c:ee:a1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e Validity Not Before: Jan 25 11:01:18 2026 GMT Not After : Jan 26 11:01:18 2026 GMT Subject: CN=3f9087db237b42a20b68cc05a70dc3a42c3d1869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:4c:40:3f:2b:55:88:2c:7a:a0:ee:db:92: a1:8f:0d:18:48:24:41:7b:0b:bd:1b:71:dd:e0:88: 43:24:d9:f9:ce:5d:1d:18:97:83:3b:0a:df:c2:77: 9f:79:1e:e6:34:b8:97:94:71:0b:d1:f4:37:06:46: d1:67:2b:34:1e:a5:d3:f9:b2:af:f4:a2:6a:13:69: 4b:68:96:81:64:13:f8:09:73:64:6f:8f:b8:86:85: f4:e2:5c:b9:04:e3:42:00:4c:79:e0:89:09:0a:41: b4:53:4a:91:fa:cb:7e:79:10:63:96:ac:39:26:7d: c8:77:06:58:aa:a4:f8:22:f3:0a:bb:e4:8c:12:d6: c3:8a:58:6c:43:d3:b1:d5:61:7e:97:b6:7c:ad:78: 15:85:9b:83:6c:ab:32:40:29:ef:2f:20:a8:e3:18: 3d:a0:45:01:10:df:a9:dc:d9:12:3e:be:22:56:c2: 9f:39:15:0d:d5:ef:23:43:82:b2:13:c5:f1:13:f5: f2:8f:37:7e:32:98:47:d3:b7:02:4a:b7:9c:86:73: 44:79:6d:22:a4:84:e8:54:a8:55:f3:09:2e:4f:2b: 33:be:ff:f7:e3:1d:bc:3b:3b:af:9d:c1:53:bf:e8: 0d:51:a6:56:a0:33:9f:93:0b:19:3b:0c:d1:ab:34: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:90:87:DB:23:7B:42:A2:0B:68:CC:05:A7:0D:C3:A4:2C:3D:18:69 X509v3 Authority Key Identifier: keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:17:aa:4f:6a:fb:0e:65:02:03:a2:1d:5d:ba:b2:15:db:5d: 92:f5:55:af:a8:5f:d1:e5:13:34:d2:0c:dd:02:12:99:03:8b: 55:b2:f6:8e:1c:24:c4:a9:f7:23:d4:ad:d4:20:d2:82:40:89: 9b:43:f7:fd:e1:80:f9:c9:32:eb:df:6f:36:5e:7d:21:07:42: c3:b1:73:82:8d:32:55:30:95:fe:a6:7d:3a:ee:66:82:c8:cf: d5:09:5a:9d:75:af:78:6a:a8:25:43:73:1c:1c:ac:af:df:0e: cf:64:b5:db:8e:57:fe:d5:c4:5d:3e:29:e6:6e:87:ee:c9:72: 90:ac:cd:bd:09:7a:84:57:12:0b:fa:40:13:9a:51:6e:1a:c5: 4b:f6:61:9a:3f:d5:7e:ef:90:30:19:1e:26:9b:c2:c1:8d:cc: 03:5e:b4:96:2a:90:0f:e0:f6:57:09:13:2e:2b:82:55:83:ab: 29:47:6a:4c:43:bf:46:18:61:46:66:b3:1b:77:49:1a:91:e7: ce:f1:49:8f:37:a4:e9:e0:3e:f5:05:d1:63:96:f8:0c:90:20: 4a:06:e6:4a:90:35:90:82:7c:de:5e:b7:33:30:08:e6:5d:0d: 0f:ce:8d:59:99:b8:5b:2c:56:78:6b:4f:00:e3:7c:a6:2e:ac: 06:82:b7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Li+fE+uQznxortM7qE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh Y2VjNmUwHhcNMjYwMTI1MTEwMTE4WhcNMjYwMTI2MTEwMTE4WjAzMTEwLwYDVQQD EygzZjkwODdkYjIzN2I0MmEyMGI2OGNjMDVhNzBkYzNhNDJjM2QxODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1JMQD8rVYgseqDu25Khjw0YSCRB ewu9G3Hd4IhDJNn5zl0dGJeDOwrfwnefeR7mNLiXlHEL0fQ3BkbRZys0HqXT+bKv 9KJqE2lLaJaBZBP4CXNkb4+4hoX04ly5BONCAEx54IkJCkG0U0qR+st+eRBjlqw5 Jn3IdwZYqqT4IvMKu+SMEtbDilhsQ9Ox1WF+l7Z8rXgVhZuDbKsyQCnvLyCo4xg9 oEUBEN+p3NkSPr4iVsKfORUN1e8jQ4KyE8XxE/Xyjzd+MphH07cCSrechnNEeW0i pIToVKhV8wkuTyszvv/34x28OzuvncFTv+gNUaZWoDOfkwsZOwzRqzQH8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+Qh9sje0KiC2jMBacNw6QsPRhpMB8GA1UdIwQY MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATheqT2r7 DmUCA6IdXbqyFdtdkvVVr6hf0eUTNNIM3QISmQOLVbL2jhwkxKn3I9St1CDSgkCJ m0P3/eGA+cky699vNl59IQdCw7Fzgo0yVTCV/qZ9Ou5mgsjP1QlanXWveGqoJUNz HBysr98Oz2S1245X/tXEXT4p5m6H7slykKzNvQl6hFcSC/pAE5pRbhrFS/Zhmj/V fu+QMBkeJpvCwY3MA160liqQD+D2VwkTLiuCVYOrKUdqTEO/RhhhRmazG3dJGpHn zvFJjzek6eA+9QXRY5b4DJAgSgbmSpA1kIJ83l63MzAI5l0ND86NWZm4WyxWeGtP AON8pi6sBoK3wQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:40 2026 by rpki-client