This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json) Hash identifier: yYYuM+4PZe1VMhzcq1ax6omttcm2ZTLJHtSNTLeE9PI= Subject key identifier: 0E:B9:E6:5D:3B:17:79:B0:50:04:12:3E:05:36:B5:48:EE:24:35:CB Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Certificate serial: 019BF8084154D7C95EAE9C34F2924BB25FDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 02:00:49 +0000 Manifest this update: Mon 26 Jan 2026 02:00:49 +0000 Manifest next update: Tue 27 Jan 2026 02:00:49 +0000 Files and hashes: 1: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=) 2: u9MRH0PAmITdYIYdl3L6OV5Ca_E.roa (hash: y7Eo8YjiifOpZz2F++URiefsRuTUyo4S63kmICsvHhc=) 3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: wWmAMeG+ueya/FWv9nqS+4DknbOsUy/Cwhiw1OQ7xJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:41:54:d7:c9:5e:ae:9c:34:f2:92:4b:b2:5f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Validity Not Before: Jan 26 02:00:49 2026 GMT Not After : Jan 27 02:00:49 2026 GMT Subject: CN=0eb9e65d3b1779b05004123e0536b548ee2435cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:a9:71:7b:b7:dc:db:28:76:44:b4:0f:2a: f5:fc:77:ec:90:53:fc:7e:97:ab:fc:0d:b2:e1:58: 6a:6a:5c:39:20:32:4e:db:0b:b7:15:20:7f:fa:6a: 01:44:a4:55:6d:d7:e7:a0:3c:18:74:ac:46:16:7f: 30:b0:dd:c9:97:93:02:de:b2:db:2c:59:64:3d:57: 71:23:4e:07:3b:af:10:7a:72:b2:a9:7e:1c:6c:ee: ad:59:97:95:d7:a0:08:7f:47:65:65:dd:11:be:13: f3:5c:93:6c:34:34:17:11:31:3c:ce:43:e2:ea:12: 2a:b2:bd:60:81:d2:14:ee:4e:ff:2c:f7:28:6c:b0: d1:6a:81:f6:b9:b0:f0:1c:4f:75:9b:4e:62:8a:97: cc:07:de:11:59:9f:dd:f1:64:83:8e:a6:04:0c:f8: d7:a3:b0:92:58:a0:bf:a1:db:ba:2c:2e:3d:87:33: 11:57:a8:e5:19:36:0e:13:c8:18:34:14:dd:4f:1e: 78:b5:c4:1a:17:ec:67:dd:6e:60:fa:9b:a8:31:ec: 31:6f:a5:a4:33:8a:f0:bf:8b:95:e2:53:0e:2a:2e: ef:05:6f:05:fd:07:f5:36:dd:6f:5f:fd:71:d9:23: 9a:5f:56:9d:55:91:4b:aa:53:31:db:25:07:89:17: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:E6:5D:3B:17:79:B0:50:04:12:3E:05:36:B5:48:EE:24:35:CB X509v3 Authority Key Identifier: keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:2d:97:65:d5:21:00:e2:39:c1:ea:18:fe:a7:28:9e:88:0a: 8b:12:cc:c0:f9:c0:ce:98:05:c3:62:f5:09:a3:c4:fb:f9:9e: 61:fe:9f:9a:2f:bf:f7:21:94:42:72:ff:a5:45:0d:ec:02:5b: 4d:df:c3:ea:ff:a8:c6:56:2a:0a:37:a7:8e:39:89:cb:7d:14: 93:14:75:91:8b:64:90:39:6e:f3:2f:b8:2d:d9:2b:81:51:19: 01:10:89:10:d3:a2:99:49:03:84:1e:e2:3e:0d:ca:52:45:43: 17:43:be:3b:c7:2c:1f:9a:0a:98:d2:bb:ee:d8:ec:69:9f:55: ac:d2:57:71:d2:4e:d2:cf:b7:8a:57:98:54:7a:79:36:3f:72: a3:0e:5b:fd:2e:d1:c9:4a:12:56:df:52:ff:35:6b:8c:a5:84: d6:f8:ad:43:a5:21:e7:d1:b6:61:65:7a:1e:ce:08:75:17:fc: 74:7e:39:be:bf:42:d2:72:e4:ce:e5:fe:cc:c2:0b:0f:af:72: 5a:05:a7:ab:ab:da:41:20:44:ec:c0:9b:49:93:e8:a7:55:4d: e5:87:b5:98:84:d7:a2:79:e3:99:1f:81:7d:2e:a8:01:ce:8d: 7a:49:5b:2b:d9:cf:79:bb:9f:d6:ef:c9:fb:f8:29:5c:a4:3e: a4:fa:48:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CEFU18lerpw08pJLsl/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2 YWU4NzMwHhcNMjYwMTI2MDIwMDQ5WhcNMjYwMTI3MDIwMDQ5WjAzMTEwLwYDVQQD EygwZWI5ZTY1ZDNiMTc3OWIwNTAwNDEyM2UwNTM2YjU0OGVlMjQzNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl2pcXu33NsodkS0Dyr1/HfskFP8 fper/A2y4Vhqalw5IDJO2wu3FSB/+moBRKRVbdfnoDwYdKxGFn8wsN3Jl5MC3rLb LFlkPVdxI04HO68QenKyqX4cbO6tWZeV16AIf0dlZd0RvhPzXJNsNDQXETE8zkPi 6hIqsr1ggdIU7k7/LPcobLDRaoH2ubDwHE91m05iipfMB94RWZ/d8WSDjqYEDPjX o7CSWKC/odu6LC49hzMRV6jlGTYOE8gYNBTdTx54tcQaF+xn3W5g+puoMewxb6Wk M4rwv4uV4lMOKi7vBW8F/Qf1Nt1vX/1x2SOaX1adVZFLqlMx2yUHiRdIpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA655l07F3mwUAQSPgU2tUjuJDXLMB8GA1UdIwQY MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2 LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2S2XZdUh AOI5weoY/qconogKixLMwPnAzpgFw2L1CaPE+/meYf6fmi+/9yGUQnL/pUUN7AJb Td/D6v+oxlYqCjenjjmJy30UkxR1kYtkkDlu8y+4LdkrgVEZARCJENOimUkDhB7i Pg3KUkVDF0O+O8csH5oKmNK77tjsaZ9VrNJXcdJO0s+3ileYVHp5Nj9yow5b/S7R yUoSVt9S/zVrjKWE1vitQ6Uh59G2YWV6Hs4IdRf8dH45vr9C0nLkzuX+zMILD69y WgWnq6vaQSBE7MCbSZPop1VN5Ye1mITXonnjmR+BfS6oAc6NeklbK9nPebuf1u/J +/gpXKQ+pPpInA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:23 2026 by rpki-client