This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: YR3ms/zw0ywwbjDIQ4Mvc7J5/7HjI1R+yPVXvB7obcI= Subject key identifier: 52:86:DE:60:5A:1E:7C:AE:99:3C:63:DF:7E:BF:93:B4:77:F3:D7:72 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019BF5073C3B53A9F2AB917D5C308EB4D7B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1820 Signing time: Sun 25 Jan 2026 12:00:50 +0000 Manifest this update: Sun 25 Jan 2026 12:00:50 +0000 Manifest next update: Mon 26 Jan 2026 12:00:50 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: wcjKs2JBolmfFL4/Zxf6LUFgX3GEeLKIoeJ3Y2a/Vps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:3c:3b:53:a9:f2:ab:91:7d:5c:30:8e:b4:d7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 25 12:00:50 2026 GMT Not After : Jan 26 12:00:50 2026 GMT Subject: CN=5286de605a1e7cae993c63df7ebf93b477f3d772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:69:21:4d:12:3e:81:31:d2:dd:9c:2d:db: 80:a8:86:7b:63:8b:b5:45:80:2d:16:e5:1c:86:55: ad:d8:fb:e0:3e:ba:b7:88:38:94:b9:7e:90:96:4e: 34:78:01:dd:a3:18:08:06:8f:31:69:1e:09:1b:75: af:cc:87:2d:12:fd:7c:9e:17:e3:ce:2f:18:3e:c1: b8:23:3b:fb:6a:37:0f:15:03:45:97:cf:ed:9a:ee: c5:04:b4:f0:60:86:ec:3b:f7:1c:8b:c1:de:ad:76: 32:13:48:25:41:e7:0a:5b:16:85:f9:a9:d4:56:6c: 53:dd:84:75:e9:10:5c:fd:c0:8a:63:04:52:b0:57: 96:74:58:d6:be:dd:22:88:f6:e4:98:a9:a3:20:fb: 5e:8b:ff:e5:8c:31:91:86:1f:4e:38:9c:d8:ed:b0: 73:4d:a9:74:49:dd:b1:9f:b4:af:c2:c6:aa:ad:de: 37:9e:ae:96:88:09:c1:7c:fb:da:a9:13:4e:f1:0d: 2f:e9:b9:a3:27:6e:cf:e4:32:6f:d4:ea:f2:ea:9a: 79:19:9f:31:93:11:65:69:b8:cb:b7:fd:21:44:ff: 46:21:b8:b0:ea:72:47:ef:b7:be:33:61:f1:55:de: e1:41:7e:a1:9b:10:d2:16:fc:1c:e9:fe:82:26:02: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:86:DE:60:5A:1E:7C:AE:99:3C:63:DF:7E:BF:93:B4:77:F3:D7:72 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e6:59:87:f7:d3:54:f3:6f:82:52:02:71:0b:9f:ca:c0:0b: ba:06:9d:10:33:70:ed:d8:ce:88:ec:50:e4:1e:63:b8:97:2f: f2:0d:89:96:19:7f:15:df:60:59:03:bf:7f:59:c7:dc:6f:16: 4a:c0:9d:c2:f3:e9:99:da:60:fd:0a:a6:4f:ba:ec:0a:0f:d3: a0:b5:f3:6c:7f:62:2b:88:73:e1:ac:5e:86:b0:37:3f:82:74: 56:6a:31:36:d6:61:1b:51:44:0d:82:3f:54:cd:5f:07:86:24: a9:28:e0:fc:a8:dd:a2:71:24:26:15:fe:51:90:cf:38:a9:ab: 96:4c:9d:e3:fa:ce:03:4a:8e:b8:b6:88:50:8d:12:6e:04:a2: a0:9a:4f:c0:0c:37:9e:3c:8c:70:ec:2c:ba:6b:a9:2f:63:42: df:ea:95:a3:80:6d:65:ea:dc:d4:32:4c:34:23:0a:be:b7:3c: 75:66:04:a0:12:24:9e:25:a0:17:0e:a2:39:6d:84:b8:0d:1e: 9f:8c:34:b0:7a:f6:18:4a:05:c4:83:19:1c:00:ff:c1:06:4e: f7:65:70:6d:57:35:6c:81:c2:07:f4:1a:c5:74:20:f8:85:09: eb:37:a1:77:4c:09:88:1d:a8:ab:d9:59:06:0b:fc:a8:42:d8: 7f:7a:31:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Bzw7U6nyq5F9XDCOtNe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTI1MTIwMDUwWhcNMjYwMTI2MTIwMDUwWjAzMTEwLwYDVQQD Eyg1Mjg2ZGU2MDVhMWU3Y2FlOTkzYzYzZGY3ZWJmOTNiNDc3ZjNkNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm1pIU0SPoEx0t2cLduAqIZ7Y4u1 RYAtFuUchlWt2PvgPrq3iDiUuX6Qlk40eAHdoxgIBo8xaR4JG3WvzIctEv18nhfj zi8YPsG4Izv7ajcPFQNFl8/tmu7FBLTwYIbsO/cci8HerXYyE0glQecKWxaF+anU VmxT3YR16RBc/cCKYwRSsFeWdFjWvt0iiPbkmKmjIPtei//ljDGRhh9OOJzY7bBz Tal0Sd2xn7Svwsaqrd43nq6WiAnBfPvaqRNO8Q0v6bmjJ27P5DJv1Ory6pp5GZ8x kxFlabjLt/0hRP9GIbiw6nJH77e+M2HxVd7hQX6hmxDSFvwc6f6CJgKlbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKG3mBaHnyumTxj336/k7R389dyMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+ZZh/fT VPNvglICcQufysALugadEDNw7djOiOxQ5B5juJcv8g2Jlhl/Fd9gWQO/f1nH3G8W SsCdwvPpmdpg/QqmT7rsCg/ToLXzbH9iK4hz4axehrA3P4J0VmoxNtZhG1FEDYI/ VM1fB4YkqSjg/KjdonEkJhX+UZDPOKmrlkyd4/rOA0qOuLaIUI0SbgSioJpPwAw3 njyMcOwsumupL2NC3+qVo4BtZerc1DJMNCMKvrc8dWYEoBIkniWgFw6iOW2EuA0e n4w0sHr2GEoFxIMZHAD/wQZO92VwbVc1bIHCB/QaxXQg+IUJ6zehd0wJiB2oq9lZ Bgv8qELYf3oxjg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:31 2026 by rpki-client