This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json) Hash identifier: i6f6fJb+V6Ni8cDDpImftEceEEe92YmPZ5+qWaqoRZI= Subject key identifier: 9A:6E:37:E0:73:90:2C:1A:3B:7F:9C:3A:75:7E:B4:B6:C2:11:F9:B8 Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147 Certificate serial: 019BF6F58C950349C6EF5DA9BE61F1B6B542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft Manifest number: 1035 Signing time: Sun 25 Jan 2026 21:00:46 +0000 Manifest this update: Sun 25 Jan 2026 21:00:46 +0000 Manifest next update: Mon 26 Jan 2026 21:00:46 +0000 Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: CqHIVZw9fZ8c5fCMBrFLdiWt4Niz/ftsQEjL3ORK8Zo=) 2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:8c:95:03:49:c6:ef:5d:a9:be:61:f1:b6:b5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147 Validity Not Before: Jan 25 21:00:46 2026 GMT Not After : Jan 26 21:00:46 2026 GMT Subject: CN=9a6e37e073902c1a3b7f9c3a757eb4b6c211f9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:94:28:b5:26:77:30:f8:da:3d:2c:fb:ec: d4:c3:72:11:4b:0e:c4:dd:4a:7d:d6:32:c3:3a:fa: 77:f3:9b:ec:d9:94:4f:31:91:c4:ea:cb:1f:18:19: c0:ae:d0:17:9f:c7:b7:69:75:5b:51:6b:1c:bc:65: 9d:58:1e:d7:23:81:ee:ec:81:b9:c0:c2:e9:8d:7e: 3e:90:23:c3:99:01:9b:c1:61:36:7a:c9:f3:8b:ae: 4c:22:dc:2b:48:c4:78:be:c3:f3:8f:23:6a:d8:e3: 02:e5:6b:7e:11:e2:15:75:bf:e5:ae:05:62:96:46: f1:74:a8:9d:eb:2d:17:ea:5b:ae:49:e1:92:6c:f1: 7b:79:70:18:33:17:5a:06:3e:a7:67:48:34:be:41: 64:e9:19:bb:27:55:b3:6a:f5:dd:64:53:fb:36:6e: 02:d9:25:a6:a3:33:22:28:91:48:b0:3b:44:71:13: 5c:09:09:b4:52:96:68:4f:38:5e:1e:d5:ef:1b:de: 6c:60:29:ea:6d:33:c1:93:86:c7:4b:ec:93:e8:7b: 5d:5a:aa:1a:01:36:84:a3:2a:6e:a6:3c:39:35:e0: 25:5b:58:22:e5:d7:7d:4c:44:5c:f5:57:c3:bf:1d: 84:36:28:7d:d1:49:ab:74:1f:f5:92:cd:c8:41:16: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:37:E0:73:90:2C:1A:3B:7F:9C:3A:75:7E:B4:B6:C2:11:F9:B8 X509v3 Authority Key Identifier: keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:66:30:9a:44:b2:4f:92:17:e7:ef:46:23:23:db:88:f8:b5: a1:d4:cc:9d:4c:4d:66:62:ab:c2:a2:b1:c9:9f:e8:9e:57:5e: 11:fd:0c:7a:a3:e6:3a:62:b7:66:15:89:c7:6f:89:bc:67:e8: 39:66:82:64:21:3e:44:8f:89:07:c5:11:d0:f8:03:2e:f2:2b: 91:92:7f:43:03:fc:df:e5:57:32:1b:e8:01:30:0b:d5:be:01: ac:8f:e2:cb:ec:33:7d:38:55:c7:d0:58:7a:fc:72:0d:58:3e: 36:4c:ef:4d:11:c3:77:f2:86:9e:c3:d4:a4:26:68:e3:69:56: dd:04:f6:33:91:63:16:d7:4b:c4:df:53:d2:86:93:fb:9f:d8: 8f:bd:da:3e:bb:75:eb:45:f5:af:82:1a:1a:75:bd:9c:43:00: b4:38:99:ac:36:c1:af:5e:ef:c1:4c:22:2f:2c:b4:10:1f:4b: 6c:bd:4d:e0:33:4a:ff:6a:b6:53:34:58:4b:f3:a7:62:03:1c: a7:38:05:cf:fd:25:7e:36:98:8f:cf:18:49:05:2e:82:b6:4b: 56:32:54:fc:c4:30:28:de:f4:ca:ba:4e:3d:eb:16:3d:6c:e8: e7:e3:2d:c8:22:27:4f:d6:a1:c0:cb:6d:2f:fe:fe:89:96:ec: a0:c6:5d:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YyVA0nG712pvmHxtrVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3 NGYxNDcwHhcNMjYwMTI1MjEwMDQ2WhcNMjYwMTI2MjEwMDQ2WjAzMTEwLwYDVQQD Eyg5YTZlMzdlMDczOTAyYzFhM2I3ZjljM2E3NTdlYjRiNmMyMTFmOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKCUKLUmdzD42j0s++zUw3IRSw7E 3Up91jLDOvp385vs2ZRPMZHE6ssfGBnArtAXn8e3aXVbUWscvGWdWB7XI4Hu7IG5 wMLpjX4+kCPDmQGbwWE2esnzi65MItwrSMR4vsPzjyNq2OMC5Wt+EeIVdb/lrgVi lkbxdKid6y0X6luuSeGSbPF7eXAYMxdaBj6nZ0g0vkFk6Rm7J1WzavXdZFP7Nm4C 2SWmozMiKJFIsDtEcRNcCQm0UpZoTzheHtXvG95sYCnqbTPBk4bHS+yT6HtdWqoa ATaEoypupjw5NeAlW1gi5dd9TERc9VfDvx2ENih90UmrdB/1ks3IQRZAeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpuN+BzkCwaO3+cOnV+tLbCEfm4MB8GA1UdIwQY MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3 LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmYwmkSy T5IX5+9GIyPbiPi1odTMnUxNZmKrwqKxyZ/onldeEf0MeqPmOmK3ZhWJx2+JvGfo OWaCZCE+RI+JB8UR0PgDLvIrkZJ/QwP83+VXMhvoATAL1b4BrI/iy+wzfThVx9BY evxyDVg+NkzvTRHDd/KGnsPUpCZo42lW3QT2M5FjFtdLxN9T0oaT+5/Yj73aPrt1 60X1r4IaGnW9nEMAtDiZrDbBr17vwUwiLyy0EB9LbL1N4DNK/2q2UzRYS/OnYgMc pzgFz/0lfjaYj88YSQUugrZLVjJU/MQwKN70yrpOPesWPWzo5+MtyCInT9ahwMtt L/7+iZbsoMZdRw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:27 2026 by rpki-client