This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json) Hash identifier: B8Zi6DOADxmGLOqqqvAyxrhvsYuMasuVe/WwGiOjL/c= Subject key identifier: 8A:A8:D2:D0:DC:A4:43:B1:48:B8:E6:04:95:79:96:C9:63:5B:8A:06 Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Certificate serial: 019BF3BDCB3C3FF4F3E2DE3214F9C7893073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 06:01:00 +0000 Manifest this update: Sun 25 Jan 2026 06:01:00 +0000 Manifest next update: Mon 26 Jan 2026 06:01:00 +0000 Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=) 2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=) 3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: WB24GVx7kPF8H0oVAOeuYDZqPEVLlmZPGQhBFWcwnWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:cb:3c:3f:f4:f3:e2:de:32:14:f9:c7:89:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Validity Not Before: Jan 25 06:01:00 2026 GMT Not After : Jan 26 06:01:00 2026 GMT Subject: CN=8aa8d2d0dca443b148b8e604957996c9635b8a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:64:27:43:41:ea:42:19:98:7a:4f:1b:43: a1:28:0b:c9:a1:9f:67:b7:02:c3:cb:1e:be:62:9c: 4b:cd:1a:ec:a0:4a:cc:e3:26:25:d9:82:d1:ca:8e: 7d:bb:0e:a6:98:39:05:64:24:51:01:d5:bf:a8:a5: 72:e4:35:04:2b:81:58:c2:e9:8b:3e:27:d9:77:e7: d5:2c:12:49:81:39:27:de:88:92:7d:da:b8:06:18: 02:1e:fe:9f:60:48:3f:15:e7:e4:dc:f4:46:78:94: 17:36:82:8e:dd:b5:3b:91:30:da:1e:ce:2d:45:24: 1d:e6:77:97:88:6f:ab:61:ed:4f:9f:d8:47:f6:7a: da:f1:a9:1c:4a:fb:11:ea:f8:e3:d1:3f:f5:ec:b4: 53:d6:0f:3d:f0:e0:cd:d6:99:d3:5f:a0:b3:ae:14: ff:3b:34:59:ac:a4:2a:be:6b:06:04:73:3d:35:f9: e0:f4:69:1d:23:7f:37:4d:ec:08:36:f9:6b:15:70: ac:98:ac:38:34:e4:69:41:60:b5:de:f8:a0:fd:b4: 13:82:e2:72:61:00:7e:3b:ab:f0:ac:94:81:6f:d7: dd:d7:2c:14:b5:b9:1d:1c:2f:68:35:3a:4b:19:a4: cc:8a:2b:9a:18:e5:06:31:5c:ff:4d:9a:e4:69:82: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A8:D2:D0:DC:A4:43:B1:48:B8:E6:04:95:79:96:C9:63:5B:8A:06 X509v3 Authority Key Identifier: keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b8:05:b2:26:9d:f6:15:66:7f:94:36:6e:0c:9b:e9:e9:46: 84:f3:19:4e:57:1a:47:e1:0b:66:d1:1b:81:1b:4c:c0:a6:e8: 08:77:43:6d:de:f5:f8:a7:e1:83:d2:ff:ae:1d:95:17:6c:0b: 30:a1:9e:60:99:54:c2:0a:1c:72:13:a3:11:18:d4:91:82:c7: 41:46:0c:89:e1:85:29:26:ef:dc:e2:e2:b5:5c:10:79:d0:53: 8d:5f:07:fe:1f:d1:b1:b3:10:d9:16:34:7e:37:b9:06:1c:46: 2f:36:c1:ff:63:bf:b6:8b:51:1c:bc:30:51:41:1d:a5:43:f9: 05:80:4a:24:e1:48:10:ec:32:b1:94:40:46:ba:02:df:08:89: 56:06:22:bb:a9:2f:08:ce:ec:09:8a:e1:6f:41:a0:1f:5e:35: 5e:45:ed:b1:13:96:5c:57:58:2a:f0:54:19:c0:da:2b:02:ac: 33:5f:44:e0:e9:4f:8a:a3:5f:15:d5:b3:74:55:0e:69:f1:d0: 66:50:bb:77:9a:74:4c:cb:11:52:c9:3c:70:b2:ce:d4:46:bb: 68:d4:60:a0:d2:86:f8:39:d2:bf:9f:47:15:22:bf:8b:f5:de: a6:bd:02:85:dd:0e:2d:c6:fe:c8:93:0c:c4:b6:5c:1f:b0:9a: dd:fc:ad:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvcs8P/Tz4t4yFPnHiTBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj NzNiMWMwHhcNMjYwMTI1MDYwMTAwWhcNMjYwMTI2MDYwMTAwWjAzMTEwLwYDVQQD Eyg4YWE4ZDJkMGRjYTQ0M2IxNDhiOGU2MDQ5NTc5OTZjOTYzNWI4YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEBkJ0NB6kIZmHpPG0OhKAvJoZ9n twLDyx6+YpxLzRrsoErM4yYl2YLRyo59uw6mmDkFZCRRAdW/qKVy5DUEK4FYwumL PifZd+fVLBJJgTkn3oiSfdq4BhgCHv6fYEg/Fefk3PRGeJQXNoKO3bU7kTDaHs4t RSQd5neXiG+rYe1Pn9hH9nra8akcSvsR6vjj0T/17LRT1g898ODN1pnTX6CzrhT/ OzRZrKQqvmsGBHM9Nfng9GkdI383TewINvlrFXCsmKw4NORpQWC13vig/bQTguJy YQB+O6vwrJSBb9fd1ywUtbkdHC9oNTpLGaTMiiuaGOUGMVz/TZrkaYKIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqo0tDcpEOxSLjmBJV5lsljW4oGMB8GA1UdIwQY MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7gFsiad 9hVmf5Q2bgyb6elGhPMZTlcaR+ELZtEbgRtMwKboCHdDbd71+Kfhg9L/rh2VF2wL MKGeYJlUwgocchOjERjUkYLHQUYMieGFKSbv3OLitVwQedBTjV8H/h/RsbMQ2RY0 fje5BhxGLzbB/2O/totRHLwwUUEdpUP5BYBKJOFIEOwysZRARroC3wiJVgYiu6kv CM7sCYrhb0GgH141XkXtsROWXFdYKvBUGcDaKwKsM19E4OlPiqNfFdWzdFUOafHQ ZlC7d5p0TMsRUsk8cLLO1Ea7aNRgoNKG+DnSv59HFSK/i/Xepr0Chd0OLcb+yJMM xLZcH7Ca3fytUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:14 2026 by rpki-client