This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: OhFM4wI5E3lr6nu2NNA6UCKFOg4cN0fSof1sdMT/X8M=
Subject key identifier: FC:90:2C:76:DC:15:AC:39:B5:51:47:B8:9A:6F:52:CF:42:7C:69:ED
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019BF3505F7F5EA92ED357D7B1BA7CFD5451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 17EC
Signing time: Sun 25 Jan 2026 04:01:29 +0000
Manifest this update: Sun 25 Jan 2026 04:01:29 +0000
Manifest next update: Mon 26 Jan 2026 04:01:29 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: qXcb2P9tP6LeKeow18o9UHoA30vEmYU0LgIPRTGDXFI=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:5f:7f:5e:a9:2e:d3:57:d7:b1:ba:7c:fd:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jan 25 04:01:29 2026 GMT
Not After : Jan 26 04:01:29 2026 GMT
Subject: CN=fc902c76dc15ac39b55147b89a6f52cf427c69ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:d4:13:f4:c5:05:64:3c:ff:6c:c3:a5:15:
1d:25:93:48:7c:ac:ae:7f:a2:7d:68:10:1a:ac:a9:
f7:60:11:65:2c:df:3c:e3:76:d0:a8:6c:cf:65:f5:
c8:ce:0d:0c:d4:db:d0:bd:f9:35:ce:7b:a1:c5:c5:
de:c8:a3:47:2d:17:4d:76:55:2d:ad:56:cf:97:c5:
e3:ca:b6:d7:0c:c8:da:33:b6:37:cc:d1:9e:b7:98:
81:28:76:e0:1c:ee:18:2c:dc:99:73:7d:58:17:ec:
66:c0:1a:8a:48:1f:10:ff:c4:7f:0a:d3:9f:3e:9d:
ec:a7:6e:65:36:9f:4d:1b:23:6f:5c:74:83:57:30:
b3:3a:2f:0a:03:c5:ee:19:da:31:31:4d:9a:1f:7f:
48:44:90:d1:66:ae:04:e2:2b:0d:45:72:1c:30:53:
d9:5c:c7:b8:14:2b:17:42:26:b2:29:14:fb:b9:c6:
c1:5a:04:35:ee:57:30:a4:47:61:49:9b:f8:2a:60:
cd:c7:d6:b2:fb:33:06:33:a6:5c:4f:7c:b7:e0:52:
ba:83:3e:37:70:30:fd:6c:be:86:c6:c6:62:98:e4:
ed:26:cb:5a:69:20:a2:f3:82:ae:d4:7f:3e:0e:79:
7e:7c:9f:86:fa:ae:7d:d3:73:cd:fa:e2:b4:a8:68:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:2C:76:DC:15:AC:39:B5:51:47:B8:9A:6F:52:CF:42:7C:69:ED
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:41:35:53:75:c8:16:cb:c8:5e:42:05:f2:6d:cd:22:43:
b0:28:51:18:b5:92:b2:64:00:37:6b:71:d2:06:45:41:e1:35:
4f:91:6a:bc:ed:72:ce:20:d0:c6:04:f9:19:29:07:3f:23:e6:
11:4c:7e:16:d9:de:98:82:59:3b:ba:0d:b4:ec:ff:5f:c4:9d:
8f:61:c7:ec:b0:ac:39:6f:2b:f3:b7:de:a0:35:c0:9a:4b:33:
8e:d0:9e:7a:cc:10:dc:45:1b:bf:5e:73:ad:22:1c:f4:56:96:
0a:71:ec:6a:2e:82:99:74:51:95:b0:00:eb:0c:9c:b0:7b:f5:
c1:e6:64:ce:3c:38:8c:51:85:2f:34:cb:f9:d0:ba:af:b3:2a:
87:b9:23:32:b0:4a:74:b4:2c:58:bd:57:40:0b:bd:38:f5:73:
8d:1a:73:f5:fc:4e:1e:23:8d:0f:68:2d:78:54:a3:39:e1:aa:
87:17:e3:32:99:09:4d:bb:1d:c0:66:6a:50:f2:a1:4a:8e:1f:
fd:b7:75:78:56:47:e0:79:50:f5:fe:51:7d:f2:f8:b5:62:26:
07:e2:04:78:7d:39:7c:39:98:fc:6a:d5:ad:17:e9:91:1b:bf:
3a:9b:e6:94:fb:5e:58:b5:ed:bb:ce:45:b7:94:d8:76:e3:35:
0c:c1:83:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUF9/Xqku01fXsbp8/VRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjYwMTI1MDQwMTI5WhcNMjYwMTI2MDQwMTI5WjAzMTEwLwYDVQQD
EyhmYzkwMmM3NmRjMTVhYzM5YjU1MTQ3Yjg5YTZmNTJjZjQyN2M2OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54TUE/TFBWQ8/2zDpRUdJZNIfKyu
f6J9aBAarKn3YBFlLN8843bQqGzPZfXIzg0M1NvQvfk1znuhxcXeyKNHLRdNdlUt
rVbPl8XjyrbXDMjaM7Y3zNGet5iBKHbgHO4YLNyZc31YF+xmwBqKSB8Q/8R/CtOf
Pp3sp25lNp9NGyNvXHSDVzCzOi8KA8XuGdoxMU2aH39IRJDRZq4E4isNRXIcMFPZ
XMe4FCsXQiayKRT7ucbBWgQ17lcwpEdhSZv4KmDNx9ay+zMGM6ZcT3y34FK6gz43
cDD9bL6GxsZimOTtJstaaSCi84Ku1H8+Dnl+fJ+G+q5903PN+uK0qGh5GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyQLHbcFaw5tVFHuJpvUs9CfGntMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS19BNVN1
yBbLyF5CBfJtzSJDsChRGLWSsmQAN2tx0gZFQeE1T5FqvO1yziDQxgT5GSkHPyPm
EUx+FtnemIJZO7oNtOz/X8Sdj2HH7LCsOW8r87feoDXAmkszjtCeeswQ3EUbv15z
rSIc9FaWCnHsai6CmXRRlbAA6wycsHv1weZkzjw4jFGFLzTL+dC6r7Mqh7kjMrBK
dLQsWL1XQAu9OPVzjRpz9fxOHiOND2gteFSjOeGqhxfjMpkJTbsdwGZqUPKhSo4f
/bd1eFZH4HlQ9f5RffL4tWImB+IEeH05fDmY/GrVrRfpkRu/OpvmlPteWLXtu85F
t5TYduM1DMGDKQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:28 2026 by rpki-client