This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File: Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier: SU6Jh0GRz0RnrFnfsXEw+5u73uDAM/Y0xXn44e/MUnM=
Subject key identifier: 10:0A:C8:69:F6:84:0F:0D:4F:66:43:A5:8D:C2:4A:10:2F:87:BF:4D
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 019BF61A0F4B3AF2435CF3D0533A484F73E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 17:01:01 +0000
Manifest this update: Sun 25 Jan 2026 17:01:01 +0000
Manifest next update: Mon 26 Jan 2026 17:01:01 +0000
Files and hashes: 1: 4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa (hash: +7cyCy/NdgEzdqXIvMYXBG6PX6qWy1L3JHGAtDMeS30=)
2: IVJmRlo_N7uujpHOQ1PY0oGuwPE.roa (hash: HId6QIpCvryq7pzO2cSpzlsjWi8B2cu2NyD1dmCRRqc=)
3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: 9Cco7ntLBj9VUBEYVgFLRM5UA9sZTOt/nwqA9pp0wmI=)
4: YU7DQQUK3WS2GF1fwXGzic4CVRE.roa (hash: 5Kaf0g8MgSwJ+dws3X5JQrcvkrcgCUQzsjR1OpBYhtw=)
5: cJHyNL6n_BStyxq8HQ3hJvNAMq4.roa (hash: V4roFS8vi9SUabC+vIIX/fQMu7+uk5jkREg7A/YHemc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:1a:0f:4b:3a:f2:43:5c:f3:d0:53:3a:48:4f:73:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Jan 25 17:01:01 2026 GMT
Not After : Jan 26 17:01:01 2026 GMT
Subject: CN=100ac869f6840f0d4f6643a58dc24a102f87bf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:8f:d4:00:f0:d6:6d:6b:b0:68:af:a4:86:
c6:9e:84:cf:90:6c:2d:e4:ac:6d:7d:38:0b:51:b0:
7e:bc:3a:e5:a5:45:0a:f8:3e:98:6b:39:54:e6:05:
51:b2:e0:dd:84:b4:91:c5:26:0f:98:7b:c8:df:8e:
5c:27:0b:c4:51:5b:ed:fb:11:e4:d4:b8:0f:cc:43:
c5:03:24:8a:af:8d:f1:ef:5b:c8:b2:71:5c:17:08:
23:4e:2b:44:c6:9f:97:11:3f:21:d8:f0:51:0a:ec:
0c:e7:13:fd:73:b1:7b:e8:43:14:7e:64:84:9e:5d:
5f:5a:ab:d9:cd:42:79:67:cd:e9:58:63:29:c0:a4:
26:e9:45:cf:16:ed:e9:39:7c:4b:3e:12:a2:3e:fb:
53:f1:1e:dc:45:37:6f:68:6f:70:21:3e:b2:15:20:
7e:94:f7:6d:77:f0:00:61:4b:25:b2:3a:44:1d:c0:
22:86:6c:e1:7b:75:23:41:9a:a3:9c:e1:81:7b:23:
0d:28:ae:a0:5d:f4:fd:b8:9e:55:c9:9f:ce:6b:55:
2f:a8:cd:02:fd:6a:ad:0c:af:6b:cb:52:d0:31:50:
a6:34:36:ff:e9:60:38:63:a8:fd:c4:eb:1f:d7:cf:
8a:84:a5:d5:14:62:31:4a:2d:05:b2:78:55:fb:8d:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:C8:69:F6:84:0F:0D:4F:66:43:A5:8D:C2:4A:10:2F:87:BF:4D
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:07:00:27:35:03:ec:de:ce:6e:68:5f:69:c3:48:0b:7c:2c:
1a:b9:29:ab:7e:28:b5:12:f9:25:4e:fd:78:94:6c:b0:fe:1a:
05:4e:f6:b5:73:e2:a3:02:d6:c3:ae:9a:f8:b3:b3:ef:33:c0:
fc:7b:97:6d:af:f3:c1:33:02:6f:5e:4d:0b:04:eb:18:b6:80:
ad:41:8b:76:cd:79:02:52:80:72:51:c4:81:c0:f2:37:6a:3c:
28:12:5b:1f:2c:99:c8:a4:eb:e6:9a:3d:60:97:bc:ba:a8:bf:
47:2c:66:4c:37:e3:fd:b5:5f:4b:3e:16:42:1b:ee:4b:8e:f3:
bd:b1:e0:28:aa:65:62:69:04:50:33:df:03:f7:1f:a2:1f:8d:
ba:17:6a:44:e2:66:7c:5e:77:a8:76:20:3c:a8:fe:e4:00:70:
ff:48:dd:26:b8:7e:73:70:45:19:3c:e7:71:57:37:1c:2e:f1:
a1:90:19:bf:cc:8c:8a:84:48:e0:8a:fe:7a:2a:ec:c5:c9:96:
c1:50:9f:2d:14:80:b6:be:d0:ae:b2:73:3e:ee:e4:d2:a7:9c:
34:80:54:91:f4:ce:65:bc:14:9e:ae:71:9f:1a:30:70:d7:5b:
ee:2f:01:90:b6:e0:ef:b7:5d:96:aa:cd:63:62:e6:74:85:50:
f4:d9:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:15 2026 by rpki-client