This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json) Hash identifier: e+YhBG2ZB/yd0gd60FEbdzEWXXiOpm3aXiSYFTMXHxM= Subject key identifier: 01:B8:7D:6C:49:F1:7A:49:AA:8C:75:A3:F9:A5:B8:67:8F:E3:BE:06 Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5 Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5 Certificate serial: 019BF6F5CABA7F83409CE2F10478F7317391 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft Manifest number: 0C21 Signing time: Sun 25 Jan 2026 21:01:01 +0000 Manifest this update: Sun 25 Jan 2026 21:01:01 +0000 Manifest next update: Mon 26 Jan 2026 21:01:01 +0000 Files and hashes: 1: jBvSHulkiAFNZq-1Sz_1NBwC4gw.roa (hash: kIr3tsaXSv0n1HwqnJcooiylPmXgSiBfGD9CqML14GU=) 2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: VIc/BE6iuzSQpH36Az4mJX7wX2ABGqLrMgUKqkoYIfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:ca:ba:7f:83:40:9c:e2:f1:04:78:f7:31:73:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5 Validity Not Before: Jan 25 21:01:01 2026 GMT Not After : Jan 26 21:01:01 2026 GMT Subject: CN=01b87d6c49f17a49aa8c75a3f9a5b8678fe3be06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:f4:3d:e0:83:c6:ef:64:eb:1b:25:7b:90: 5e:f2:f7:5d:0f:b1:c5:7d:95:64:16:15:81:35:ee: 1f:8d:72:e2:c7:b8:11:63:91:a3:7b:14:9f:56:fd: 41:5f:3a:6d:86:c8:ea:3c:84:f7:b6:95:ab:9e:d0: 3b:d5:d4:5f:53:fb:89:bd:dc:05:89:60:f9:68:98: 64:e4:9d:71:9d:e0:68:df:ab:95:9f:84:fc:6f:37: c5:9b:42:ee:55:fb:0c:2f:10:08:9d:54:39:2a:f8: 1d:12:7f:ee:f5:85:6d:f5:6b:19:49:8b:92:96:57: 45:bb:0e:5d:71:fd:ce:54:3b:4a:28:8f:fd:04:1c: ae:bd:83:00:79:62:a0:fe:2d:5f:66:b7:20:fd:54: 78:b5:b4:0f:18:ab:c9:de:55:21:34:ea:52:90:ab: 25:94:92:55:34:0f:45:e8:81:d5:83:13:af:10:b0: 85:50:bf:58:2a:85:b1:ac:47:34:e0:be:77:f1:80: 72:75:cf:81:56:bc:9e:8a:81:3b:c7:a3:da:15:c4: 24:a4:24:38:b2:a7:a5:3d:26:b6:30:1b:63:c8:bd: c7:99:bd:f9:d7:ff:ed:8a:68:59:fd:26:38:7d:9f: 49:d3:da:ff:c5:35:fa:55:57:1f:71:70:33:0d:48: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:7D:6C:49:F1:7A:49:AA:8C:75:A3:F9:A5:B8:67:8F:E3:BE:06 X509v3 Authority Key Identifier: keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2c:b9:96:a6:1e:67:8b:ec:dd:33:1b:2c:5c:6e:0e:9e:c9: 8a:27:3e:c8:47:91:c0:8a:73:f1:67:1a:65:40:16:80:c4:3b: a7:a1:96:10:56:25:99:a4:01:61:01:5b:8d:e1:da:cd:ad:4d: 65:ab:0e:be:f5:e0:d6:73:0b:fc:7b:b8:f7:80:46:2e:85:2d: 1e:3e:c9:13:7e:31:64:13:5c:0a:17:63:c8:28:ca:e6:35:a4: d9:8f:44:b8:6a:19:6d:8b:79:f8:73:7c:65:b9:1d:79:c8:7f: 60:93:44:2f:ab:06:f2:de:af:06:3f:2b:c9:32:8f:c9:f3:57: d4:89:2f:c3:b1:56:68:ae:ac:40:ec:a9:ce:94:99:09:ac:99: 34:0b:d3:80:14:82:07:65:56:f0:61:cb:0b:36:8d:e1:c6:ae: 1b:49:28:77:ee:ba:d7:2a:45:29:d2:6a:68:1e:47:81:71:1c: 52:70:7c:10:6f:ee:2c:65:a5:81:2c:b7:c8:76:7f:28:09:c3: 92:f6:a1:61:71:85:5b:ae:f6:e5:5e:41:13:6f:bb:9a:c7:59: 26:5d:e0:04:39:28:53:9d:97:10:ab:04:f9:51:04:cf:42:01: 31:25:85:c3:61:ba:35:77:24:ee:d5:08:27:03:53:c7:59:dc: 40:f7:ca:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cq6f4NAnOLxBHj3MXORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmZhNzFhNTExM2ZlZDgyNDY0Nzc2YzE0MzcxNTE0Yzky MThlZjUwHhcNMjYwMTI1MjEwMTAxWhcNMjYwMTI2MjEwMTAxWjAzMTEwLwYDVQQD EygwMWI4N2Q2YzQ5ZjE3YTQ5YWE4Yzc1YTNmOWE1Yjg2NzhmZTNiZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL70PeCDxu9k6xsle5Be8vddD7HF fZVkFhWBNe4fjXLix7gRY5GjexSfVv1BXzpthsjqPIT3tpWrntA71dRfU/uJvdwF iWD5aJhk5J1xneBo36uVn4T8bzfFm0LuVfsMLxAInVQ5KvgdEn/u9YVt9WsZSYuS lldFuw5dcf3OVDtKKI/9BByuvYMAeWKg/i1fZrcg/VR4tbQPGKvJ3lUhNOpSkKsl lJJVNA9F6IHVgxOvELCFUL9YKoWxrEc04L538YBydc+BVryeioE7x6PaFcQkpCQ4 sqelPSa2MBtjyL3Hmb351//timhZ/SY4fZ9J09r/xTX6VVcfcXAzDUhPEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG4fWxJ8XpJqox1o/mluGeP474GMB8GA1UdIwQY MBaAFMW/pxpRE/7YJGR3bBQ3FRTJIY71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYt NmZjZTAzMzI1YjNmLzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYtNmZjZTAzMzI1YjNm LzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSy5lqYe Z4vs3TMbLFxuDp7Jiic+yEeRwIpz8WcaZUAWgMQ7p6GWEFYlmaQBYQFbjeHaza1N ZasOvvXg1nML/Hu494BGLoUtHj7JE34xZBNcChdjyCjK5jWk2Y9EuGoZbYt5+HN8 Zbkdech/YJNEL6sG8t6vBj8ryTKPyfNX1Ikvw7FWaK6sQOypzpSZCayZNAvTgBSC B2VW8GHLCzaN4cauG0kod+661ypFKdJqaB5HgXEcUnB8EG/uLGWlgSy3yHZ/KAnD kvahYXGFW6725V5BE2+7msdZJl3gBDkoU52XEKsE+VEEz0IBMSWFw2G6NXck7tUI JwNTx1ncQPfKxA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:10 2026 by rpki-client