This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json) Hash identifier: mjvu2RB+wB6mw9VFzexQkxkQl2s+mmP9vP492bfo5+U= Subject key identifier: D3:D8:3B:5A:9B:92:50:FA:4B:A3:18:BD:9E:BE:6D:8D:C1:4B:6A:A6 Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Certificate serial: 019BF462B3518D11D1CD971655438356C144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft Manifest number: 1B0B Signing time: Sun 25 Jan 2026 09:01:07 +0000 Manifest this update: Sun 25 Jan 2026 09:01:07 +0000 Manifest next update: Mon 26 Jan 2026 09:01:07 +0000 Files and hashes: 1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=) 2: I8EbUpo56cW6PBHTlLLAzERiCLc.roa (hash: OS9enZs5RVrVACQZ5f3cEtqGQ+dbzVXrwatNacEzYmc=) 3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: jvrJFIykUeqo/sjtslD+QyYspQnYRUiMSh3sAe6ecNk=) 4: f0VpGBfzfujxzG4IGdp45FZmizA.roa (hash: 5sjrk2HuDlCf3T4gMWly/UMVJ4/Ejp2wnyW6QpEbKg8=) 5: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=) 6: rv93sGpepgMvpbLLUnbz_MG05qE.roa (hash: 93H5WBBSWHM9Qz9lpT3RptO21v729gsrymFRvjkF+2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:b3:51:8d:11:d1:cd:97:16:55:43:83:56:c1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Validity Not Before: Jan 25 09:01:07 2026 GMT Not After : Jan 26 09:01:07 2026 GMT Subject: CN=d3d83b5a9b9250fa4ba318bd9ebe6d8dc14b6aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:4b:5f:7f:73:06:4d:3e:a6:73:20:bf:e6: 6b:8f:cc:ca:cf:c1:e7:2c:f6:e9:0b:97:8b:9e:ac: 95:ee:93:08:94:8a:ee:4a:e7:06:b0:b9:7f:c5:3e: 3a:48:87:3e:95:ac:6b:86:7a:95:f8:0e:72:1a:38: 1f:08:ee:e8:0a:52:96:8b:d4:52:74:c6:d0:7e:35: 8c:1a:38:19:21:9d:cd:a1:be:09:b2:76:9a:97:ed: 82:98:c2:e7:2b:6c:54:3c:e1:31:63:25:e8:28:c7: fc:dd:d0:1a:86:3f:e9:b9:d9:b3:4e:41:5b:a7:e3: 84:ce:4a:37:49:cb:89:63:8d:92:a3:ed:db:5a:92: a8:9c:3b:62:7f:38:75:3d:7c:63:10:15:19:54:d6: 58:49:34:93:08:ad:57:6b:f3:c5:7e:34:c1:ea:85: 51:2f:d0:6d:dc:8c:64:95:f9:83:e5:78:db:88:37: e8:48:a5:82:95:6a:6d:05:64:9c:89:cc:82:d4:28: 81:1c:18:f3:22:86:34:1b:25:56:9c:64:88:aa:c4: bb:38:cc:1e:0a:08:61:13:be:03:c6:9e:63:9b:eb: 1b:e0:f0:b9:a1:bb:ff:36:db:69:2f:9d:83:2b:e2: 2d:02:e5:79:a3:0d:03:93:43:7c:ab:ce:9c:c0:27: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D8:3B:5A:9B:92:50:FA:4B:A3:18:BD:9E:BE:6D:8D:C1:4B:6A:A6 X509v3 Authority Key Identifier: keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a6:84:d5:56:75:80:07:cf:45:a6:b9:24:fe:e3:69:76:58: 13:34:84:b4:c6:71:ef:67:2b:fe:19:ff:73:38:bf:17:1b:d6: ae:c7:6d:bc:af:50:81:f5:e1:f1:96:2c:06:f5:cc:df:2f:82: 1a:46:b0:f9:20:30:d9:ec:8c:fc:5c:c3:9c:92:a9:e6:70:94: 12:50:c6:49:f1:83:47:a5:80:2c:4f:40:26:86:b4:d2:d9:25: 1a:fe:c5:d0:f7:02:dd:82:ee:47:f6:c4:f3:31:b7:a6:f1:12: c4:83:30:13:46:6c:64:e0:49:45:57:c3:ae:39:2f:04:c4:63: e0:de:8f:9a:bc:8c:db:94:0b:2c:33:be:7c:90:42:83:4c:42: 2d:c5:61:ef:2a:2b:f7:80:82:52:27:60:85:be:c9:03:65:59: 72:55:c7:40:5a:88:15:ac:15:f2:11:26:8c:3f:ea:e6:6b:1b: 46:14:56:cb:cd:92:04:a0:26:29:1d:2e:fe:96:93:60:dc:75: 51:26:3c:04:ac:da:b6:00:f9:4d:80:99:e0:8d:0d:2c:75:ef: 14:73:9c:cf:67:d8:bc:22:7a:62:07:20:60:39:d2:1f:17:e4: 5d:89:8c:07:35:67:3c:98:4c:83:a7:a7:2b:13:ab:e7:cd:cb: f8:96:79:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YrNRjRHRzZcWVUODVsFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk ZjNlMWUwHhcNMjYwMTI1MDkwMTA3WhcNMjYwMTI2MDkwMTA3WjAzMTEwLwYDVQQD EyhkM2Q4M2I1YTliOTI1MGZhNGJhMzE4YmQ5ZWJlNmQ4ZGMxNGI2YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzBLX39zBk0+pnMgv+Zrj8zKz8Hn LPbpC5eLnqyV7pMIlIruSucGsLl/xT46SIc+laxrhnqV+A5yGjgfCO7oClKWi9RS dMbQfjWMGjgZIZ3Nob4Jsnaal+2CmMLnK2xUPOExYyXoKMf83dAahj/pudmzTkFb p+OEzko3ScuJY42So+3bWpKonDtifzh1PXxjEBUZVNZYSTSTCK1Xa/PFfjTB6oVR L9Bt3IxklfmD5XjbiDfoSKWClWptBWScicyC1CiBHBjzIoY0GyVWnGSIqsS7OMwe CghhE74Dxp5jm+sb4PC5obv/NttpL52DK+ItAuV5ow0Dk0N8q86cwCdvkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPYO1qbklD6S6MYvZ6+bY3BS2qmMB8GA1UdIwQY MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt YjU5MDk1N2Q5NDE1LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1 LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqaE1VZ1 gAfPRaa5JP7jaXZYEzSEtMZx72cr/hn/czi/FxvWrsdtvK9QgfXh8ZYsBvXM3y+C Gkaw+SAw2eyM/FzDnJKp5nCUElDGSfGDR6WALE9AJoa00tklGv7F0PcC3YLuR/bE 8zG3pvESxIMwE0ZsZOBJRVfDrjkvBMRj4N6PmryM25QLLDO+fJBCg0xCLcVh7yor 94CCUidghb7JA2VZclXHQFqIFawV8hEmjD/q5msbRhRWy82SBKAmKR0u/paTYNx1 USY8BKzatgD5TYCZ4I0NLHXvFHOcz2fYvCJ6YgcgYDnSHxfkXYmMBzVnPJhMg6en KxOr583L+JZ5xA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:27:24 2026 by rpki-client