This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json) Hash identifier: CpZ7f0rt0MbrIiGC9129V5oc1EoGV8ixKRC2OnuZs/Y= Subject key identifier: 70:89:DF:D1:E2:0A:3E:17:89:F1:6A:82:D1:91:64:21:64:F4:21:CF Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa Certificate serial: 019BF53E048DBB86899D408CEDD9EA24D54D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft Manifest number: 1501 Signing time: Sun 25 Jan 2026 13:00:40 +0000 Manifest this update: Sun 25 Jan 2026 13:00:40 +0000 Manifest next update: Mon 26 Jan 2026 13:00:40 +0000 Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=) 2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=) 3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: AzV5HxdzWTr0rzcYLBg5yG7ogmK6P/1upl5FWp8mtKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:04:8d:bb:86:89:9d:40:8c:ed:d9:ea:24:d5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c679522eb892589d7364af579a724040e929f0aa Validity Not Before: Jan 25 13:00:40 2026 GMT Not After : Jan 26 13:00:40 2026 GMT Subject: CN=7089dfd1e20a3e1789f16a82d191642164f421cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:50:6d:1d:26:59:26:a7:4b:d2:e0:ce:94: 62:70:78:11:15:1b:0c:77:a2:dd:af:ef:41:c9:52: 90:4c:82:74:e3:ed:df:d8:e6:98:66:3b:14:52:51: db:49:5c:95:41:55:83:16:d0:4d:bf:98:26:92:7a: c9:ba:e6:d9:40:ef:7d:58:38:7b:38:8d:37:70:b7: d3:a8:bb:e3:57:95:fa:ae:aa:d5:3f:25:21:51:12: 20:b0:d9:9a:c4:47:b2:f9:e8:2e:59:26:53:07:55: 4f:38:01:4a:9e:98:17:54:4a:65:4d:3c:de:ea:fe: d2:b6:0d:ac:c9:b8:c4:55:9d:b2:a5:de:3b:1e:39: fc:1c:76:19:aa:9d:1c:3d:e0:1a:f4:98:ca:9d:8a: 17:a4:8a:b4:c3:f1:43:0a:22:e5:89:8f:fc:bb:0e: 3a:2f:9b:2d:48:8e:a1:30:cc:d2:6f:2b:24:cd:2e: 64:ae:a0:e5:12:39:01:7b:61:d6:1c:98:ab:ac:36: 95:90:34:8e:1d:36:b1:ce:fd:82:6b:e5:02:d9:f1: 45:6e:c2:ab:73:4d:7d:8f:ee:50:e8:9c:26:08:c8: 27:ed:45:05:3e:41:68:30:df:2e:b0:76:ac:cb:67: c0:56:0e:f6:c6:7c:46:00:b4:00:2f:27:48:c1:8e: 4d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:89:DF:D1:E2:0A:3E:17:89:F1:6A:82:D1:91:64:21:64:F4:21:CF X509v3 Authority Key Identifier: keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:03:67:6f:22:c1:36:2f:3c:31:73:b8:ce:f2:f2:b5:32:e6: 3b:2e:9c:bf:29:95:f4:67:f0:20:eb:6d:73:db:af:f0:c2:64: 85:9a:88:f1:ef:80:52:25:74:5b:2e:c3:90:c3:35:d5:b1:4c: 2a:63:34:13:8c:81:2e:87:71:f5:16:49:f1:c2:2d:b6:08:6d: 26:2b:03:0e:b3:1f:87:e2:05:94:c6:e9:10:af:97:7c:7d:c6: 32:f1:9a:a3:75:65:ea:a6:6d:d3:ca:0e:aa:49:e0:96:ac:ad: c5:8b:e6:02:ae:3c:1a:72:de:5e:15:b2:3a:7c:2d:1e:1b:e4: db:86:b2:96:86:40:0c:4b:99:a0:7e:a6:d6:b5:43:7e:c3:0b: df:e5:ab:61:2d:2c:b2:5b:15:42:eb:c3:78:83:7b:c8:4c:9d: ca:ff:cb:68:37:02:2b:0b:6a:2e:de:81:16:50:a5:48:e8:5b: 71:7d:ea:df:0a:84:64:e0:a1:98:8b:83:d1:fe:3d:04:c2:ec: bf:e7:be:09:52:25:f1:93:f9:ba:51:11:04:26:f7:e7:33:ca: c5:fa:d0:c1:1c:5f:5c:03:79:aa:fd:54:e5:dd:1d:6e:19:60: a8:d4:24:7f:0e:10:37:9f:9f:c4:af:bb:f6:b3:8e:a3:94:d5: a7:34:1b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgSNu4aJnUCM7dnqJNVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky OWYwYWEwHhcNMjYwMTI1MTMwMDQwWhcNMjYwMTI2MTMwMDQwWjAzMTEwLwYDVQQD Eyg3MDg5ZGZkMWUyMGEzZTE3ODlmMTZhODJkMTkxNjQyMTY0ZjQyMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6VQbR0mWSanS9LgzpRicHgRFRsM d6Ldr+9ByVKQTIJ04+3f2OaYZjsUUlHbSVyVQVWDFtBNv5gmknrJuubZQO99WDh7 OI03cLfTqLvjV5X6rqrVPyUhURIgsNmaxEey+eguWSZTB1VPOAFKnpgXVEplTTze 6v7Stg2sybjEVZ2ypd47Hjn8HHYZqp0cPeAa9JjKnYoXpIq0w/FDCiLliY/8uw46 L5stSI6hMMzSbyskzS5krqDlEjkBe2HWHJirrDaVkDSOHTaxzv2Ca+UC2fFFbsKr c019j+5Q6JwmCMgn7UUFPkFoMN8usHasy2fAVg72xnxGALQALydIwY5N0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCJ39HiCj4XifFqgtGRZCFk9CHPMB8GA1UdIwQY MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt ZGMxMGQ1ZDNiZDgwLzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgNnbyLB Ni88MXO4zvLytTLmOy6cvymV9GfwIOttc9uv8MJkhZqI8e+AUiV0Wy7DkMM11bFM KmM0E4yBLodx9RZJ8cIttghtJisDDrMfh+IFlMbpEK+XfH3GMvGao3Vl6qZt08oO qknglqytxYvmAq48GnLeXhWyOnwtHhvk24ayloZADEuZoH6m1rVDfsML3+WrYS0s slsVQuvDeIN7yEydyv/LaDcCKwtqLt6BFlClSOhbcX3q3wqEZOChmIuD0f49BMLs v+e+CVIl8ZP5ulERBCb35zPKxfrQwRxfXAN5qv1U5d0dbhlgqNQkfw4QN5+fxK+7 9rOOo5TVpzQbQA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:25:04 2026 by rpki-client