This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json) Hash identifier: YGoQ1vhQt7LH+leCXBCUF3gL5S1BkIO7QZ9Ph+Qso3s= Subject key identifier: 53:00:AE:C1:DE:84:F9:CC:FD:89:2B:46:A4:69:42:DE:A4:DE:8B:F6 Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Certificate serial: 019BF4D0A994A6A4B40168BFCB21764CB54E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft Manifest number: 14EF Signing time: Sun 25 Jan 2026 11:01:13 +0000 Manifest this update: Sun 25 Jan 2026 11:01:13 +0000 Manifest next update: Mon 26 Jan 2026 11:01:13 +0000 Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=) 2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=) 3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=) 4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=) 5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: 3lBIVlp14uJ7lyMtqqWflRKUrooHS9t2p+0w1T8FRQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:a9:94:a6:a4:b4:01:68:bf:cb:21:76:4c:b5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Validity Not Before: Jan 25 11:01:13 2026 GMT Not After : Jan 26 11:01:13 2026 GMT Subject: CN=5300aec1de84f9ccfd892b46a46942dea4de8bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:21:bc:92:aa:f7:5c:cd:3f:65:5e:4c:53: 46:e0:d8:29:fb:fc:fe:cb:99:c9:b8:3f:8c:49:3d: 87:f9:52:b8:aa:8b:0f:5f:5c:7f:b2:7e:08:7c:ac: ba:8e:8a:e4:97:57:74:b4:7a:42:6f:06:24:d4:44: e7:23:6a:1a:02:8b:a2:55:d5:7c:20:cb:97:42:8b: 7c:f0:05:46:ab:cb:bf:7e:00:d8:ac:15:48:c6:6a: d8:bd:e5:36:ce:93:6a:ea:28:7c:3a:1e:f4:4d:46: e0:09:24:3a:47:f3:70:77:a0:f9:b9:63:70:0b:d0: 5d:af:dd:07:4f:71:c9:81:46:9a:85:da:f9:8c:10: 68:b3:5c:a6:2c:8b:16:db:6c:62:0a:e8:bf:f9:70: 3f:18:9a:29:4b:14:1a:f6:27:80:b1:a2:20:7d:d1: 12:8c:d6:68:67:c0:19:70:32:a8:d0:f3:09:93:68: 10:75:50:ca:75:41:5d:dc:ed:ad:00:c4:12:2d:fc: f4:0e:78:0d:e4:14:68:8c:fb:39:6a:00:29:65:be: f9:16:01:ae:c0:7b:d4:f4:62:19:43:d3:84:c8:d9: 62:63:6c:6b:56:d9:60:5f:4f:e9:af:5c:67:15:88: 1b:24:2a:7d:6f:f8:76:bd:0b:a2:bd:24:3b:4a:b7: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:00:AE:C1:DE:84:F9:CC:FD:89:2B:46:A4:69:42:DE:A4:DE:8B:F6 X509v3 Authority Key Identifier: keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:86:6e:f5:3b:ea:e1:38:d1:4c:6e:38:cb:ea:1c:0b:9c:46: 97:8c:c6:90:3a:7d:87:f4:bf:2c:1a:d8:07:31:59:e9:05:b8: 16:8e:22:8c:e5:87:86:9c:40:00:c0:3f:59:7c:d0:29:24:b0: f5:df:bc:a8:c3:6e:a5:44:19:bd:62:37:81:fc:40:27:4c:52: 89:30:e7:ee:6f:51:0d:7b:ea:e0:cc:6b:d0:38:cb:06:44:73: c4:01:c1:a6:de:ea:79:6d:e5:b0:d3:1e:80:e1:94:38:80:4a: e5:50:ae:78:90:80:f1:35:f8:e1:6a:12:b3:91:e9:1f:aa:f0: ed:2c:f0:9c:a1:e7:63:8a:00:50:9a:42:b0:03:ec:bf:2d:b1: e5:79:57:5d:49:9b:1d:a0:cf:70:0f:95:04:38:01:b9:1b:6b: 06:d0:9b:4f:6f:3c:9d:4e:a2:36:75:80:73:6e:fe:ba:c2:df: 99:d8:26:e2:3d:2b:3f:5d:94:fd:f8:42:ae:b1:2d:c3:20:1d: 08:1a:5b:b7:04:9c:63:19:b9:dc:87:19:15:5c:c9:c1:17:10: 8b:06:53:a9:cc:7a:b0:ec:58:32:bf:f7:aa:52:a3:a1:c6:e0: 3f:ad:14:1d:d2:2d:9c:93:c3:48:7f:09:01:1e:cf:67:78:65: c7:26:a0:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00KmUpqS0AWi/yyF2TLVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz NGI1ZDEwHhcNMjYwMTI1MTEwMTEzWhcNMjYwMTI2MTEwMTEzWjAzMTEwLwYDVQQD Eyg1MzAwYWVjMWRlODRmOWNjZmQ4OTJiNDZhNDY5NDJkZWE0ZGU4YmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNshvJKq91zNP2VeTFNG4Ngp+/z+ y5nJuD+MST2H+VK4qosPX1x/sn4IfKy6jorkl1d0tHpCbwYk1ETnI2oaAouiVdV8 IMuXQot88AVGq8u/fgDYrBVIxmrYveU2zpNq6ih8Oh70TUbgCSQ6R/Nwd6D5uWNw C9Bdr90HT3HJgUaahdr5jBBos1ymLIsW22xiCui/+XA/GJopSxQa9ieAsaIgfdES jNZoZ8AZcDKo0PMJk2gQdVDKdUFd3O2tAMQSLfz0DngN5BRojPs5agApZb75FgGu wHvU9GIZQ9OEyNliY2xrVtlgX0/pr1xnFYgbJCp9b/h2vQuivSQ7SrcGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMArsHehPnM/YkrRqRpQt6k3ov2MB8GA1UdIwQY MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1 LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4Zu9Tvq 4TjRTG44y+ocC5xGl4zGkDp9h/S/LBrYBzFZ6QW4Fo4ijOWHhpxAAMA/WXzQKSSw 9d+8qMNupUQZvWI3gfxAJ0xSiTDn7m9RDXvq4Mxr0DjLBkRzxAHBpt7qeW3lsNMe gOGUOIBK5VCueJCA8TX44WoSs5HpH6rw7SzwnKHnY4oAUJpCsAPsvy2x5XlXXUmb HaDPcA+VBDgBuRtrBtCbT288nU6iNnWAc27+usLfmdgm4j0rP12U/fhCrrEtwyAd CBpbtwScYxm53IcZFVzJwRcQiwZTqcx6sOxYMr/3qlKjocbgP60UHdItnJPDSH8J AR7PZ3hlxyagTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:01:36 2026 by rpki-client