This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json) Hash identifier: T1fazyKnKWv2QzJzpx7KVTo7SZmyHh3f3pv8tUqa6zw= Subject key identifier: 82:58:B4:C0:E5:FB:3E:00:1A:ED:8F:65:CF:1D:63:79:0C:9A:55:46 Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Certificate serial: 019BF91B497694AA57252F86A501D74350FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft Manifest number: 02A0 Signing time: Mon 26 Jan 2026 07:01:13 +0000 Manifest this update: Mon 26 Jan 2026 07:01:13 +0000 Manifest next update: Tue 27 Jan 2026 07:01:13 +0000 Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=) 2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=) 3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: VH+ao45V8Sx29DJTONc0DUMLKN9y3qNnt+AjQVL1ZjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:49:76:94:aa:57:25:2f:86:a5:01:d7:43:50:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Validity Not Before: Jan 26 07:01:13 2026 GMT Not After : Jan 27 07:01:13 2026 GMT Subject: CN=8258b4c0e5fb3e001aed8f65cf1d63790c9a5546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:21:ad:25:9f:0e:86:33:f7:ed:55:0c:3b: 58:49:5b:f7:69:34:71:5f:29:c5:52:af:14:08:02: 4e:75:3b:8e:fe:40:d9:e9:74:2b:af:8e:a2:11:1c: a1:d9:37:bf:43:18:aa:56:c0:17:8c:e7:65:f8:07: 6b:ed:eb:5c:20:f4:92:0b:31:46:61:17:ac:13:05: 06:33:1b:6d:73:9f:14:11:59:22:1e:4b:7f:4b:04: 2f:3e:0e:5e:95:71:db:3f:c5:37:1a:3a:e1:ce:2f: 86:79:41:91:78:a9:ee:53:09:cb:3f:71:05:f5:05: ed:74:19:61:19:5a:a4:17:e2:50:54:39:ce:4a:cc: 17:1c:f6:f6:91:49:76:12:af:65:97:24:63:3a:04: 45:16:88:47:53:0e:aa:e1:d8:40:60:f7:e6:85:22: eb:41:fa:0b:f5:ad:dc:89:d5:4e:65:2a:cc:bb:31: e0:6b:96:eb:88:58:84:6f:39:50:27:26:63:db:9a: e9:44:fc:2f:dd:1e:d4:b0:9e:73:c4:82:3e:88:7d: 9a:86:7b:85:fd:45:fa:f6:86:f3:89:c9:d7:85:e2: f6:23:2e:4b:78:13:3c:2b:33:c9:bc:af:5e:fd:00: 7f:5d:2d:57:1b:58:4f:b0:e0:fc:45:74:87:0a:20: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:B4:C0:E5:FB:3E:00:1A:ED:8F:65:CF:1D:63:79:0C:9A:55:46 X509v3 Authority Key Identifier: keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ca:c9:15:3e:cb:95:d1:d3:01:83:52:7b:0c:9b:0b:d0:28: 2d:ad:dd:a4:49:09:f1:f5:93:3e:54:5b:a3:9f:65:d7:6b:f9: 20:d5:4a:47:8c:8e:21:d1:c7:a3:a7:de:c3:35:b9:96:f2:7f: 34:2e:a1:75:f4:d9:c1:a6:13:c4:7d:5e:1b:5a:bd:f5:c2:b6: 8e:b7:8d:36:b3:25:bd:8c:3e:94:e5:3c:81:6c:28:78:d9:a5: c4:5d:64:62:00:c6:7e:30:49:10:ef:8d:69:9b:65:4f:5a:a7: d9:f4:63:a3:9f:1c:54:38:dd:89:ef:60:15:a6:1f:13:06:1f: dd:8a:0b:0c:b9:d8:29:7d:65:b8:c0:6d:9b:f8:b4:84:b9:65: 56:97:2c:93:d8:66:c0:0a:5d:e2:d7:d9:c2:59:07:c7:14:91: 6e:96:93:b4:68:a4:16:b3:21:39:80:f5:ab:28:8d:0e:da:cc: f2:59:20:47:aa:38:e5:03:f9:cf:42:0f:f1:9f:d2:82:8e:32: 5e:9a:39:77:ce:6d:69:b1:75:e4:0b:41:f4:7a:d5:51:f3:4c: 6e:ab:5a:81:50:c2:28:81:a1:02:3a:67:bb:e3:d1:25:51:48: 74:88:67:f5:e1:ce:59:dc:92:57:40:04:87:6d:77:4b:cf:82: 0c:34:c0:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G0l2lKpXJS+GpQHXQ1D/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm MWUwNGMwHhcNMjYwMTI2MDcwMTEzWhcNMjYwMTI3MDcwMTEzWjAzMTEwLwYDVQQD Eyg4MjU4YjRjMGU1ZmIzZTAwMWFlZDhmNjVjZjFkNjM3OTBjOWE1NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgghrSWfDoYz9+1VDDtYSVv3aTRx XynFUq8UCAJOdTuO/kDZ6XQrr46iERyh2Te/QxiqVsAXjOdl+Adr7etcIPSSCzFG YResEwUGMxttc58UEVkiHkt/SwQvPg5elXHbP8U3Gjrhzi+GeUGReKnuUwnLP3EF 9QXtdBlhGVqkF+JQVDnOSswXHPb2kUl2Eq9llyRjOgRFFohHUw6q4dhAYPfmhSLr QfoL9a3cidVOZSrMuzHga5briFiEbzlQJyZj25rpRPwv3R7UsJ5zxII+iH2ahnuF /UX69obzicnXheL2Iy5LeBM8KzPJvK9e/QB/XS1XG1hPsOD8RXSHCiBrWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJYtMDl+z4AGu2PZc8dY3kMmlVGMB8GA1UdIwQY MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt ZmRkM2E4MTVhYmI4LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4 LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcrJFT7L ldHTAYNSewybC9AoLa3dpEkJ8fWTPlRbo59l12v5INVKR4yOIdHHo6fewzW5lvJ/ NC6hdfTZwaYTxH1eG1q99cK2jreNNrMlvYw+lOU8gWwoeNmlxF1kYgDGfjBJEO+N aZtlT1qn2fRjo58cVDjdie9gFaYfEwYf3YoLDLnYKX1luMBtm/i0hLllVpcsk9hm wApd4tfZwlkHxxSRbpaTtGikFrMhOYD1qyiNDtrM8lkgR6o45QP5z0IP8Z/Sgo4y Xpo5d85tabF15AtB9HrVUfNMbqtagVDCKIGhAjpnu+PRJVFIdIhn9eHOWdySV0AE h213S8+CDDTAjA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:02 2026 by rpki-client