This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json) Hash identifier: E+siR0nKuECIC6CgzURgeArbbjushFT4/8TI5iwfaBY= Subject key identifier: 1A:59:56:1F:F5:7A:C1:19:C4:6A:E3:58:55:AD:11:7D:5E:03:C7:BA Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f Certificate serial: 019BF875DB702B9CA2FA6562857890E02DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft Manifest number: 03FD Signing time: Mon 26 Jan 2026 04:00:31 +0000 Manifest this update: Mon 26 Jan 2026 04:00:31 +0000 Manifest next update: Tue 27 Jan 2026 04:00:31 +0000 Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=) 2: x33v7rF3QBlSIzExnIekzpn3DrI.roa (hash: g/UYMvAE3ypCM+rkZ1W9VYDV5Sdkmxjt7baXQZzeNL8=) 3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: VGFNWk7y/5+MjeZudqTmIIXcPvnoM3Rw4WIfGu8i1bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:db:70:2b:9c:a2:fa:65:62:85:78:90:e0:2d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f Validity Not Before: Jan 26 04:00:31 2026 GMT Not After : Jan 27 04:00:31 2026 GMT Subject: CN=1a59561ff57ac119c46ae35855ad117d5e03c7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:19:e6:e9:ac:47:5c:bf:21:f4:99:56:7b: 2f:f0:fa:59:f9:81:70:53:94:ab:08:56:55:48:e6: c4:eb:13:f8:56:04:16:fe:9b:15:46:0b:37:fa:72: b4:bf:d9:9d:5d:de:29:5a:95:2e:aa:a5:0b:62:7a: f0:26:4b:46:49:9b:d1:d2:b2:1c:b7:dd:e2:dd:1e: ab:40:8a:4d:ef:8a:b8:60:40:68:fa:40:51:e2:79: b8:dc:21:61:68:b7:ed:db:12:6f:0e:3b:41:4e:89: 66:97:93:68:ee:5f:a3:da:8c:92:dd:88:80:f5:69: f0:49:73:9b:20:c8:b9:cf:3f:4a:1c:b2:0e:94:1f: ce:cf:5e:81:ba:ff:10:25:bc:b1:85:ad:da:2c:6b: f8:ad:32:0e:d5:68:13:2d:31:2b:52:20:71:d8:e5: 5e:e1:29:c8:7e:fd:d0:2e:15:d5:8b:04:a7:73:5a: a4:73:04:3b:ce:41:6c:ae:52:af:45:b5:7e:e4:23: 71:5f:87:09:2b:5b:35:2a:32:c7:3a:c3:f6:13:ce: 95:97:d0:ef:05:6f:b7:63:e6:29:26:58:ae:51:f0: 70:1d:0e:0c:a4:ec:51:c5:34:95:25:6b:c7:d6:58: f4:07:3a:c0:4f:d8:fd:da:3d:fe:32:6d:5f:b5:1c: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:56:1F:F5:7A:C1:19:C4:6A:E3:58:55:AD:11:7D:5E:03:C7:BA X509v3 Authority Key Identifier: keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8b:0d:f6:58:e2:ba:1c:9c:70:f2:8b:79:8f:62:08:14:08: 75:79:c5:58:c4:49:db:22:8f:a6:3f:48:a4:42:fa:95:27:f2: 7f:f6:d7:c0:69:c1:48:fb:ad:2c:db:7f:6f:57:c8:45:c5:cb: d8:3d:dc:14:83:c7:54:e1:d8:21:7a:f1:fc:f8:18:68:bc:ef: de:29:e6:45:4d:e1:7e:59:c0:f6:b4:5f:03:73:4b:f0:57:91: 3a:10:0a:0f:35:9d:86:a9:16:78:07:fb:8c:0c:7c:85:f0:84: 38:c2:ce:21:b3:31:f6:c4:26:d9:57:10:a1:25:bb:10:a2:79: 05:54:32:71:e5:e3:7b:b9:19:43:9c:09:ab:2c:69:42:d2:23: ad:b4:3d:39:f3:67:99:d7:0d:5f:89:bf:5c:20:4b:10:29:96: d9:e6:00:82:f3:96:d6:91:cb:1e:c7:01:48:42:0f:be:42:95: 77:2b:a1:34:21:ac:ba:a2:10:cf:a8:f8:6a:76:ae:27:7b:f4: 49:a3:3b:5c:b3:6a:3b:5f:f1:af:c2:f7:8f:cb:6e:df:85:9c: 7a:2f:c3:33:58:f0:5d:22:f1:21:d9:ec:d3:bb:62:79:6a:5b: bb:c7:58:67:db:9e:cd:83:56:db:14:56:0a:df:c8:92:c1:71: f0:57:aa:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4ddtwK5yi+mVihXiQ4C2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2YwYWRhZWFmYjQwYzc3MjQ1OWU5MzkzNTRmNmJlNDUz ZjE1OGYwHhcNMjYwMTI2MDQwMDMxWhcNMjYwMTI3MDQwMDMxWjAzMTEwLwYDVQQD EygxYTU5NTYxZmY1N2FjMTE5YzQ2YWUzNTg1NWFkMTE3ZDVlMDNjN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8UZ5umsR1y/IfSZVnsv8PpZ+YFw U5SrCFZVSObE6xP4VgQW/psVRgs3+nK0v9mdXd4pWpUuqqULYnrwJktGSZvR0rIc t93i3R6rQIpN74q4YEBo+kBR4nm43CFhaLft2xJvDjtBTolml5No7l+j2oyS3YiA 9WnwSXObIMi5zz9KHLIOlB/Oz16Buv8QJbyxha3aLGv4rTIO1WgTLTErUiBx2OVe 4SnIfv3QLhXViwSnc1qkcwQ7zkFsrlKvRbV+5CNxX4cJK1s1KjLHOsP2E86Vl9Dv BW+3Y+YpJliuUfBwHQ4MpOxRxTSVJWvH1lj0BzrAT9j92j3+Mm1ftRwYNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpZVh/1esEZxGrjWFWtEX1eA8e6MB8GA1UdIwQY MBaAFMU/Ctrq+0DHckWek5NU9r5FPxWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzct NDYxN2NhMzc2MDgzLzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzctNDYxN2NhMzc2MDgz LzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIsN9lji uhyccPKLeY9iCBQIdXnFWMRJ2yKPpj9IpEL6lSfyf/bXwGnBSPutLNt/b1fIRcXL 2D3cFIPHVOHYIXrx/PgYaLzv3inmRU3hflnA9rRfA3NL8FeROhAKDzWdhqkWeAf7 jAx8hfCEOMLOIbMx9sQm2VcQoSW7EKJ5BVQyceXje7kZQ5wJqyxpQtIjrbQ9OfNn mdcNX4m/XCBLECmW2eYAgvOW1pHLHscBSEIPvkKVdyuhNCGsuqIQz6j4anauJ3v0 SaM7XLNqO1/xr8L3j8tu34Wcei/DM1jwXSLxIdns07tieWpbu8dYZ9uezYNW2xRW Ct/IksFx8Feq9g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:18 2026 by rpki-client