This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json) Hash identifier: mwOu5uB3VvgSL/rmq8qeTJcZmuQSunkYNvqXAzHnZnw= Subject key identifier: A0:84:42:14:ED:51:74:49:90:0F:8C:FB:18:26:07:B8:9A:ED:DE:96 Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7 Certificate serial: 019BF989281F850BD7FDC4EB530C17859215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft Manifest number: 15EC Signing time: Mon 26 Jan 2026 09:01:14 +0000 Manifest this update: Mon 26 Jan 2026 09:01:14 +0000 Manifest next update: Tue 27 Jan 2026 09:01:14 +0000 Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=) 2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: rUjVxhBUwF8mzyTuh/eeOoNc70naBfD6a/rgyKHYUHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:28:1f:85:0b:d7:fd:c4:eb:53:0c:17:85:92:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7 Validity Not Before: Jan 26 09:01:14 2026 GMT Not After : Jan 27 09:01:14 2026 GMT Subject: CN=a0844214ed517449900f8cfb182607b89aedde96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:cf:49:a3:48:63:32:ef:58:ab:56:13:9e: 6b:94:f6:26:b1:3a:e7:92:00:b4:87:d9:df:fd:f8: ed:61:8f:b5:1d:aa:9e:0e:82:92:79:50:10:2d:ca: 67:75:9d:38:4e:bc:19:41:d2:97:a1:2b:fb:fd:57: d2:56:c1:39:e5:85:b6:0a:e3:60:c7:07:f0:66:41: 2c:3c:01:4f:60:7c:6b:2c:c9:18:ff:6b:e8:b4:72: 46:e2:35:2f:ce:be:d9:60:f4:59:a3:95:ff:c5:b5: 4b:b2:fd:d6:09:9a:15:f1:2c:37:f8:b6:d5:b6:de: 56:85:3c:72:ee:f3:5b:45:1e:62:27:d5:2d:e4:6a: 90:44:46:17:56:57:09:3d:7f:03:5f:85:e3:4f:55: 7c:38:af:0d:40:5c:3c:bd:ad:86:74:ad:78:3d:c4: 32:95:34:27:f8:7a:70:8d:b3:90:99:af:74:30:47: 38:46:ce:52:5f:4c:bb:9a:a8:b6:27:f6:0d:33:89: 25:64:49:b7:be:9d:e5:80:91:58:f3:37:33:64:99: c6:e9:f4:0a:e0:20:62:0e:2b:9d:45:51:24:35:5a: de:14:b1:79:52:12:87:89:0f:c4:2b:44:f4:b1:09: d8:20:58:8f:0c:73:95:35:2e:4e:b4:07:6c:ff:8b: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:84:42:14:ED:51:74:49:90:0F:8C:FB:18:26:07:B8:9A:ED:DE:96 X509v3 Authority Key Identifier: keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4b:6c:e8:5d:6b:90:b3:17:87:f3:bb:49:f6:af:67:30:a8: 7d:b4:59:90:98:0a:c9:bf:53:3a:e4:ac:71:0d:7d:c2:ae:b9: de:bc:0c:5e:29:36:01:36:ce:42:2f:cc:66:17:f2:01:7d:3b: 45:9b:27:a3:c6:f3:07:24:f3:da:6e:b3:50:c4:19:cd:e1:9d: b8:da:f6:9a:be:e3:a2:bd:ff:44:fd:cc:af:1d:bf:63:61:9d: 80:c6:b9:71:58:97:60:e9:c3:37:2f:65:6c:60:b6:a0:8c:57: 2a:f0:dd:56:6d:91:f6:a7:af:04:f6:f1:ce:33:34:0f:11:65: 31:84:31:12:06:e7:9f:4b:17:d4:b8:89:ed:77:46:a3:27:c9: f5:41:bc:82:df:11:02:21:aa:c0:bb:f6:5a:98:41:17:bb:a7: 2a:0f:7e:9c:ab:3a:51:ba:11:ab:ee:33:49:f8:32:e3:13:f4: fc:fb:2b:13:da:63:2e:e6:33:70:9d:e4:1c:b1:ee:37:f5:b0: 95:72:2f:54:ae:1f:e8:f0:4b:73:b6:cd:50:d7:9d:c1:c4:87: bb:94:e3:fb:18:7e:44:0b:1e:ca:cb:42:0a:75:1d:b7:20:8a: 2b:19:a0:b3:29:11:25:65:66:55:97:17:de:60:8f:42:9a:ba: ed:0b:b7:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iSgfhQvX/cTrUwwXhZIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTY3NGZlZTU1NTY3MjgxNzVlZmI1NmVhYThiOTlmMzgx NWFmYTcwHhcNMjYwMTI2MDkwMTE0WhcNMjYwMTI3MDkwMTE0WjAzMTEwLwYDVQQD EyhhMDg0NDIxNGVkNTE3NDQ5OTAwZjhjZmIxODI2MDdiODlhZWRkZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMfPSaNIYzLvWKtWE55rlPYmsTrn kgC0h9nf/fjtYY+1HaqeDoKSeVAQLcpndZ04TrwZQdKXoSv7/VfSVsE55YW2CuNg xwfwZkEsPAFPYHxrLMkY/2votHJG4jUvzr7ZYPRZo5X/xbVLsv3WCZoV8Sw3+LbV tt5WhTxy7vNbRR5iJ9Ut5GqQREYXVlcJPX8DX4XjT1V8OK8NQFw8va2GdK14PcQy lTQn+HpwjbOQma90MEc4Rs5SX0y7mqi2J/YNM4klZEm3vp3lgJFY8zczZJnG6fQK 4CBiDiudRVEkNVreFLF5UhKHiQ/EK0T0sQnYIFiPDHOVNS5OtAds/4u7wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCEQhTtUXRJkA+M+xgmB7ia7d6WMB8GA1UdIwQY MBaAFMUWdP7lVWcoF177VuqouZ84Fa+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYt M2NiZTFhZjNiODJjLzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYtM2NiZTFhZjNiODJj LzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUts6F1r kLMXh/O7SfavZzCofbRZkJgKyb9TOuSscQ19wq653rwMXik2ATbOQi/MZhfyAX07 RZsno8bzByTz2m6zUMQZzeGduNr2mr7jor3/RP3Mrx2/Y2GdgMa5cViXYOnDNy9l bGC2oIxXKvDdVm2R9qevBPbxzjM0DxFlMYQxEgbnn0sX1LiJ7XdGoyfJ9UG8gt8R AiGqwLv2WphBF7unKg9+nKs6UboRq+4zSfgy4xP0/PsrE9pjLuYzcJ3kHLHuN/Ww lXIvVK4f6PBLc7bNUNedwcSHu5Tj+xh+RAseystCCnUdtyCKKxmgsykRJWVmVZcX 3mCPQpq67Qu3JQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:22 2026 by rpki-client