This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json) Hash identifier: Bag1+3qKo5iAz+pY3gDV1+xtDDXOyaGwz9frWrPmErg= Subject key identifier: 41:4D:A5:73:26:A0:6B:59:C7:A4:8E:92:99:EB:1A:87:B1:A6:4B:C2 Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Certificate serial: 019BF72D5E2CF8CEC4C1CF8A100E554B32BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 22:01:44 +0000 Manifest this update: Sun 25 Jan 2026 22:01:44 +0000 Manifest next update: Mon 26 Jan 2026 22:01:44 +0000 Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=) 2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: QRS+US/aVUiBHK0lESzudkZTJDWCn0pQ/W4OntYgtgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:5e:2c:f8:ce:c4:c1:cf:8a:10:0e:55:4b:32:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Validity Not Before: Jan 25 22:01:44 2026 GMT Not After : Jan 26 22:01:44 2026 GMT Subject: CN=414da57326a06b59c7a48e9299eb1a87b1a64bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:f5:9f:7e:48:89:fc:aa:45:41:5f:29:c2: b8:cf:a5:2d:e8:a9:35:80:c2:84:61:54:46:78:d9: 87:9b:eb:ba:80:9b:47:1d:a2:1d:a8:b9:f6:cc:cc: c4:5c:32:78:3f:b4:db:f5:fa:ff:e2:73:07:92:dd: d7:58:66:88:36:6a:3e:ff:66:c7:e4:5c:8c:15:15: 3b:d8:a4:b7:25:b1:dd:5b:8c:32:96:27:46:d1:33: df:44:84:8a:94:53:32:be:7f:0d:f2:b7:aa:32:bf: 6d:73:72:4c:92:de:22:56:b6:95:32:cf:51:0d:29: 95:7f:18:25:06:7b:c0:42:c0:9e:bf:ce:96:fc:46: e5:f9:09:d5:e7:9d:3a:b8:ae:17:05:e7:95:63:8e: 1c:c0:0b:23:be:31:c0:b7:5f:58:08:fb:e3:e5:b2: f1:d1:7e:5f:85:82:d1:6b:aa:26:2a:67:67:cf:7d: 38:37:b9:38:78:34:ec:43:41:73:0e:ff:1f:74:f2: 3b:c2:78:81:94:f9:51:07:9a:68:74:69:7f:6d:2d: 48:5d:da:47:46:dc:12:18:4a:de:ee:0b:1e:fb:cb: 39:4e:81:42:d2:b5:5d:f7:2f:69:e7:a5:fc:65:2a: bd:7d:18:f0:4b:25:77:f0:08:6f:02:cc:87:d1:0f: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4D:A5:73:26:A0:6B:59:C7:A4:8E:92:99:EB:1A:87:B1:A6:4B:C2 X509v3 Authority Key Identifier: keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2d:cc:50:75:9f:92:23:7f:51:e1:b1:a7:ca:db:33:3c:01: 2a:dc:ee:0a:42:30:5a:78:0a:f8:30:d7:d6:15:35:79:af:61: d5:71:5a:44:cc:92:9a:83:0d:d0:34:3b:d7:38:8e:49:f1:45: e5:71:bf:21:7e:fb:53:86:0e:3d:ea:1c:df:f3:6a:c2:56:4e: bc:23:cb:85:c6:0d:20:93:bb:1f:ad:4b:e8:f4:51:16:1d:98: 41:fc:28:0a:ad:e6:cf:cf:08:66:af:3e:70:0b:27:94:a4:02: 44:e8:04:2b:cc:79:43:7d:26:76:8a:a3:5d:f9:63:08:b6:fe: 37:ec:60:fa:e9:12:b6:41:17:86:7b:8b:14:dd:81:31:ca:16: aa:59:32:35:69:ce:eb:49:ca:5a:b3:cc:92:4f:07:55:e4:ac: 90:17:35:05:76:d9:c7:79:35:d5:c6:21:74:e3:9e:30:f2:0c: de:c2:5d:1d:1d:95:57:09:3f:97:fe:3a:c5:f7:31:d6:bb:92: 22:de:cd:88:c5:df:c8:1b:24:27:1a:ec:e4:d3:a8:ee:55:bd: 2c:c4:8a:47:91:dd:97:32:d5:0a:1c:4a:00:24:fd:40:24:ff: 88:d0:8e:15:c3:f2:cf:72:34:55:f8:c2:3c:fc:bc:81:0d:54: 01:30:1b:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LV4s+M7Ewc+KEA5VSzK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl MDgxOTUwHhcNMjYwMTI1MjIwMTQ0WhcNMjYwMTI2MjIwMTQ0WjAzMTEwLwYDVQQD Eyg0MTRkYTU3MzI2YTA2YjU5YzdhNDhlOTI5OWViMWE4N2IxYTY0YmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x/1n35IifyqRUFfKcK4z6Ut6Kk1 gMKEYVRGeNmHm+u6gJtHHaIdqLn2zMzEXDJ4P7Tb9fr/4nMHkt3XWGaINmo+/2bH 5FyMFRU72KS3JbHdW4wylidG0TPfRISKlFMyvn8N8reqMr9tc3JMkt4iVraVMs9R DSmVfxglBnvAQsCev86W/Ebl+QnV5506uK4XBeeVY44cwAsjvjHAt19YCPvj5bLx 0X5fhYLRa6omKmdnz304N7k4eDTsQ0FzDv8fdPI7wniBlPlRB5podGl/bS1IXdpH RtwSGEre7gse+8s5ToFC0rVd9y9p56X8ZSq9fRjwSyV38AhvAsyH0Q9yVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFNpXMmoGtZx6SOkpnrGoexpkvCMB8GA1UdIwQY MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai3MUHWf kiN/UeGxp8rbMzwBKtzuCkIwWngK+DDX1hU1ea9h1XFaRMySmoMN0DQ71ziOSfFF 5XG/IX77U4YOPeoc3/NqwlZOvCPLhcYNIJO7H61L6PRRFh2YQfwoCq3mz88IZq8+ cAsnlKQCROgEK8x5Q30mdoqjXfljCLb+N+xg+ukStkEXhnuLFN2BMcoWqlkyNWnO 60nKWrPMkk8HVeSskBc1BXbZx3k11cYhdOOeMPIM3sJdHR2VVwk/l/46xfcx1ruS It7NiMXfyBskJxrs5NOo7lW9LMSKR5HdlzLVChxKACT9QCT/iNCOFcPyz3I0VfjC PPy8gQ1UATAbOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:31 2026 by rpki-client