This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json) Hash identifier: 6EJJXl+2a7GS27ECUhtLHEdncfpaWlxrnFE1QWAKBRA= Subject key identifier: 31:F4:78:B6:6C:47:9C:8B:47:6F:ED:85:86:02:09:05:3C:00:6C:EF Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Certificate serial: 019BF7638EF6F642FC5DC0171BD60785479C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft Manifest number: 0107 Signing time: Sun 25 Jan 2026 23:00:55 +0000 Manifest this update: Sun 25 Jan 2026 23:00:55 +0000 Manifest next update: Mon 26 Jan 2026 23:00:55 +0000 Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=) 2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: UqCkBuErTv4XBMOb0KhnM+HNdo0vCXYys9okgcAaAUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:8e:f6:f6:42:fc:5d:c0:17:1b:d6:07:85:47:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Validity Not Before: Jan 25 23:00:55 2026 GMT Not After : Jan 26 23:00:55 2026 GMT Subject: CN=31f478b66c479c8b476fed85860209053c006cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:68:a8:17:36:76:c4:29:27:11:d5:a4:47: 8f:52:ca:f5:ca:76:0c:68:ef:6f:7a:b5:85:f5:86: be:83:25:65:14:89:bc:71:37:0a:ad:35:55:2c:ca: 5d:85:63:e4:43:22:45:49:5b:d3:b2:85:c4:e6:d0: bc:48:d3:f6:b6:79:36:91:11:bf:61:a8:04:25:9d: b4:99:90:c4:d8:f0:ba:c8:75:35:d4:02:75:83:4f: 27:bb:65:19:ef:8b:4e:2f:24:e7:09:8f:fb:1a:02: fa:9d:90:80:f2:81:a7:48:62:6b:cf:8f:52:7e:5a: ee:0d:ac:88:e9:60:a7:92:20:3c:0d:8a:62:e9:aa: 46:51:8e:46:04:67:be:11:4d:7e:c3:ea:d3:96:b4: 15:81:0f:e8:08:93:bb:e9:d3:36:17:25:1c:b1:6f: 20:ac:0b:08:0a:56:27:51:da:ab:d9:85:c0:52:b9: 85:93:e9:36:36:1d:f0:7d:65:93:db:99:ae:3e:df: e7:73:a7:d5:3f:81:b5:db:c2:eb:21:2b:73:43:5c: 6f:40:0c:3e:28:c7:ca:0b:42:ea:6d:82:ff:8c:19: 87:8e:d4:dd:9f:1d:93:4d:db:37:03:2d:9c:d8:ac: 81:3b:9d:89:67:ab:b7:e3:19:c6:2a:be:5d:d0:d5: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F4:78:B6:6C:47:9C:8B:47:6F:ED:85:86:02:09:05:3C:00:6C:EF X509v3 Authority Key Identifier: keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:58:55:88:d5:a3:c2:eb:de:69:e8:f9:1b:10:82:53:04:fe: 4e:af:55:6b:77:35:5c:0e:48:89:f9:cd:4c:df:b8:12:67:bc: 6c:b5:ec:b2:59:19:bc:7e:9c:88:4e:23:50:a5:bb:43:7b:ab: 2e:34:5a:9c:dd:f3:c1:24:07:74:ef:a5:42:e2:f6:3e:2b:d7: f2:1c:c1:c6:b6:f3:80:e9:f9:65:34:70:34:0f:23:6b:c6:52: c3:6b:9d:c4:d2:57:9d:e1:1c:c4:fd:fe:26:a8:dc:8b:51:71: 28:53:78:4f:b6:ef:e4:59:ba:44:95:cd:e4:f0:ad:5d:21:d7: 88:0b:84:54:21:82:5d:19:60:d1:a2:02:44:b4:63:f7:e9:d4: fc:10:08:9d:45:83:b2:3c:6e:2b:69:38:e0:9c:ff:df:87:36: 70:c5:11:73:4f:07:9e:b9:98:ae:7f:bf:4c:a8:e7:97:b1:01: e1:2b:a3:c2:33:5d:d0:03:dc:17:00:bd:f7:7c:e3:0f:20:48: 73:13:2c:a7:ed:cd:46:fc:b2:95:df:43:9c:23:47:03:a6:64: 34:f6:67:28:2b:16:10:18:fb:67:92:92:d6:01:6f:e2:8e:5d: 89:e4:24:80:90:ed:4c:1e:77:b6:45:0f:db:71:12:ce:9d:e1: e4:cd:f9:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y4729kL8XcAXG9YHhUecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MWYzOTFkNjBlMWExMzljY2M0MmIxN2EzMmE5NTM2M2Rm NWNmYjAwHhcNMjYwMTI1MjMwMDU1WhcNMjYwMTI2MjMwMDU1WjAzMTEwLwYDVQQD EygzMWY0NzhiNjZjNDc5YzhiNDc2ZmVkODU4NjAyMDkwNTNjMDA2Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnxoqBc2dsQpJxHVpEePUsr1ynYM aO9verWF9Ya+gyVlFIm8cTcKrTVVLMpdhWPkQyJFSVvTsoXE5tC8SNP2tnk2kRG/ YagEJZ20mZDE2PC6yHU11AJ1g08nu2UZ74tOLyTnCY/7GgL6nZCA8oGnSGJrz49S flruDayI6WCnkiA8DYpi6apGUY5GBGe+EU1+w+rTlrQVgQ/oCJO76dM2FyUcsW8g rAsIClYnUdqr2YXAUrmFk+k2Nh3wfWWT25muPt/nc6fVP4G128LrIStzQ1xvQAw+ KMfKC0LqbYL/jBmHjtTdnx2TTds3Ay2c2KyBO52JZ6u34xnGKr5d0NUQTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH0eLZsR5yLR2/thYYCCQU8AGzvMB8GA1UdIwQY MBaAFMcfOR1g4aE5zMQrF6MqlTY99c+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAt NjU0MWNjMDA2ZWFjLzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAtNjU0MWNjMDA2ZWFj LzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFhViNWj wuveaej5GxCCUwT+Tq9Va3c1XA5IifnNTN+4Eme8bLXsslkZvH6ciE4jUKW7Q3ur LjRanN3zwSQHdO+lQuL2PivX8hzBxrbzgOn5ZTRwNA8ja8ZSw2udxNJXneEcxP3+ Jqjci1FxKFN4T7bv5Fm6RJXN5PCtXSHXiAuEVCGCXRlg0aICRLRj9+nU/BAInUWD sjxuK2k44Jz/34c2cMURc08HnrmYrn+/TKjnl7EB4SujwjNd0APcFwC993zjDyBI cxMsp+3NRvyyld9DnCNHA6ZkNPZnKCsWEBj7Z5KS1gFv4o5dieQkgJDtTB53tkUP 23ESzp3h5M35cA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:33 2026 by rpki-client