This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json) Hash identifier: G+kX7Yk1F0wBM6zw+syNvlPfxkZUb7HA275RmSBMgdo= Subject key identifier: A1:64:68:1A:07:AE:B7:35:E1:E3:6A:15:E1:6C:EA:C6:63:3C:88:86 Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40 Certificate serial: 019BF5E3CC964FBF99E340F2A638E6935F40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:01:45 +0000 Manifest this update: Sun 25 Jan 2026 16:01:45 +0000 Manifest next update: Mon 26 Jan 2026 16:01:45 +0000 Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=) 2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: GwDq5hb+Eh/0L3w3ZMKe4YdD6KKHaarzdRS4ex51Qg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:cc:96:4f:bf:99:e3:40:f2:a6:38:e6:93:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40 Validity Not Before: Jan 25 16:01:45 2026 GMT Not After : Jan 26 16:01:45 2026 GMT Subject: CN=a164681a07aeb735e1e36a15e16ceac6633c8886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:be:2d:e4:d2:ca:c5:50:e8:f4:8c:35:d8: 7e:ae:dc:4f:8f:08:58:76:bf:d3:6c:3e:c2:5d:6b: b3:68:40:f6:e7:ca:8b:9e:96:64:88:44:0f:4e:79: 14:e6:ca:81:24:71:cb:74:19:a0:6f:1c:95:05:a5: 01:64:59:fe:c9:9f:45:7a:4f:4a:76:34:6f:2f:28: b6:ef:fa:f3:1f:a5:4b:33:7f:5e:10:17:93:11:7f: 6b:8e:05:a0:82:db:d0:18:0e:ec:a8:f6:a3:51:27: c2:8e:75:bf:46:81:f7:59:84:54:ed:dd:ed:63:39: e5:65:b6:e8:d0:86:ca:75:91:a8:1d:58:84:e2:0e: 7e:11:5a:41:aa:85:6a:f8:1a:b6:25:dd:36:a2:2e: 0a:b2:e1:ca:4b:53:e2:ad:03:b6:7d:64:d7:ee:1b: 3c:7c:7d:af:f3:c4:fb:1d:b1:a5:96:52:66:6d:6c: 70:7e:99:80:d1:90:55:d0:1b:64:24:44:e1:87:db: ea:84:02:80:78:11:bb:95:5f:4e:78:d4:fa:af:03: 34:d6:79:02:37:e2:d0:4d:44:77:41:a6:0f:f0:4c: 92:cd:c9:0e:d9:cc:66:ec:7f:b3:d4:67:3d:c4:6b: b8:0b:01:12:c8:23:bb:96:55:17:9a:8a:ba:23:91: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:64:68:1A:07:AE:B7:35:E1:E3:6A:15:E1:6C:EA:C6:63:3C:88:86 X509v3 Authority Key Identifier: keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dd:8e:04:fe:05:ba:d4:1a:db:50:46:ce:4c:0e:66:8e:db: 00:b4:c3:46:73:59:8f:f9:04:bc:aa:c6:c6:cb:34:11:5c:f4: cc:18:0b:c3:6e:bd:fe:b2:25:a3:5d:a4:23:8f:87:e7:66:78: 01:16:98:9f:a7:45:3e:56:03:1e:b2:bf:99:0c:8e:e3:47:c8: 0c:97:e8:f3:43:ce:2c:69:8e:ca:6b:08:3b:2e:41:ee:c3:3b: ef:e6:d8:3c:16:2f:49:88:36:83:2c:47:af:21:42:7d:97:3a: ef:20:d2:3e:22:8f:b9:b3:e1:8b:ca:7b:2d:5b:29:11:07:74: 89:67:10:8f:d3:85:b9:dd:84:a8:73:70:dd:f9:16:15:e6:d7: 42:1f:ce:7b:61:cc:bb:35:50:66:c5:1b:67:db:0e:e8:ae:cc: a0:78:8f:10:6a:da:a5:2e:67:41:14:1c:89:3d:05:8d:6d:2a: ca:14:b1:63:02:c9:93:95:a5:48:2c:fa:85:13:b8:db:e5:d3: 58:42:e1:5d:24:eb:da:c1:60:35:2f:99:90:9e:c5:7a:51:43: b3:ab:d3:3d:ea:96:39:e8:7f:1d:fc:0d:7c:e6:45:93:db:55: d1:a4:d2:53:bd:5f:fa:2a:9a:eb:65:b2:a0:48:0f:ed:0b:1b: 17:b5:b3:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv148yWT7+Z40Dypjjmk19AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2M2Q5NmFlZmM1NDgwMjRmYTM2ZmE1Y2U4MDRhNDhiZjdj YTNhNDAwHhcNMjYwMTI1MTYwMTQ1WhcNMjYwMTI2MTYwMTQ1WjAzMTEwLwYDVQQD EyhhMTY0NjgxYTA3YWViNzM1ZTFlMzZhMTVlMTZjZWFjNjYzM2M4ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SG+LeTSysVQ6PSMNdh+rtxPjwhY dr/TbD7CXWuzaED258qLnpZkiEQPTnkU5sqBJHHLdBmgbxyVBaUBZFn+yZ9Fek9K djRvLyi27/rzH6VLM39eEBeTEX9rjgWggtvQGA7sqPajUSfCjnW/RoH3WYRU7d3t YznlZbbo0IbKdZGoHViE4g5+EVpBqoVq+Bq2Jd02oi4KsuHKS1PirQO2fWTX7hs8 fH2v88T7HbGlllJmbWxwfpmA0ZBV0BtkJEThh9vqhAKAeBG7lV9OeNT6rwM01nkC N+LQTUR3QaYP8EySzckO2cxm7H+z1Gc9xGu4CwESyCO7llUXmoq6I5HOqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFkaBoHrrc14eNqFeFs6sZjPIiGMB8GA1UdIwQY MBaAFMY9lq78VIAk+jb6XOgEpIv3yjpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDct OTcxZDI4ZDQzYzE0LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDctOTcxZDI4ZDQzYzE0 LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG92OBP4F utQa21BGzkwOZo7bALTDRnNZj/kEvKrGxss0EVz0zBgLw269/rIlo12kI4+H52Z4 ARaYn6dFPlYDHrK/mQyO40fIDJfo80POLGmOymsIOy5B7sM77+bYPBYvSYg2gyxH ryFCfZc67yDSPiKPubPhi8p7LVspEQd0iWcQj9OFud2EqHNw3fkWFebXQh/Oe2HM uzVQZsUbZ9sO6K7MoHiPEGrapS5nQRQciT0FjW0qyhSxYwLJk5WlSCz6hRO42+XT WELhXSTr2sFgNS+ZkJ7FelFDs6vTPeqWOeh/HfwNfOZFk9tV0aTSU71f+iqa62Wy oEgP7QsbF7WzWA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:37 2026 by rpki-client