This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json) Hash identifier: hzu837i5xpMwf5Sxv9YZX1udD+UwXqSIC7w+UsK2sNA= Subject key identifier: 64:CE:A6:7F:FC:A1:C4:DE:03:58:AA:12:F0:1B:6A:5B:A7:4C:6A:7D Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Certificate serial: 019BF34FEF5D586A9867F1F5DE5279C3923D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 04:01:00 +0000 Manifest this update: Sun 25 Jan 2026 04:01:00 +0000 Manifest next update: Mon 26 Jan 2026 04:01:00 +0000 Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=) 2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=) 3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: eqUk5aM2zhFpt6OVMzRNXY1AC7gSQBms+cBw9KE6Pso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:ef:5d:58:6a:98:67:f1:f5:de:52:79:c3:92:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Validity Not Before: Jan 25 04:01:00 2026 GMT Not After : Jan 26 04:01:00 2026 GMT Subject: CN=64cea67ffca1c4de0358aa12f01b6a5ba74c6a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:be:15:09:16:51:19:38:46:58:4f:ee:7e: 96:a4:ef:cc:ea:a4:88:f7:9d:27:29:4d:dc:3f:9d: 5e:df:6a:d7:f2:52:ff:ab:91:36:d8:e9:aa:ad:fb: 92:dd:26:2f:5d:61:f3:c3:2c:f5:bf:b0:aa:18:f2: b7:b7:1c:de:a5:5e:ce:f3:43:cb:c9:26:f8:64:1f: fb:cc:b0:55:66:e5:ea:2e:a3:da:04:20:87:0d:dc: 7e:2b:7b:62:36:14:15:a5:92:82:9e:d5:2a:10:9a: bf:00:ea:15:81:49:1d:03:89:5b:f7:d8:32:cc:70: 27:cb:c0:9a:2c:de:1f:97:97:af:4a:33:37:79:72: 45:38:fa:41:90:56:9a:50:3a:af:8b:4b:86:58:bb: b6:4e:bd:76:29:3e:61:70:4d:7b:93:92:fb:9c:af: 97:3c:18:2b:60:0a:2f:e7:d4:9d:f8:6e:2d:1c:99: fc:b1:73:cd:69:64:0b:1e:73:11:c9:67:55:6e:48: 53:6b:c3:fc:87:d5:c3:57:87:ce:95:5b:85:28:fc: 8b:b8:a8:c8:c9:74:b3:32:d3:3d:8c:33:72:f2:13: ba:8b:2a:45:18:37:fe:76:3c:fb:e5:68:f3:cc:e0: 53:7b:00:71:67:77:e8:bd:ec:bf:08:b7:9a:cf:9d: e5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CE:A6:7F:FC:A1:C4:DE:03:58:AA:12:F0:1B:6A:5B:A7:4C:6A:7D X509v3 Authority Key Identifier: keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:21:4b:01:ca:71:df:2c:b0:a9:a9:18:0b:1e:1a:54:8d:7a: c3:42:87:2c:78:35:08:35:64:1b:1a:12:4c:bd:d2:32:01:91: 96:b2:9a:46:62:3f:88:06:67:da:51:c6:cb:1d:c2:9c:32:9e: e0:39:a3:e5:32:ff:f4:97:72:07:df:a7:c1:e8:e3:38:1b:d6: ea:64:53:1b:a3:28:87:c4:1f:de:3e:55:79:44:60:e5:7e:e8: 97:7e:e6:1b:d6:88:56:86:5a:c3:b3:6b:84:ce:18:bb:1e:f6: 26:77:d8:3e:fd:df:af:ee:d3:53:fd:bd:ab:eb:b2:84:ee:e5: ae:f7:3c:9f:53:1e:90:f5:67:05:d1:f6:7a:12:2e:7c:0f:78: 8f:88:7e:a4:e6:65:c2:03:e0:c1:42:da:51:8d:fd:8e:b4:96: 11:a7:c0:df:6c:b3:f5:8c:62:b7:e8:e2:1f:fb:af:94:d8:50: ea:29:b6:b6:29:cf:a3:47:79:1b:58:39:fd:9f:56:15:28:85: 67:4f:ca:81:e4:ce:8f:6d:ef:e5:af:2c:2c:03:34:2b:76:29: b0:55:81:6c:2b:70:98:de:4c:85:dd:03:1d:ce:0a:01:b5:0e: d0:fb:b0:3b:4a:12:7f:01:29:a8:56:39:dd:75:9c:f5:f6:d1: 31:5b:91:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT+9dWGqYZ/H13lJ5w5I9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWRkNmY1M2JjYjQ5ZTRiOWIwNzA2ZGZkMDc0MjU5Yzli OGE0MDgwHhcNMjYwMTI1MDQwMTAwWhcNMjYwMTI2MDQwMTAwWjAzMTEwLwYDVQQD Eyg2NGNlYTY3ZmZjYTFjNGRlMDM1OGFhMTJmMDFiNmE1YmE3NGM2YTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDC+FQkWURk4RlhP7n6WpO/M6qSI 950nKU3cP51e32rX8lL/q5E22OmqrfuS3SYvXWHzwyz1v7CqGPK3txzepV7O80PL ySb4ZB/7zLBVZuXqLqPaBCCHDdx+K3tiNhQVpZKCntUqEJq/AOoVgUkdA4lb99gy zHAny8CaLN4fl5evSjM3eXJFOPpBkFaaUDqvi0uGWLu2Tr12KT5hcE17k5L7nK+X PBgrYAov59Sd+G4tHJn8sXPNaWQLHnMRyWdVbkhTa8P8h9XDV4fOlVuFKPyLuKjI yXSzMtM9jDNy8hO6iypFGDf+djz75WjzzOBTewBxZ3fovey/CLeaz53lOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTOpn/8ocTeA1iqEvAbalunTGp9MB8GA1UdIwQY MBaAFF7t1vU7y0nkubBwbf0HQlnJuKQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODIt MjE1ZGJjODljMmI5LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODItMjE1ZGJjODljMmI5 LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSFLAcpx 3yywqakYCx4aVI16w0KHLHg1CDVkGxoSTL3SMgGRlrKaRmI/iAZn2lHGyx3CnDKe 4Dmj5TL/9JdyB9+nwejjOBvW6mRTG6Moh8Qf3j5VeURg5X7ol37mG9aIVoZaw7Nr hM4Yux72JnfYPv3fr+7TU/29q+uyhO7lrvc8n1MekPVnBdH2ehIufA94j4h+pOZl wgPgwULaUY39jrSWEafA32yz9Yxit+jiH/uvlNhQ6im2tinPo0d5G1g5/Z9WFSiF Z0/KgeTOj23v5a8sLAM0K3YpsFWBbCtwmN5Mhd0DHc4KAbUO0PuwO0oSfwEpqFY5 3XWc9fbRMVuRQg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:27 2026 by rpki-client