This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json) Hash identifier: XNh1+JpEb3WGBfbrINEQR7tFQp/zSY+oCN3+VgRU694= Subject key identifier: 66:28:F2:EE:BF:3E:15:3B:7C:B9:F0:B9:56:43:E2:7B:3A:D4:FB:54 Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Certificate serial: 019BFAD278189C6DCF9821987E8075FACD75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft Manifest number: 17F8 Signing time: Mon 26 Jan 2026 15:00:55 +0000 Manifest this update: Mon 26 Jan 2026 15:00:55 +0000 Manifest next update: Tue 27 Jan 2026 15:00:55 +0000 Files and hashes: 1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=) 2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=) 3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=) 4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=) 5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: 9i7KT/Zs5iCcta3dPyKhYInsXt0ACb6H02gCc3HKzU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:78:18:9c:6d:cf:98:21:98:7e:80:75:fa:cd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Validity Not Before: Jan 26 15:00:55 2026 GMT Not After : Jan 27 15:00:55 2026 GMT Subject: CN=6628f2eebf3e153b7cb9f0b95643e27b3ad4fb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:f0:f8:98:bf:7a:31:36:63:39:c6:63:2e: 1d:8a:c9:03:ef:5b:e3:da:da:c9:b2:d9:93:6f:34: 72:cb:6e:2f:1f:29:a4:44:6f:9a:c0:34:f2:b2:34: 7c:69:88:67:9f:ce:95:a0:d1:8c:6c:7d:7e:0e:23: cd:06:e6:9c:3b:31:f6:ad:89:65:86:95:c2:34:b0: 9b:85:ba:4b:d1:a3:e4:82:7f:86:09:15:64:9d:8f: 4b:76:ea:f5:9e:e1:cb:55:de:ef:39:8e:53:5d:a4: d3:f3:22:4e:68:44:d2:cb:2c:67:c1:15:bd:4b:06: 84:aa:f4:21:28:4d:24:27:9d:98:17:b4:6c:97:33: 72:e6:34:93:08:1e:69:ae:86:a8:32:99:36:76:09: 0f:39:e8:c6:fc:8b:f0:85:13:3f:f5:a2:73:83:51: 58:e3:c1:a8:e7:2a:80:b1:87:52:88:94:0f:a8:03: 02:9e:a1:6e:e5:97:32:f1:3f:3a:d7:f7:7b:1f:52: 89:e5:8a:4d:e7:ec:a4:1f:f3:ed:48:b7:86:a1:04: 49:a6:90:e9:5c:dd:34:80:81:6f:79:5c:67:fa:36: 05:bd:be:13:3f:83:0c:b2:c7:0b:6f:6b:ed:81:ac: 5d:46:d1:79:85:50:ef:26:f2:7f:9a:5a:d2:1f:42: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:F2:EE:BF:3E:15:3B:7C:B9:F0:B9:56:43:E2:7B:3A:D4:FB:54 X509v3 Authority Key Identifier: keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8c:27:d2:8b:c0:c3:41:3c:e9:88:ed:11:46:2e:f9:0e:46: fe:19:b2:19:71:b0:d2:cc:95:e9:7c:d1:2f:75:a0:2c:eb:dc: d4:f4:be:52:8a:a2:8c:cd:0c:01:6b:ca:95:5b:ca:70:f6:e2: 70:5e:06:17:7e:79:77:dd:d0:72:13:d3:56:9e:9b:31:fc:e4: 29:5f:28:4e:b1:e2:2e:ae:ee:40:d1:9b:c9:26:68:59:6f:b1: 17:03:b7:eb:7e:ad:1c:36:cf:83:19:3a:78:ee:59:33:26:25: 98:19:f9:71:91:12:55:72:b7:36:ad:1a:2b:17:5c:09:e9:d2: 8d:c3:7e:03:79:62:01:99:8b:e8:c7:f9:45:ee:16:95:14:ac: 54:0d:b6:ca:5a:ad:ed:7e:32:f2:b7:10:b2:f0:77:a4:b5:e7: 2c:86:84:1b:30:11:fd:ce:c2:38:38:cb:28:e3:ab:18:2e:a9: 05:c7:bd:2f:b1:07:0b:30:a3:b1:65:40:f4:2e:50:4a:c0:95: 23:ea:82:76:6e:eb:97:bf:2c:e4:5e:29:87:96:3a:8f:c3:51: 6e:b6:c3:58:7c:60:42:40:46:a2:10:f2:9c:dd:f0:26:7e:72: 60:16:f7:c7:d6:a0:b0:d7:cf:73:01:cc:24:08:d4:65:c1:41: 8a:ef:db:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60ngYnG3PmCGYfoB1+s11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0 NmVlMDUwHhcNMjYwMTI2MTUwMDU1WhcNMjYwMTI3MTUwMDU1WjAzMTEwLwYDVQQD Eyg2NjI4ZjJlZWJmM2UxNTNiN2NiOWYwYjk1NjQzZTI3YjNhZDRmYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO7w+Ji/ejE2YznGYy4diskD71vj 2trJstmTbzRyy24vHymkRG+awDTysjR8aYhnn86VoNGMbH1+DiPNBuacOzH2rYll hpXCNLCbhbpL0aPkgn+GCRVknY9Ldur1nuHLVd7vOY5TXaTT8yJOaETSyyxnwRW9 SwaEqvQhKE0kJ52YF7RslzNy5jSTCB5proaoMpk2dgkPOejG/IvwhRM/9aJzg1FY 48Go5yqAsYdSiJQPqAMCnqFu5Zcy8T861/d7H1KJ5YpN5+ykH/PtSLeGoQRJppDp XN00gIFveVxn+jYFvb4TP4MMsscLb2vtgaxdRtF5hVDvJvJ/mlrSH0Ix4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYo8u6/PhU7fLnwuVZD4ns61PtUMB8GA1UdIwQY MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3 LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4wn0ovA w0E86YjtEUYu+Q5G/hmyGXGw0syV6XzRL3WgLOvc1PS+UoqijM0MAWvKlVvKcPbi cF4GF355d93QchPTVp6bMfzkKV8oTrHiLq7uQNGbySZoWW+xFwO3636tHDbPgxk6 eO5ZMyYlmBn5cZESVXK3Nq0aKxdcCenSjcN+A3liAZmL6Mf5Re4WlRSsVA22ylqt 7X4y8rcQsvB3pLXnLIaEGzAR/c7CODjLKOOrGC6pBce9L7EHCzCjsWVA9C5QSsCV I+qCdm7rl78s5F4ph5Y6j8NRbrbDWHxgQkBGohDynN3wJn5yYBb3x9agsNfPcwHM JAjUZcFBiu/bWA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:58 2026 by rpki-client