This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json) Hash identifier: rfWC+kJiuIn2rE1+J5PAqrkSyU9eyne10CjS9PWZh9Q= Subject key identifier: 4C:73:0C:8B:A2:D1:B1:D1:04:C4:EF:94:82:E1:CA:CC:D7:E5:9D:4A Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd Certificate serial: 019BFC1C4F26BF1F3099B550F6516DF7F266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft Manifest number: 096A Signing time: Mon 26 Jan 2026 21:01:12 +0000 Manifest this update: Mon 26 Jan 2026 21:01:12 +0000 Manifest next update: Tue 27 Jan 2026 21:01:12 +0000 Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=) 2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: RIVFH0GWD+0NOvSPx7kSGeCV4yYyUzt3NWkQ8lRWmsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:4f:26:bf:1f:30:99:b5:50:f6:51:6d:f7:f2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd Validity Not Before: Jan 26 21:01:12 2026 GMT Not After : Jan 27 21:01:12 2026 GMT Subject: CN=4c730c8ba2d1b1d104c4ef9482e1caccd7e59d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:c5:3e:89:c2:4a:6c:75:9a:a3:b7:1a:b0: f3:80:25:9f:9d:5a:f7:95:23:4c:f2:cc:48:86:a4: 7c:47:0d:8a:e5:c8:9c:b8:2e:e4:17:ae:f1:ea:4a: ac:ed:41:58:c0:77:b9:54:b5:39:f3:cd:85:b6:27: bf:30:42:36:28:f9:56:db:34:2e:c5:cc:d3:0c:cc: c1:ed:2d:c7:5a:1f:f3:0c:b0:b9:d2:da:c9:02:78: 15:0d:62:5f:e8:94:c6:6d:02:2b:b1:00:e4:94:c6: 9d:16:c4:0c:fd:3f:b1:a8:53:d4:f7:f5:a2:ba:39: e5:88:44:4b:79:17:33:0c:ac:61:36:2d:50:59:c9: 5f:a3:d1:2a:71:3f:7f:f7:f1:40:c4:6d:5b:72:9e: 46:41:7e:98:3a:f6:29:f0:02:7d:79:a3:50:5e:d1: fc:7c:d8:9a:28:ee:a3:55:ca:47:b8:89:6f:2d:ca: 62:36:fb:45:cc:30:f4:7e:8c:36:a6:5f:e2:65:4f: 7c:4d:ef:bb:66:8a:94:f2:a3:8b:27:70:1b:27:d7: 75:b4:a9:47:40:12:72:24:c5:83:e1:64:3c:03:ac: 4c:63:c5:03:d2:bf:cb:57:40:90:f3:eb:65:96:be: d0:85:82:b5:66:cf:87:9d:ad:f8:b9:57:ac:63:2f: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:0C:8B:A2:D1:B1:D1:04:C4:EF:94:82:E1:CA:CC:D7:E5:9D:4A X509v3 Authority Key Identifier: keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c1:0f:2b:1f:fb:72:25:46:ff:6e:3b:e2:08:68:90:20:b2: 02:14:5d:21:10:5f:ea:16:52:fa:97:6c:62:55:31:06:4e:59: a4:76:4a:4c:bc:21:4b:e8:5e:7b:cd:54:b7:28:a2:70:aa:e9: 2e:43:41:e6:68:34:f3:3a:f6:ce:58:36:4d:7c:b6:59:b2:01: 66:f8:09:98:d5:c7:55:4a:23:e4:25:5f:7e:8f:27:53:c0:be: ec:a2:86:5e:bf:98:22:e8:1f:31:39:4d:95:9c:86:04:d1:cf: 66:f7:f7:b7:3e:73:20:64:6b:e0:ea:ff:d9:b0:1e:cd:9d:90: 7d:fd:fe:b1:d7:dc:1e:c3:60:c7:38:67:57:0c:3e:78:a6:fa: 46:bb:10:2e:e3:a8:c1:5b:87:8c:87:85:f2:c3:c6:a7:e4:30: a6:0f:b6:93:cd:85:8d:0b:89:3d:b1:f2:a9:9b:22:48:fb:d3: 32:19:96:76:49:e5:25:15:7f:00:22:66:cc:f9:64:f8:a8:4e: 0b:21:08:b8:ba:f7:27:3a:e9:49:49:fc:ae:0a:8b:a0:02:0d: 67:a7:93:ce:9b:3b:94:80:9b:c2:ed:66:47:57:12:8e:97:31: 8e:3a:47:7a:78:7b:d6:39:6d:f9:ab:2e:78:66:f9:12:cf:22: c5:82:19:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HE8mvx8wmbVQ9lFt9/JmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2 YzdjZGQwHhcNMjYwMTI2MjEwMTEyWhcNMjYwMTI3MjEwMTEyWjAzMTEwLwYDVQQD Eyg0YzczMGM4YmEyZDFiMWQxMDRjNGVmOTQ4MmUxY2FjY2Q3ZTU5ZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp3FPonCSmx1mqO3GrDzgCWfnVr3 lSNM8sxIhqR8Rw2K5cicuC7kF67x6kqs7UFYwHe5VLU5882Ftie/MEI2KPlW2zQu xczTDMzB7S3HWh/zDLC50trJAngVDWJf6JTGbQIrsQDklMadFsQM/T+xqFPU9/Wi ujnliERLeRczDKxhNi1QWclfo9EqcT9/9/FAxG1bcp5GQX6YOvYp8AJ9eaNQXtH8 fNiaKO6jVcpHuIlvLcpiNvtFzDD0fow2pl/iZU98Te+7ZoqU8qOLJ3AbJ9d1tKlH QBJyJMWD4WQ8A6xMY8UD0r/LV0CQ8+tllr7QhYK1Zs+Hna34uVesYy+J4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExzDIui0bHRBMTvlILhyszX5Z1KMB8GA1UdIwQY MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt OWYwZjMzNTMyZWEzLzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcEPKx/7 ciVG/2474ghokCCyAhRdIRBf6hZS+pdsYlUxBk5ZpHZKTLwhS+hee81UtyiicKrp LkNB5mg08zr2zlg2TXy2WbIBZvgJmNXHVUoj5CVffo8nU8C+7KKGXr+YIugfMTlN lZyGBNHPZvf3tz5zIGRr4Or/2bAezZ2Qff3+sdfcHsNgxzhnVww+eKb6RrsQLuOo wVuHjIeF8sPGp+Qwpg+2k82FjQuJPbHyqZsiSPvTMhmWdknlJRV/ACJmzPlk+KhO CyEIuLr3JzrpSUn8rgqLoAINZ6eTzps7lICbwu1mR1cSjpcxjjpHenh71jlt+asu eGb5Es8ixYIZ3w== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:54 2026 by rpki-client