This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json) Hash identifier: SgLikdWS1Giy7Q2wyF2qgC6HMORBduGjZEy1PCmUZbQ= Subject key identifier: D4:C2:E3:F3:88:31:F3:0B:73:03:D2:94:9E:A4:81:88:3B:DE:20:A7 Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019BA7FFE7E50009D1874E6C5CAE80F8E527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft Manifest number: 17C1 Signing time: Sat 10 Jan 2026 13:02:04 +0000 Manifest this update: Sat 10 Jan 2026 13:02:04 +0000 Manifest next update: Sun 11 Jan 2026 13:02:04 +0000 Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=) 2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=) 3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=) 4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: aEicLEpXFwNXe0TXVVtR0ajdP3hCIUZn6OckW5mBbUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:ff:e7:e5:00:09:d1:87:4e:6c:5c:ae:80:f8:e5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Jan 10 13:02:04 2026 GMT Not After : Jan 11 13:02:04 2026 GMT Subject: CN=d4c2e3f38831f30b7303d2949ea481883bde20a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:27:2a:91:cd:95:9b:0c:3f:72:fc:ac:c3: 58:63:ca:b4:8a:38:d2:b9:5f:bb:82:71:81:13:a3: a3:b6:8d:35:ce:7f:77:1d:80:71:ea:b2:eb:d5:ed: e6:24:78:d4:9a:1c:ba:43:a0:b6:f9:7e:04:ee:c0: b8:ac:c6:e2:f4:f8:30:1e:14:45:04:61:9d:4e:5f: 9f:7c:e4:61:12:ce:c4:a2:d8:fe:8c:e3:a0:75:8a: 1c:a0:54:ef:e7:af:22:74:60:dc:d0:7d:bd:f2:be: 80:ad:74:33:6b:c3:26:76:a2:00:23:c3:5f:4c:70: b9:b5:47:5d:30:c0:89:eb:22:80:bc:9b:f2:cb:03: b1:33:e3:06:49:23:17:d2:a9:97:57:f1:90:6c:60: 3e:ec:52:f6:48:81:87:f2:73:04:cc:f5:3c:31:a9: 63:b4:0d:39:c1:e5:bf:e6:00:55:33:4c:8e:82:c6: 56:cc:a4:b8:62:67:9c:ac:69:f9:76:d7:2f:1b:cb: 8d:23:db:bc:90:34:ac:73:6b:56:c5:fe:48:7f:16: 82:1e:72:85:52:33:05:ff:76:3a:b5:03:d8:40:fa: 0a:62:db:94:1e:cf:44:33:e6:c7:1d:4f:ff:10:65: d4:50:12:82:77:32:2b:b6:e1:ee:c6:3a:d4:85:6b: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C2:E3:F3:88:31:F3:0B:73:03:D2:94:9E:A4:81:88:3B:DE:20:A7 X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5b:48:5d:c3:c2:7b:52:04:99:45:87:77:f0:f2:f7:86:5b: 5f:a5:e0:8e:b7:ba:7b:fa:4d:35:c1:e2:99:f0:26:b9:b1:0c: 86:42:e4:aa:88:c4:05:20:a9:c2:5a:7f:82:80:6b:f7:c8:20: a6:c7:57:66:2a:08:22:fe:57:9a:fe:87:64:ce:18:63:13:54: 88:a0:7f:72:4e:ce:d9:03:93:5a:3b:1a:c7:59:d9:e0:5d:0a: 10:9e:e1:f4:6a:19:73:07:cc:51:3e:17:5f:d9:b8:30:d3:ec: 40:21:15:19:eb:16:3e:c7:0a:f8:9b:c1:ab:e4:e8:2b:07:12: ee:3a:8b:48:b8:6a:18:57:4b:43:ef:30:62:15:9f:7d:ab:db: 31:27:f9:2f:8b:d0:70:c3:80:b1:06:c6:f9:5b:81:ad:ae:6f: 06:45:f6:de:46:0f:ea:05:f9:8c:29:ab:49:a2:7b:23:8f:5d: 1d:4f:92:96:0c:0c:91:4e:4a:2a:ff:07:69:2a:cf:4c:f9:ed: a6:6a:69:57:9a:e7:5f:6d:cd:61:b3:91:2e:6f:d5:ae:53:da: 0f:17:99:e6:ee:61:1b:04:96:ef:05:3d:74:c4:c6:91:58:32: 5e:71:22:1b:5a:ae:3e:9d:29:2e:2d:f9:28:05:89:e6:1e:1f: 92:f6:ee:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZun/+flAAnRh05sXK6A+OUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjYwMTEwMTMwMjA0WhcNMjYwMTExMTMwMjA0WjAzMTEwLwYDVQQD EyhkNGMyZTNmMzg4MzFmMzBiNzMwM2QyOTQ5ZWE0ODE4ODNiZGUyMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYsnKpHNlZsMP3L8rMNYY8q0ijjS uV+7gnGBE6Ojto01zn93HYBx6rLr1e3mJHjUmhy6Q6C2+X4E7sC4rMbi9PgwHhRF BGGdTl+ffORhEs7Eotj+jOOgdYocoFTv568idGDc0H298r6ArXQza8MmdqIAI8Nf THC5tUddMMCJ6yKAvJvyywOxM+MGSSMX0qmXV/GQbGA+7FL2SIGH8nMEzPU8Malj tA05weW/5gBVM0yOgsZWzKS4YmecrGn5dtcvG8uNI9u8kDSsc2tWxf5IfxaCHnKF UjMF/3Y6tQPYQPoKYtuUHs9EM+bHHU//EGXUUBKCdzIrtuHuxjrUhWuuBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTC4/OIMfMLcwPSlJ6kgYg73iCnMB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVtIXcPC e1IEmUWHd/Dy94ZbX6Xgjre6e/pNNcHimfAmubEMhkLkqojEBSCpwlp/goBr98gg psdXZioIIv5Xmv6HZM4YYxNUiKB/ck7O2QOTWjsax1nZ4F0KEJ7h9GoZcwfMUT4X X9m4MNPsQCEVGesWPscK+JvBq+ToKwcS7jqLSLhqGFdLQ+8wYhWffavbMSf5L4vQ cMOAsQbG+VuBra5vBkX23kYP6gX5jCmrSaJ7I49dHU+SlgwMkU5KKv8HaSrPTPnt pmppV5rnX23NYbORLm/VrlPaDxeZ5u5hGwSW7wU9dMTGkVgyXnEiG1quPp0pLi35 KAWJ5h4fkvbunQ== -----END CERTIFICATE-----Generated at Sat Jan 10 16:27:05 2026 by rpki-client