This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json) Hash identifier: o87CkuyQ4csCyHv0Hfgd/+4z2FpGEXXwgZ97GmZpZZM= Subject key identifier: 7B:6F:6B:51:E2:C9:03:6F:8E:CC:B4:2D:13:65:4F:2A:1E:78:77:82 Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019BFE415CE2A77E76AA412D9D92DCE3B410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft Manifest number: 17F4 Signing time: Tue 27 Jan 2026 07:00:55 +0000 Manifest this update: Tue 27 Jan 2026 07:00:55 +0000 Manifest next update: Wed 28 Jan 2026 07:00:55 +0000 Files and hashes: 1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=) 2: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=) 3: Oh5NfZAAYPNWepq-IUky8lhGK3Q.roa (hash: G68B7K3ln08i2iRP9Hn3HZxsrH3w3zUOZ6LC+Oev1Yo=) 4: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=) 5: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=) 6: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: Z2yuOAdT87Oky9TVu2hbSUZkrYCioST/dpKt3xC0Q1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:5c:e2:a7:7e:76:aa:41:2d:9d:92:dc:e3:b4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Jan 27 07:00:55 2026 GMT Not After : Jan 28 07:00:55 2026 GMT Subject: CN=7b6f6b51e2c9036f8eccb42d13654f2a1e787782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:4b:45:3b:8b:71:20:f6:c9:cd:b6:91:a7: 74:86:7f:c7:40:48:a6:2e:b5:37:89:ad:03:17:1e: 20:b7:a9:03:0f:0e:23:17:ec:8c:98:9d:e3:02:32: d8:27:77:22:80:86:42:0f:7f:5f:7e:0f:45:a4:14: e4:07:1c:ea:26:91:c9:76:19:4d:d8:28:e8:aa:fa: 78:69:71:0a:9e:c4:c7:30:7a:8b:dd:83:65:f5:70: 09:f2:b1:53:9f:72:c8:18:e0:8a:8a:ab:ca:e3:5a: dd:1b:43:26:b6:7a:30:2e:0b:cf:c3:f5:93:42:1f: ff:4f:f3:e9:06:c6:f2:79:88:dc:a6:aa:16:d9:04: 28:15:29:7c:01:4c:78:5a:ce:d4:50:44:a3:bb:bf: e7:6e:9b:33:14:36:22:6b:6a:4d:47:d3:45:e6:2e: 7e:24:5a:81:7d:d5:f1:d1:5f:17:64:f2:01:0c:cd: c4:cc:55:ec:9d:d1:e1:2a:59:c5:bf:49:5f:56:42: 58:33:44:77:e2:6c:b4:b4:e0:b1:2e:e2:57:b5:1c: 28:d9:3b:ab:48:88:be:9e:8c:bc:2b:be:d0:a7:9b: 7f:65:d5:d5:5a:0b:fe:50:6f:a0:19:e6:5b:c6:3d: 09:cb:57:a4:0b:25:08:77:99:f7:06:9c:7f:54:4b: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6F:6B:51:E2:C9:03:6F:8E:CC:B4:2D:13:65:4F:2A:1E:78:77:82 X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1a:ae:46:e2:76:f3:24:7c:28:66:6e:9f:e5:c9:b5:be:4e: 27:e5:89:c7:95:9c:ee:45:25:3c:4c:39:cf:da:f0:01:b0:b3: b5:df:23:fa:e7:43:56:9b:9c:c6:e8:51:27:a1:56:f3:d9:34: 8c:b4:a0:87:86:f0:87:0b:d7:5f:b9:e2:dc:c7:c2:95:74:31: 03:94:e4:e0:9e:7a:06:00:81:e4:de:c9:85:31:d9:df:5c:0d: cc:9a:90:fe:c9:46:11:68:dd:ad:d4:6d:7b:93:3f:88:41:53: 66:cd:03:d5:73:8e:0f:03:c9:80:51:a4:cf:5b:07:59:ac:6e: f4:b7:4e:84:96:f0:65:96:0b:b8:30:1e:6d:14:25:35:cb:fa: 9d:ee:52:25:d8:30:4d:cf:93:43:fd:50:ff:f8:ac:63:51:c2: 8e:a6:e0:fd:05:be:c7:60:7f:95:e6:b8:54:32:16:49:7f:f0: 53:a1:e2:f6:18:26:48:b8:4d:16:cc:dd:20:f2:3d:23:97:7f: 6a:5b:83:5c:85:a6:a0:2c:5d:8e:0d:b7:ad:6a:8c:09:63:bf: 25:45:50:bd:08:a7:9a:74:91:31:d9:39:3f:ce:05:2b:12:4a: f3:77:26:40:3a:5e:b2:90:de:ae:98:43:c0:d6:77:38:92:cf: f2:5d:77:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QVzip352qkEtnZLc47QQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjYwMTI3MDcwMDU1WhcNMjYwMTI4MDcwMDU1WjAzMTEwLwYDVQQD Eyg3YjZmNmI1MWUyYzkwMzZmOGVjY2I0MmQxMzY1NGYyYTFlNzg3NzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdtLRTuLcSD2yc22kad0hn/HQEim LrU3ia0DFx4gt6kDDw4jF+yMmJ3jAjLYJ3cigIZCD39ffg9FpBTkBxzqJpHJdhlN 2Cjoqvp4aXEKnsTHMHqL3YNl9XAJ8rFTn3LIGOCKiqvK41rdG0MmtnowLgvPw/WT Qh//T/PpBsbyeYjcpqoW2QQoFSl8AUx4Ws7UUESju7/nbpszFDYia2pNR9NF5i5+ JFqBfdXx0V8XZPIBDM3EzFXsndHhKlnFv0lfVkJYM0R34my0tOCxLuJXtRwo2Tur SIi+noy8K77Qp5t/ZdXVWgv+UG+gGeZbxj0Jy1ekCyUId5n3Bpx/VEvfkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtva1HiyQNvjsy0LRNlTyoeeHeCMB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhquRuJ2 8yR8KGZun+XJtb5OJ+WJx5Wc7kUlPEw5z9rwAbCztd8j+udDVpucxuhRJ6FW89k0 jLSgh4bwhwvXX7ni3MfClXQxA5Tk4J56BgCB5N7JhTHZ31wNzJqQ/slGEWjdrdRt e5M/iEFTZs0D1XOODwPJgFGkz1sHWaxu9LdOhJbwZZYLuDAebRQlNcv6ne5SJdgw Tc+TQ/1Q//isY1HCjqbg/QW+x2B/lea4VDIWSX/wU6Hi9hgmSLhNFszdIPI9I5d/ aluDXIWmoCxdjg23rWqMCWO/JUVQvQinmnSRMdk5P84FKxJK83cmQDpespDerphD wNZ3OJLP8l13Pw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:26 2026 by rpki-client