This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json) Hash identifier: qz9MULpHmjWB6yC6uj8Dai/pYmNnCC+MDBCK324z3Pg= Subject key identifier: 0F:34:14:03:C8:FA:5A:11:4B:EB:A4:C8:3A:4C:E0:95:D6:2C:D2:80 Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019BFE0A9084BC0B7568968CE216A15E0C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft Manifest number: 180D Signing time: Tue 27 Jan 2026 06:01:03 +0000 Manifest this update: Tue 27 Jan 2026 06:01:03 +0000 Manifest next update: Wed 28 Jan 2026 06:01:03 +0000 Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=) 2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=) 3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=) 4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=) 5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=) 6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=) 7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: 0zVlwL2AhAOtCz1/8ekrjVR+IpnsJ6qeN/oYXf1gYrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:90:84:bc:0b:75:68:96:8c:e2:16:a1:5e:0c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Jan 27 06:01:03 2026 GMT Not After : Jan 28 06:01:03 2026 GMT Subject: CN=0f341403c8fa5a114beba4c83a4ce095d62cd280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5e:7c:aa:44:2a:98:a9:3c:61:e8:fe:64:70: 1b:dc:86:ef:6d:66:9e:27:b9:a0:86:f2:67:61:56: 52:bb:e5:90:f8:9e:cc:cb:f9:4a:18:46:2f:c7:a2: cc:25:f8:af:73:f3:60:4b:b5:b1:00:b6:61:1d:76: 2b:5b:6b:1a:96:35:d5:d7:7e:1e:27:87:9d:e0:38: f7:fa:11:51:19:26:68:33:ec:0a:01:ff:8a:47:00: f7:43:fc:04:4e:be:4c:0c:77:43:b8:33:91:62:30: 45:27:c4:6b:d2:07:5c:a5:d2:b5:9e:4f:a5:0a:b0: 5b:70:07:6e:3a:45:cb:16:a9:96:bb:f4:bf:b0:7f: b3:0b:8b:65:43:bf:b1:10:02:40:fc:9e:0d:d2:c4: 37:e1:4a:a0:2c:7e:57:1f:08:c3:ee:26:f4:f4:c5: d6:d2:86:8c:aa:01:0e:b6:85:b2:7e:96:97:89:e7: 81:eb:f9:ea:61:5e:9c:32:64:60:66:41:df:1b:be: 97:ee:a8:89:08:27:4e:0e:37:7a:87:9f:3e:ab:c2: eb:10:df:f3:a7:ad:32:37:96:3c:b5:2a:98:8a:34: af:9f:43:60:ae:fc:8b:ec:11:7b:8a:a0:e8:52:54: d0:80:4a:69:88:60:7c:c0:18:6d:73:19:bc:71:d8: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:34:14:03:C8:FA:5A:11:4B:EB:A4:C8:3A:4C:E0:95:D6:2C:D2:80 X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f9:d3:31:b2:4b:ca:c5:85:4b:47:12:37:be:0e:de:72:a5: 7b:b3:4a:9b:a0:f0:1b:f8:8a:ae:3c:bd:71:94:83:a5:65:a8: 46:19:6d:6d:55:28:fd:c7:af:a0:84:18:af:4b:d9:6d:b8:26: 84:c2:38:b5:8a:f9:e1:5d:7d:c9:06:61:3a:96:6c:b6:84:70: 34:6a:cc:d1:31:f7:6a:2d:32:ca:cb:57:d1:48:8c:cf:07:11: 6a:7a:51:14:4d:07:15:8e:86:b0:fb:57:2b:ce:e8:fc:36:6d: 7b:52:b2:c4:62:8b:bc:02:27:b5:73:1e:6d:59:c9:76:1a:71: db:e3:e2:71:0f:ed:2a:6b:00:c1:02:59:9c:d0:1a:0f:03:c1: 83:af:ed:ec:5b:bf:84:49:22:9a:07:71:6b:d7:18:d4:74:d1: 41:03:88:dd:f1:bc:2e:82:5d:01:00:52:10:6c:7e:88:a6:2b: d7:9c:d9:6a:90:e0:25:e0:03:50:33:0b:8b:bb:5a:cb:cc:12: 15:1d:d2:35:6c:b7:c1:84:5b:73:d8:e6:0f:dc:43:2e:43:a6: e7:ef:24:f8:b2:6e:28:89:fc:a5:20:3f:5e:53:ce:78:e8:c6: 30:90:b8:35:ca:5a:f6:ec:9c:dc:ae:5c:4f:b1:90:e2:cc:6c: b2:98:3a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CpCEvAt1aJaM4hahXgxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjYwMTI3MDYwMTAzWhcNMjYwMTI4MDYwMTAzWjAzMTEwLwYDVQQD EygwZjM0MTQwM2M4ZmE1YTExNGJlYmE0YzgzYTRjZTA5NWQ2MmNkMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l58qkQqmKk8Yej+ZHAb3IbvbWae J7mghvJnYVZSu+WQ+J7My/lKGEYvx6LMJfivc/NgS7WxALZhHXYrW2saljXV134e J4ed4Dj3+hFRGSZoM+wKAf+KRwD3Q/wETr5MDHdDuDORYjBFJ8Rr0gdcpdK1nk+l CrBbcAduOkXLFqmWu/S/sH+zC4tlQ7+xEAJA/J4N0sQ34UqgLH5XHwjD7ib09MXW 0oaMqgEOtoWyfpaXieeB6/nqYV6cMmRgZkHfG76X7qiJCCdODjd6h58+q8LrEN/z p60yN5Y8tSqYijSvn0NgrvyL7BF7iqDoUlTQgEppiGB8wBhtcxm8cdgF2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA80FAPI+loRS+ukyDpM4JXWLNKAMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/nTMbJL ysWFS0cSN74O3nKle7NKm6DwG/iKrjy9cZSDpWWoRhltbVUo/cevoIQYr0vZbbgm hMI4tYr54V19yQZhOpZstoRwNGrM0TH3ai0yystX0UiMzwcRanpRFE0HFY6GsPtX K87o/DZte1KyxGKLvAIntXMebVnJdhpx2+PicQ/tKmsAwQJZnNAaDwPBg6/t7Fu/ hEkimgdxa9cY1HTRQQOI3fG8LoJdAQBSEGx+iKYr15zZapDgJeADUDMLi7tay8wS FR3SNWy3wYRbc9jmD9xDLkOm5+8k+LJuKIn8pSA/XlPOeOjGMJC4Ncpa9uyc3K5c T7GQ4sxsspg6XQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:14 2026 by rpki-client