This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json) Hash identifier: bPL1E5jrOQQkcWlpfZ/1m1SFyTMaEdMokdzPzWLzSu0= Subject key identifier: C7:85:51:63:B8:AF:81:1D:E2:8D:6B:15:6F:89:F5:E7:CC:70:57:9E Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Certificate serial: 019BFB0959119B3A49B1A636E0FB094A65CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft Manifest number: 0CA4 Signing time: Mon 26 Jan 2026 16:00:52 +0000 Manifest this update: Mon 26 Jan 2026 16:00:52 +0000 Manifest next update: Tue 27 Jan 2026 16:00:52 +0000 Files and hashes: 1: LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa (hash: MkMyhvMq/UW3J/dY/hJ1MwyOPfnqAuGRvt2LQG0g8xw=) 2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: QxH40alMJEIEtKGpXBKFvxxYvwrhk1dRiEncETb8jgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:59:11:9b:3a:49:b1:a6:36:e0:fb:09:4a:65:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Validity Not Before: Jan 26 16:00:52 2026 GMT Not After : Jan 27 16:00:52 2026 GMT Subject: CN=c7855163b8af811de28d6b156f89f5e7cc70579e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:71:9c:a7:ee:b0:71:30:a3:1e:75:cf:69:f4: 0e:e1:3f:a5:a6:4c:e5:83:cc:f3:34:5e:e4:ff:0b: 39:45:73:69:f0:81:c7:1f:2b:cb:59:81:6b:79:84: 4d:bf:3b:5b:09:a8:99:da:60:1b:c4:42:2c:10:b3: 04:14:18:51:3b:d5:0f:75:e1:dc:4f:a3:d1:68:e4: a4:df:f2:ba:f9:0f:70:0d:19:48:e8:41:09:a4:85: 05:84:5c:b2:d1:5d:c3:98:9f:05:19:b2:a0:bf:94: ac:79:b1:fe:38:16:b8:b6:6f:ab:e5:a5:df:77:01: 43:28:5b:4c:5d:6c:50:0c:09:3f:59:78:74:27:8b: 94:9d:c5:37:da:c6:00:99:7d:e6:ea:36:3a:cf:96: d0:36:d4:05:a6:00:8d:d1:28:06:58:7f:3d:b4:bd: 24:4c:74:91:39:26:a6:b4:9f:13:a2:b6:d6:39:ae: da:af:4d:c7:8d:05:61:66:36:9f:0c:46:06:04:ba: a7:09:fa:87:aa:98:da:5e:e3:aa:49:da:a6:81:5e: a9:86:69:4e:ff:59:ef:9f:3d:2e:95:93:d0:90:99: 6d:16:df:e9:a2:da:24:a1:e7:d7:b5:1e:92:04:7b: b0:1c:54:e6:11:5e:61:0c:32:84:a6:72:b2:55:57: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:85:51:63:B8:AF:81:1D:E2:8D:6B:15:6F:89:F5:E7:CC:70:57:9E X509v3 Authority Key Identifier: keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a1:5a:4b:44:15:47:64:dd:09:a6:71:45:67:2d:c4:c8:fa: 6d:24:c8:d0:a7:be:08:6c:17:42:22:70:5f:76:00:05:80:41: f2:ec:05:1a:0a:0c:aa:9d:2f:14:a2:27:a8:2d:c0:a2:1f:c9: 4d:bd:c6:36:68:81:f0:d5:d2:c1:be:88:7e:48:f7:c1:49:24: 13:a8:bd:c8:8a:62:97:29:75:cf:41:0a:c1:9c:85:0e:d9:84: e6:38:c0:a2:af:df:52:e5:f1:12:2e:29:11:d0:a4:00:86:b9: 0c:2b:ef:d4:f5:53:d7:58:78:45:9b:df:6f:c6:06:af:37:68: e5:c2:5b:23:5c:fe:aa:01:09:2f:2b:b6:ce:6d:1e:91:6d:86: cb:0e:a3:77:31:e9:ec:c0:ef:e6:e7:a5:d1:6e:88:12:05:17: ea:1e:a7:03:c6:0a:a3:a3:6c:05:a9:1a:e2:57:52:1d:e0:74: 92:41:eb:a4:5e:a0:f9:8b:a9:a6:07:a2:4b:a7:d4:e8:7f:54: 45:56:37:66:82:3c:f5:4e:9c:bd:0a:6a:f8:d8:d4:18:bf:ae: df:09:dd:33:64:6b:4d:a1:6d:d2:c6:68:b8:29:7a:ee:dd:0b: 21:b8:6b:58:49:d9:46:64:23:d3:c6:b8:f5:69:19:e5:9a:75: af:c9:d4:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CVkRmzpJsaY24PsJSmXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MjI0ZWE0NWQwODFkNDAyZmZkNmJmNGRkOTVlM2ZmNmYy ZGM0ODEwHhcNMjYwMTI2MTYwMDUyWhcNMjYwMTI3MTYwMDUyWjAzMTEwLwYDVQQD EyhjNzg1NTE2M2I4YWY4MTFkZTI4ZDZiMTU2Zjg5ZjVlN2NjNzA1NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XGcp+6wcTCjHnXPafQO4T+lpkzl g8zzNF7k/ws5RXNp8IHHHyvLWYFreYRNvztbCaiZ2mAbxEIsELMEFBhRO9UPdeHc T6PRaOSk3/K6+Q9wDRlI6EEJpIUFhFyy0V3DmJ8FGbKgv5SsebH+OBa4tm+r5aXf dwFDKFtMXWxQDAk/WXh0J4uUncU32sYAmX3m6jY6z5bQNtQFpgCN0SgGWH89tL0k THSROSamtJ8TorbWOa7ar03HjQVhZjafDEYGBLqnCfqHqpjaXuOqSdqmgV6phmlO /1nvnz0ulZPQkJltFt/potokoefXtR6SBHuwHFTmEV5hDDKEpnKyVVcv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeFUWO4r4Ed4o1rFW+J9efMcFeeMB8GA1UdIwQY MBaAFMUiTqRdCB1AL/1r9N2V4/9vLcSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUt NTIzNTZjZDVkYTkwLzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUtNTIzNTZjZDVkYTkw LzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKFaS0QV R2TdCaZxRWctxMj6bSTI0Ke+CGwXQiJwX3YABYBB8uwFGgoMqp0vFKInqC3Aoh/J Tb3GNmiB8NXSwb6Ifkj3wUkkE6i9yIpilyl1z0EKwZyFDtmE5jjAoq/fUuXxEi4p EdCkAIa5DCvv1PVT11h4RZvfb8YGrzdo5cJbI1z+qgEJLyu2zm0ekW2Gyw6jdzHp 7MDv5uel0W6IEgUX6h6nA8YKo6NsBaka4ldSHeB0kkHrpF6g+YuppgeiS6fU6H9U RVY3ZoI89U6cvQpq+NjUGL+u3wndM2RrTaFt0sZouCl67t0LIbhrWEnZRmQj08a4 9WkZ5Zp1r8nUbA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:54:40 2026 by rpki-client