This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: r8cLYNMEBrI9qFC9v84L45miwFjlLehEC3a8MnLGTmA= Subject key identifier: 67:05:96:B7:AA:18:05:4E:8B:A9:15:E9:89:04:F3:0D:B2:A6:DE:2B Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019C1CF148968FB9E79CB9CC47DF897A27E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 1003 Signing time: Mon 02 Feb 2026 06:01:40 +0000 Manifest this update: Mon 02 Feb 2026 06:01:40 +0000 Manifest next update: Tue 03 Feb 2026 06:01:40 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 5: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 6: P3ksiU6dR-MB5dwO9grj0b7EMXU.roa (hash: bIr8a6sPdRjwwSD8CC5kO5ixUwkkeuD93IkwxtBRKV4=) 7: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 8: kZOd5Cty9wDNke0SSipQ7xUfjXk.roa (hash: Nh7Xl6+9xgc8FPGMljfSPGluYgLxctUPi58GqbyJNFM=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 11: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: dfAsh4qbGSlihVvXv+yfMZSKJikRjVoQ4KiXSKE8/7A=) 12: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f1:48:96:8f:b9:e7:9c:b9:cc:47:df:89:7a:27:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Feb 2 06:01:40 2026 GMT Not After : Feb 3 06:01:40 2026 GMT Subject: CN=670596b7aa18054e8ba915e98904f30db2a6de2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:b8:79:16:9e:e9:3f:bf:e4:f1:9d:28:f7: 4c:d1:d7:9d:7c:09:41:21:06:d5:23:ae:f1:f0:e1: 82:46:6b:46:5f:62:7a:13:d6:b9:82:91:5e:99:c7: be:09:9f:d1:3c:28:1e:dc:46:1c:ce:2a:f5:d5:7a: 8e:9d:4d:bc:1c:45:4c:dd:ea:dc:dd:5b:1c:c1:b1: 75:ef:a4:16:ab:06:f1:5f:4b:e8:22:12:9d:03:97: 4d:67:d7:de:c2:b6:6a:5d:1c:0e:f7:40:4c:29:36: 90:e2:c0:f6:78:f8:41:e3:e7:2a:e5:eb:3d:08:7c: 5f:de:0f:c0:38:eb:e1:ea:36:92:80:63:04:a9:aa: d2:e9:27:ce:e2:b1:51:ce:6c:4d:4e:b4:ed:b1:71: a6:f9:67:bd:36:9e:1c:a4:f9:a3:b5:19:c7:ae:79: cc:8c:10:48:e8:f2:27:4a:f8:0d:10:42:30:f1:4d: 57:09:58:41:b3:5e:af:60:91:94:d3:b5:96:79:7a: 5e:9a:c3:99:cb:20:74:40:09:60:40:f0:64:12:23: 28:9f:4a:21:96:4b:f7:63:c1:81:93:b1:99:2e:b8: 65:b9:cd:e0:0d:e6:2f:4e:6e:9a:32:70:b3:b3:9d: 25:1c:c1:7d:6a:5b:17:53:10:44:89:f6:88:ad:9e: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:96:B7:AA:18:05:4E:8B:A9:15:E9:89:04:F3:0D:B2:A6:DE:2B X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:63:26:38:5c:95:b6:57:63:c5:3c:87:09:ec:e2:7b:c2: 89:76:7b:16:be:2b:97:2c:99:d9:4d:b0:a2:ea:c3:76:48:52: fe:6c:7c:f3:7e:b7:e7:84:54:b0:5f:76:45:41:e1:55:a8:30: 3f:ef:8a:18:79:67:7c:e2:68:c5:3c:bc:0b:68:3d:78:f5:1b: 93:56:77:d4:fd:8b:fc:6c:3b:18:93:21:09:f0:cf:f1:38:e8: 96:ea:f5:f2:54:89:56:29:f6:23:83:66:41:51:4f:ce:96:1b: 87:de:69:36:07:47:08:71:7f:a7:60:c3:0a:30:70:36:25:75: 28:ab:97:79:43:6e:18:3d:7c:2e:d1:e6:a0:0f:06:89:97:9a: 9a:20:81:8f:dd:93:df:f8:72:1b:d3:74:92:43:db:d4:4f:03: dd:d9:38:cf:1c:61:03:13:ed:00:08:5d:e0:2e:ad:d7:33:93: fe:e9:04:e9:d3:8b:15:d3:fc:1c:74:14:e1:f0:2b:8d:8a:ff: e9:fb:c6:d8:3e:44:97:b4:1a:b0:9e:3e:3c:52:29:a2:ca:17: 50:f5:18:a8:b2:a1:43:4a:03:97:c3:1a:8e:b2:fd:7a:79:40: ea:cc:2f:0f:a4:b0:df:7e:f9:2e:a6:b7:b1:cd:f3:16:3c:72: 51:40:d3:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8UiWj7nnnLnMR9+JeifoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMjAyMDYwMTQwWhcNMjYwMjAzMDYwMTQwWjAzMTEwLwYDVQQD Eyg2NzA1OTZiN2FhMTgwNTRlOGJhOTE1ZTk4OTA0ZjMwZGIyYTZkZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupC4eRae6T+/5PGdKPdM0dedfAlB IQbVI67x8OGCRmtGX2J6E9a5gpFemce+CZ/RPCge3EYczir11XqOnU28HEVM3erc 3VscwbF176QWqwbxX0voIhKdA5dNZ9fewrZqXRwO90BMKTaQ4sD2ePhB4+cq5es9 CHxf3g/AOOvh6jaSgGMEqarS6SfO4rFRzmxNTrTtsXGm+We9Np4cpPmjtRnHrnnM jBBI6PInSvgNEEIw8U1XCVhBs16vYJGU07WWeXpemsOZyyB0QAlgQPBkEiMon0oh lkv3Y8GBk7GZLrhluc3gDeYvTm6aMnCzs50lHMF9alsXUxBEifaIrZ6wOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcFlreqGAVOi6kV6YkE8w2ypt4rMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcxjJjhc lbZXY8U8hwns4nvCiXZ7Fr4rlyyZ2U2wourDdkhS/mx8836354RUsF92RUHhVagw P++KGHlnfOJoxTy8C2g9ePUbk1Z31P2L/Gw7GJMhCfDP8Tjolur18lSJVin2I4Nm QVFPzpYbh95pNgdHCHF/p2DDCjBwNiV1KKuXeUNuGD18LtHmoA8GiZeamiCBj92T 3/hyG9N0kkPb1E8D3dk4zxxhAxPtAAhd4C6t1zOT/ukE6dOLFdP8HHQU4fArjYr/ 6fvG2D5El7QasJ4+PFIposoXUPUYqLKhQ0oDl8MajrL9enlA6swvD6Sw3375Lqa3 sc3zFjxyUUDTCQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:18:08 2026 by rpki-client