This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json) Hash identifier: LsC/toYEw6U8VjtiABIIxd0a5ddo4xsni9TMnhj2cyg= Subject key identifier: F5:32:B2:D4:06:C8:9B:78:A8:AC:21:32:45:C5:AE:61:71:F8:3B:38 Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Certificate serial: 019BFEAF19D4621B99746EB7820821806857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft Manifest number: 1702 Signing time: Tue 27 Jan 2026 09:00:46 +0000 Manifest this update: Tue 27 Jan 2026 09:00:46 +0000 Manifest next update: Wed 28 Jan 2026 09:00:46 +0000 Files and hashes: 1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=) 2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=) 3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=) 4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=) 5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: DwIcilaC8jyUrvEuuPJtMsB9XT5amAzxjy8+cowy/dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:19:d4:62:1b:99:74:6e:b7:82:08:21:80:68:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Validity Not Before: Jan 27 09:00:46 2026 GMT Not After : Jan 28 09:00:46 2026 GMT Subject: CN=f532b2d406c89b78a8ac213245c5ae6171f83b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:ac:8f:cd:59:bc:4c:86:9d:be:0c:b5:8a: ee:e9:96:cb:c9:46:e3:51:9c:17:8d:7b:56:93:6e: ed:12:22:7e:a6:3e:68:bb:b1:00:2d:32:7c:66:3a: 48:c1:cd:c6:19:58:2b:48:31:2f:5f:97:c3:8b:c2: de:20:2b:a9:4e:c9:b0:3c:a6:bb:a6:af:04:38:b2: 8e:80:f6:c0:af:1b:7f:ef:63:cf:9b:8d:51:d6:94: 56:8e:9b:6e:d6:4e:40:ee:b3:6e:e7:67:09:1a:b2: 2f:7d:5f:b9:58:d5:2e:d0:68:a6:97:cd:dd:06:2a: 53:8c:0c:cd:91:fd:4a:a9:bc:a2:98:44:ca:75:22: d7:3c:f1:31:cc:f2:62:9b:2f:ea:c6:cc:61:8b:05: 16:6f:4d:29:c7:f2:c7:a0:7e:1a:df:17:db:7f:da: e3:31:df:32:2a:7a:23:cf:c5:3c:0c:bb:25:00:fe: ec:b6:ca:ed:f3:64:bd:d2:07:c8:8d:0c:ed:b7:58: b8:29:9c:f1:af:d0:a9:d2:33:ac:d9:f7:aa:31:11: f2:a9:2a:11:a1:14:5d:3e:01:ef:81:db:3e:43:a2: af:8c:d7:3d:74:03:c7:f7:f4:65:2e:08:04:ae:35: 28:a8:f4:19:f7:7e:a2:ab:bd:a4:95:72:ac:d6:25: f1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:32:B2:D4:06:C8:9B:78:A8:AC:21:32:45:C5:AE:61:71:F8:3B:38 X509v3 Authority Key Identifier: keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a8:e7:29:c4:ef:a8:88:7e:45:26:98:9a:6b:d4:2e:e3:fe: 0d:17:2c:96:1c:b0:f4:55:21:68:3b:ba:7e:34:87:48:ff:c7: f8:82:e9:92:cd:b1:13:d8:d3:46:fa:da:45:50:dd:3c:09:5b: 50:47:1b:e7:da:81:37:63:f6:fa:07:af:77:6e:e1:97:e9:6d: 36:36:aa:f2:a3:70:80:8c:8b:e1:e5:4c:cf:dc:52:08:84:1c: 63:11:8d:0d:c0:57:32:70:3d:33:18:d4:55:b6:53:e8:6b:1d: 49:dd:be:03:d8:d5:42:91:18:e6:60:18:ec:fe:ff:e0:38:b0: 3d:db:a4:ba:71:23:5d:9a:ff:64:11:16:15:ed:d4:62:c9:ba: 36:85:94:1a:db:27:44:2a:6e:89:09:04:35:4c:63:64:71:1e: 54:81:d4:48:b5:3c:61:23:81:39:25:9a:35:ad:f9:2a:eb:d9: 4d:ee:b5:4e:70:30:4e:16:de:b1:87:07:bf:f2:2b:bb:86:06: bd:dc:f8:44:15:30:51:a0:12:81:b4:a2:24:1c:17:a8:a4:41: c0:18:c8:0c:c2:3f:7b:72:ca:46:10:c3:83:0f:0d:34:38:fc: aa:c0:9f:43:f8:65:94:9c:6b:39:7b:1c:48:1b:4b:25:8b:da: 1b:b3:76:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+rxnUYhuZdG63ggghgGhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl MTZiNjAwHhcNMjYwMTI3MDkwMDQ2WhcNMjYwMTI4MDkwMDQ2WjAzMTEwLwYDVQQD EyhmNTMyYjJkNDA2Yzg5Yjc4YThhYzIxMzI0NWM1YWU2MTcxZjgzYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4esj81ZvEyGnb4MtYru6ZbLyUbj UZwXjXtWk27tEiJ+pj5ou7EALTJ8ZjpIwc3GGVgrSDEvX5fDi8LeICupTsmwPKa7 pq8EOLKOgPbArxt/72PPm41R1pRWjptu1k5A7rNu52cJGrIvfV+5WNUu0Giml83d BipTjAzNkf1KqbyimETKdSLXPPExzPJimy/qxsxhiwUWb00px/LHoH4a3xfbf9rj Md8yKnojz8U8DLslAP7stsrt82S90gfIjQztt1i4KZzxr9Cp0jOs2feqMRHyqSoR oRRdPgHvgds+Q6KvjNc9dAPH9/RlLggErjUoqPQZ936iq72klXKs1iXx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUystQGyJt4qKwhMkXFrmFx+Ds4MB8GA1UdIwQY MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt M2QxZjMwZTA5MjNiLzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaajnKcTv qIh+RSaYmmvULuP+DRcslhyw9FUhaDu6fjSHSP/H+ILpks2xE9jTRvraRVDdPAlb UEcb59qBN2P2+gevd27hl+ltNjaq8qNwgIyL4eVMz9xSCIQcYxGNDcBXMnA9MxjU VbZT6GsdSd2+A9jVQpEY5mAY7P7/4DiwPdukunEjXZr/ZBEWFe3UYsm6NoWUGtsn RCpuiQkENUxjZHEeVIHUSLU8YSOBOSWaNa35KuvZTe61TnAwThbesYcHv/Iru4YG vdz4RBUwUaASgbSiJBwXqKRBwBjIDMI/e3LKRhDDgw8NNDj8qsCfQ/hllJxrOXsc SBtLJYvaG7N2Vw== -----END CERTIFICATE-----Generated at Tue Jan 27 13:04:19 2026 by rpki-client