This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: waAJ2+wRKBwvZ5jMsPo9fg8v0xRnvh13/bq3Za3BNhw= Subject key identifier: 7D:B9:0C:EE:E6:F0:28:9D:0B:D9:57:5E:CF:E3:11:77:DB:D3:30:3D Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019BFC531F46F63212EB9FA7E38A03CB2E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 17FB Signing time: Mon 26 Jan 2026 22:01:04 +0000 Manifest this update: Mon 26 Jan 2026 22:01:04 +0000 Manifest next update: Tue 27 Jan 2026 22:01:04 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: sx6VkKCqwZKYbPDQg01ueYM+TqCjVnuSXrPGbd98AO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:1f:46:f6:32:12:eb:9f:a7:e3:8a:03:cb:2e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 26 22:01:04 2026 GMT Not After : Jan 27 22:01:04 2026 GMT Subject: CN=7db90ceee6f0289d0bd9575ecfe31177dbd3303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:bd:48:03:d3:60:e8:5b:08:70:67:01:63: 5c:d5:df:2f:02:08:fe:f3:8a:56:e7:00:27:cd:ca: d5:11:47:e7:b3:d5:f2:ae:4a:c8:74:75:26:af:3f: 8e:cd:9c:9d:30:6b:01:2b:7d:50:6d:c5:e4:be:25: ec:8e:69:48:d9:95:9e:e1:34:01:d1:b3:6f:4b:24: a2:f7:fe:33:af:86:fb:02:43:da:3b:77:6d:f7:e4: 44:55:d9:12:aa:12:6f:ce:08:07:dd:6b:fa:29:2f: e3:72:87:fe:ba:29:91:6b:8c:5d:2b:52:51:5c:2e: 6f:de:75:8a:2b:75:9e:15:d8:19:d6:3b:b2:06:3a: 00:bd:2f:85:f0:19:8a:31:b4:4d:08:5e:3e:60:09: 31:3b:6e:3f:15:7e:7d:3f:11:12:6e:3a:47:ca:e6: f0:38:11:6b:b8:eb:79:a9:46:7a:8f:e7:ea:1c:38: 4c:22:90:3c:a1:ec:db:6b:ac:25:d0:9a:7c:f4:0a: c8:a7:88:80:07:2d:b8:bc:84:c1:8f:e4:44:3a:a7: 12:40:f0:03:c5:6b:b9:99:a6:ca:d1:04:0b:65:3d: 23:b4:7f:4e:71:99:b1:e9:31:e2:60:d4:22:00:ac: 15:ec:ff:b1:1a:17:d4:ff:ad:6c:08:b0:a3:63:74: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B9:0C:EE:E6:F0:28:9D:0B:D9:57:5E:CF:E3:11:77:DB:D3:30:3D X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:00:88:a1:56:d7:2e:0b:73:9b:36:67:c0:bb:51:6a:12:11: 8a:da:99:64:d0:f3:17:eb:03:e7:c3:c8:c1:0c:69:fe:90:41: ef:17:2f:6a:0b:ec:a6:14:0b:64:0e:12:e8:f7:8b:bc:30:2a: bd:e4:4b:50:b6:f6:18:45:3d:b0:47:3a:2d:a6:3a:3f:ea:60: 65:0f:11:62:c1:3a:14:8a:c8:03:55:47:8e:c8:fa:1d:b3:54: 74:a7:21:c5:0d:d6:31:93:52:f5:d0:8e:1c:d4:33:da:33:0e: 66:86:29:c2:fa:fd:d7:2d:27:e9:b6:15:78:3d:b0:2d:c7:06: 5b:fa:e5:b8:09:8a:58:2b:8a:94:58:ed:a1:5d:69:5b:b4:28: 8a:4d:48:74:94:ad:57:de:87:3a:7c:30:ec:d9:c0:d3:79:a2: e5:14:2f:f6:71:6c:81:89:0c:83:1c:08:56:98:fc:85:b8:15: 2c:0c:52:2e:c5:13:82:48:90:5f:00:68:1a:b6:cd:5b:c7:45: 76:b5:95:29:2f:8c:77:77:76:2a:bd:4a:b4:c7:6d:10:a8:8d: 52:51:57:f3:5d:eb:38:de:97:cd:db:34:7c:63:a1:6f:76:7e: b7:18:88:a8:ab:60:fd:cd:ea:42:e7:fe:dd:7c:ef:34:50:dc: f5:0e:b8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Ux9G9jIS65+n44oDyy57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTI2MjIwMTA0WhcNMjYwMTI3MjIwMTA0WjAzMTEwLwYDVQQD Eyg3ZGI5MGNlZWU2ZjAyODlkMGJkOTU3NWVjZmUzMTE3N2RiZDMzMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhC9SAPTYOhbCHBnAWNc1d8vAgj+ 84pW5wAnzcrVEUfns9XyrkrIdHUmrz+OzZydMGsBK31QbcXkviXsjmlI2ZWe4TQB 0bNvSySi9/4zr4b7AkPaO3dt9+REVdkSqhJvzggH3Wv6KS/jcof+uimRa4xdK1JR XC5v3nWKK3WeFdgZ1juyBjoAvS+F8BmKMbRNCF4+YAkxO24/FX59PxESbjpHyubw OBFruOt5qUZ6j+fqHDhMIpA8oezba6wl0Jp89ArIp4iABy24vITBj+REOqcSQPAD xWu5mabK0QQLZT0jtH9OcZmx6THiYNQiAKwV7P+xGhfU/61sCLCjY3QOPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH25DO7m8CidC9lXXs/jEXfb0zA9MB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQCIoVbX LgtzmzZnwLtRahIRitqZZNDzF+sD58PIwQxp/pBB7xcvagvsphQLZA4S6PeLvDAq veRLULb2GEU9sEc6LaY6P+pgZQ8RYsE6FIrIA1VHjsj6HbNUdKchxQ3WMZNS9dCO HNQz2jMOZoYpwvr91y0n6bYVeD2wLccGW/rluAmKWCuKlFjtoV1pW7Qoik1IdJSt V96HOnww7NnA03mi5RQv9nFsgYkMgxwIVpj8hbgVLAxSLsUTgkiQXwBoGrbNW8dF drWVKS+Md3d2Kr1KtMdtEKiNUlFX813rON6Xzds0fGOhb3Z+txiIqKtg/c3qQuf+ 3XzvNFDc9Q64nw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:49 2026 by rpki-client