This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json) Hash identifier: U6k+DGC+d8BxmDXYLmIbYvGFJ28vRvo3qK1grhQq7Ic= Subject key identifier: 51:14:0D:D5:A8:12:EF:AD:C7:A7:23:A5:86:6B:B4:00:96:A3:30:FB Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Certificate serial: 019BDAA3C32416E0663851F12440D1639DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft Manifest number: 01D1 Signing time: Tue 20 Jan 2026 09:02:03 +0000 Manifest this update: Tue 20 Jan 2026 09:02:03 +0000 Manifest next update: Wed 21 Jan 2026 09:02:03 +0000 Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=) 2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: /ysQoq2zADZiO98ckaIJHWzTqn0hCVVzWspwb1VsaLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:a3:c3:24:16:e0:66:38:51:f1:24:40:d1:63:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Validity Not Before: Jan 20 09:02:03 2026 GMT Not After : Jan 21 09:02:03 2026 GMT Subject: CN=51140dd5a812efadc7a723a5866bb40096a330fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:33:15:7e:3a:ad:b9:d1:37:fa:d0:01:76: e8:51:f9:04:61:51:52:84:a8:e4:51:64:6e:57:6c: 50:31:04:42:f0:1c:b0:78:00:e1:8f:0b:8e:8d:f0: 36:5e:88:a2:eb:18:9e:ea:01:fb:c8:5c:ea:6c:c9: 64:db:21:4b:d8:34:fe:d0:0d:15:bb:2c:ec:d4:b7: d2:e4:6c:0a:69:5d:0c:9c:0f:2b:de:1e:5d:07:4c: 7d:bb:af:99:32:66:a2:af:2c:c1:b1:1c:c3:52:23: d2:2e:c7:85:91:b0:a0:02:cb:6b:66:ef:03:41:8a: b1:14:48:cd:32:5c:3b:1b:a4:98:1b:79:ef:3d:fb: 68:58:27:c7:93:8b:e6:c6:7b:25:0e:9d:ea:8e:77: e7:01:3c:ad:1b:94:6f:c4:60:9d:0a:90:60:0b:a2: 4b:dd:3f:3e:09:49:28:ca:a3:09:57:ae:a9:51:c5: aa:c5:65:d1:38:71:a6:f7:2e:14:f2:fb:a2:3f:28: aa:04:1f:cd:c0:9f:95:d2:e9:60:c5:65:0e:29:b8: 24:d6:7e:fa:76:6b:d0:0d:eb:90:39:1f:78:16:20: 74:c9:d5:22:cb:5e:35:42:db:3f:d0:07:b7:9e:01: 6a:bf:8c:e2:1c:ae:1c:12:0e:37:40:51:65:25:08: 93:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:14:0D:D5:A8:12:EF:AD:C7:A7:23:A5:86:6B:B4:00:96:A3:30:FB X509v3 Authority Key Identifier: keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f6:ae:78:23:a4:7a:6b:78:8b:97:02:c4:14:cb:0a:da:59: de:d2:f8:d2:f6:78:6a:39:43:d2:55:6b:e6:29:6a:10:3b:7c: 7d:05:b4:45:da:ef:fb:4a:aa:0a:c1:93:98:d1:72:0a:34:71: 14:40:59:40:62:f9:87:fe:fb:d4:2b:2a:31:f8:3b:dc:6c:85: bf:4b:65:c4:2f:01:e0:fb:90:b6:4a:8f:3e:e9:db:94:33:73: 24:9e:5b:2d:73:ad:0b:df:01:64:b0:54:d1:22:d7:de:44:9a: 74:78:df:27:75:70:cd:83:60:c0:c0:44:95:70:72:bc:8c:d4: 0a:2b:91:e3:f8:7c:9f:ab:3d:17:3c:df:86:ec:1d:9a:20:18: f8:6a:60:e5:24:2c:0b:06:85:12:34:32:48:fc:f2:ce:b2:e1: f9:44:6c:a2:bc:10:75:b1:bf:1d:9f:2b:97:a4:fc:6f:0c:fc: 34:f6:4b:50:cb:82:fb:d1:ea:e0:f6:a2:5a:4e:e2:7b:21:7e: eb:2c:80:34:f3:7d:82:1c:67:11:dc:f3:6d:de:82:6e:68:a6: 1b:cc:07:88:3d:89:40:d5:cb:fb:bb:c4:f8:d4:bb:59:f2:99: 2e:33:a1:14:95:9b:c4:3e:68:c1:04:6a:ae:2a:9d:da:a8:f8: 32:66:68:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvao8MkFuBmOFHxJEDRY53AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZTEwYzdjYmZmZDc0ODhhOTZhMDJkNWM5MTJmOWY5MjU2 NGJiNWMwHhcNMjYwMTIwMDkwMjAzWhcNMjYwMTIxMDkwMjAzWjAzMTEwLwYDVQQD Eyg1MTE0MGRkNWE4MTJlZmFkYzdhNzIzYTU4NjZiYjQwMDk2YTMzMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu0zFX46rbnRN/rQAXboUfkEYVFS hKjkUWRuV2xQMQRC8ByweADhjwuOjfA2Xoii6xie6gH7yFzqbMlk2yFL2DT+0A0V uyzs1LfS5GwKaV0MnA8r3h5dB0x9u6+ZMmairyzBsRzDUiPSLseFkbCgAstrZu8D QYqxFEjNMlw7G6SYG3nvPftoWCfHk4vmxnslDp3qjnfnATytG5RvxGCdCpBgC6JL 3T8+CUkoyqMJV66pUcWqxWXROHGm9y4U8vuiPyiqBB/NwJ+V0ulgxWUOKbgk1n76 dmvQDeuQOR94FiB0ydUiy141Qts/0Ae3ngFqv4ziHK4cEg43QFFlJQiTxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEUDdWoEu+tx6cjpYZrtACWozD7MB8GA1UdIwQY MBaAFMThDHy//XSIqWoC1ckS+fklZLtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUt NDU4YmY1OTY4ZGQxLzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUtNDU4YmY1OTY4ZGQx LzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/aueCOk emt4i5cCxBTLCtpZ3tL40vZ4ajlD0lVr5ilqEDt8fQW0Rdrv+0qqCsGTmNFyCjRx FEBZQGL5h/771CsqMfg73GyFv0tlxC8B4PuQtkqPPunblDNzJJ5bLXOtC98BZLBU 0SLX3kSadHjfJ3VwzYNgwMBElXByvIzUCiuR4/h8n6s9FzzfhuwdmiAY+Gpg5SQs CwaFEjQySPzyzrLh+URsorwQdbG/HZ8rl6T8bwz8NPZLUMuC+9Hq4PaiWk7ieyF+ 6yyANPN9ghxnEdzzbd6CbmimG8wHiD2JQNXL+7vE+NS7WfKZLjOhFJWbxD5owQRq riqd2qj4MmZowA== -----END CERTIFICATE-----Generated at Tue Jan 20 14:02:51 2026 by rpki-client