This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json) Hash identifier: /VusUKbpw5/36QbfYZ1gGax0Ft30Oin+4d5g2Gvt4xw= Subject key identifier: 31:D2:FE:F9:0E:FC:99:71:0A:78:87:13:DB:AC:40:1E:97:65:9B:9D Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b Certificate serial: 019BFB76F37469FB330DF8EC71974B5A37F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft Manifest number: 07D8 Signing time: Mon 26 Jan 2026 18:00:35 +0000 Manifest this update: Mon 26 Jan 2026 18:00:35 +0000 Manifest next update: Tue 27 Jan 2026 18:00:35 +0000 Files and hashes: 1: RgWi-aprHOGj2N0T2_M-Cs4Yuhc.roa (hash: FwSEX5ZWPDMp7ATa85IYHEA7kyGOC21zknxdskogO04=) 2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: bk3e5k4TTYor6r+/sa+008dV7h+b7GzNyKd3CUEl8Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:76:f3:74:69:fb:33:0d:f8:ec:71:97:4b:5a:37:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b Validity Not Before: Jan 26 18:00:35 2026 GMT Not After : Jan 27 18:00:35 2026 GMT Subject: CN=31d2fef90efc99710a788713dbac401e97659b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:c7:ed:ae:f1:a5:24:2e:9e:f1:5b:ce:0d: 7f:15:e9:e1:1a:2a:26:cb:23:7b:e7:f4:51:37:23: 6f:6c:98:f8:8b:a7:4a:58:81:f8:86:8e:c2:ed:03: aa:c5:5f:f1:39:4f:ed:69:5c:58:fd:ec:4f:e0:ca: 70:8f:00:44:80:28:13:9d:fd:c9:79:b4:2b:54:bb: 6d:3b:ad:e0:e8:01:ad:4d:d1:cd:8b:f0:39:b1:f9: ec:68:04:a6:1f:a7:5a:ad:40:d0:eb:48:47:49:3e: 40:1f:fd:71:bb:40:db:e0:26:fe:bf:0e:35:b6:2d: 62:a3:65:bd:41:08:15:72:19:e5:e6:e9:4d:26:98: 5d:c1:9f:ff:ae:65:b9:bc:dc:04:ef:10:6b:37:91: 66:6c:7f:44:47:da:10:67:cc:a2:f9:58:b9:27:da: 17:1a:21:6c:10:c8:fb:b9:7f:53:39:8c:7c:67:07: 98:9d:0a:b6:ef:73:13:19:10:ec:88:d6:2f:ae:09: 1e:29:11:dd:5b:7f:ed:4d:f8:f3:04:0d:39:5d:bf: 82:6d:82:40:a8:82:e0:39:cf:80:57:c9:0a:03:13: 6b:62:97:36:79:b7:1f:05:24:83:6d:27:c4:83:5e: 70:b5:ea:6e:b8:26:e1:fe:c4:09:2c:72:7d:41:38: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:FE:F9:0E:FC:99:71:0A:78:87:13:DB:AC:40:1E:97:65:9B:9D X509v3 Authority Key Identifier: keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d4:60:f2:fb:21:79:34:f9:e3:ae:f9:d9:cc:fa:c6:5a:5a: b9:2b:91:18:54:70:19:f2:f9:1f:fe:97:8b:8c:65:d5:dc:ac: bd:65:51:1e:bd:1d:d8:e7:50:2d:ad:f5:0f:95:96:01:5f:3f: 87:cb:71:69:6e:0d:06:82:16:f2:7a:f0:54:f1:d6:c8:e7:6e: ca:45:a9:cb:f8:0a:79:11:6a:f3:7e:de:3b:5e:32:fb:1f:69: 3c:09:9b:8e:57:8e:68:42:7e:7d:ab:d7:fa:b2:ce:43:9d:53: 27:b3:3b:6f:ca:0b:3b:49:f7:ff:8a:ea:a4:34:79:3f:3d:d5: 78:e9:d1:40:bf:d4:69:97:27:67:4e:67:1c:38:ef:d3:49:06: e3:cb:47:79:b3:e2:ed:08:58:ec:64:7a:ac:59:9e:08:c4:94: 4b:f8:a1:fa:52:65:0a:93:b2:08:84:b7:5c:bd:90:17:68:ef: 33:07:5d:0a:81:2c:71:1f:4e:93:32:8c:57:c0:c1:7e:83:06: ce:21:2d:18:dd:7a:af:20:de:3a:f8:76:da:d4:2d:ec:17:a9: ef:b3:27:ef:a2:0c:7e:dc:1d:57:d2:c8:b8:0c:c7:a8:54:31: d2:c6:6b:1b:ca:2d:52:fd:ee:33:85:e4:09:75:a6:1f:6a:b6: 54:c1:55:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dvN0afszDfjscZdLWjfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MjA4YThiODViY2I4MDdjYWQ2NDEzODU0MzI2M2FjYjIw NDQ0OGIwHhcNMjYwMTI2MTgwMDM1WhcNMjYwMTI3MTgwMDM1WjAzMTEwLwYDVQQD EygzMWQyZmVmOTBlZmM5OTcxMGE3ODg3MTNkYmFjNDAxZTk3NjU5YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG7H7a7xpSQunvFbzg1/FenhGiom yyN75/RRNyNvbJj4i6dKWIH4ho7C7QOqxV/xOU/taVxY/exP4MpwjwBEgCgTnf3J ebQrVLttO63g6AGtTdHNi/A5sfnsaASmH6darUDQ60hHST5AH/1xu0Db4Cb+vw41 ti1io2W9QQgVchnl5ulNJphdwZ//rmW5vNwE7xBrN5FmbH9ER9oQZ8yi+Vi5J9oX GiFsEMj7uX9TOYx8ZweYnQq273MTGRDsiNYvrgkeKRHdW3/tTfjzBA05Xb+CbYJA qILgOc+AV8kKAxNrYpc2ebcfBSSDbSfEg15wtepuuCbh/sQJLHJ9QTgklwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHS/vkO/JlxCniHE9usQB6XZZudMB8GA1UdIwQY MBaAFMcgiouFvLgHytZBOFQyY6yyBESLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgt MGY2YzQxMmNmM2RmLzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgtMGY2YzQxMmNmM2Rm LzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdRg8vsh eTT546752cz6xlpauSuRGFRwGfL5H/6Xi4xl1dysvWVRHr0d2OdQLa31D5WWAV8/ h8txaW4NBoIW8nrwVPHWyOduykWpy/gKeRFq837eO14y+x9pPAmbjleOaEJ+favX +rLOQ51TJ7M7b8oLO0n3/4rqpDR5Pz3VeOnRQL/UaZcnZ05nHDjv00kG48tHebPi 7QhY7GR6rFmeCMSUS/ih+lJlCpOyCIS3XL2QF2jvMwddCoEscR9OkzKMV8DBfoMG ziEtGN16ryDeOvh22tQt7Bep77Mn76IMftwdV9LIuAzHqFQx0sZrG8otUv3uM4Xk CXWmH2q2VMFVsw== -----END CERTIFICATE-----Generated at Mon Jan 26 20:29:37 2026 by rpki-client