This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json) Hash identifier: HnhcxWl0VK/rL0J5Qqe2UiIhKx7q/8xjmDssxrkWlbQ= Subject key identifier: 18:38:04:35:32:5A:07:0F:36:BF:BB:88:E4:52:31:26:39:75:70:3E Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b Certificate serial: 019BFAD24F7B2609AC0A9171B03C70A6983D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft Manifest number: 09AF Signing time: Mon 26 Jan 2026 15:00:45 +0000 Manifest this update: Mon 26 Jan 2026 15:00:45 +0000 Manifest next update: Tue 27 Jan 2026 15:00:45 +0000 Files and hashes: 1: 73qIjcwhVoNUSh6y8S9vmR-78LI.roa (hash: W2dcEwkCBgOixH5r0yINyyX7ud/0OMWWSsCwZ1EhRwo=) 2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: N6vkOMJSh/qmX40d1DbgBSMo/42LP4lSHBLCremOMuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:4f:7b:26:09:ac:0a:91:71:b0:3c:70:a6:98:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b Validity Not Before: Jan 26 15:00:45 2026 GMT Not After : Jan 27 15:00:45 2026 GMT Subject: CN=18380435325a070f36bfbb88e45231263975703e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:84:38:4e:5b:ac:2b:fb:7e:5d:e2:ab:55: 23:2c:bf:f9:ca:b7:f9:96:ea:67:6c:53:59:98:a8: c9:a4:58:40:f9:9a:bf:84:e0:6c:6e:29:d4:1c:5e: fc:44:80:d8:d8:60:d3:d2:5e:9e:6d:71:5f:ce:18: 3b:71:cd:df:8c:4a:1a:b3:d4:96:be:2d:cb:01:02: 14:88:73:65:7e:8d:88:f0:25:45:ae:45:65:42:78: 95:d2:4d:47:90:d4:cb:e4:de:a4:e8:3d:ea:b6:f4: 1e:1c:59:52:76:3a:cc:13:bf:41:c4:50:d7:cf:82: d9:19:45:d7:a6:6c:4c:ba:40:1b:17:88:35:df:37: 56:9e:3a:44:d8:05:a7:ec:37:40:a4:e3:3b:d4:df: c0:37:0d:b2:22:96:3f:44:45:51:a7:65:4b:36:61: 5a:be:eb:7c:40:e7:67:b2:0a:70:7c:ef:32:ae:40: 66:67:d9:b8:22:8f:3a:c4:e4:dd:a2:b7:9e:97:9a: bd:c6:4b:cb:68:1d:d5:31:67:43:3d:7a:fe:f1:d6: 9d:b7:91:2c:97:0c:3c:75:2e:20:37:55:b2:ef:d0: b3:f2:e3:16:ae:53:6c:7c:da:9b:74:5f:6e:80:99: dd:9a:08:73:2b:e6:29:c8:7d:56:11:f9:cd:20:02: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:38:04:35:32:5A:07:0F:36:BF:BB:88:E4:52:31:26:39:75:70:3E X509v3 Authority Key Identifier: keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7c:b5:b5:57:c9:e2:ef:ed:61:04:3f:3d:68:c2:8b:ef:a0: 4c:7f:f6:2d:da:5b:7f:ba:af:f4:aa:90:95:d8:f4:52:29:25: 4a:5a:bb:d9:4e:25:c8:3e:8c:44:5b:c1:cc:d6:30:f5:63:52: 6b:16:37:6d:97:a6:4e:30:0b:b8:1f:6d:4a:88:e0:10:c3:83: 1f:98:e1:ec:65:41:53:e8:eb:19:84:1c:c3:9a:46:a2:9f:59: 30:b2:17:bf:58:25:f8:40:72:cb:97:3e:18:d8:53:2b:11:73: 8d:12:e5:2f:68:45:55:96:e6:a7:b0:67:41:57:7b:e8:29:78: be:38:a6:9f:7d:db:7e:28:09:6f:81:51:11:ba:f9:61:b7:36: 5b:36:95:43:4d:be:7b:f6:f5:eb:88:ae:2c:4e:54:2a:2f:7c: 09:0f:d1:c4:c3:f1:ca:98:4a:81:fa:14:9f:52:b5:ef:d1:08: 30:40:bd:64:15:52:ba:e1:76:70:22:66:f9:d0:57:78:da:d0: 58:4e:65:a8:93:1d:9a:50:4f:2a:61:bc:ed:da:aa:d2:f3:56: c4:85:0e:92:a7:73:40:96:dd:7d:e1:8c:0c:94:af:49:3d:30: 0e:d4:d1:67:87:d7:35:3b:1b:bd:f7:23:c8:23:19:78:5b:9d: a7:1a:2a:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60k97JgmsCpFxsDxwppg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NGRkODgyODUyY2M0NTg2YjFmZWUzNGMwNTAxZDVkYjdk NjBmMGIwHhcNMjYwMTI2MTUwMDQ1WhcNMjYwMTI3MTUwMDQ1WjAzMTEwLwYDVQQD EygxODM4MDQzNTMyNWEwNzBmMzZiZmJiODhlNDUyMzEyNjM5NzU3MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt56EOE5brCv7fl3iq1UjLL/5yrf5 lupnbFNZmKjJpFhA+Zq/hOBsbinUHF78RIDY2GDT0l6ebXFfzhg7cc3fjEoas9SW vi3LAQIUiHNlfo2I8CVFrkVlQniV0k1HkNTL5N6k6D3qtvQeHFlSdjrME79BxFDX z4LZGUXXpmxMukAbF4g13zdWnjpE2AWn7DdApOM71N/ANw2yIpY/REVRp2VLNmFa vut8QOdnsgpwfO8yrkBmZ9m4Io86xOTdoreel5q9xkvLaB3VMWdDPXr+8dadt5Es lww8dS4gN1Wy79Cz8uMWrlNsfNqbdF9ugJndmghzK+YpyH1WEfnNIAKu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg4BDUyWgcPNr+7iORSMSY5dXA+MB8GA1UdIwQY MBaAFMVN2IKFLMRYax/uNMBQHV231g8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWIt NmZiZTI5MzE3MWZlLzEveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWItNmZiZTI5MzE3MWZl LzEveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHy1tVfJ 4u/tYQQ/PWjCi++gTH/2Ldpbf7qv9KqQldj0UiklSlq72U4lyD6MRFvBzNYw9WNS axY3bZemTjALuB9tSojgEMODH5jh7GVBU+jrGYQcw5pGop9ZMLIXv1gl+EByy5c+ GNhTKxFzjRLlL2hFVZbmp7BnQVd76Cl4vjimn33bfigJb4FREbr5Ybc2WzaVQ02+ e/b164iuLE5UKi98CQ/RxMPxyphKgfoUn1K179EIMEC9ZBVSuuF2cCJm+dBXeNrQ WE5lqJMdmlBPKmG87dqq0vNWxIUOkqdzQJbdfeGMDJSvST0wDtTRZ4fXNTsbvfcj yCMZeFudpxoq3w== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:31 2026 by rpki-client