This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json) Hash identifier: a5/2Uu1agu29WkUbqiM2+edXLKt8B0Tpf0xIbuwIaTM= Subject key identifier: F2:34:92:92:69:2F:B8:2A:55:B1:78:5D:F8:FB:A6:72:47:8B:58:05 Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Certificate serial: 019BFCC0DFB5A4483F9BF21DB83F8F683575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 00:00:57 +0000 Manifest this update: Tue 27 Jan 2026 00:00:57 +0000 Manifest next update: Wed 28 Jan 2026 00:00:57 +0000 Files and hashes: 1: lXZ70sH06yN7K7WcAZYGhagQGQU.roa (hash: eJ37tNCDP1cEuP29zNg/vJT6DSno9tiJhEXL9Ek6IDY=) 2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: K6bb9ID57vOjUSQ4CcWLvUd9LDaTrmX0dyNumO0vk+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:df:b5:a4:48:3f:9b:f2:1d:b8:3f:8f:68:35:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Validity Not Before: Jan 27 00:00:57 2026 GMT Not After : Jan 28 00:00:57 2026 GMT Subject: CN=f2349292692fb82a55b1785df8fba672478b5805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:da:a2:18:05:4a:d5:72:45:ec:9f:0e:93: 7b:a6:c9:87:51:8c:d2:46:0d:ec:45:b6:87:ab:3b: cf:a9:6c:91:95:30:04:de:04:a8:56:f3:03:a2:a3: f1:7b:f9:96:d9:15:51:40:3f:46:8f:d9:76:42:37: 85:98:7d:5d:22:64:72:21:0c:ed:88:a9:ac:ab:aa: 9d:79:4f:41:9e:57:99:36:37:cf:d9:de:13:53:ba: e6:21:04:b6:26:83:1e:7c:15:4e:39:27:9f:fa:0f: 4d:9d:3e:b2:6b:19:7a:6b:2c:f3:95:13:b7:6e:6b: 24:9b:c5:40:f2:93:52:8a:ae:a2:16:34:c7:32:0a: bd:18:eb:5b:7b:3e:e3:83:20:50:36:e8:47:ae:b7: 08:3b:ee:c4:15:b7:d9:09:e4:a0:d0:e3:f1:0b:ed: f3:97:5a:92:fe:cf:bb:e0:47:ae:09:76:26:60:05: 56:16:b6:ff:84:cc:e7:fa:aa:85:28:e1:fc:6b:72: 1c:7a:d7:90:06:18:39:e3:de:e2:38:22:eb:72:39: 65:b8:4f:d2:37:3e:de:14:fb:7c:ac:78:9b:a2:7c: 14:ed:7b:f8:0c:44:28:0c:78:6b:59:7c:7a:52:b1: b0:e3:0a:fb:84:7f:0b:5b:21:aa:55:25:d1:e4:5c: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:34:92:92:69:2F:B8:2A:55:B1:78:5D:F8:FB:A6:72:47:8B:58:05 X509v3 Authority Key Identifier: keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4a:b8:f4:15:e4:49:22:e8:36:b1:1d:be:fe:09:43:be:5f: 34:d1:aa:7d:5d:ea:43:61:f0:4e:40:be:95:17:f0:15:96:51: 16:91:10:89:42:86:fc:d2:9d:79:f5:39:33:6a:09:c2:e5:55: d8:5f:3f:95:e8:48:fa:83:fe:ae:96:67:09:32:50:63:91:66: 2d:21:07:67:ef:52:77:5b:37:ea:2f:ef:a7:f1:b9:c9:91:a7: 91:31:02:2b:3b:c7:48:b3:4b:10:06:90:f0:f6:08:47:16:13: fb:0e:63:38:7c:3d:39:d2:2f:04:dd:63:48:6b:9e:81:70:09: d5:b8:a1:5b:4d:4e:b9:af:1e:15:94:d3:06:6e:f7:a0:af:a9: 5d:28:f0:73:d7:fc:64:0e:6e:eb:43:08:07:db:51:c0:69:a2: 4b:30:ca:2a:9c:57:e0:ab:9a:55:29:97:ec:97:7a:1b:b1:af: bb:91:ce:2d:1b:28:3a:38:91:91:d2:a9:cd:1c:f7:23:7e:d2: 5c:d0:30:24:a9:f6:19:e7:14:a8:e8:a6:99:d5:3c:76:6b:ef: 31:d1:f3:24:77:09:60:e4:bd:65:6d:0f:8a:18:89:00:2e:d9: 9b:0c:c5:bc:41:07:f1:01:78:b8:c9:90:32:19:ff:4c:7d:d7: 27:a8:71:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wN+1pEg/m/IduD+PaDV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjZmMDdiMTczMzYwZjIxNWYxNTE4Yzg3MTJhNGIwNTRk ODVjMDcwHhcNMjYwMTI3MDAwMDU3WhcNMjYwMTI4MDAwMDU3WjAzMTEwLwYDVQQD EyhmMjM0OTI5MjY5MmZiODJhNTViMTc4NWRmOGZiYTY3MjQ3OGI1ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6HaohgFStVyReyfDpN7psmHUYzS Rg3sRbaHqzvPqWyRlTAE3gSoVvMDoqPxe/mW2RVRQD9Gj9l2QjeFmH1dImRyIQzt iKmsq6qdeU9BnleZNjfP2d4TU7rmIQS2JoMefBVOOSef+g9NnT6yaxl6ayzzlRO3 bmskm8VA8pNSiq6iFjTHMgq9GOtbez7jgyBQNuhHrrcIO+7EFbfZCeSg0OPxC+3z l1qS/s+74EeuCXYmYAVWFrb/hMzn+qqFKOH8a3IceteQBhg5497iOCLrcjlluE/S Nz7eFPt8rHibonwU7Xv4DEQoDHhrWXx6UrGw4wr7hH8LWyGqVSXR5FynhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI0kpJpL7gqVbF4Xfj7pnJHi1gFMB8GA1UdIwQY MBaAFMa28HsXM2DyFfFRjIcSpLBU2FwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTct MjhkOTRmY2IxMDg4LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTctMjhkOTRmY2IxMDg4 LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUq49BXk SSLoNrEdvv4JQ75fNNGqfV3qQ2HwTkC+lRfwFZZRFpEQiUKG/NKdefU5M2oJwuVV 2F8/lehI+oP+rpZnCTJQY5FmLSEHZ+9Sd1s36i/vp/G5yZGnkTECKzvHSLNLEAaQ 8PYIRxYT+w5jOHw9OdIvBN1jSGuegXAJ1bihW01Oua8eFZTTBm73oK+pXSjwc9f8 ZA5u60MIB9tRwGmiSzDKKpxX4KuaVSmX7Jd6G7Gvu5HOLRsoOjiRkdKpzRz3I37S XNAwJKn2GecUqOimmdU8dmvvMdHzJHcJYOS9ZW0PihiJAC7ZmwzFvEEH8QF4uMmQ Mhn/TH3XJ6hxdQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:58:47 2026 by rpki-client