This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json) Hash identifier: ij8IaWMuXkCYquvaNh/pUpZ+2Pj00hCT72N8hUSaxog= Subject key identifier: 6D:D6:C7:48:54:2C:01:AC:FD:FD:C9:88:FE:28:35:3C:C2:4E:03:71 Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Certificate serial: 019C069FD16B00EBAAAB0FF3E8C73E7A7B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft Manifest number: 037F Signing time: Wed 28 Jan 2026 22:01:02 +0000 Manifest this update: Wed 28 Jan 2026 22:01:02 +0000 Manifest next update: Thu 29 Jan 2026 22:01:02 +0000 Files and hashes: 1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=) 2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: WkG0elhVtcXBI2dxzKTWY0tP4Ja/NFcc2lyahJsswD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:9f:d1:6b:00:eb:aa:ab:0f:f3:e8:c7:3e:7a:7b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Validity Not Before: Jan 28 22:01:02 2026 GMT Not After : Jan 29 22:01:02 2026 GMT Subject: CN=6dd6c748542c01acfdfdc988fe28353cc24e0371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:1e:f3:75:21:43:f9:a6:aa:26:0d:28:7d: 30:3f:1e:d5:1b:6a:6b:b1:bd:c3:38:17:e5:c4:71: 65:6f:5e:fc:1c:44:f3:1e:b4:8d:c7:45:7e:42:2c: e0:24:19:ef:ea:cc:f9:bc:07:3e:1a:7c:1b:71:01: 20:73:86:9b:b6:d8:c4:59:a5:1f:8a:a6:f4:72:46: 75:7c:28:85:ad:03:e7:c3:2c:cd:85:4c:30:06:5c: 45:6c:00:9b:82:bd:0a:74:e6:bc:b6:97:7e:0d:fb: de:e8:33:e2:c7:a5:f5:3d:9f:0a:4f:e9:59:7d:20: 8a:86:56:af:ab:7b:17:69:60:56:30:ab:ce:70:5a: 7f:d3:4e:e8:32:83:2e:da:b3:4b:87:02:1c:4c:6c: a6:53:a9:a9:ba:1a:31:30:2e:c8:5f:7d:be:31:10: 9b:88:3f:7d:12:dd:93:5e:29:cb:16:e8:cf:56:23: 02:29:ef:28:00:af:70:20:0f:e3:7b:19:a2:1c:da: 5e:9e:dd:d1:a3:09:de:fc:ff:82:8f:d4:bd:58:2b: 0a:f8:04:ea:72:91:86:b1:98:b5:19:61:2c:40:41: 05:a6:b7:90:bb:65:4b:36:00:52:7e:1d:63:11:ae: 91:46:5c:fc:ea:a2:9d:ad:64:65:15:8e:1a:7c:2e: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:C7:48:54:2C:01:AC:FD:FD:C9:88:FE:28:35:3C:C2:4E:03:71 X509v3 Authority Key Identifier: keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:28:21:69:cd:ea:13:00:a8:98:99:c9:d2:d5:5d:f9:3b:36: 95:12:8a:96:d8:50:71:5d:b4:4b:c7:63:d1:46:92:16:cc:99: 5f:48:00:1c:ff:e7:28:0c:85:7f:de:4f:a2:aa:3f:7b:4e:d1: e6:60:34:2f:26:d9:1b:a6:25:59:ac:ea:63:d0:3f:3a:57:7d: 2f:1c:09:d3:3f:c9:ed:72:99:77:41:18:bc:e6:1f:32:b8:55: 88:99:57:21:a0:9c:bb:19:0a:00:a8:a8:82:23:7f:cb:b9:6d: 7c:ea:76:75:06:e3:39:b1:34:46:c5:4b:be:27:e6:f0:f2:eb: 41:f8:65:8f:f7:8c:fd:9b:94:b0:f3:d5:13:19:d4:4e:65:0a: 6f:71:95:67:35:97:3a:75:98:3b:7b:a0:f2:bb:5d:23:f0:bd: c6:ce:1f:18:c7:fb:d9:53:6e:fc:d3:3c:60:3c:1f:2e:aa:8c: 0b:3b:ce:6a:8f:8e:61:d8:e0:bf:39:80:4d:c4:ba:90:87:97: 3f:c1:3b:75:e8:da:dc:77:0c:75:d5:8b:51:63:cd:fd:43:e4: 4a:06:c6:b4:93:a3:00:8b:cf:2d:2d:74:7e:f3:ae:58:62:97: 1e:82:94:3c:78:2d:00:9b:aa:9d:a9:d6:5d:6b:83:4c:81:14: 40:bf:01:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwGn9FrAOuqqw/z6Mc+ensCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm YWZlMGMwHhcNMjYwMTI4MjIwMTAyWhcNMjYwMTI5MjIwMTAyWjAzMTEwLwYDVQQD Eyg2ZGQ2Yzc0ODU0MmMwMWFjZmRmZGM5ODhmZTI4MzUzY2MyNGUwMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pge83UhQ/mmqiYNKH0wPx7VG2pr sb3DOBflxHFlb178HETzHrSNx0V+QizgJBnv6sz5vAc+GnwbcQEgc4abttjEWaUf iqb0ckZ1fCiFrQPnwyzNhUwwBlxFbACbgr0KdOa8tpd+Dfve6DPix6X1PZ8KT+lZ fSCKhlavq3sXaWBWMKvOcFp/007oMoMu2rNLhwIcTGymU6mpuhoxMC7IX32+MRCb iD99Et2TXinLFujPViMCKe8oAK9wIA/jexmiHNpent3Rowne/P+Cj9S9WCsK+ATq cpGGsZi1GWEsQEEFpreQu2VLNgBSfh1jEa6RRlz86qKdrWRlFY4afC4CowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3Wx0hULAGs/f3JiP4oNTzCTgNxMB8GA1UdIwQY MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0 LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCghac3q EwComJnJ0tVd+Ts2lRKKlthQcV20S8dj0UaSFsyZX0gAHP/nKAyFf95Poqo/e07R 5mA0LybZG6YlWazqY9A/Old9LxwJ0z/J7XKZd0EYvOYfMrhViJlXIaCcuxkKAKio giN/y7ltfOp2dQbjObE0RsVLvifm8PLrQfhlj/eM/ZuUsPPVExnUTmUKb3GVZzWX OnWYO3ug8rtdI/C9xs4fGMf72VNu/NM8YDwfLqqMCzvOao+OYdjgvzmATcS6kIeX P8E7deja3HcMddWLUWPN/UPkSgbGtJOjAIvPLS10fvOuWGKXHoKUPHgtAJuqnanW XWuDTIEUQL8BlA== -----END CERTIFICATE-----Generated at Thu Jan 29 08:39:50 2026 by rpki-client