This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json) Hash identifier: iRPXaCY6/zK+jJuWFZazGI4pubSh5kLqLzuYxxunB6w= Subject key identifier: CB:4F:92:48:E4:4C:38:1C:23:AA:23:21:7C:AD:72:36:7E:67:8C:A3 Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e Certificate serial: 019BF8ACD9DD3341697CCDDA919997080320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft Manifest number: 17FB Signing time: Mon 26 Jan 2026 05:00:36 +0000 Manifest this update: Mon 26 Jan 2026 05:00:36 +0000 Manifest next update: Tue 27 Jan 2026 05:00:36 +0000 Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=) 2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=) 3: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=) 4: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: Ch0se5L3esllVRlSHf+Ty7iJ/+jdtpV08H5zv+d04Ig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:d9:dd:33:41:69:7c:cd:da:91:99:97:08:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e Validity Not Before: Jan 26 05:00:36 2026 GMT Not After : Jan 27 05:00:36 2026 GMT Subject: CN=cb4f9248e44c381c23aa23217cad72367e678ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:4a:12:f9:ab:80:87:af:11:01:24:f8:9e: 7d:ee:6c:5e:36:fd:c2:40:09:9c:a5:d7:83:9a:51: a4:28:92:6d:f7:2d:4c:2d:62:6f:c6:f8:4b:0b:1c: 56:0b:ee:7a:23:e2:ad:eb:21:43:d3:18:1f:6b:40: 1f:49:13:c3:42:3a:2d:f1:b5:46:ec:80:be:51:02: 3b:54:4f:22:bc:37:78:79:25:13:0a:4d:7e:14:31: 0e:bc:1c:1c:0d:01:71:71:79:14:eb:7b:69:7b:51: ee:ed:84:f3:ed:c5:eb:ed:55:68:b6:a9:ab:5a:55: ea:63:63:ec:2f:3c:8b:fb:d7:2d:e8:65:c3:d1:32: 76:d6:64:fb:55:69:d4:53:4e:12:c6:4a:ee:8a:b9: 01:92:56:d6:48:99:35:f9:65:b6:31:c8:f0:70:bf: 30:c4:73:6e:3f:4d:9d:a1:12:c5:18:b1:42:0b:ad: ea:8c:60:c9:3a:a0:fa:b3:c6:25:64:67:5b:fd:b3: c0:b2:9b:ad:42:8c:fc:a4:0d:ce:ca:64:ec:56:a1: 7c:e5:8a:40:df:81:9a:99:f1:3a:5a:18:39:e1:7a: dd:bf:b3:44:e5:49:45:5d:23:2f:c3:17:76:e0:fd: ff:d4:07:91:de:14:3d:9d:b6:7f:bd:be:02:70:97: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:92:48:E4:4C:38:1C:23:AA:23:21:7C:AD:72:36:7E:67:8C:A3 X509v3 Authority Key Identifier: keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1f:5a:17:e0:a7:ea:7c:1f:d4:7c:ac:21:3c:a0:cf:8e:0a: f0:0a:b2:c3:77:95:bf:56:bf:85:2b:3e:ef:bb:21:45:67:69: 58:e3:35:06:09:57:0c:e2:8c:ff:c6:49:0b:37:3a:87:d1:bd: 4d:e2:9f:3a:77:df:a2:8e:d8:d4:ca:e4:e3:31:95:23:66:1a: d5:04:b6:ce:e6:b1:8e:45:45:7d:d1:ea:00:ac:17:bc:cc:e6: 54:06:d4:50:b2:1d:df:8e:cb:9c:71:dd:6f:d8:1d:99:be:f1: 1f:9b:61:48:d9:20:53:89:e9:2f:c9:09:3c:51:89:3b:31:9a: 00:65:ab:87:80:0d:a8:30:ee:21:4f:0a:61:cd:be:de:0b:32: 29:91:22:5e:0b:18:77:2a:14:45:45:de:6a:39:44:c8:92:be: 7f:4d:eb:2b:f2:9f:3f:76:cb:af:16:3d:0f:e5:ae:f2:14:a2: 65:bd:e1:cc:0b:99:ba:25:ae:e5:5a:0d:fb:5d:d7:a6:34:d8: 3b:7d:ad:ae:fa:1e:b3:46:97:fb:5f:85:22:a9:94:a9:fa:47: 0a:f2:e8:e4:c2:10:d9:33:bd:65:77:98:0e:59:2e:55:44:b7: 51:0a:c1:9a:11:98:20:83:87:6f:91:54:8f:27:b4:a5:41:9d: aa:b5:52:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rNndM0FpfM3akZmXCAMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh Y2VjNmUwHhcNMjYwMTI2MDUwMDM2WhcNMjYwMTI3MDUwMDM2WjAzMTEwLwYDVQQD EyhjYjRmOTI0OGU0NGMzODFjMjNhYTIzMjE3Y2FkNzIzNjdlNjc4Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT9KEvmrgIevEQEk+J597mxeNv3C QAmcpdeDmlGkKJJt9y1MLWJvxvhLCxxWC+56I+Kt6yFD0xgfa0AfSRPDQjot8bVG 7IC+UQI7VE8ivDd4eSUTCk1+FDEOvBwcDQFxcXkU63tpe1Hu7YTz7cXr7VVotqmr WlXqY2PsLzyL+9ct6GXD0TJ21mT7VWnUU04SxkruirkBklbWSJk1+WW2McjwcL8w xHNuP02doRLFGLFCC63qjGDJOqD6s8YlZGdb/bPAsputQoz8pA3OymTsVqF85YpA 34GamfE6Whg54Xrdv7NE5UlFXSMvwxd24P3/1AeR3hQ9nbZ/vb4CcJfjoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtPkkjkTDgcI6ojIXytcjZ+Z4yjMB8GA1UdIwQY MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB9aF+Cn 6nwf1HysITygz44K8Aqyw3eVv1a/hSs+77shRWdpWOM1BglXDOKM/8ZJCzc6h9G9 TeKfOnffoo7Y1Mrk4zGVI2Ya1QS2zuaxjkVFfdHqAKwXvMzmVAbUULId347LnHHd b9gdmb7xH5thSNkgU4npL8kJPFGJOzGaAGWrh4ANqDDuIU8KYc2+3gsyKZEiXgsY dyoURUXeajlEyJK+f03rK/KfP3bLrxY9D+Wu8hSiZb3hzAuZuiWu5VoN+13XpjTY O32trvoes0aX+1+FIqmUqfpHCvLo5MIQ2TO9ZXeYDlkuVUS3UQrBmhGYIIOHb5FU jye0pUGdqrVS2w== -----END CERTIFICATE-----Generated at Mon Jan 26 15:40:01 2026 by rpki-client