This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: Yczw4VLMRFKbiXRo/JGp+TL9UH0QJpXMFaKDTPtT1Ik= Subject key identifier: 12:57:B6:D3:CE:23:A8:39:2E:74:1C:CD:1E:24:74:9F:C1:AE:63:2B Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019BF6F5A1B277EA8B8E9646159A4E123B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1821 Signing time: Sun 25 Jan 2026 21:00:51 +0000 Manifest this update: Sun 25 Jan 2026 21:00:51 +0000 Manifest next update: Mon 26 Jan 2026 21:00:51 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: k0wTOcugEuuZUGLXfsPkK3I/wW7glXtbtTAsgFozCzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a1:b2:77:ea:8b:8e:96:46:15:9a:4e:12:3b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 25 21:00:51 2026 GMT Not After : Jan 26 21:00:51 2026 GMT Subject: CN=1257b6d3ce23a8392e741ccd1e24749fc1ae632b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:4f:36:29:47:44:3f:58:0c:59:ac:05:4f: 4c:fa:5b:77:80:85:6d:b0:ce:59:87:d5:7e:c3:b6: 61:70:a6:e2:35:1d:f0:96:d1:77:71:f3:ba:98:44: b0:00:22:ed:f2:38:7b:56:58:ba:59:81:32:d5:d7: 43:ad:eb:fb:46:7d:1d:05:a6:19:98:77:4d:30:ef: 8f:61:05:27:67:68:68:d0:ad:51:78:08:14:10:d1: 81:c0:db:28:9f:b9:37:37:e9:66:a4:ce:00:23:9d: d9:1c:2d:8a:28:a6:fc:14:d2:3c:5c:84:41:6f:30: 00:18:fa:62:26:73:75:31:08:8e:bc:c2:0b:4a:ff: 26:b2:8a:69:92:e6:df:8d:3e:98:54:81:8d:4c:79: e9:9e:df:ae:5c:90:b8:71:e5:34:13:08:40:91:4d: 56:17:34:55:35:1f:c6:22:7f:b0:89:82:d6:e8:4d: 56:4f:9e:61:8c:32:c0:6b:18:82:b1:5e:e2:2b:dc: 2c:03:e0:c3:a7:31:01:1a:c5:6f:6a:8f:03:84:97: e6:5e:50:c2:64:5d:1a:de:b1:69:a5:4c:40:f0:bb: a0:30:15:f9:4f:03:23:e8:90:da:24:3a:09:c9:b5: 15:7a:ec:d1:9b:49:75:4b:5f:23:16:7a:99:c2:07: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:B6:D3:CE:23:A8:39:2E:74:1C:CD:1E:24:74:9F:C1:AE:63:2B X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:27:21:98:8c:a9:60:ea:46:ce:ad:d9:cf:59:49:eb:95:b6: d4:b1:d2:74:2d:c2:c1:88:03:8d:16:a4:d2:07:72:d4:fc:4c: 3f:44:23:9c:93:54:33:ec:86:4e:4c:f9:74:3a:60:62:a2:10: 37:c8:b3:f1:02:18:cc:86:8a:70:6c:93:14:79:87:5f:bb:ba: 0a:7e:20:e6:63:83:e0:d4:18:46:9f:80:80:fc:45:3c:f1:dd: 4d:53:b9:2e:b0:23:41:41:1e:86:da:35:0a:b8:f3:1e:51:10: 65:ad:5c:d9:d6:7c:61:bd:2e:cc:d7:3a:79:f1:03:82:6a:1c: db:a9:ea:c8:09:e1:ff:15:b3:ad:17:20:fb:45:57:cb:5e:9f: a1:1d:18:cc:f5:de:7c:34:5a:32:61:63:7b:ff:46:b0:94:80: 2e:47:28:44:ed:32:e4:de:ab:5d:70:4d:78:ad:08:40:07:89: 45:92:e9:4c:6f:8e:a0:5a:8e:85:d7:db:6c:58:e7:62:bc:0a: f9:9d:70:a9:4c:84:df:b9:f7:64:37:1c:b4:a9:5d:58:95:3a: dd:b7:95:b5:f3:d8:28:a2:d7:36:14:47:2c:7a:0d:75:e6:77: 02:76:91:93:f2:e4:27:8f:b4:d3:05:98:8b:5d:a0:99:11:e1: e3:bf:13:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29aGyd+qLjpZGFZpOEjstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTI1MjEwMDUxWhcNMjYwMTI2MjEwMDUxWjAzMTEwLwYDVQQD EygxMjU3YjZkM2NlMjNhODM5MmU3NDFjY2QxZTI0NzQ5ZmMxYWU2MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdpPNilHRD9YDFmsBU9M+lt3gIVt sM5Zh9V+w7ZhcKbiNR3wltF3cfO6mESwACLt8jh7Vli6WYEy1ddDrev7Rn0dBaYZ mHdNMO+PYQUnZ2ho0K1ReAgUENGBwNson7k3N+lmpM4AI53ZHC2KKKb8FNI8XIRB bzAAGPpiJnN1MQiOvMILSv8msoppkubfjT6YVIGNTHnpnt+uXJC4ceU0EwhAkU1W FzRVNR/GIn+wiYLW6E1WT55hjDLAaxiCsV7iK9wsA+DDpzEBGsVvao8DhJfmXlDC ZF0a3rFppUxA8LugMBX5TwMj6JDaJDoJybUVeuzRm0l1S18jFnqZwgdorQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJXttPOI6g5LnQczR4kdJ/BrmMrMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMychmIyp YOpGzq3Zz1lJ65W21LHSdC3CwYgDjRak0gdy1PxMP0QjnJNUM+yGTkz5dDpgYqIQ N8iz8QIYzIaKcGyTFHmHX7u6Cn4g5mOD4NQYRp+AgPxFPPHdTVO5LrAjQUEehto1 CrjzHlEQZa1c2dZ8Yb0uzNc6efEDgmoc26nqyAnh/xWzrRcg+0VXy16foR0YzPXe fDRaMmFje/9GsJSALkcoRO0y5N6rXXBNeK0IQAeJRZLpTG+OoFqOhdfbbFjnYrwK +Z1wqUyE37n3ZDcctKldWJU63beVtfPYKKLXNhRHLHoNdeZ3AnaRk/LkJ4+00wWY i12gmRHh478T0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:49 2026 by rpki-client