This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json) Hash identifier: exX1Fj0A8KutEqroBA+u7VELN33xQ1AzJZ49mnTSuZk= Subject key identifier: AD:B0:BA:86:11:21:65:69:60:FD:CF:79:1D:7C:6C:09:24:EA:50:8D Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Certificate serial: 019BFA2E68F615B0A39FA875D32FA9AE9CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft Manifest number: 174D Signing time: Mon 26 Jan 2026 12:01:43 +0000 Manifest this update: Mon 26 Jan 2026 12:01:43 +0000 Manifest next update: Tue 27 Jan 2026 12:01:43 +0000 Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=) 2: BfDjCxQZpVIvWuHPpUF1014sxPo.roa (hash: xAMeCUjUJk50I2+3B3yRzk6L+sK+RxuSoLFdPe8pfMM=) 3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=) 4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=) 5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=) 6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=) 7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=) 8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: tPSxGFHcPt63PvrMVvndE+hg52OYPDPOE3eg0c89CUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:68:f6:15:b0:a3:9f:a8:75:d3:2f:a9:ae:9c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Validity Not Before: Jan 26 12:01:43 2026 GMT Not After : Jan 27 12:01:43 2026 GMT Subject: CN=adb0ba861121656960fdcf791d7c6c0924ea508d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:55:ef:c5:34:8b:de:ed:9a:10:3c:49:56:1d: 16:49:a9:ca:84:2e:7f:6d:46:a4:22:25:06:77:17: e8:d2:f3:f2:7c:c8:ad:48:9e:32:aa:0c:41:d6:f0: bc:05:73:1c:b5:f2:2a:3c:40:a3:4d:c2:e3:17:95: a6:18:9f:54:d2:cb:82:53:4a:14:09:3d:ff:6c:3d: be:84:e2:58:7a:8d:ee:36:c5:39:3f:d0:06:f5:36: 28:2b:c9:ad:36:39:44:28:ef:f3:02:ab:7d:27:75: f0:8f:fa:4f:21:e7:5b:5d:d7:0b:e1:c7:0d:3c:9c: 19:4c:f1:2d:4b:e3:de:07:a1:e9:15:6b:19:a7:15: dd:97:bb:20:0c:55:34:b3:2b:58:a3:68:6b:ca:62: 0b:37:9f:45:a0:c6:04:c7:d4:17:64:e2:46:00:27: ef:68:1d:25:be:a0:62:7f:d8:9d:57:82:66:bb:7c: e8:51:fb:74:78:5d:f2:c5:96:bc:26:74:bf:bb:46: ed:55:04:f0:2c:ac:af:42:35:b7:aa:e0:53:cd:07: e7:27:e6:cc:5c:e2:7f:f1:df:58:80:a6:54:3c:e1: f9:d0:bd:a2:3d:86:f6:7c:d5:81:f6:c9:1e:5f:f7: 92:c9:ca:d0:61:54:38:70:ba:86:d8:2d:75:d6:9f: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B0:BA:86:11:21:65:69:60:FD:CF:79:1D:7C:6C:09:24:EA:50:8D X509v3 Authority Key Identifier: keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4e:ca:98:91:52:88:ff:bf:ba:db:36:ed:d2:37:2b:5f:51: 28:62:d9:a1:a6:29:ae:17:cf:39:dc:1f:0c:79:14:ce:b1:00: e0:91:1a:1f:28:16:04:9f:0e:27:cc:e0:17:49:a3:ea:e4:dd: 7e:75:73:e7:a8:b4:42:d8:80:b7:ca:c8:47:d3:e1:48:13:f4: 18:59:f6:a5:d5:19:03:6e:c7:38:58:c3:3c:69:ba:f6:20:c3: c2:a7:b4:a9:05:82:7f:95:17:f8:b7:ca:e0:c5:f5:fd:53:d1: b9:68:b2:f2:a0:8b:79:f4:87:ab:50:bd:b1:5e:a0:43:f5:a4: 07:18:fa:8d:1d:a8:b7:e7:8f:97:1b:23:c4:b2:00:26:7f:e7: 98:01:91:51:68:27:9a:d2:90:e0:7e:94:e0:00:19:4e:b5:d8: cd:06:08:f6:b9:64:cb:08:2f:f7:0c:e3:cb:d5:b1:19:6a:42: f7:89:fa:15:44:a5:a4:6e:7e:4a:da:1e:4f:61:ec:c5:52:01: 6a:eb:20:8b:41:6f:cd:33:e1:93:83:d5:dc:0b:27:39:48:f9: 84:db:7f:c5:1c:54:3f:d2:9a:d8:eb:a5:2d:ea:64:58:dc:4a: 06:07:c9:2f:27:ad:16:d2:8c:5f:6b:2e:9e:c0:25:93:d9:40: c2:12:11:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lmj2FbCjn6h10y+prpyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw ZDVkZDkwHhcNMjYwMTI2MTIwMTQzWhcNMjYwMTI3MTIwMTQzWjAzMTEwLwYDVQQD EyhhZGIwYmE4NjExMjE2NTY5NjBmZGNmNzkxZDdjNmMwOTI0ZWE1MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61XvxTSL3u2aEDxJVh0WSanKhC5/ bUakIiUGdxfo0vPyfMitSJ4yqgxB1vC8BXMctfIqPECjTcLjF5WmGJ9U0suCU0oU CT3/bD2+hOJYeo3uNsU5P9AG9TYoK8mtNjlEKO/zAqt9J3Xwj/pPIedbXdcL4ccN PJwZTPEtS+PeB6HpFWsZpxXdl7sgDFU0sytYo2hrymILN59FoMYEx9QXZOJGACfv aB0lvqBif9idV4Jmu3zoUft0eF3yxZa8JnS/u0btVQTwLKyvQjW3quBTzQfnJ+bM XOJ/8d9YgKZUPOH50L2iPYb2fNWB9skeX/eSycrQYVQ4cLqG2C111p8RRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2wuoYRIWVpYP3PeR18bAkk6lCNMB8GA1UdIwQY MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc07KmJFS iP+/uts27dI3K19RKGLZoaYprhfPOdwfDHkUzrEA4JEaHygWBJ8OJ8zgF0mj6uTd fnVz56i0QtiAt8rIR9PhSBP0GFn2pdUZA27HOFjDPGm69iDDwqe0qQWCf5UX+LfK 4MX1/VPRuWiy8qCLefSHq1C9sV6gQ/WkBxj6jR2ot+ePlxsjxLIAJn/nmAGRUWgn mtKQ4H6U4AAZTrXYzQYI9rlkywgv9wzjy9WxGWpC94n6FUSlpG5+StoeT2HsxVIB ausgi0FvzTPhk4PV3AsnOUj5hNt/xRxUP9Ka2OulLepkWNxKBgfJLyetFtKMX2su nsAlk9lAwhIRmg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:17 2026 by rpki-client