This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json) Hash identifier: Hn9bpDWovCqTsyWfP99gcjsfHXy2y0U1QapOzOL5tHc= Subject key identifier: 37:33:87:24:62:73:2F:21:7B:CB:47:2C:59:3D:FF:1E:28:1E:C3:00 Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09 Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09 Certificate serial: 019BFB408F955AA9460ACB954721A3D26CC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 17:01:10 +0000 Manifest this update: Mon 26 Jan 2026 17:01:10 +0000 Manifest next update: Tue 27 Jan 2026 17:01:10 +0000 Files and hashes: 1: 5anfbEI-jaspGpdleX4CIuBsAPM.roa (hash: Hflhls/SMNWgATvG3eTRW4iTnqTJ1x1t05I3Ae6Iogc=) 2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: IjNir7d78N2r6tLM+KmyI3k6+gWc0AGQo0sfoHuwa5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:8f:95:5a:a9:46:0a:cb:95:47:21:a3:d2:6c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09 Validity Not Before: Jan 26 17:01:10 2026 GMT Not After : Jan 27 17:01:10 2026 GMT Subject: CN=3733872462732f217bcb472c593dff1e281ec300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:d1:79:1d:4d:73:9a:54:81:74:cc:5c:21: 52:06:49:03:fa:3e:5d:4c:b8:e9:f8:19:ac:07:a9: 2a:c4:fc:09:56:f7:58:14:ee:f8:93:94:b9:8d:49: c5:79:6b:d1:da:65:50:69:a3:86:fd:85:d1:a6:4c: 3c:9c:d1:20:a4:73:b6:b6:27:e8:c0:ce:01:13:30: 94:d2:19:19:b3:66:85:ee:73:c6:c1:10:1b:24:19: 5d:fc:d7:1d:1d:a2:93:9f:b0:bc:80:65:3c:5f:44: c9:5e:a8:a0:6e:5b:6e:d9:30:86:e9:3d:74:eb:67: e8:5c:89:6f:4b:99:82:30:70:1a:2e:32:b5:52:2e: f3:d8:a8:bd:9e:e4:29:77:83:ca:c1:19:3a:77:86: 96:02:5b:ad:71:95:96:ea:87:72:9b:5f:16:27:89: 47:9c:7d:45:44:ef:4a:bb:7e:74:3f:8d:af:5b:6b: f8:99:b7:3c:d8:db:de:e3:ad:6f:b0:b9:65:7f:ec: b2:9b:3b:dc:88:1f:63:12:b4:31:1e:d9:c4:a1:15: 6e:78:9d:f9:42:9d:22:17:1c:6c:bc:9d:81:f1:16: 73:1b:de:0d:3b:f9:5c:cd:5e:a2:16:df:ec:81:4f: 86:4e:d1:85:82:ae:84:39:c1:b1:cc:8b:a2:49:62: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:33:87:24:62:73:2F:21:7B:CB:47:2C:59:3D:FF:1E:28:1E:C3:00 X509v3 Authority Key Identifier: keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:90:d8:25:28:c9:34:d8:f5:64:e4:d4:70:4b:22:86:b5:32: a4:20:06:b0:37:d7:b9:43:c9:5a:a7:af:8d:36:43:b3:2b:d6: 68:d3:15:34:33:be:1f:7b:86:4e:cf:48:24:5d:4e:c4:a4:0e: f0:75:16:76:19:0f:8b:ce:37:e4:de:d5:07:2b:78:8d:be:96: 13:cd:df:d9:e4:a6:15:c0:2d:d8:4b:f6:14:33:45:e2:5b:2d: a2:9b:7d:10:6f:73:ba:4e:d0:e4:67:6a:f0:49:dc:7c:4f:84: a6:bb:92:bd:49:07:4e:bf:00:68:02:85:28:97:d9:da:c5:52: 02:bd:91:0a:59:e4:26:6e:db:41:29:1c:06:75:f2:a4:ed:45: 68:d4:f2:15:0d:07:1e:e3:e9:70:6e:45:91:ad:86:32:bb:a5: c0:83:38:5a:a5:6f:e1:84:96:18:aa:0d:b0:d3:12:ee:d0:be: 5c:55:b1:e0:2b:f1:75:7b:de:18:ac:0b:01:6e:5b:ce:68:c0: 88:4f:3c:1e:43:9a:1b:62:3a:52:19:3c:78:ad:0e:a1:3c:5c: 89:1b:ef:03:17:7c:3b:0e:03:2f:a2:b5:df:3e:95:56:a3:0d: 09:98:0a:41:e0:13:72:62:a4:95:25:a9:42:d7:b5:9b:1d:55: 91:2b:10:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QI+VWqlGCsuVRyGj0mzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTE5ZTc1MjAwMzkyZjFhMmYwOGJlOTkwNzMyZDgwNDdi MjhiMDkwHhcNMjYwMTI2MTcwMTEwWhcNMjYwMTI3MTcwMTEwWjAzMTEwLwYDVQQD EygzNzMzODcyNDYyNzMyZjIxN2JjYjQ3MmM1OTNkZmYxZTI4MWVjMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVvReR1Nc5pUgXTMXCFSBkkD+j5d TLjp+BmsB6kqxPwJVvdYFO74k5S5jUnFeWvR2mVQaaOG/YXRpkw8nNEgpHO2tifo wM4BEzCU0hkZs2aF7nPGwRAbJBld/NcdHaKTn7C8gGU8X0TJXqigbltu2TCG6T10 62foXIlvS5mCMHAaLjK1Ui7z2Ki9nuQpd4PKwRk6d4aWAlutcZWW6odym18WJ4lH nH1FRO9Ku350P42vW2v4mbc82Nve461vsLllf+yymzvciB9jErQxHtnEoRVueJ35 Qp0iFxxsvJ2B8RZzG94NO/lczV6iFt/sgU+GTtGFgq6EOcGxzIuiSWIuwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDczhyRicy8he8tHLFk9/x4oHsMAMB8GA1UdIwQY MBaAFMURnnUgA5LxovCL6ZBzLYBHsosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2Qt ZDgxOWNlZDVkMzVhLzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2QtZDgxOWNlZDVkMzVh LzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZDYJSjJ NNj1ZOTUcEsihrUypCAGsDfXuUPJWqevjTZDsyvWaNMVNDO+H3uGTs9IJF1OxKQO 8HUWdhkPi8435N7VByt4jb6WE83f2eSmFcAt2Ev2FDNF4lstopt9EG9zuk7Q5Gdq 8EncfE+EpruSvUkHTr8AaAKFKJfZ2sVSAr2RClnkJm7bQSkcBnXypO1FaNTyFQ0H HuPpcG5Fka2GMrulwIM4WqVv4YSWGKoNsNMS7tC+XFWx4CvxdXveGKwLAW5bzmjA iE88HkOaG2I6Uhk8eK0OoTxciRvvAxd8Ow4DL6K13z6VVqMNCZgKQeATcmKklSWp Qte1mx1VkSsQGA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:53 2026 by rpki-client