This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json) Hash identifier: LfCXKFMM1hVeaundJrZtrNOXFfcQl+CWIsd+u1gTbZU= Subject key identifier: 00:B4:C3:F4:1E:DD:43:E7:96:0D:70:7C:53:CD:39:92:D1:3C:F4:DE Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147 Certificate serial: 019BFAD254CBFCA1C0603FDC8DFE9274A0B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft Manifest number: 1037 Signing time: Mon 26 Jan 2026 15:00:46 +0000 Manifest this update: Mon 26 Jan 2026 15:00:46 +0000 Manifest next update: Tue 27 Jan 2026 15:00:46 +0000 Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: 6K3hOYpMlQU/pZiI2P9IGpXYQ26fbGNWgDgSL2NX1Fg=) 2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:54:cb:fc:a1:c0:60:3f:dc:8d:fe:92:74:a0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147 Validity Not Before: Jan 26 15:00:46 2026 GMT Not After : Jan 27 15:00:46 2026 GMT Subject: CN=00b4c3f41edd43e7960d707c53cd3992d13cf4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:ff:5b:49:0b:c4:c3:04:d0:07:c3:66:3c: 9e:64:6e:71:87:ab:ff:a0:13:85:ee:5d:15:97:df: 82:52:ad:cf:16:ed:86:62:b3:9b:c2:6f:94:42:ee: 6b:ae:02:d7:a7:4f:3e:aa:b8:91:7c:81:45:16:d1: d4:a8:12:cc:cc:e3:08:10:ba:e5:cd:85:fe:fe:a5: b0:e9:9b:0d:0c:c4:25:13:6f:c0:27:b7:86:ce:c1: 3e:74:af:22:66:0e:12:20:60:fd:ba:2c:16:c1:4b: b0:cd:75:ca:7b:04:82:5a:df:06:05:1b:9e:e3:ca: c1:6d:76:67:71:f2:3f:aa:bc:0e:16:9e:5f:70:18: d9:d0:ab:14:ec:2e:4f:db:e9:32:62:93:ce:37:1d: cc:5b:43:18:ad:28:25:8f:cc:88:a7:d1:a5:17:8c: 8e:ad:f8:e9:c0:e1:e3:a9:82:60:51:14:18:0c:73: 8a:b2:96:d3:45:b5:b1:aa:f5:88:e6:00:7d:2b:12: 03:44:b3:ea:01:66:39:b4:02:85:2a:12:8c:b1:d0: 13:58:6f:a9:6c:dd:3b:d1:d2:03:0b:b9:a1:88:19: 0a:42:89:ec:71:21:ed:38:6e:87:f5:d0:49:d5:6f: a7:e9:6f:a9:c2:a0:98:ff:f2:33:95:6d:2c:e1:3c: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B4:C3:F4:1E:DD:43:E7:96:0D:70:7C:53:CD:39:92:D1:3C:F4:DE X509v3 Authority Key Identifier: keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:08:55:cd:d6:84:02:ad:b2:bb:e7:ba:57:b2:19:21:34:a8: 7a:57:8f:46:0d:0f:58:10:46:b4:2b:11:56:a1:e4:3c:c8:8d: fb:08:94:1b:e5:37:28:fd:f0:e1:bd:02:8e:57:54:5b:90:7a: 46:44:1c:17:1e:25:a0:a3:a8:fa:a1:c6:62:91:5c:bc:6b:5f: ff:16:11:62:a8:7c:c3:32:6f:0b:00:11:cd:f1:38:10:53:a3: f7:bf:f8:30:f1:25:d0:17:0a:5a:d9:46:97:bd:34:0c:0e:93: ba:1e:9d:9f:eb:ae:f7:fe:4b:42:03:5f:83:02:a3:a2:d6:6b: 1d:07:fd:b3:0b:e6:4d:51:23:d5:95:cd:ee:1f:4d:48:03:44: 38:1e:aa:3f:a8:9b:c8:fd:83:cf:0f:d7:18:5d:92:a6:1f:b4: c4:bc:9b:47:cc:d1:44:31:25:e4:30:9e:80:31:d8:79:ab:e8: 2f:1d:3e:5d:e8:3b:73:4c:71:6f:00:63:58:09:28:e9:55:97: 40:8c:61:16:34:01:41:43:80:3c:38:15:4a:46:1b:1f:f5:aa: 62:d5:52:d3:c6:ee:78:ee:b3:aa:9f:1e:03:27:4a:10:53:66: d1:b2:73:a8:1c:fc:4e:5f:54:38:f7:f9:86:9f:80:fa:62:d5: d0:d3:fc:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60lTL/KHAYD/cjf6SdKC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3 NGYxNDcwHhcNMjYwMTI2MTUwMDQ2WhcNMjYwMTI3MTUwMDQ2WjAzMTEwLwYDVQQD EygwMGI0YzNmNDFlZGQ0M2U3OTYwZDcwN2M1M2NkMzk5MmQxM2NmNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppr/W0kLxMME0AfDZjyeZG5xh6v/ oBOF7l0Vl9+CUq3PFu2GYrObwm+UQu5rrgLXp08+qriRfIFFFtHUqBLMzOMIELrl zYX+/qWw6ZsNDMQlE2/AJ7eGzsE+dK8iZg4SIGD9uiwWwUuwzXXKewSCWt8GBRue 48rBbXZncfI/qrwOFp5fcBjZ0KsU7C5P2+kyYpPONx3MW0MYrSglj8yIp9GlF4yO rfjpwOHjqYJgURQYDHOKspbTRbWxqvWI5gB9KxIDRLPqAWY5tAKFKhKMsdATWG+p bN070dIDC7mhiBkKQonscSHtOG6H9dBJ1W+n6W+pwqCY//IzlW0s4Twa1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC0w/Qe3UPnlg1wfFPNOZLRPPTeMB8GA1UdIwQY MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3 LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwhVzdaE Aq2yu+e6V7IZITSoelePRg0PWBBGtCsRVqHkPMiN+wiUG+U3KP3w4b0CjldUW5B6 RkQcFx4loKOo+qHGYpFcvGtf/xYRYqh8wzJvCwARzfE4EFOj97/4MPEl0BcKWtlG l700DA6Tuh6dn+uu9/5LQgNfgwKjotZrHQf9swvmTVEj1ZXN7h9NSANEOB6qP6ib yP2Dzw/XGF2Sph+0xLybR8zRRDEl5DCegDHYeavoLx0+Xeg7c0xxbwBjWAko6VWX QIxhFjQBQUOAPDgVSkYbH/WqYtVS08bueO6zqp8eAydKEFNm0bJzqBz8Tl9UOPf5 hp+A+mLV0NP8BA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:35 2026 by rpki-client