This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json) Hash identifier: M7MGFJfGSHLDyd2U3LvGSHA7aUzeuS5myZg8S7naXtQ= Subject key identifier: 9F:7B:8C:A0:72:42:BF:BF:2C:75:F9:30:69:74:D2:AB:5F:F9:66:8D Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a Certificate serial: 019C107EF4DF6F9A876AA6369870C27A79FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft Manifest number: 12E8 Signing time: Fri 30 Jan 2026 20:01:21 +0000 Manifest this update: Fri 30 Jan 2026 20:01:21 +0000 Manifest next update: Sat 31 Jan 2026 20:01:21 +0000 Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=) 2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: ju6ex8zKhlxz0PJFvmRMIjSb0PAc4nTgmVitfiiqzZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:7e:f4:df:6f:9a:87:6a:a6:36:98:70:c2:7a:79:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a Validity Not Before: Jan 30 20:01:21 2026 GMT Not After : Jan 31 20:01:21 2026 GMT Subject: CN=9f7b8ca07242bfbf2c75f9306974d2ab5ff9668d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:56:61:18:cf:a0:02:9f:20:2e:8d:4b:bb: f9:cf:54:8f:88:ec:0c:95:cd:e5:61:65:9b:97:70: 0a:67:50:65:06:e7:32:ec:e8:44:b6:86:1c:a7:3e: 37:fa:c7:37:ec:d5:64:3d:e3:8e:aa:ad:bf:d3:f9: a4:c5:83:d5:43:bb:20:5c:c9:36:96:55:e6:a2:69: 9b:02:f0:ec:71:2d:31:0d:62:83:aa:1a:c1:fa:7f: 81:f1:86:6c:a2:40:5d:24:df:ed:7e:50:73:1f:b4: d0:46:bc:1c:30:ca:3e:77:92:b3:cb:a0:e1:af:06: 35:bd:e2:e9:bc:a1:7c:ae:29:92:fe:2f:b1:06:ab: 73:a6:70:72:68:16:d2:f9:da:4a:47:ca:52:19:3e: c1:40:f7:c1:52:0d:b4:83:8b:3b:2e:81:5f:a4:3d: 94:74:98:21:b6:6d:01:3a:a3:cf:92:20:e3:e8:da: db:06:b6:4a:e8:53:33:df:48:f5:7a:d0:99:40:a1: f0:97:ce:de:41:d3:29:5e:27:0e:2c:06:fd:a3:e0: 90:5b:dc:59:05:31:a6:7d:13:ad:21:e0:18:f3:ee: a0:54:85:ff:26:76:8c:e3:bd:56:27:e1:e4:2a:16: 00:a7:d6:e2:22:c1:a3:35:b4:2d:d5:d1:65:3d:87: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7B:8C:A0:72:42:BF:BF:2C:75:F9:30:69:74:D2:AB:5F:F9:66:8D X509v3 Authority Key Identifier: keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3b:96:85:35:d8:08:61:92:cc:63:8f:50:64:04:d0:3b:91: f7:0e:34:5e:9b:d0:7c:a4:ec:db:9d:3c:93:67:5f:28:6f:c5: de:d7:3e:50:1f:8b:bd:d4:43:ff:3e:cf:b6:4d:af:62:b1:21: a4:62:9d:23:75:f7:6c:cf:69:18:56:1e:90:a1:12:1b:a2:f0: 56:15:fd:a3:d9:ba:c3:0a:f0:e9:7c:3d:ea:16:5e:00:77:30: 23:0c:19:74:93:18:f2:07:3d:42:70:26:a1:fe:14:7f:ce:ed: 96:30:8f:a3:13:28:32:17:41:60:c3:45:54:cd:1e:62:85:b7: 01:e7:0d:ae:80:ac:79:28:da:5a:1f:93:75:a9:eb:cf:46:0d: 71:ef:f5:1e:70:e7:31:02:42:80:2c:42:7a:6e:3a:5d:a8:44: 68:e6:dd:64:39:4f:40:a2:83:84:33:98:d0:08:22:9f:1e:43: 49:97:76:c4:64:d8:ef:93:f9:2a:2a:d4:ae:72:4d:35:5e:b9: 2b:87:8e:92:f4:39:75:8c:14:bf:5c:63:d9:dc:10:20:e7:5c: db:32:7a:57:ae:47:0e:f5:a9:c1:af:1b:b2:61:93:ce:a1:35: f0:ca:f4:06:fe:65:c8:2f:86:36:6a:b6:38:e6:27:15:39:2e: e0:ff:14:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwQfvTfb5qHaqY2mHDCenn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi MzgxN2EwHhcNMjYwMTMwMjAwMTIxWhcNMjYwMTMxMjAwMTIxWjAzMTEwLwYDVQQD Eyg5ZjdiOGNhMDcyNDJiZmJmMmM3NWY5MzA2OTc0ZDJhYjVmZjk2NjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv5WYRjPoAKfIC6NS7v5z1SPiOwM lc3lYWWbl3AKZ1BlBucy7OhEtoYcpz43+sc37NVkPeOOqq2/0/mkxYPVQ7sgXMk2 llXmommbAvDscS0xDWKDqhrB+n+B8YZsokBdJN/tflBzH7TQRrwcMMo+d5Kzy6Dh rwY1veLpvKF8rimS/i+xBqtzpnByaBbS+dpKR8pSGT7BQPfBUg20g4s7LoFfpD2U dJghtm0BOqPPkiDj6NrbBrZK6FMz30j1etCZQKHwl87eQdMpXicOLAb9o+CQW9xZ BTGmfROtIeAY8+6gVIX/JnaM471WJ+HkKhYAp9biIsGjNbQt1dFlPYeMPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ97jKByQr+/LHX5MGl00qtf+WaNMB8GA1UdIwQY MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDuWhTXY CGGSzGOPUGQE0DuR9w40XpvQfKTs2508k2dfKG/F3tc+UB+LvdRD/z7Ptk2vYrEh pGKdI3X3bM9pGFYekKESG6LwVhX9o9m6wwrw6Xw96hZeAHcwIwwZdJMY8gc9QnAm of4Uf87tljCPoxMoMhdBYMNFVM0eYoW3AecNroCseSjaWh+Tdanrz0YNce/1HnDn MQJCgCxCem46XahEaObdZDlPQKKDhDOY0Aginx5DSZd2xGTY75P5KirUrnJNNV65 K4eOkvQ5dYwUv1xj2dwQIOdc2zJ6V65HDvWpwa8bsmGTzqE18Mr0Bv5lyC+GNmq2 OOYnFTku4P8U8A== -----END CERTIFICATE-----Generated at Fri Jan 30 23:06:54 2026 by rpki-client