This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json) Hash identifier: /hDaskOFkB3L/ihLiWKk9k4D7V2LxQKsBI+2iQDnABY= Subject key identifier: 69:69:92:DD:46:67:C5:78:78:E9:1C:1C:F1:C1:FF:47:87:4E:F2:8D Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c Certificate serial: 019BFA9BA4573797B2E8F4EFC3F08C59B07A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 14:01:02 +0000 Manifest this update: Mon 26 Jan 2026 14:01:02 +0000 Manifest next update: Tue 27 Jan 2026 14:01:02 +0000 Files and hashes: 1: 3cbC9vEeA_OfonVqz4nPVMIodpI.roa (hash: IGj7kwjiWovmIKkao+Fqphubf76yFz/hI4+0oTX7zU8=) 2: HRkMr8-Sqbu9H440GtqWqBMvrRY.roa (hash: u8W2AOx3ZvteH41TI9EbqMt/z7mq+kc+OzabEJ0zUCM=) 3: wemV0d9_X9NASzk5HBev3Xd67ss.roa (hash: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q=) 4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: shAy8UkZ/x1NXoffkNI5Zo20/xi/beICrP7E9un+gzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:a4:57:37:97:b2:e8:f4:ef:c3:f0:8c:59:b0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c Validity Not Before: Jan 26 14:01:02 2026 GMT Not After : Jan 27 14:01:02 2026 GMT Subject: CN=696992dd4667c57878e91c1cf1c1ff47874ef28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:e9:62:83:b9:5f:4a:83:56:a7:c1:8b:0c: 8f:0b:58:78:47:97:e7:eb:e4:ce:fa:cf:b5:6e:15: b0:ca:2d:d0:6e:8e:7c:15:07:21:de:3a:23:8a:59: 5f:7d:38:a6:21:55:18:69:ac:b3:d7:e5:ae:22:a4: e3:c8:90:29:c4:a8:ff:80:90:c3:7d:f1:8e:90:3a: 81:8a:bb:fd:db:bc:b8:9d:d8:db:29:29:b7:d9:a6: 42:9f:f9:d8:77:ad:90:6a:8d:30:3a:f3:d3:3b:fc: 4c:83:c9:ac:d4:62:32:92:5f:69:55:49:4e:3e:4d: 6b:25:07:c8:88:49:a9:c3:d4:7c:c5:c6:f2:ba:4f: f7:f2:a4:19:29:86:8b:c3:5c:cd:1d:c0:d8:62:57: bc:be:cb:38:a6:13:6c:2e:f3:e0:4d:8d:5e:63:e4: d9:e0:f8:71:df:e4:bf:e2:1b:4e:15:28:6d:3d:c7: d4:f1:6b:40:a3:59:9f:41:db:62:68:7d:9d:0a:1e: 0f:cd:b8:9c:4c:5c:75:47:ba:83:c1:78:da:e5:9e: 0f:f7:a7:d3:bb:a9:4a:9b:97:ec:c5:4d:ac:e4:f0: 56:35:ea:fe:c3:56:70:7e:3d:e3:40:96:58:35:dd: a2:be:22:0d:9a:31:ab:84:2a:c8:03:f8:22:79:6d: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:92:DD:46:67:C5:78:78:E9:1C:1C:F1:C1:FF:47:87:4E:F2:8D X509v3 Authority Key Identifier: keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fb:94:72:a1:96:fa:e6:17:a8:51:63:b4:1e:bb:e6:a7:d0: ac:97:18:ca:69:05:bd:fb:24:b3:34:db:e7:a0:cc:8c:45:03: 7f:10:b8:57:06:b2:84:07:7e:14:89:6b:f0:0e:ef:ca:96:07: bf:45:ef:e6:5b:9c:5d:06:07:b5:af:59:17:09:91:9b:4a:fe: 3d:36:ff:64:de:f7:1f:2a:d3:7d:ed:1b:38:dd:b0:03:aa:d7: 81:ac:d5:32:de:45:92:65:bb:a0:cb:0a:a4:85:8f:81:20:41: 65:39:a5:84:dc:9c:3d:6f:70:d5:ac:2c:b1:1f:fb:16:c6:a1: 83:84:94:0e:55:67:e1:2d:27:e3:b1:17:6c:c8:d9:80:75:f9: 44:d6:2d:ff:e3:1f:e3:3a:19:5b:d2:f0:58:f3:dd:54:82:62: 08:a3:39:8a:33:a0:22:d7:f4:33:4a:f9:b2:54:ce:ee:16:5b: 13:98:59:3a:ad:d4:72:a0:53:8d:2e:04:f3:11:cf:e8:fe:cc: ac:f1:38:70:85:6c:6a:9f:6c:d1:1a:82:d9:4f:1d:5c:9e:81: 20:49:6f:90:e3:9e:4e:f0:b2:d4:22:81:22:0c:96:99:e5:8c: b9:36:46:c5:d8:7a:28:5d:61:1c:46:ba:b0:5a:1a:55:f9:1a: a4:cb:3b:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m6RXN5ey6PTvw/CMWbB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz ZTA2MWMwHhcNMjYwMTI2MTQwMTAyWhcNMjYwMTI3MTQwMTAyWjAzMTEwLwYDVQQD Eyg2OTY5OTJkZDQ2NjdjNTc4NzhlOTFjMWNmMWMxZmY0Nzg3NGVmMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4LpYoO5X0qDVqfBiwyPC1h4R5fn 6+TO+s+1bhWwyi3Qbo58FQch3jojillffTimIVUYaayz1+WuIqTjyJApxKj/gJDD ffGOkDqBirv927y4ndjbKSm32aZCn/nYd62Qao0wOvPTO/xMg8ms1GIykl9pVUlO Pk1rJQfIiEmpw9R8xcbyuk/38qQZKYaLw1zNHcDYYle8vss4phNsLvPgTY1eY+TZ 4Phx3+S/4htOFShtPcfU8WtAo1mfQdtiaH2dCh4PzbicTFx1R7qDwXja5Z4P96fT u6lKm5fsxU2s5PBWNer+w1Zwfj3jQJZYNd2iviINmjGrhCrIA/gieW2xYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlpkt1GZ8V4eOkcHPHB/0eHTvKNMB8GA1UdIwQY MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt YmVlZWJlZGZmYzk1LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1 LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvuUcqGW +uYXqFFjtB675qfQrJcYymkFvfskszTb56DMjEUDfxC4VwayhAd+FIlr8A7vypYH v0Xv5lucXQYHta9ZFwmRm0r+PTb/ZN73HyrTfe0bON2wA6rXgazVMt5FkmW7oMsK pIWPgSBBZTmlhNycPW9w1awssR/7Fsahg4SUDlVn4S0n47EXbMjZgHX5RNYt/+Mf 4zoZW9LwWPPdVIJiCKM5ijOgItf0M0r5slTO7hZbE5hZOq3UcqBTjS4E8xHP6P7M rPE4cIVsap9s0RqC2U8dXJ6BIElvkOOeTvCy1CKBIgyWmeWMuTZGxdh6KF1hHEa6 sFoaVfkapMs7GA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:29:39 2026 by rpki-client