This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json) Hash identifier: apcqw5XIKFaj/UuIUh+Zd0qj9KLABq1o/uiEr1cV6Wc= Subject key identifier: 60:C5:9D:C6:BC:6C:90:AA:B6:A2:80:18:52:F8:E2:E8:98:04:1F:31 Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Certificate serial: 019BFCF7EE7F0795333B4DED860BF21FF430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft Manifest number: 02A2 Signing time: Tue 27 Jan 2026 01:01:05 +0000 Manifest this update: Tue 27 Jan 2026 01:01:05 +0000 Manifest next update: Wed 28 Jan 2026 01:01:05 +0000 Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=) 2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=) 3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: AUNLHfEVK45PRW4upurivd6x1ZfIWZeCAfA0DPAF10s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f7:ee:7f:07:95:33:3b:4d:ed:86:0b:f2:1f:f4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Validity Not Before: Jan 27 01:01:05 2026 GMT Not After : Jan 28 01:01:05 2026 GMT Subject: CN=60c59dc6bc6c90aab6a2801852f8e2e898041f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:3b:a6:6b:2a:1f:2c:c5:50:a1:c4:f9:5a: 7c:d7:3b:0e:c9:68:2b:7a:84:8e:80:2d:06:66:54: 31:02:e6:8d:c0:c7:3f:6e:70:0d:bc:5f:01:fe:14: b7:74:cb:ae:a2:94:db:65:0b:4a:19:1f:ca:82:6c: 58:1d:02:7a:9d:06:23:15:5b:de:5e:07:d4:42:bd: f1:5d:ea:ec:cc:7c:c8:7e:a4:3c:b6:1e:fa:18:59: 04:9e:44:b7:b4:3b:28:70:53:ca:92:3a:81:ba:4a: a4:33:73:99:08:57:ba:73:bd:df:8d:fd:ba:40:b4: da:d4:a3:e6:b1:b6:17:ed:61:32:77:bb:30:40:ee: 4e:59:77:35:1a:58:d4:31:98:79:30:5a:e8:b3:a8: b0:cf:bf:e4:ba:ba:91:e3:f2:9e:cb:73:c2:bb:40: 81:d9:0b:b4:3a:ab:6d:6a:50:6e:a1:93:8b:a0:54: 08:cd:e7:e9:a0:13:be:93:e2:b3:9a:ac:e2:a6:9f: 83:81:26:50:7d:93:1f:5b:cf:26:77:e5:fc:0d:14: ff:34:44:a0:62:7b:df:26:08:e4:06:aa:b0:ea:90: 6b:ac:95:c8:f0:8d:41:45:b9:54:5e:64:d2:e0:ce: 5b:eb:0f:60:40:e3:d9:bb:e0:3f:9e:14:27:06:73: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C5:9D:C6:BC:6C:90:AA:B6:A2:80:18:52:F8:E2:E8:98:04:1F:31 X509v3 Authority Key Identifier: keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:74:8d:38:ae:56:42:24:0c:ed:81:87:9f:f0:fb:84:22:03: 87:e3:25:cb:58:f0:3f:ef:3f:a0:a2:30:02:97:d0:c5:ca:a2: 6a:d7:b5:06:73:64:1c:e0:b7:a4:83:29:de:f7:74:d7:71:e1: 77:91:3c:be:86:7d:ef:45:4f:ee:ee:9e:75:88:fb:1a:8d:6a: 76:56:44:86:de:97:15:a8:b4:bf:17:45:1c:ac:2b:7f:0c:cb: 40:73:dc:db:9c:36:a6:75:3e:e3:47:47:5f:e1:87:33:8a:f7: 8d:2a:f7:4d:81:47:49:87:b9:2e:ee:b2:f8:ef:24:f6:d8:a7: ba:d1:4e:92:0b:16:57:ea:6a:ee:68:0f:72:eb:c1:91:bb:72: 1a:3b:58:58:7b:88:4f:10:6f:24:8a:b9:66:79:2a:b8:72:58: ec:fc:83:22:30:3e:d5:c1:3a:3d:36:4b:9f:cd:f0:78:06:1b: 6d:dd:9f:22:e1:b0:7b:f2:d9:9d:98:bb:7b:c7:ce:ee:ec:36: e7:7f:25:30:62:0d:e8:f3:73:bf:74:dd:e0:de:e2:4e:bf:7e: ba:71:30:d7:24:9c:7b:f8:d0:7f:c0:63:b4:28:b7:9b:6e:8f: 1d:8e:f6:71:91:51:e2:3e:20:3f:5b:6e:f3:ea:b7:3d:a3:00: f4:49:c6:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv89+5/B5UzO03thgvyH/QwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm MWUwNGMwHhcNMjYwMTI3MDEwMTA1WhcNMjYwMTI4MDEwMTA1WjAzMTEwLwYDVQQD Eyg2MGM1OWRjNmJjNmM5MGFhYjZhMjgwMTg1MmY4ZTJlODk4MDQxZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobc7pmsqHyzFUKHE+Vp81zsOyWgr eoSOgC0GZlQxAuaNwMc/bnANvF8B/hS3dMuuopTbZQtKGR/KgmxYHQJ6nQYjFVve XgfUQr3xXerszHzIfqQ8th76GFkEnkS3tDsocFPKkjqBukqkM3OZCFe6c73fjf26 QLTa1KPmsbYX7WEyd7swQO5OWXc1GljUMZh5MFros6iwz7/kurqR4/Key3PCu0CB 2Qu0OqttalBuoZOLoFQIzefpoBO+k+Kzmqzipp+DgSZQfZMfW88md+X8DRT/NESg YnvfJgjkBqqw6pBrrJXI8I1BRblUXmTS4M5b6w9gQOPZu+A/nhQnBnNFewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDFnca8bJCqtqKAGFL44uiYBB8xMB8GA1UdIwQY MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt ZmRkM2E4MTVhYmI4LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4 LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXSNOK5W QiQM7YGHn/D7hCIDh+Mly1jwP+8/oKIwApfQxcqiate1BnNkHOC3pIMp3vd013Hh d5E8voZ970VP7u6edYj7Go1qdlZEht6XFai0vxdFHKwrfwzLQHPc25w2pnU+40dH X+GHM4r3jSr3TYFHSYe5Lu6y+O8k9tinutFOkgsWV+pq7mgPcuvBkbtyGjtYWHuI TxBvJIq5ZnkquHJY7PyDIjA+1cE6PTZLn83weAYbbd2fIuGwe/LZnZi7e8fO7uw2 538lMGIN6PNzv3Td4N7iTr9+unEw1ySce/jQf8BjtCi3m26PHY72cZFR4j4gP1tu 8+q3PaMA9EnGhg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:38 2026 by rpki-client