This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json) Hash identifier: c80h3VodI376cvUkge6bvxDuTS7pDTbqynwASr9CO5Q= Subject key identifier: AC:64:1A:61:91:86:25:74:C5:F8:29:3E:5E:B8:D0:E9:AF:6A:A6:37 Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Certificate serial: 019BFAD2B7F82C4CF9F4F8A450C38884D9AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft Manifest number: 09AF Signing time: Mon 26 Jan 2026 15:01:12 +0000 Manifest this update: Mon 26 Jan 2026 15:01:12 +0000 Manifest next update: Tue 27 Jan 2026 15:01:12 +0000 Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: Q96hl+2hQULZBYlPgbTekbh/DF+M4hVQb/0PpcYpJ40=) 2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:b7:f8:2c:4c:f9:f4:f8:a4:50:c3:88:84:d9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Validity Not Before: Jan 26 15:01:12 2026 GMT Not After : Jan 27 15:01:12 2026 GMT Subject: CN=ac641a6191862574c5f8293e5eb8d0e9af6aa637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a6:5e:a6:bf:c7:bf:e3:8d:ae:cb:de:12:de: 35:20:12:65:13:82:7c:14:71:db:59:11:5d:30:bd: fc:84:9f:a5:57:a6:8e:4f:19:c4:ac:43:c5:40:89: 25:9f:ad:88:79:0b:e9:5d:89:8d:1c:c1:8a:49:f7: 41:40:b6:42:29:cb:b4:58:69:d6:cf:b1:11:1c:a4: 6d:37:41:1b:fa:a9:5a:91:4f:85:25:5d:0a:4e:56: 75:77:63:e2:e0:77:46:f4:7a:7b:d3:72:07:d5:0e: fa:bd:a7:eb:d8:5f:98:8b:c0:20:01:1e:90:e2:e7: 93:9f:31:b4:9d:77:71:30:fc:a7:d9:5e:28:a0:71: d1:07:05:2b:d4:16:b4:d0:0a:91:67:e6:1e:21:e2: 47:a2:d4:7f:6a:f6:14:80:e5:2f:0f:bf:83:f4:75: 74:bb:1d:82:c5:89:a0:57:d3:20:8d:17:18:1f:aa: 95:8f:73:b3:ce:a0:17:f0:47:a3:df:79:83:18:5f: 2a:45:b2:42:34:11:41:38:5a:96:ab:f5:88:d9:40: 8a:6f:bf:c4:63:e8:af:99:fa:bd:a9:c0:1b:4a:28: 3f:10:2f:6c:67:6b:97:df:ea:fd:24:9c:8c:b3:b6: 80:90:71:ed:25:01:cc:3d:d1:83:4c:30:60:9d:f0: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:64:1A:61:91:86:25:74:C5:F8:29:3E:5E:B8:D0:E9:AF:6A:A6:37 X509v3 Authority Key Identifier: keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:2d:57:18:f5:95:de:2f:b9:d1:61:f0:86:ec:e5:09:48: ad:9b:6a:9b:dc:13:f2:37:9d:0b:de:ff:ac:f1:9f:26:56:f3: c4:a4:d9:eb:2b:f9:3c:ad:b9:8f:31:61:d4:b5:72:02:b1:a0: 28:c4:93:8a:85:5b:25:a5:f6:e0:9e:ac:6a:a3:9a:ee:5a:7f: ee:b0:0c:9c:5c:63:7d:f2:f8:8c:82:52:b0:7f:6e:1d:af:cd: 2b:38:38:30:78:5e:f9:53:77:65:a1:2d:d1:56:9b:d1:66:02: 62:55:49:73:bf:9b:4e:2d:c7:1a:f7:01:1a:44:9f:dd:23:ca: 95:5c:78:f4:61:c6:ca:14:df:98:a7:cf:16:bb:5e:15:38:88: bd:08:a2:04:a3:18:da:02:6d:43:ed:5d:29:e8:7e:a8:07:9b: f8:1f:68:82:21:36:25:ca:b9:4c:3e:a0:2d:13:c0:e4:10:10: 28:31:3f:87:dd:37:ca:fa:f9:e9:de:66:dd:28:89:61:90:29: 77:6e:89:f4:42:26:b1:9a:57:c4:ae:91:d9:85:f1:44:8d:d4: 06:b7:17:5f:c8:ee:14:27:28:43:80:ef:24:e4:a3:ba:d1:76: ed:14:bc:ac:d2:df:4a:d3:ca:e6:01:19:f6:4e:ce:3b:67:54: 24:7c:14:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60rf4LEz59PikUMOIhNmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGRmMGM4ZTVkMWIyMzUzOGJlYjVlY2NjM2FiMTI4NjVk ZjdlYWEwHhcNMjYwMTI2MTUwMTEyWhcNMjYwMTI3MTUwMTEyWjAzMTEwLwYDVQQD EyhhYzY0MWE2MTkxODYyNTc0YzVmODI5M2U1ZWI4ZDBlOWFmNmFhNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aZepr/Hv+ONrsveEt41IBJlE4J8 FHHbWRFdML38hJ+lV6aOTxnErEPFQIkln62IeQvpXYmNHMGKSfdBQLZCKcu0WGnW z7ERHKRtN0Eb+qlakU+FJV0KTlZ1d2Pi4HdG9Hp703IH1Q76vafr2F+Yi8AgAR6Q 4ueTnzG0nXdxMPyn2V4ooHHRBwUr1Ba00AqRZ+YeIeJHotR/avYUgOUvD7+D9HV0 ux2CxYmgV9MgjRcYH6qVj3OzzqAX8Eej33mDGF8qRbJCNBFBOFqWq/WI2UCKb7/E Y+ivmfq9qcAbSig/EC9sZ2uX3+r9JJyMs7aAkHHtJQHMPdGDTDBgnfAxKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxkGmGRhiV0xfgpPl640OmvaqY3MB8GA1UdIwQY MBaAFF8N8Mjl0bI1OL617Mw6sShl336qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUt YmM1MTNhOThiOWJlLzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUtYmM1MTNhOThiOWJl LzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnEtVxj1 ld4vudFh8Ibs5QlIrZtqm9wT8jedC97/rPGfJlbzxKTZ6yv5PK25jzFh1LVyArGg KMSTioVbJaX24J6saqOa7lp/7rAMnFxjffL4jIJSsH9uHa/NKzg4MHhe+VN3ZaEt 0Vab0WYCYlVJc7+bTi3HGvcBGkSf3SPKlVx49GHGyhTfmKfPFrteFTiIvQiiBKMY 2gJtQ+1dKeh+qAeb+B9ogiE2Jcq5TD6gLRPA5BAQKDE/h903yvr56d5m3SiJYZAp d26J9EImsZpXxK6R2YXxRI3UBrcXX8juFCcoQ4DvJOSjutF27RS8rNLfStPK5gEZ 9k7OO2dUJHwU8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 22:12:00 2026 by rpki-client