This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json) Hash identifier: i6GaNGBTwaeFVgcOX1sU+5EJcZL9dypPVtOxU3qTd0A= Subject key identifier: B1:7B:2A:33:4D:48:06:B5:8E:16:49:82:DA:08:1E:CA:EC:22:63:C1 Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Certificate serial: 019BFB095F802136CED29CC57937CF098781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft Manifest number: 03D0 Signing time: Mon 26 Jan 2026 16:00:53 +0000 Manifest this update: Mon 26 Jan 2026 16:00:53 +0000 Manifest next update: Tue 27 Jan 2026 16:00:53 +0000 Files and hashes: 1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=) 2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: 3pUk2oLLEAP4V9horK+kfJypsqwOOP/3r8s6Iy4t950=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:5f:80:21:36:ce:d2:9c:c5:79:37:cf:09:87:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Validity Not Before: Jan 26 16:00:53 2026 GMT Not After : Jan 27 16:00:53 2026 GMT Subject: CN=b17b2a334d4806b58e164982da081ecaec2263c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:9c:16:7a:a7:83:eb:b9:73:a3:47:d4:2b: ac:7e:28:71:21:f9:f3:3f:f7:dd:6a:2a:0c:0d:92: 25:c6:23:6e:25:4b:1d:2b:47:18:8b:64:d0:b1:05: 5c:26:47:e8:f6:69:4c:a2:18:fd:8a:d8:65:a7:fd: 43:f8:02:de:d0:8e:c3:d3:f0:7b:52:c2:f7:56:99: 3e:00:55:29:37:e8:a6:bd:c1:1b:04:41:3c:ab:db: 3d:81:0c:1b:5e:f0:7f:6c:23:eb:d2:47:d7:4f:02: 72:12:59:6c:3e:fe:0d:da:35:c7:3a:bf:3b:04:78: ed:9d:24:1f:c3:1c:7a:43:a9:ec:a6:a5:8e:3f:36: 78:10:18:3c:9d:30:1a:e6:db:ff:8f:6f:27:3f:43: f6:bc:a7:4b:59:c0:d0:ee:cf:25:08:4d:69:8b:c8: 0a:a1:28:44:a0:6c:2a:1b:e8:e2:18:80:2f:c2:3e: 7f:32:8b:3c:14:e5:63:12:6d:89:81:36:2d:ce:c6: f3:1c:61:10:14:b4:9b:ac:80:85:88:74:85:2b:63: f3:de:6f:cf:b4:f9:5a:94:3c:1c:3e:97:aa:40:a7: fe:ee:8a:3c:33:ed:d3:67:fb:22:30:3c:a4:99:83: ab:93:de:b8:17:ed:e5:33:b1:d4:a9:cc:c7:f2:fa: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7B:2A:33:4D:48:06:B5:8E:16:49:82:DA:08:1E:CA:EC:22:63:C1 X509v3 Authority Key Identifier: keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:07:e0:b0:b3:5d:61:de:6a:c0:47:1d:6f:3a:0c:e6:44:19: 2f:38:55:0a:12:6d:93:14:1d:1a:59:a7:34:ba:50:1a:56:da: 7b:8f:7a:e2:f5:c6:6a:0f:f6:0b:f6:60:3e:ab:1d:c0:a4:38: ed:c6:b7:27:33:25:11:4e:11:69:f1:ee:0f:1e:8b:f0:40:cb: 4a:09:f8:cf:4e:87:41:bf:91:2f:5d:9c:42:14:98:53:d2:0a: c0:2c:4f:30:e1:94:5c:e0:36:c9:b0:2d:56:6b:0f:7c:c3:07: 1a:6a:bb:ec:cf:55:c0:48:ea:3a:ec:60:28:00:c4:05:ab:7a: ba:9f:7c:27:72:ec:ea:fe:76:ef:ee:2f:cd:08:20:ec:79:f2: de:38:86:80:55:51:c9:62:f1:a8:53:2d:ee:62:7e:89:e0:1a: 65:b2:30:2e:6e:49:76:30:5c:59:2f:44:a9:db:14:b4:6f:a4: 5e:d8:97:e5:ba:7a:01:08:9a:5e:0c:2c:33:c0:bc:f0:93:80: 81:4b:f9:cc:2a:e7:25:70:8b:4a:3c:59:2e:76:9a:65:35:d6: e3:1c:3d:47:bc:b9:b1:7d:9a:34:63:45:de:01:8d:50:f1:83: c9:d9:8d:de:be:8d:8b:88:09:15:42:2a:e6:b6:90:68:27:88: e6:90:a8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CV+AITbO0pzFeTfPCYeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy ZTJlM2QwHhcNMjYwMTI2MTYwMDUzWhcNMjYwMTI3MTYwMDUzWjAzMTEwLwYDVQQD EyhiMTdiMmEzMzRkNDgwNmI1OGUxNjQ5ODJkYTA4MWVjYWVjMjI2M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A2cFnqng+u5c6NH1CusfihxIfnz P/fdaioMDZIlxiNuJUsdK0cYi2TQsQVcJkfo9mlMohj9ithlp/1D+ALe0I7D0/B7 UsL3Vpk+AFUpN+imvcEbBEE8q9s9gQwbXvB/bCPr0kfXTwJyEllsPv4N2jXHOr87 BHjtnSQfwxx6Q6nspqWOPzZ4EBg8nTAa5tv/j28nP0P2vKdLWcDQ7s8lCE1pi8gK oShEoGwqG+jiGIAvwj5/Mos8FOVjEm2JgTYtzsbzHGEQFLSbrICFiHSFK2Pz3m/P tPlalDwcPpeqQKf+7oo8M+3TZ/siMDykmYOrk964F+3lM7HUqczH8voaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLF7KjNNSAa1jhZJgtoIHsrsImPBMB8GA1UdIwQY MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt NTBkMDE4YmIwYmY2LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2 LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwfgsLNd Yd5qwEcdbzoM5kQZLzhVChJtkxQdGlmnNLpQGlbae4964vXGag/2C/ZgPqsdwKQ4 7ca3JzMlEU4RafHuDx6L8EDLSgn4z06HQb+RL12cQhSYU9IKwCxPMOGUXOA2ybAt VmsPfMMHGmq77M9VwEjqOuxgKADEBat6up98J3Ls6v527+4vzQgg7Hny3jiGgFVR yWLxqFMt7mJ+ieAaZbIwLm5JdjBcWS9EqdsUtG+kXtiX5bp6AQiaXgwsM8C88JOA gUv5zCrnJXCLSjxZLnaaZTXW4xw9R7y5sX2aNGNF3gGNUPGDydmN3r6Ni4gJFUIq 5raQaCeI5pCoxw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:52:25 2026 by rpki-client