This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json) Hash identifier: Z4URQT6zWCzjxYZj+uYSWlrPDUEVQsBjGob4GTb2C10= Subject key identifier: C9:D4:41:2B:81:FA:8A:A5:0B:E4:5E:6B:F1:51:CD:AC:D5:2A:46:9C Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Certificate serial: 019C1FBB4346749B1BE59465DAD88D46320B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft Manifest number: 173A Signing time: Mon 02 Feb 2026 19:01:31 +0000 Manifest this update: Mon 02 Feb 2026 19:01:31 +0000 Manifest next update: Tue 03 Feb 2026 19:01:31 +0000 Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=) 2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: 46UikjvJl1FRO21axmjV2ac7B+kc2AQfExigdXVSz9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:bb:43:46:74:9b:1b:e5:94:65:da:d8:8d:46:32:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Validity Not Before: Feb 2 19:01:31 2026 GMT Not After : Feb 3 19:01:31 2026 GMT Subject: CN=c9d4412b81fa8aa50be45e6bf151cdacd52a469c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:17:31:20:b6:90:15:25:d9:be:9b:70:2c: c4:b3:17:4f:2d:aa:27:29:35:d7:57:7f:80:a2:c4: af:76:f7:76:e0:ba:f9:59:71:be:c5:a5:40:86:50: 23:bd:9d:ae:a8:1c:09:04:d8:45:57:bb:8f:c2:72: 7a:27:47:74:bd:3f:f6:11:63:b1:91:9f:6f:05:8a: 96:e7:62:e6:47:e7:22:a1:2b:06:9d:49:b2:b1:da: 5d:50:e4:f4:19:1c:c8:c2:80:e5:a0:5f:6f:85:d8: 49:a7:31:3d:db:a2:d3:7a:0f:99:3f:96:d6:a3:e7: d2:f7:92:35:95:d4:b8:ce:06:e4:89:27:dd:08:1e: 3f:84:5a:38:d1:f8:53:d5:2a:84:f4:71:58:86:b0: e3:20:1e:26:0c:95:a7:82:e2:91:12:73:d9:38:32: 32:4f:ee:9a:f4:06:ef:e5:1a:a4:8d:2e:10:15:a1: 80:63:20:2d:40:0a:20:95:7c:ea:a5:69:d5:a2:b9: 6e:63:6e:40:70:fd:c0:dd:a8:80:c3:69:76:10:8e: 23:cb:0c:c7:eb:32:04:02:28:95:57:68:1d:af:88: 9b:52:b9:95:fd:f6:89:aa:81:1a:fa:80:b3:13:1a: d8:02:19:e7:cc:0c:14:fd:1b:68:45:c7:11:98:53: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D4:41:2B:81:FA:8A:A5:0B:E4:5E:6B:F1:51:CD:AC:D5:2A:46:9C X509v3 Authority Key Identifier: keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0a:9f:ee:ce:63:c0:fc:89:0b:0d:6a:45:75:e4:7f:2f:03: 19:44:1a:bb:34:d1:6e:45:d0:0e:dc:6d:78:a8:ab:6d:d6:3a: bc:39:8d:eb:4d:45:c9:df:86:21:49:aa:df:3a:ee:b4:06:3c: 1e:c7:80:e5:5a:99:3d:d8:f3:a4:08:6e:b3:df:fe:74:03:1b: 10:02:fc:51:45:79:c7:ef:52:cd:5b:02:7f:95:29:e1:18:3b: 15:4b:25:f3:20:f8:c8:02:0c:9f:c8:fa:35:dd:1f:cf:0b:e4: cc:96:99:3e:cd:ce:f3:28:88:ac:33:62:e6:df:f9:49:62:67: a2:bd:d2:a6:69:2c:13:aa:39:6c:17:35:63:99:2a:33:1b:3a: 67:95:25:7d:9b:60:00:32:ab:bf:2d:3e:e8:63:cc:02:5e:2c: e4:d2:2b:67:f0:a9:ec:9a:9d:29:d3:53:62:98:87:d1:d4:7c: ac:0d:a5:7d:ed:12:30:4d:20:bb:00:e9:2d:25:e6:f2:db:f8: d1:4b:b3:88:af:8d:bc:d7:54:cd:32:3c:de:e9:9d:ba:af:9c: 18:f2:59:0b:9c:8d:62:72:67:fa:b1:24:7d:be:b1:6c:da:52: 7f:4d:04:03:5f:20:41:90:6b:64:b2:18:51:20:0d:37:64:fa: bb:07:7f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfu0NGdJsb5ZRl2tiNRjILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4 MDVlZjEwHhcNMjYwMjAyMTkwMTMxWhcNMjYwMjAzMTkwMTMxWjAzMTEwLwYDVQQD EyhjOWQ0NDEyYjgxZmE4YWE1MGJlNDVlNmJmMTUxY2RhY2Q1MmE0NjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5UXMSC2kBUl2b6bcCzEsxdPLaon KTXXV3+AosSvdvd24Lr5WXG+xaVAhlAjvZ2uqBwJBNhFV7uPwnJ6J0d0vT/2EWOx kZ9vBYqW52LmR+cioSsGnUmysdpdUOT0GRzIwoDloF9vhdhJpzE926LTeg+ZP5bW o+fS95I1ldS4zgbkiSfdCB4/hFo40fhT1SqE9HFYhrDjIB4mDJWnguKREnPZODIy T+6a9Abv5RqkjS4QFaGAYyAtQAoglXzqpWnVorluY25AcP3A3aiAw2l2EI4jywzH 6zIEAiiVV2gdr4ibUrmV/faJqoEa+oCzExrYAhnnzAwU/RtoRccRmFMaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnUQSuB+oqlC+Rea/FRzazVKkacMB8GA1UdIwQY MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggqf7s5j wPyJCw1qRXXkfy8DGUQauzTRbkXQDtxteKirbdY6vDmN601Fyd+GIUmq3zrutAY8 HseA5VqZPdjzpAhus9/+dAMbEAL8UUV5x+9SzVsCf5Up4Rg7FUsl8yD4yAIMn8j6 Nd0fzwvkzJaZPs3O8yiIrDNi5t/5SWJnor3SpmksE6o5bBc1Y5kqMxs6Z5UlfZtg ADKrvy0+6GPMAl4s5NIrZ/Cp7JqdKdNTYpiH0dR8rA2lfe0SME0guwDpLSXm8tv4 0UuziK+NvNdUzTI83umduq+cGPJZC5yNYnJn+rEkfb6xbNpSf00EA18gQZBrZLIY USANN2T6uwd/bg== -----END CERTIFICATE-----Generated at Tue Feb 3 00:13:03 2026 by rpki-client