This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json) Hash identifier: YIilmfbKyLTIOdDPNAolTG1f9S8JM8/A2fH0qPseV6k= Subject key identifier: B5:09:7C:C8:3D:24:4C:13:7A:EB:F6:55:98:D3:A3:F4:B3:86:9A:DC Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Certificate serial: 019C1DCC63014127A5935D512C23F580E7E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft Manifest number: 1739 Signing time: Mon 02 Feb 2026 10:00:59 +0000 Manifest this update: Mon 02 Feb 2026 10:00:59 +0000 Manifest next update: Tue 03 Feb 2026 10:00:59 +0000 Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=) 2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: 3pavih0/aO/hPnCpP/I27dq6Tk6EelRNU8stR+gJwMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:cc:63:01:41:27:a5:93:5d:51:2c:23:f5:80:e7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Validity Not Before: Feb 2 10:00:59 2026 GMT Not After : Feb 3 10:00:59 2026 GMT Subject: CN=b5097cc83d244c137aebf65598d3a3f4b3869adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:57:36:dd:2d:37:c0:08:65:ee:04:03:71: 3c:d9:80:77:5a:93:c5:4a:ec:1e:e3:f4:8d:ca:48: c2:63:4e:e9:16:7e:cd:11:d3:19:4b:c6:da:b4:89: 36:ee:2a:8f:d0:1f:78:e5:b4:1e:b4:b5:ac:16:ff: 02:ad:d7:77:ed:c9:76:98:f2:6a:a3:63:20:ac:20: 60:5a:76:78:cd:60:b6:cc:21:c2:fc:30:80:92:42: f4:df:f2:00:5b:1e:13:80:af:7a:5b:03:6d:66:66: e5:81:c5:f6:d5:e0:ac:8d:36:a5:03:82:a8:92:f6: 93:e4:fe:58:e2:bd:78:35:1f:dc:bc:06:35:4e:50: 75:57:54:3d:c1:d8:c5:1d:6d:35:8a:26:10:41:4c: 79:bd:3e:03:97:11:d6:ce:8e:82:8f:8a:b0:1d:b4: 66:e0:a4:37:1c:bb:42:fa:73:d0:43:29:25:40:84: 05:43:ba:8e:37:81:33:2c:3f:fd:89:3a:32:2f:f4: 8a:30:b9:4a:91:2e:7a:60:f5:c5:5e:7f:db:e1:aa: 29:81:dc:f6:30:46:34:36:93:cc:82:0a:16:02:ae: 96:e7:6c:89:66:97:7d:b9:eb:05:cc:56:45:66:45: ba:28:8a:7b:cb:a0:ad:2b:74:17:49:50:d1:1f:49: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:09:7C:C8:3D:24:4C:13:7A:EB:F6:55:98:D3:A3:F4:B3:86:9A:DC X509v3 Authority Key Identifier: keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:68:7b:33:65:2c:04:19:ad:67:ec:68:bb:1a:2b:1a:06:03: 71:ae:00:f8:90:ce:1e:7d:71:b2:9c:ac:ff:c6:d5:ca:51:67: 80:64:32:d5:48:39:e4:68:ee:57:0e:b3:5c:9a:f0:26:10:24: 10:c2:df:6e:d6:fc:8e:e6:c4:8c:45:ed:31:ca:b4:96:09:ac: 5a:8b:c7:84:33:a4:4a:aa:73:79:42:bc:f0:ab:3b:27:cc:92: 1a:82:97:d3:ce:3a:18:72:8b:8c:da:06:4c:60:7a:2b:68:7b: 98:2e:cd:1c:7e:85:a9:a4:d9:3d:15:42:cc:49:df:5c:17:82: 12:7a:64:1c:76:68:97:63:3f:4d:5c:4b:22:66:4d:3a:f5:11: 5e:09:e9:35:00:ba:40:4e:df:b8:a8:32:cb:9b:84:13:57:59: d2:c4:81:fd:1e:aa:37:70:b4:73:94:32:ad:e5:49:83:84:da: 63:95:19:ff:37:e2:fd:6e:bc:46:37:f1:7f:20:a1:eb:64:cd: 77:5b:88:bb:c3:7a:5b:43:65:93:93:35:32:87:8e:ac:7f:c5: 37:00:5d:6c:6c:3d:99:90:f5:9a:c2:2b:c2:8f:95:09:46:a7: c2:45:2b:e1:56:93:d2:40:6d:fe:5e:2e:c8:4b:26:e5:9d:17: a9:bd:f9:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdzGMBQSelk11RLCP1gOflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4 MDVlZjEwHhcNMjYwMjAyMTAwMDU5WhcNMjYwMjAzMTAwMDU5WjAzMTEwLwYDVQQD EyhiNTA5N2NjODNkMjQ0YzEzN2FlYmY2NTU5OGQzYTNmNGIzODY5YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvJXNt0tN8AIZe4EA3E82YB3WpPF Suwe4/SNykjCY07pFn7NEdMZS8batIk27iqP0B945bQetLWsFv8Crdd37cl2mPJq o2MgrCBgWnZ4zWC2zCHC/DCAkkL03/IAWx4TgK96WwNtZmblgcX21eCsjTalA4Ko kvaT5P5Y4r14NR/cvAY1TlB1V1Q9wdjFHW01iiYQQUx5vT4DlxHWzo6Cj4qwHbRm 4KQ3HLtC+nPQQyklQIQFQ7qON4EzLD/9iToyL/SKMLlKkS56YPXFXn/b4aopgdz2 MEY0NpPMggoWAq6W52yJZpd9uesFzFZFZkW6KIp7y6CtK3QXSVDRH0ml0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUJfMg9JEwTeuv2VZjTo/SzhprcMB8GA1UdIwQY MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWh7M2Us BBmtZ+xouxorGgYDca4A+JDOHn1xspys/8bVylFngGQy1Ug55GjuVw6zXJrwJhAk EMLfbtb8jubEjEXtMcq0lgmsWovHhDOkSqpzeUK88Ks7J8ySGoKX0846GHKLjNoG TGB6K2h7mC7NHH6FqaTZPRVCzEnfXBeCEnpkHHZol2M/TVxLImZNOvURXgnpNQC6 QE7fuKgyy5uEE1dZ0sSB/R6qN3C0c5QyreVJg4TaY5UZ/zfi/W68RjfxfyCh62TN d1uIu8N6W0Nlk5M1MoeOrH/FNwBdbGw9mZD1msIrwo+VCUanwkUr4VaT0kBt/l4u yEsm5Z0Xqb35vw== -----END CERTIFICATE-----Generated at Mon Feb 2 20:55:25 2026 by rpki-client