This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json) Hash identifier: zvzuFwce9m2E3P9BkOen7GNWJDKY3fND699yseTY2sI= Subject key identifier: 84:93:21:34:93:0B:91:DE:DB:ED:05:79:7E:FC:1A:9B:2D:A0:51:44 Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Certificate serial: 019BFB09E1EA6FD1DB6BC7B7DED5B3339586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 16:01:27 +0000 Manifest this update: Mon 26 Jan 2026 16:01:27 +0000 Manifest next update: Tue 27 Jan 2026 16:01:27 +0000 Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=) 2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: fFQKfTtTdFJvYLKLEpNpMuIJvvmwH4P83lzChVyN+Gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:e1:ea:6f:d1:db:6b:c7:b7:de:d5:b3:33:95:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Validity Not Before: Jan 26 16:01:27 2026 GMT Not After : Jan 27 16:01:27 2026 GMT Subject: CN=84932134930b91dedbed05797efc1a9b2da05144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:d0:d5:06:3f:97:c4:e0:d6:78:c0:b7:03: 07:da:d2:8d:94:55:90:e3:c5:25:43:9f:e1:e2:47: a1:91:56:11:39:55:8e:8c:10:a9:08:98:09:f4:55: 76:2f:bb:04:13:b9:81:b4:87:e5:43:bb:4a:ab:5b: 56:bc:ba:cb:18:e2:49:33:48:a3:d1:93:ce:60:02: 9e:d0:44:b8:66:b4:1f:93:80:3e:34:64:43:b8:1e: 5f:48:52:2e:41:82:e1:8f:38:61:33:c3:8e:66:8d: 6f:26:c8:4f:34:6c:7e:c5:9c:12:9d:8f:6a:97:8d: c1:aa:98:30:a8:97:de:e1:b8:8e:22:e7:2f:7d:fe: 54:85:15:a3:ec:14:14:61:02:f2:e2:85:25:94:f6: 6e:c0:a2:4d:f4:eb:4a:c3:1a:32:58:27:87:af:c8: fc:f8:c8:30:f3:91:01:fb:4a:4f:44:9e:f5:af:bd: 1c:6b:bb:1b:67:99:ec:26:53:f0:19:27:f8:ad:04: 29:74:e7:37:57:4c:cd:da:43:4d:0a:78:47:95:0c: 50:93:06:75:3c:69:78:85:ec:48:65:19:49:a5:2d: 3d:00:7c:fe:20:19:37:54:b2:71:72:b7:26:8b:9d: fb:cd:6a:ed:99:15:5a:9b:c1:21:50:dd:e1:40:0e: 59:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:93:21:34:93:0B:91:DE:DB:ED:05:79:7E:FC:1A:9B:2D:A0:51:44 X509v3 Authority Key Identifier: keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:93:c3:8a:24:3b:37:72:ef:3b:67:82:91:32:eb:d1:87:28: 42:95:cb:b2:5c:67:35:e0:29:cf:c3:74:e5:df:3d:a7:3f:d9: 79:71:4a:62:b5:a6:f9:30:d8:1e:27:89:bf:d3:e3:c5:ab:7d: 05:0a:8b:88:24:c9:91:76:6c:e6:f1:a0:99:66:c1:e3:96:23: 6e:12:df:b6:8a:46:6f:2a:0a:8e:82:b4:4e:06:ec:63:9a:48: e1:3c:51:cd:2d:d3:68:cd:ee:51:14:f5:a9:36:c4:e8:d8:4e: 09:1f:4d:81:63:52:a8:18:fa:67:d2:db:bd:83:a7:ea:38:ba: 01:1b:5b:7d:f2:67:60:ed:31:1f:ef:e9:d2:54:8c:61:6a:43: f2:a7:db:a7:a8:18:40:a9:30:2e:45:b5:53:fb:86:c5:7f:02: 46:f1:08:1c:60:14:da:0f:26:96:ed:5e:cc:ba:73:b7:38:cd: 76:df:c0:76:ab:a7:92:dc:d4:b2:2f:03:5f:a5:89:4d:88:68: 4c:ba:6e:03:44:4b:4d:c1:97:50:34:1d:8f:9a:06:ce:9b:4f: ec:28:53:ca:91:07:b1:04:26:71:77:0c:a2:e9:3d:04:d9:3b: 4a:7e:2e:27:a7:90:36:de:43:05:a5:60:9c:b4:dc:47:1f:00: 13:c5:70:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CeHqb9Hba8e33tWzM5WGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl MDgxOTUwHhcNMjYwMTI2MTYwMTI3WhcNMjYwMTI3MTYwMTI3WjAzMTEwLwYDVQQD Eyg4NDkzMjEzNDkzMGI5MWRlZGJlZDA1Nzk3ZWZjMWE5YjJkYTA1MTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYbQ1QY/l8Tg1njAtwMH2tKNlFWQ 48UlQ5/h4kehkVYROVWOjBCpCJgJ9FV2L7sEE7mBtIflQ7tKq1tWvLrLGOJJM0ij 0ZPOYAKe0ES4ZrQfk4A+NGRDuB5fSFIuQYLhjzhhM8OOZo1vJshPNGx+xZwSnY9q l43BqpgwqJfe4biOIucvff5UhRWj7BQUYQLy4oUllPZuwKJN9OtKwxoyWCeHr8j8 +Mgw85EB+0pPRJ71r70ca7sbZ5nsJlPwGSf4rQQpdOc3V0zN2kNNCnhHlQxQkwZ1 PGl4hexIZRlJpS09AHz+IBk3VLJxcrcmi537zWrtmRVam8EhUN3hQA5ZCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISTITSTC5He2+0FeX78GpstoFFEMB8GA1UdIwQY MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJPDiiQ7 N3LvO2eCkTLr0YcoQpXLslxnNeApz8N05d89pz/ZeXFKYrWm+TDYHieJv9Pjxat9 BQqLiCTJkXZs5vGgmWbB45YjbhLftopGbyoKjoK0TgbsY5pI4TxRzS3TaM3uURT1 qTbE6NhOCR9NgWNSqBj6Z9LbvYOn6ji6ARtbffJnYO0xH+/p0lSMYWpD8qfbp6gY QKkwLkW1U/uGxX8CRvEIHGAU2g8mlu1ezLpztzjNdt/AdqunktzUsi8DX6WJTYho TLpuA0RLTcGXUDQdj5oGzptP7ChTypEHsQQmcXcMouk9BNk7Sn4uJ6eQNt5DBaVg nLTcRx8AE8VwQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:43 2026 by rpki-client