This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json) Hash identifier: 79WuRcX9NW/xPQmI+/eGMral+FKmLrvjPpAmV8SItBA= Subject key identifier: 4D:1B:6B:E1:BC:39:19:98:CF:48:A6:44:5E:8F:CF:E9:AA:91:4B:92 Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23 Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423 Certificate serial: 019BB327473AE9A8BC3AF246084F53833680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 17:00:54 +0000 Manifest this update: Mon 12 Jan 2026 17:00:54 +0000 Manifest next update: Tue 13 Jan 2026 17:00:54 +0000 Files and hashes: 1: XddFO1_V4vw4BFewS5a4h464RsI.roa (hash: 6STZFqkc7/OsVyHseLRUMCPEN6uwIoKNwxdIv1/YIe8=) 2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: KGZbtuB1we0hypNSl09DuPCvRmRWCrXYqyFq/tt2jCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:27:47:3a:e9:a8:bc:3a:f2:46:08:4f:53:83:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423 Validity Not Before: Jan 12 17:00:54 2026 GMT Not After : Jan 13 17:00:54 2026 GMT Subject: CN=4d1b6be1bc391998cf48a6445e8fcfe9aa914b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:23:67:0e:fd:cb:b3:38:99:fa:36:37:4f: 98:8a:72:75:09:bf:14:83:b3:56:52:05:e9:d9:4a: 3b:24:9f:b4:8e:61:98:de:b9:76:b9:41:72:6b:91: 11:ea:32:12:64:15:12:c6:cd:19:57:73:5a:85:5e: 5c:39:7d:b7:6a:f6:fc:85:26:69:d4:fb:9c:8d:92: ae:b5:2a:ec:95:5c:19:e2:85:52:02:58:77:f1:d8: c5:1b:0b:ec:40:a9:cc:3d:06:b3:5b:f0:65:40:38: e2:d5:89:29:96:13:56:a4:4b:ae:99:33:67:a6:05: 9b:01:d5:99:43:f9:5e:5a:15:32:ef:64:05:a8:7f: e6:d6:90:c8:99:1a:e2:90:c3:e5:07:e2:6e:10:82: 5e:92:99:4e:0c:79:81:dd:09:58:f3:46:16:12:0d: 88:14:d3:45:07:a4:94:60:d4:66:97:6f:6b:33:96: 31:e5:4f:81:eb:ff:36:f9:b9:66:95:07:3b:fc:d4: 0b:e1:69:4e:80:c5:d3:6a:a8:a0:93:1d:d4:41:e4: 07:3a:22:39:08:96:c2:a3:2f:63:44:c6:a6:f2:5b: 14:2d:cf:e1:e9:66:d2:d7:72:35:07:26:af:c3:bc: 53:1b:c7:0f:47:78:b1:cc:98:4f:27:d9:46:8d:08: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1B:6B:E1:BC:39:19:98:CF:48:A6:44:5E:8F:CF:E9:AA:91:4B:92 X509v3 Authority Key Identifier: keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:db:60:7a:05:e1:87:1a:65:6f:27:6c:f5:70:49:c6:ee:c9: 56:5f:6a:1b:b3:a2:21:70:3f:82:b7:9e:23:fa:80:a8:88:df: 99:61:b3:ae:b3:31:87:b2:1e:b3:5c:df:f7:7c:ea:d5:d4:fe: 6e:4b:f5:e1:9b:13:ea:49:67:91:90:bb:da:ac:f6:9f:6b:85: 38:93:05:46:ed:40:cb:df:c8:81:53:b0:bd:99:24:c0:34:a3: c9:26:43:7f:61:bf:89:78:cb:5a:fa:76:ab:46:dd:60:e4:65: b1:6e:bd:eb:fd:94:de:3b:36:84:b9:48:de:33:04:4a:67:18: dd:a5:2d:d7:85:0e:0c:cd:dd:97:f3:e7:d0:bc:d3:80:59:f9: ab:da:67:1d:14:ef:17:6d:82:91:98:ea:f9:8e:58:f8:f0:a6: e9:ac:35:e4:77:91:c1:ce:18:37:fb:9f:2b:7b:3d:6f:72:4f: c8:f3:5a:8c:a3:8e:5b:af:6e:85:81:93:52:ea:be:fe:89:a2: cf:81:c8:39:3e:9e:c3:dc:d0:f5:2e:56:d9:4e:d1:f6:55:b0: ae:2b:fd:7e:18:88:84:6a:57:8b:98:0d:d5:ca:bf:fc:51:49: ba:18:c5:83:3a:5d:08:04:f6:27:18:d1:07:44:88:7f:dd:a1: 67:31:14:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzJ0c66ai8OvJGCE9TgzaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWI2ZGMzYmMyMmY2YzM2YTAzOTg1NTUzNGIyZDQxYWJi MTI0MjMwHhcNMjYwMTEyMTcwMDU0WhcNMjYwMTEzMTcwMDU0WjAzMTEwLwYDVQQD Eyg0ZDFiNmJlMWJjMzkxOTk4Y2Y0OGE2NDQ1ZThmY2ZlOWFhOTE0YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzUjZw79y7M4mfo2N0+YinJ1Cb8U g7NWUgXp2Uo7JJ+0jmGY3rl2uUFya5ER6jISZBUSxs0ZV3NahV5cOX23avb8hSZp 1PucjZKutSrslVwZ4oVSAlh38djFGwvsQKnMPQazW/BlQDji1YkplhNWpEuumTNn pgWbAdWZQ/leWhUy72QFqH/m1pDImRrikMPlB+JuEIJekplODHmB3QlY80YWEg2I FNNFB6SUYNRml29rM5Yx5U+B6/82+blmlQc7/NQL4WlOgMXTaqigkx3UQeQHOiI5 CJbCoy9jRMam8lsULc/h6WbS13I1Byavw7xTG8cPR3ixzJhPJ9lGjQgXJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0ba+G8ORmYz0imRF6Pz+mqkUuSMB8GA1UdIwQY MBaAFMWbbcO8IvbDagOYVVNLLUGrsSQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjkt ZDJmNDBkZTA0OWI3LzEveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjktZDJmNDBkZTA0OWI3 LzEveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdtgegXh hxplbyds9XBJxu7JVl9qG7OiIXA/greeI/qAqIjfmWGzrrMxh7Ies1zf93zq1dT+ bkv14ZsT6klnkZC72qz2n2uFOJMFRu1Ay9/IgVOwvZkkwDSjySZDf2G/iXjLWvp2 q0bdYORlsW696/2U3js2hLlI3jMESmcY3aUt14UODM3dl/Pn0LzTgFn5q9pnHRTv F22CkZjq+Y5Y+PCm6aw15HeRwc4YN/ufK3s9b3JPyPNajKOOW69uhYGTUuq+/omi z4HIOT6ew9zQ9S5W2U7R9lWwriv9fhiIhGpXi5gN1cq//FFJuhjFgzpdCAT2JxjR B0SIf92hZzEUcw== -----END CERTIFICATE-----Generated at Mon Jan 12 23:49:13 2026 by rpki-client