This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json) Hash identifier: ZiP7RBzthgtGAyPACcNKTuk7jnCdNGQGCzxBFaVklx4= Subject key identifier: 08:C9:93:34:97:89:BE:9F:E9:14:23:25:58:3D:A9:A6:61:66:C9:F6 Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4 Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4 Certificate serial: 019BAF4A99B9A9DF680D91FC67AC65E910A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft Manifest number: 07B5 Signing time: Sun 11 Jan 2026 23:01:00 +0000 Manifest this update: Sun 11 Jan 2026 23:01:00 +0000 Manifest next update: Mon 12 Jan 2026 23:01:00 +0000 Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=) 2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=) 3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: 6rpGxnunFoKrxrrk/3XAR3iPWSDDr0C4z6SEbK8IXWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4a:99:b9:a9:df:68:0d:91:fc:67:ac:65:e9:10:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4 Validity Not Before: Jan 11 23:01:00 2026 GMT Not After : Jan 12 23:01:00 2026 GMT Subject: CN=08c993349789be9fe9142325583da9a66166c9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:bb:4e:2d:4e:a3:bd:93:e1:11:0a:15:d7: a7:4f:3e:1f:bd:2f:46:6e:5b:4b:21:65:cd:9d:ca: 7b:b7:d6:cd:ed:ec:4a:48:77:f4:31:63:3b:54:3d: 0e:f9:7b:32:2f:9a:33:52:3d:53:5c:19:cb:0b:45: 2c:70:b8:2a:1f:a8:ab:d8:7c:4e:7e:9d:74:83:7e: 45:be:2c:05:75:13:7b:d8:dd:aa:79:a1:90:8e:0c: 14:e8:83:8a:f8:55:ff:a8:5c:cb:07:36:2c:07:03: 76:73:4b:e1:ac:96:19:a5:28:cb:f6:51:b1:74:d2: 39:5f:b6:5f:ee:dc:a0:4d:7d:75:d1:14:4c:75:34: 78:a1:69:12:bf:42:17:11:e3:26:8f:a8:af:86:9e: 52:b9:db:e8:f0:83:72:ef:40:1b:98:95:63:60:03: 61:81:4b:08:16:1b:df:f2:02:1b:b4:5d:3a:33:39: 21:55:e8:e5:86:36:1a:41:86:9f:6b:f5:04:20:1d: a2:fd:3c:b2:ec:18:61:dd:aa:5c:7b:fb:02:52:ac: 60:ce:5b:7f:57:d4:f2:39:fa:90:04:c1:0d:a2:6d: 3c:73:1f:f1:b5:47:95:a6:cf:ee:5a:4a:2c:82:65: da:b6:64:ab:5b:b7:48:84:e2:3e:4b:3d:d1:dd:fe: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C9:93:34:97:89:BE:9F:E9:14:23:25:58:3D:A9:A6:61:66:C9:F6 X509v3 Authority Key Identifier: keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:80:8f:86:9e:b0:71:c4:04:18:e8:26:94:66:7c:e3:5b:8b: 8b:6a:cc:dc:01:66:c6:c5:49:0d:f9:c6:9c:49:fd:b0:67:dd: 95:b2:97:36:5f:ce:e1:cc:38:f4:db:1a:c8:8c:1f:81:da:1a: 56:4c:ae:a2:90:2d:ae:39:3b:04:07:1a:53:cc:0d:b5:8c:94: 26:12:e3:bc:6d:67:2a:11:30:4d:37:14:48:57:0d:4c:36:ec: eb:ff:8f:90:3b:77:76:bd:87:76:aa:c0:f3:21:56:9a:f2:56: 45:8f:3c:70:13:cb:6a:64:16:7d:ff:b8:64:a6:f1:fa:59:8f: f3:35:97:de:d6:d3:41:ee:3e:04:b3:90:c7:b9:3c:c0:73:7b: 12:7d:81:a1:6a:78:e6:2a:d2:43:c6:39:1e:3f:b4:59:13:52: 37:55:3c:22:12:69:8f:65:26:da:b5:54:2a:9c:fd:7b:ef:1f: d4:cc:ae:95:73:66:d5:96:f8:2b:19:17:5f:b4:32:f6:d1:1d: 95:8f:e4:db:af:2f:d9:8d:37:a8:0e:54:44:b3:03:e6:97:07: c2:84:3c:b7:67:1f:a6:89:81:67:38:ae:fa:0e:2f:6a:e4:2f: e5:8b:3a:aa:cd:b9:ed:59:9c:d2:00:c7:be:23:77:27:7e:e1: 13:e4:88:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvSpm5qd9oDZH8Z6xl6RClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE0MDcwMjEwNjI3YmZjYTQ2NTRiNDJkZTc5N2FjZDZk MmM0ZjQwHhcNMjYwMTExMjMwMTAwWhcNMjYwMTEyMjMwMTAwWjAzMTEwLwYDVQQD EygwOGM5OTMzNDk3ODliZTlmZTkxNDIzMjU1ODNkYTlhNjYxNjZjOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4G7Ti1Oo72T4REKFdenTz4fvS9G bltLIWXNncp7t9bN7exKSHf0MWM7VD0O+XsyL5ozUj1TXBnLC0UscLgqH6ir2HxO fp10g35FviwFdRN72N2qeaGQjgwU6IOK+FX/qFzLBzYsBwN2c0vhrJYZpSjL9lGx dNI5X7Zf7tygTX110RRMdTR4oWkSv0IXEeMmj6ivhp5Sudvo8INy70AbmJVjYANh gUsIFhvf8gIbtF06MzkhVejlhjYaQYafa/UEIB2i/Tyy7Bhh3apce/sCUqxgzlt/ V9TyOfqQBMENom08cx/xtUeVps/uWkosgmXatmSrW7dIhOI+Sz3R3f6AMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjJkzSXib6f6RQjJVg9qaZhZsn2MB8GA1UdIwQY MBaAFMXhQHAhBie/ykZUtC3nl6zW0sT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDIt M2M0ODM5YzhlODUxLzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDItM2M0ODM5YzhlODUx LzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoCPhp6w ccQEGOgmlGZ841uLi2rM3AFmxsVJDfnGnEn9sGfdlbKXNl/O4cw49NsayIwfgdoa VkyuopAtrjk7BAcaU8wNtYyUJhLjvG1nKhEwTTcUSFcNTDbs6/+PkDt3dr2HdqrA 8yFWmvJWRY88cBPLamQWff+4ZKbx+lmP8zWX3tbTQe4+BLOQx7k8wHN7En2BoWp4 5irSQ8Y5Hj+0WRNSN1U8IhJpj2Um2rVUKpz9e+8f1MyulXNm1Zb4KxkXX7Qy9tEd lY/k268v2Y03qA5URLMD5pcHwoQ8t2cfpomBZziu+g4vauQv5Ys6qs257Vmc0gDH viN3J37hE+SIdA== -----END CERTIFICATE-----Generated at Mon Jan 12 02:02:29 2026 by rpki-client