This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json) Hash identifier: KPOSH46y43QS1URayA5Z1rd2bE2No0JoV6a5xWO4Ty0= Subject key identifier: BF:D0:C5:DC:E3:C4:54:CE:F2:3D:66:F6:85:0C:CB:56:F9:A6:8C:AF Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Certificate serial: 019B7900631780FE1016AA55B3DD5066F0EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft Manifest number: 05C0 Signing time: Thu 01 Jan 2026 10:00:26 +0000 Manifest this update: Thu 01 Jan 2026 10:00:26 +0000 Manifest next update: Fri 02 Jan 2026 10:00:26 +0000 Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: +r6gEIyuoNFFKOegloEV7tV9wJfSs0+0+K1xU7vhdA8=) 2: ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (hash: LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:00:63:17:80:fe:10:16:aa:55:b3:dd:50:66:f0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Validity Not Before: Jan 1 10:00:26 2026 GMT Not After : Jan 2 10:00:26 2026 GMT Subject: CN=bfd0c5dce3c454cef23d66f6850ccb56f9a68caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:5d:f4:36:49:e3:6d:15:b9:f2:7b:c7:c6: e1:50:5d:78:58:3a:b3:18:33:fe:f5:b8:92:cb:aa: 4b:4f:8b:71:a8:6e:6d:cb:06:de:e0:4b:2c:3b:8f: 19:06:41:a9:ff:f7:16:3e:76:7c:24:a8:a6:20:72: e3:73:c4:4d:19:62:ca:e2:31:be:a9:34:54:55:ff: 8e:70:36:f1:09:14:a3:e5:3a:20:4c:d4:be:4f:c3: ee:00:83:17:06:6c:0a:90:3b:03:fa:6b:6e:bd:84: 97:9e:ad:ae:3b:7a:7a:0d:01:20:0a:7f:4d:47:9a: 44:41:cd:f7:1b:3e:a7:57:c7:6b:b3:ba:ea:11:b1: 9e:87:40:6d:f8:59:5c:d7:60:76:63:4e:7c:c9:33: 21:fa:4d:7a:78:27:95:ce:dd:0a:97:6a:b1:f8:39: d1:47:46:c6:1f:78:97:7e:bf:bb:21:b3:76:5e:fe: 0d:54:86:df:1e:d9:82:26:c9:4c:95:5c:70:31:99: e8:63:af:7c:31:df:3f:e0:68:7e:e6:32:95:15:f2: 07:55:d8:a1:5b:91:45:74:09:8f:b9:a1:cd:1f:30: cc:76:87:12:ec:31:5b:e4:d5:93:3d:84:5e:38:98: 0b:5b:00:e2:18:bc:72:b4:e0:63:d8:34:4d:d3:d4: 15:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:C5:DC:E3:C4:54:CE:F2:3D:66:F6:85:0C:CB:56:F9:A6:8C:AF X509v3 Authority Key Identifier: keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a7:9e:ac:52:36:d8:8b:8b:33:6b:46:09:54:51:70:f3:40: 22:b4:ce:4f:bf:bf:c0:85:59:f9:74:9d:fa:d0:64:49:82:2a: 94:09:fe:36:92:12:c9:c5:08:75:e2:90:57:c1:e1:4f:ca:2c: 46:9f:ce:66:cf:b3:ed:f1:15:6a:94:28:79:b3:44:ea:e0:4b: 5f:c7:ad:23:f7:fe:d0:b6:62:80:f0:6a:04:93:9b:5e:e2:6f: 18:fa:6c:00:79:9d:67:18:cd:b8:1f:85:ab:84:64:34:ea:3c: bf:9e:4d:e8:74:8f:bc:98:d5:94:1f:9d:25:5f:f2:7f:1d:7e: ed:10:cf:5e:03:aa:cb:8b:da:1a:5a:93:37:4b:9e:14:7b:5d: 3a:28:9a:cf:cd:ec:db:5e:bb:ca:dd:5f:c6:36:e9:19:14:e8: fc:46:38:67:bd:1d:fd:49:76:29:cd:e9:62:e7:ca:33:c9:4b: 8b:05:11:04:ec:8f:c1:5b:8d:ea:d5:85:fe:2f:59:75:55:9a: f2:31:1b:c7:29:14:54:61:4c:bd:a2:2c:30:af:8a:26:eb:2d: 07:f6:34:ba:7e:70:b9:83:b2:31:eb:46:a4:50:86:73:8e:d0: 46:16:c5:62:b8:a5:4c:b2:8e:3f:9f:23:66:e8:df:55:16:b2: 5b:ba:99:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5AGMXgP4QFqpVs91QZvDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi ODljOTUwHhcNMjYwMTAxMTAwMDI2WhcNMjYwMTAyMTAwMDI2WjAzMTEwLwYDVQQD EyhiZmQwYzVkY2UzYzQ1NGNlZjIzZDY2ZjY4NTBjY2I1NmY5YTY4Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIBd9DZJ420VufJ7x8bhUF14WDqz GDP+9biSy6pLT4txqG5tywbe4EssO48ZBkGp//cWPnZ8JKimIHLjc8RNGWLK4jG+ qTRUVf+OcDbxCRSj5TogTNS+T8PuAIMXBmwKkDsD+mtuvYSXnq2uO3p6DQEgCn9N R5pEQc33Gz6nV8drs7rqEbGeh0Bt+Flc12B2Y058yTMh+k16eCeVzt0Kl2qx+DnR R0bGH3iXfr+7IbN2Xv4NVIbfHtmCJslMlVxwMZnoY698Md8/4Gh+5jKVFfIHVdih W5FFdAmPuaHNHzDMdocS7DFb5NWTPYReOJgLWwDiGLxytOBj2DRN09QVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/QxdzjxFTO8j1m9oUMy1b5poyvMB8GA1UdIwQY MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3 LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKeerFI2 2IuLM2tGCVRRcPNAIrTOT7+/wIVZ+XSd+tBkSYIqlAn+NpISycUIdeKQV8HhT8os Rp/OZs+z7fEVapQoebNE6uBLX8etI/f+0LZigPBqBJObXuJvGPpsAHmdZxjNuB+F q4RkNOo8v55N6HSPvJjVlB+dJV/yfx1+7RDPXgOqy4vaGlqTN0ueFHtdOiiaz83s 2167yt1fxjbpGRTo/EY4Z70d/Ul2Kc3pYufKM8lLiwURBOyPwVuN6tWF/i9ZdVWa 8jEbxykUVGFMvaIsMK+KJustB/Y0un5wuYOyMetGpFCGc47QRhbFYrilTLKOP58j ZujfVRayW7qZXQ== -----END CERTIFICATE-----Generated at Thu Jan 1 14:26:47 2026 by rpki-client