This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json) Hash identifier: uTl2BoVVU72mMW21LT8sk88knjNXIdlvN/g3JDUNX/s= Subject key identifier: 45:0D:1E:08:94:15:35:44:D9:55:89:20:FA:D0:AD:4F:04:79:1D:FE Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b Certificate serial: 019B77498B84C91F69D0FA75D62CAEA2F11E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft Manifest number: 1739 Signing time: Thu 01 Jan 2026 02:01:07 +0000 Manifest this update: Thu 01 Jan 2026 02:01:07 +0000 Manifest next update: Fri 02 Jan 2026 02:01:07 +0000 Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=) 2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: Np7/GfKLHiDpeEp7R9FDR1zE5V9z+3OQSArMxAmGwBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:49:8b:84:c9:1f:69:d0:fa:75:d6:2c:ae:a2:f1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b Validity Not Before: Jan 1 02:01:07 2026 GMT Not After : Jan 2 02:01:07 2026 GMT Subject: CN=450d1e0894153544d9558920fad0ad4f04791dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:6f:5d:23:c7:43:6b:76:1e:91:dc:a6:96: 14:e4:d1:e6:d3:01:08:bc:b5:4d:09:3f:b9:7f:93: af:59:11:c5:fe:45:59:b1:06:ce:55:9c:ca:7a:37: e6:f5:e0:c4:f2:64:49:cd:ba:b9:5d:89:b0:2a:48: 8a:e9:da:bd:cf:8b:90:8f:68:0e:4e:cf:42:45:36: 87:1b:83:48:61:bb:55:dd:60:50:9b:d4:8d:eb:de: ad:3a:aa:45:bd:0b:e7:67:18:b4:ed:b5:69:ac:e6: e7:95:be:34:80:2b:e2:6e:54:72:57:c8:72:b5:68: db:4d:71:f0:a8:4e:15:86:96:c8:ce:a9:d1:25:14: c0:29:dc:54:3b:77:91:86:ed:36:4d:9d:89:23:c4: 24:b1:45:7d:5a:96:2b:53:aa:55:e4:00:3a:b5:d9: dd:e6:93:24:7b:0a:63:a1:50:5d:bc:97:20:7a:12: 45:8b:e4:d4:02:85:60:75:75:6e:90:19:8e:1e:ba: 2b:55:64:b7:52:70:e1:41:cb:3f:1a:89:eb:1f:a9: 7c:75:21:9f:a6:23:06:2a:4c:78:3d:fd:39:33:40: 43:a4:7c:36:ba:9e:8b:eb:bf:9d:36:07:04:46:13: ba:16:76:34:3d:84:60:c3:ae:0a:cb:ca:08:c0:91: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0D:1E:08:94:15:35:44:D9:55:89:20:FA:D0:AD:4F:04:79:1D:FE X509v3 Authority Key Identifier: keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2e:e2:e4:79:e5:15:91:c5:62:66:9d:e0:f2:cd:cb:fa:d4: 42:31:de:9c:5b:04:e2:82:11:68:b7:39:7e:60:ba:f6:10:c5: 33:df:d8:6b:49:15:0b:d9:99:7a:ca:cf:c6:08:e5:c3:df:4c: c6:73:3e:a8:fa:f1:a5:08:0e:0e:c4:43:03:ce:d1:a1:5e:3a: e3:66:dc:f2:76:1d:e8:7d:80:2a:8e:0e:61:e9:a3:e2:5b:5c: 46:54:ac:f5:c7:fb:f4:cc:55:68:23:38:42:0b:83:f1:18:62: c7:64:83:04:1d:6c:5f:d1:ad:93:5f:6a:05:b9:cd:41:2b:1b: d3:fa:4c:68:10:44:38:15:74:70:1c:ef:fb:29:22:25:56:f0: 90:82:d8:b3:2b:17:15:7f:7c:aa:64:5a:80:77:bb:6c:20:a7: 66:85:a3:f8:ec:22:45:f4:be:d3:0d:b5:b3:fd:91:f6:07:2a: ad:2e:c9:4b:86:08:4c:a8:4b:01:19:5a:0e:36:d1:8a:18:cf: cd:40:c4:a3:6f:a9:4d:4e:2e:f2:73:09:a9:c3:ee:9b:fd:ad: fc:43:7d:70:18:11:ff:7c:cb:e3:a7:62:ce:a5:ac:5d:d2:86: a1:26:87:c3:49:72:76:be:7f:62:e7:97:cb:7c:a2:a2:b4:c8: 72:5d:ca:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3SYuEyR9p0Pp11iyuovEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWM0MWRhZjAwOTJiNzAzYmMwNTliYTEzNTNmMDcxZWQx MjE5OWIwHhcNMjYwMTAxMDIwMTA3WhcNMjYwMTAyMDIwMTA3WjAzMTEwLwYDVQQD Eyg0NTBkMWUwODk0MTUzNTQ0ZDk1NTg5MjBmYWQwYWQ0ZjA0NzkxZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVhvXSPHQ2t2HpHcppYU5NHm0wEI vLVNCT+5f5OvWRHF/kVZsQbOVZzKejfm9eDE8mRJzbq5XYmwKkiK6dq9z4uQj2gO Ts9CRTaHG4NIYbtV3WBQm9SN696tOqpFvQvnZxi07bVprObnlb40gCviblRyV8hy tWjbTXHwqE4VhpbIzqnRJRTAKdxUO3eRhu02TZ2JI8QksUV9WpYrU6pV5AA6tdnd 5pMkewpjoVBdvJcgehJFi+TUAoVgdXVukBmOHrorVWS3UnDhQcs/GonrH6l8dSGf piMGKkx4Pf05M0BDpHw2up6L67+dNgcERhO6FnY0PYRgw64Ky8oIwJEphwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUNHgiUFTVE2VWJIPrQrU8EeR3+MB8GA1UdIwQY MBaAFMWcQdrwCStwO8BZuhNT8HHtEhmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQt YzU0OTNmZTgyZTI2LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQtYzU0OTNmZTgyZTI2 LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci7i5Hnl FZHFYmad4PLNy/rUQjHenFsE4oIRaLc5fmC69hDFM9/Ya0kVC9mZesrPxgjlw99M xnM+qPrxpQgODsRDA87RoV4642bc8nYd6H2AKo4OYemj4ltcRlSs9cf79MxVaCM4 QguD8Rhix2SDBB1sX9Gtk19qBbnNQSsb0/pMaBBEOBV0cBzv+ykiJVbwkILYsysX FX98qmRagHe7bCCnZoWj+OwiRfS+0w21s/2R9gcqrS7JS4YITKhLARlaDjbRihjP zUDEo2+pTU4u8nMJqcPum/2t/EN9cBgR/3zL46dizqWsXdKGoSaHw0lydr5/YueX y3yiorTIcl3KMA== -----END CERTIFICATE-----Generated at Thu Jan 1 05:45:07 2026 by rpki-client