This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json) Hash identifier: VqH9Ha+NW/lkhOPB3/0poLSUnCwZQXz4PLbuc/ffya4= Subject key identifier: DF:D1:11:50:78:97:02:0C:1E:4E:DF:CB:C1:79:E5:F6:66:29:10:20 Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Certificate serial: 019B7FF322411BE907884A43149D63660F87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft Manifest number: 0F74 Signing time: Fri 02 Jan 2026 18:23:18 +0000 Manifest this update: Fri 02 Jan 2026 18:23:18 +0000 Manifest next update: Sat 03 Jan 2026 18:23:18 +0000 Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=) 2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: 7fpoZPvegudML+nscltdGEtR0V4FcRq7my/EvY9NpeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f3:22:41:1b:e9:07:88:4a:43:14:9d:63:66:0f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Validity Not Before: Jan 2 18:23:18 2026 GMT Not After : Jan 3 18:23:18 2026 GMT Subject: CN=dfd111507897020c1e4edfcbc179e5f666291020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:36:d3:65:44:11:37:90:e3:e3:88:f9:89: 02:ab:1d:d3:b2:32:c9:32:ea:e6:ee:e5:b6:72:bf: 03:9a:50:c2:fb:d7:d2:ad:d2:b1:07:b8:25:08:59: 6c:73:4a:7a:d4:d5:2d:8c:0b:97:04:3c:1c:e2:cb: ba:87:4a:16:86:86:86:72:f2:a7:0b:ac:bb:e8:29: a4:3a:4b:91:d4:4f:8e:55:90:e2:df:4b:11:25:7b: b5:19:f8:2c:ce:8e:99:da:e2:cd:f8:cb:e6:a9:12: ed:5b:ba:1f:f6:a8:3d:0b:37:45:c3:6a:d2:f3:2d: cc:07:12:11:fe:b3:45:56:f9:92:ed:d3:ff:95:55: 58:ff:3d:c3:96:88:5f:24:a7:b3:d4:8f:d6:96:b5: 84:ad:06:4b:93:ce:fe:80:ea:9a:74:0a:77:3d:67: 02:c4:3a:c2:df:26:61:1e:11:41:19:fa:97:68:0c: 2c:df:c3:bc:d7:5c:0f:cd:9a:84:95:e8:cd:c2:94: b4:08:97:6b:29:bc:5d:8c:86:eb:67:66:61:cb:a7: e1:1d:cd:2c:c9:75:1a:51:d8:c8:73:fb:b9:e1:68: 91:08:28:b2:35:12:10:16:56:46:b1:6d:cc:b5:5c: 66:7d:ad:af:1b:e9:e1:7d:50:70:39:1c:49:a7:9d: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D1:11:50:78:97:02:0C:1E:4E:DF:CB:C1:79:E5:F6:66:29:10:20 X509v3 Authority Key Identifier: keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1b:ed:00:a7:19:07:2e:4c:80:62:a8:0c:61:c7:f0:61:0f: b9:8b:c8:22:68:50:4a:7a:16:91:fa:6c:d9:d6:0b:1f:5e:34: 2c:a9:31:c3:1b:6a:a0:6c:8a:42:33:14:1b:a0:5d:02:45:1e: 2f:f5:61:5e:d1:a2:5c:53:41:87:7d:b9:d1:a7:7d:60:33:c8: 32:11:21:e2:57:e6:a5:49:c2:e3:aa:10:aa:23:05:3e:9c:ea: 90:37:38:29:7b:d7:88:87:dc:62:5c:00:25:23:2d:89:7c:95: 02:63:16:6e:40:00:5d:f3:0f:99:d0:21:83:b7:cc:ae:9f:af: a9:7c:76:75:28:b6:37:c4:1a:1b:62:d0:32:5d:bc:70:49:a9: be:26:94:39:35:b9:e3:b3:1b:b7:e2:3b:e2:d1:f1:5c:1c:25: 74:fa:10:d8:1b:50:6c:4e:36:a0:f2:3f:d0:eb:38:4b:d6:52: af:d6:ba:51:c6:f4:7e:6e:5b:a7:c7:57:ea:4b:2e:c2:dd:f9: 32:11:04:8e:73:a0:52:99:18:62:de:7d:48:69:14:57:95:08: 1a:b7:35:6b:ca:e7:fa:f4:8b:e6:d9:08:f4:d3:54:48:04:bd: f1:c5:3b:98:28:53:27:19:78:48:8d:d2:47:d5:00:70:b8:64: fd:a1:8c:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/8yJBG+kHiEpDFJ1jZg+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh MDI3YzIwHhcNMjYwMTAyMTgyMzE4WhcNMjYwMTAzMTgyMzE4WjAzMTEwLwYDVQQD EyhkZmQxMTE1MDc4OTcwMjBjMWU0ZWRmY2JjMTc5ZTVmNjY2MjkxMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgQ202VEETeQ4+OI+YkCqx3TsjLJ Murm7uW2cr8DmlDC+9fSrdKxB7glCFlsc0p61NUtjAuXBDwc4su6h0oWhoaGcvKn C6y76CmkOkuR1E+OVZDi30sRJXu1Gfgszo6Z2uLN+MvmqRLtW7of9qg9CzdFw2rS 8y3MBxIR/rNFVvmS7dP/lVVY/z3DlohfJKez1I/WlrWErQZLk87+gOqadAp3PWcC xDrC3yZhHhFBGfqXaAws38O811wPzZqElejNwpS0CJdrKbxdjIbrZ2Zhy6fhHc0s yXUaUdjIc/u54WiRCCiyNRIQFlZGsW3MtVxmfa2vG+nhfVBwORxJp51BkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/REVB4lwIMHk7fy8F55fZmKRAgMB8GA1UdIwQY MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt N2ZiYzRlNTc5N2ExLzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhvtAKcZ By5MgGKoDGHH8GEPuYvIImhQSnoWkfps2dYLH140LKkxwxtqoGyKQjMUG6BdAkUe L/VhXtGiXFNBh3250ad9YDPIMhEh4lfmpUnC46oQqiMFPpzqkDc4KXvXiIfcYlwA JSMtiXyVAmMWbkAAXfMPmdAhg7fMrp+vqXx2dSi2N8QaG2LQMl28cEmpviaUOTW5 47Mbt+I74tHxXBwldPoQ2BtQbE42oPI/0Os4S9ZSr9a6Ucb0fm5bp8dX6ksuwt35 MhEEjnOgUpkYYt59SGkUV5UIGrc1a8rn+vSL5tkI9NNUSAS98cU7mChTJxl4SI3S R9UAcLhk/aGMcQ== -----END CERTIFICATE-----Generated at Sat Jan 3 04:18:11 2026 by rpki-client