This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json) Hash identifier: D/v51LNyfHbTCEbOHrNTIldXpzJfh3PaO/xIV9b1BNs= Subject key identifier: 5C:7A:BA:5A:15:33:E7:4C:33:C7:6C:81:5A:6C:3C:12:8A:85:0D:C6 Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86 Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386 Certificate serial: 019BB35F07C8791D0FCCF5F55D4F9214D7FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft Manifest number: 175A Signing time: Mon 12 Jan 2026 18:01:48 +0000 Manifest this update: Mon 12 Jan 2026 18:01:48 +0000 Manifest next update: Tue 13 Jan 2026 18:01:48 +0000 Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=) 2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=) 3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: LQB4AApytHd1O2E4grKrqL6QgNH5mf07uFAJtVox88o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 18:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:5f:07:c8:79:1d:0f:cc:f5:f5:5d:4f:92:14:d7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386 Validity Not Before: Jan 12 18:01:48 2026 GMT Not After : Jan 13 18:01:48 2026 GMT Subject: CN=5c7aba5a1533e74c33c76c815a6c3c128a850dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:99:d1:a0:84:ee:56:4c:35:cd:2c:7c:2c: be:cc:41:ec:92:96:cf:53:eb:24:31:27:74:0b:94: 23:2a:f6:e9:fa:d9:e4:1b:32:59:b2:cb:d7:92:5d: b1:31:e1:46:ee:70:52:58:e2:81:60:d2:b0:60:42: 16:27:b3:b0:6f:9a:a8:f6:cc:48:d5:bd:a8:60:14: 27:1b:73:66:f4:7b:18:72:53:ad:5d:8e:e8:d4:db: d5:50:c2:99:92:bc:ad:b6:4c:3a:57:63:b1:67:75: a9:e9:31:80:33:f0:f3:35:c3:f5:e0:b8:e5:c3:c3: ef:ce:b5:82:36:45:db:e4:3a:d2:87:f6:ac:1d:e4: 57:4c:00:d8:12:43:74:45:07:e4:82:9d:e4:6f:5b: 4d:68:80:e8:01:43:08:03:86:ef:ba:2c:64:af:e9: 21:fb:1e:f9:7f:75:a4:c5:56:9d:0c:e0:5e:8d:de: 47:72:79:f8:48:61:18:8e:3c:ed:99:28:ff:50:c5: 19:a7:a8:fe:3e:ff:65:98:85:59:25:b7:76:d2:db: f7:d2:6f:8a:a8:7c:ba:96:fa:ad:a1:91:f2:4c:83: 8d:c4:b1:43:89:8b:29:33:ef:f1:fa:e2:9b:a6:87: b2:4f:fa:b9:59:6d:0c:52:40:29:9b:5a:28:c8:db: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7A:BA:5A:15:33:E7:4C:33:C7:6C:81:5A:6C:3C:12:8A:85:0D:C6 X509v3 Authority Key Identifier: keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:80:64:1c:d8:5e:ec:4a:7b:09:28:6c:5b:24:77:a6:0b:94: a2:c6:e1:58:22:0d:d3:35:06:db:a1:db:02:50:d4:56:8a:39: 43:3f:1d:ba:6d:18:ae:88:a1:7c:2d:13:34:6a:34:c5:ae:ef: 05:7f:f3:ef:4e:12:83:fc:a2:03:2e:20:3c:f1:da:b4:9e:db: 8c:d2:76:a9:5a:b2:9b:b5:63:12:f5:56:3a:21:b1:bc:45:4b: b6:61:74:d6:12:04:77:6f:64:12:35:09:5a:81:55:b4:51:c2: 98:fc:09:f3:cc:80:e8:b9:d7:0b:23:f0:df:fe:f9:f2:47:29: 8a:9c:dd:fe:30:d6:ef:de:ec:5f:aa:8a:6b:c6:18:32:65:57: 1a:b2:eb:28:8f:5b:a0:38:d7:7c:02:57:14:7b:30:61:90:23: 20:eb:37:c2:57:8d:10:10:e0:b9:7b:82:4a:c7:1c:7d:f4:a1: 60:f6:23:3b:15:17:23:3b:2d:80:67:ad:59:79:ed:a8:3a:96: 26:d1:db:f8:50:f4:ff:ab:30:9b:6c:5e:66:23:ab:bb:c3:74: e0:4f:90:de:f1:c3:2f:bd:16:a2:21:4e:f6:26:b4:45:95:74: 05:8e:16:f5:44:6a:c6:15:8c:52:3d:33:88:fa:04:f1:48:cf: 34:b1:b8:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzXwfIeR0PzPX1XU+SFNf+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OGFmYTIyZjk4YTM3ZjZkOGQwMjkzYTliMzE5NDE2ZWM5 NGQzODYwHhcNMjYwMTEyMTgwMTQ4WhcNMjYwMTEzMTgwMTQ4WjAzMTEwLwYDVQQD Eyg1YzdhYmE1YTE1MzNlNzRjMzNjNzZjODE1YTZjM2MxMjhhODUwZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzmZ0aCE7lZMNc0sfCy+zEHskpbP U+skMSd0C5QjKvbp+tnkGzJZssvXkl2xMeFG7nBSWOKBYNKwYEIWJ7Owb5qo9sxI 1b2oYBQnG3Nm9HsYclOtXY7o1NvVUMKZkryttkw6V2OxZ3Wp6TGAM/DzNcP14Ljl w8PvzrWCNkXb5DrSh/asHeRXTADYEkN0RQfkgp3kb1tNaIDoAUMIA4bvuixkr+kh +x75f3WkxVadDOBejd5Hcnn4SGEYjjztmSj/UMUZp6j+Pv9lmIVZJbd20tv30m+K qHy6lvqtoZHyTIONxLFDiYspM+/x+uKbpoeyT/q5WW0MUkApm1ooyNuINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx6uloVM+dMM8dsgVpsPBKKhQ3GMB8GA1UdIwQY MBaAFMWK+iL5ijf22NApOpsxlBbslNOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEt OTEyMjg2MjA1NzBlLzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEtOTEyMjg2MjA1NzBl LzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIBkHNhe 7Ep7CShsWyR3pguUosbhWCIN0zUG26HbAlDUVoo5Qz8dum0YroihfC0TNGo0xa7v BX/z704Sg/yiAy4gPPHatJ7bjNJ2qVqym7VjEvVWOiGxvEVLtmF01hIEd29kEjUJ WoFVtFHCmPwJ88yA6LnXCyPw3/758kcpipzd/jDW797sX6qKa8YYMmVXGrLrKI9b oDjXfAJXFHswYZAjIOs3wleNEBDguXuCSsccffShYPYjOxUXIzstgGetWXntqDqW JtHb+FD0/6swm2xeZiOru8N04E+Q3vHDL70WoiFO9ia0RZV0BY4W9URqxhWMUj0z iPoE8UjPNLG4/w== -----END CERTIFICATE-----Generated at Tue Jan 13 02:51:58 2026 by rpki-client