This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json) Hash identifier: JESQnMZGmBxD91MldSCygvL97DZR9Z2TBU+Oskhk33o= Subject key identifier: B3:54:05:FE:3D:77:B0:96:66:CC:F7:34:42:60:97:08:77:B0:90:12 Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28 Certificate serial: 019BAD5CD71AEDDB6F4D5ACB817767968F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 14:01:41 +0000 Manifest this update: Sun 11 Jan 2026 14:01:41 +0000 Manifest next update: Mon 12 Jan 2026 14:01:41 +0000 Files and hashes: 1: KK6V4tkkGOTlna1jDdLR34C1144.roa (hash: VJsTur/NQjIjrIZYxVHk28VDPEOKoZ9mo1/7vuIP+oc=) 2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: RLO8OzgT3N1yh1fIC6/JAUaWmFvo9KbAfJ+6AKhJV1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:d7:1a:ed:db:6f:4d:5a:cb:81:77:67:96:8f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28 Validity Not Before: Jan 11 14:01:41 2026 GMT Not After : Jan 12 14:01:41 2026 GMT Subject: CN=b35405fe3d77b09666ccf7344260970877b09012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:cd:eb:8f:92:84:c0:c3:95:c8:8d:2c:74: 84:96:d8:ba:2c:74:43:da:ff:2b:bd:f4:60:48:fa: 12:be:36:e9:87:2b:52:be:67:eb:04:e2:49:27:d2: 71:a5:7f:2e:ab:6b:26:7e:1f:16:4b:d5:2c:da:8d: 1a:13:fb:ed:41:80:f3:2f:db:78:85:49:80:7d:8d: cc:c3:a5:fc:7e:5a:e7:49:7e:b0:64:2b:78:d5:63: 51:23:a9:52:d7:2f:96:1b:f1:cd:33:9c:8e:d4:40: 9f:ce:4c:72:7c:31:e3:fb:b8:20:1e:32:74:9b:77: 59:f2:3a:11:4b:67:07:35:8b:6c:ea:d1:cc:99:88: 46:95:19:a6:62:98:2c:50:15:07:9c:ff:f6:02:63: ff:fc:d0:93:6e:f4:4d:0a:92:3b:b4:63:ea:45:30: d7:2e:69:ce:44:7c:4a:11:d0:47:26:97:2e:ab:b1: 08:2f:24:5b:20:b6:9b:a3:25:b4:08:e4:99:e6:b3: 82:9c:fa:79:d4:fb:98:9a:bb:98:e6:9d:3c:9b:cf: c2:ef:fe:b5:16:9e:22:fe:94:c4:d4:37:37:15:74: 2f:ef:f9:ad:b8:ae:34:9e:68:f6:a0:26:34:af:e1: f0:69:7e:bf:c0:aa:fc:10:b7:5c:1e:d7:6a:c2:7f: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:54:05:FE:3D:77:B0:96:66:CC:F7:34:42:60:97:08:77:B0:90:12 X509v3 Authority Key Identifier: keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d7:89:49:9b:cc:77:67:f5:ee:fa:f4:3e:f3:2d:22:cf:62: 3b:ab:b0:fe:3a:04:98:0b:cf:bd:7a:c4:0f:aa:7a:3d:de:78: 89:1b:df:a1:a0:8e:11:99:02:c3:67:84:e6:82:64:ca:4d:20: 2d:14:b8:f1:06:bb:14:c4:56:0b:b1:80:fd:c2:56:dd:00:01: f8:bf:35:a7:61:ae:95:2f:1a:e5:36:3c:dc:b7:cc:79:49:9a: 84:20:47:69:a8:4e:f6:6c:07:09:69:7c:a7:97:43:a5:da:f4: bb:2d:e7:ad:32:8a:fd:5a:88:36:ad:77:c0:36:78:1d:1c:29: 91:23:10:e7:a3:d9:24:25:8f:6b:69:4c:9a:10:66:57:c8:30: bf:a1:6d:5a:ff:87:21:38:34:8f:43:05:0d:4a:b6:60:02:ef: c0:f2:bb:a5:bc:e9:ba:1b:2c:33:3a:e4:43:1d:8b:83:87:88: bc:b6:58:99:66:41:d0:c2:8f:d3:ee:7a:bc:74:7e:2b:a0:36: 15:51:9a:92:dd:b8:d6:c1:27:66:b4:ec:f2:96:21:79:37:87: a7:be:ff:21:71:bf:7d:db:dc:e4:85:94:73:00:de:29:7f:fe: c1:d3:ab:60:cc:02:a3:99:bb:c9:6e:12:d5:f0:9d:4e:cc:ab: fc:3b:ae:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXNca7dtvTVrLgXdnlo8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjI4N2M2ODQ1OGY5ODBjYTliN2MzNmQ2MWY2YWY1ODY0 NjRiMjgwHhcNMjYwMTExMTQwMTQxWhcNMjYwMTEyMTQwMTQxWjAzMTEwLwYDVQQD EyhiMzU0MDVmZTNkNzdiMDk2NjZjY2Y3MzQ0MjYwOTcwODc3YjA5MDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7HN64+ShMDDlciNLHSElti6LHRD 2v8rvfRgSPoSvjbphytSvmfrBOJJJ9JxpX8uq2smfh8WS9Us2o0aE/vtQYDzL9t4 hUmAfY3Mw6X8flrnSX6wZCt41WNRI6lS1y+WG/HNM5yO1ECfzkxyfDHj+7ggHjJ0 m3dZ8joRS2cHNYts6tHMmYhGlRmmYpgsUBUHnP/2AmP//NCTbvRNCpI7tGPqRTDX LmnORHxKEdBHJpcuq7EILyRbILaboyW0COSZ5rOCnPp51PuYmruY5p08m8/C7/61 Fp4i/pTE1Dc3FXQv7/mtuK40nmj2oCY0r+HwaX6/wKr8ELdcHtdqwn+8TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNUBf49d7CWZsz3NEJglwh3sJASMB8GA1UdIwQY MBaAFMQih8aEWPmAypt8NtYfavWGRksoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMt YjEyZDdmODkyZjViLzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMtYjEyZDdmODkyZjVi LzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9eJSZvM d2f17vr0PvMtIs9iO6uw/joEmAvPvXrED6p6Pd54iRvfoaCOEZkCw2eE5oJkyk0g LRS48Qa7FMRWC7GA/cJW3QAB+L81p2GulS8a5TY83LfMeUmahCBHaahO9mwHCWl8 p5dDpdr0uy3nrTKK/VqINq13wDZ4HRwpkSMQ56PZJCWPa2lMmhBmV8gwv6FtWv+H ITg0j0MFDUq2YALvwPK7pbzpuhssMzrkQx2Lg4eIvLZYmWZB0MKP0+56vHR+K6A2 FVGakt241sEnZrTs8pYheTeHp77/IXG/fdvc5IWUcwDeKX/+wdOrYMwCo5m7yW4S 1fCdTsyr/DuuBQ== -----END CERTIFICATE-----Generated at Sun Jan 11 20:04:57 2026 by rpki-client