This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json) Hash identifier: QIHdvQ8ip2chm1Iceh5J9bgJri8uRIlHnTPi+0o8eyM= Subject key identifier: 20:CF:B9:9A:9D:48:79:EC:7E:8B:79:76:C2:21:5C:5E:E1:C4:A6:41 Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Certificate serial: 019BB102AA1D91FF59016CD4605F785CEDAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft Manifest number: 0DCF Signing time: Mon 12 Jan 2026 07:01:40 +0000 Manifest this update: Mon 12 Jan 2026 07:01:40 +0000 Manifest next update: Tue 13 Jan 2026 07:01:40 +0000 Files and hashes: 1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=) 2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: 1yrzeF/hUI0Ci/AR0GSlR+y5pmFfHDdVPaT5o9NyhYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:02:aa:1d:91:ff:59:01:6c:d4:60:5f:78:5c:ed:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Validity Not Before: Jan 12 07:01:40 2026 GMT Not After : Jan 13 07:01:40 2026 GMT Subject: CN=20cfb99a9d4879ec7e8b7976c2215c5ee1c4a641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:ca:f2:7b:89:28:88:46:b8:09:67:7e:ab: b1:9a:c4:99:8f:06:bc:b8:39:8d:e2:7b:35:7d:26: 59:5a:ad:97:9f:bb:25:22:03:21:13:0e:c3:22:82: 89:35:aa:fb:d9:4f:e5:2c:12:a8:d5:94:b3:4d:a7: 88:5f:bc:90:81:34:c7:54:ba:9f:36:4e:a8:fc:5d: 34:62:46:9a:63:bb:b4:3f:34:8c:15:b9:41:c0:e8: 5e:10:81:b9:86:99:5c:28:7e:c7:b5:a4:e6:2f:54: 32:d2:6e:71:42:78:c9:01:e9:fc:b0:71:d6:6f:b2: 2d:58:68:b5:78:b5:f6:ae:aa:df:d9:b6:fd:3f:64: b7:a1:ea:2c:2c:e3:0a:4e:a1:91:88:ce:ad:97:6e: e0:52:0b:7e:d3:59:9c:7e:82:0c:9d:72:6b:0c:fc: e2:75:b4:b8:39:5a:55:60:8d:2c:5b:c6:16:48:7f: 62:c8:da:24:45:8d:41:9b:af:88:45:8c:80:05:bf: 47:f6:98:3c:d3:10:5c:d6:71:27:d4:80:be:86:5b: fd:65:63:31:d4:f8:46:1c:cf:4d:c7:5e:ec:2f:a0: 0c:e2:a6:2b:24:c8:56:f6:b6:f2:73:31:01:f9:98: b7:76:95:dc:04:06:cc:21:d4:c6:c6:12:19:0b:d5: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:B9:9A:9D:48:79:EC:7E:8B:79:76:C2:21:5C:5E:E1:C4:A6:41 X509v3 Authority Key Identifier: keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:71:59:77:90:62:77:9e:4e:d9:0f:09:0f:6a:df:e6:64: 2b:60:d9:f7:f0:1a:e9:b1:30:11:d7:84:02:c0:eb:d6:63:2a: 0c:c5:da:70:72:99:b6:b1:c7:c6:ab:ec:5f:05:62:47:ad:64: 4b:43:b3:42:80:af:78:57:97:f5:9f:f3:b2:84:3a:1f:d3:8d: 6d:89:d2:5c:61:87:47:a5:04:4f:ce:c3:de:eb:53:5e:ec:a7: 3b:9f:84:16:7c:bf:ef:05:70:ed:0f:29:e8:bb:1f:8d:02:ef: ff:8c:3c:6b:15:58:37:d7:92:8c:94:33:8a:61:da:86:3d:b1: cc:5a:d8:3e:a6:1f:9c:9e:12:e8:d4:14:f9:91:f1:35:5f:d5: 93:8e:98:ad:ba:ac:40:4d:83:fa:77:47:33:3b:2b:2f:46:b4: 09:4e:de:5f:ce:b9:a7:ae:8c:28:aa:7b:38:ae:af:24:8e:af: 88:99:40:11:92:2f:66:27:91:a6:88:25:fa:87:db:e5:1b:87: 52:cf:e6:21:ae:6a:51:dd:22:33:66:16:54:51:a8:53:22:a1: f0:18:f6:fa:64:d2:cc:ff:2e:90:0c:76:b4:5a:24:86:03:ad: 9f:6d:8b:02:cc:c7:f1:9c:8b:6d:49:fa:e4:5e:0b:30:8a:92: 99:f5:dc:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxAqodkf9ZAWzUYF94XO2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk NGVkOTYwHhcNMjYwMTEyMDcwMTQwWhcNMjYwMTEzMDcwMTQwWjAzMTEwLwYDVQQD EygyMGNmYjk5YTlkNDg3OWVjN2U4Yjc5NzZjMjIxNWM1ZWUxYzRhNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nTK8nuJKIhGuAlnfquxmsSZjwa8 uDmN4ns1fSZZWq2Xn7slIgMhEw7DIoKJNar72U/lLBKo1ZSzTaeIX7yQgTTHVLqf Nk6o/F00YkaaY7u0PzSMFblBwOheEIG5hplcKH7HtaTmL1Qy0m5xQnjJAen8sHHW b7ItWGi1eLX2rqrf2bb9P2S3oeosLOMKTqGRiM6tl27gUgt+01mcfoIMnXJrDPzi dbS4OVpVYI0sW8YWSH9iyNokRY1Bm6+IRYyABb9H9pg80xBc1nEn1IC+hlv9ZWMx 1PhGHM9Nx17sL6AM4qYrJMhW9rbyczEB+Zi3dpXcBAbMIdTGxhIZC9X4cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDPuZqdSHnsfot5dsIhXF7hxKZBMB8GA1UdIwQY MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt Y2U4MjE0Y2VmNmI1LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1 LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbNxWXeQ YneeTtkPCQ9q3+ZkK2DZ9/Aa6bEwEdeEAsDr1mMqDMXacHKZtrHHxqvsXwViR61k S0OzQoCveFeX9Z/zsoQ6H9ONbYnSXGGHR6UET87D3utTXuynO5+EFny/7wVw7Q8p 6LsfjQLv/4w8axVYN9eSjJQzimHahj2xzFrYPqYfnJ4S6NQU+ZHxNV/Vk46Yrbqs QE2D+ndHMzsrL0a0CU7eX865p66MKKp7OK6vJI6viJlAEZIvZieRpogl+ofb5RuH Us/mIa5qUd0iM2YWVFGoUyKh8Bj2+mTSzP8ukAx2tFokhgOtn22LAszH8ZyLbUn6 5F4LMIqSmfXcEw== -----END CERTIFICATE-----Generated at Mon Jan 12 10:58:31 2026 by rpki-client