This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json) Hash identifier: iB8YmCa1uSqUWPOi1FvkrnoseqEV8JJs8y9hxiekbqE= Subject key identifier: 7B:7F:CE:D3:65:97:BA:9D:71:7C:6D:8F:E5:2F:39:10:AD:05:34:6E Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Certificate serial: 019B7AB88AF0932B3D9C8618C7C4C6EFD59B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft Manifest number: 17AA Signing time: Thu 01 Jan 2026 18:01:12 +0000 Manifest this update: Thu 01 Jan 2026 18:01:12 +0000 Manifest next update: Fri 02 Jan 2026 18:01:12 +0000 Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=) 2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: t0Q7IxNbvPw9PG11eHk4J0lT6Vma+ZEw7okg7plI+do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:b8:8a:f0:93:2b:3d:9c:86:18:c7:c4:c6:ef:d5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Validity Not Before: Jan 1 18:01:12 2026 GMT Not After : Jan 2 18:01:12 2026 GMT Subject: CN=7b7fced36597ba9d717c6d8fe52f3910ad05346e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:31:f0:52:44:f1:89:87:d1:5a:1e:2e:23: 2b:24:78:b5:25:b8:26:d3:2b:fb:9f:bb:66:ce:f1: 3b:43:7f:08:8c:9e:ae:83:f3:98:4a:46:dd:ae:f1: 0b:d9:65:0e:2e:eb:fe:2e:6a:ee:79:77:cb:9e:90: 70:44:92:ca:37:6e:97:99:44:47:be:d9:25:e1:05: 62:b4:99:67:5c:cb:3f:78:26:c5:97:1e:e9:55:58: 25:13:67:1a:1b:33:23:6b:58:19:ce:f7:1c:a6:56: 34:85:fa:7f:70:3f:c1:69:77:ee:c4:1a:ae:e0:e7: 4d:28:b3:dd:37:b5:8c:83:42:b9:ee:d5:61:59:dc: 1f:96:fb:b5:80:04:a3:ec:d6:07:f6:d0:92:00:75: 9a:f7:95:83:e9:d8:6c:f2:ef:9a:d6:01:4a:01:8f: 78:90:42:4c:cb:1c:49:57:6d:df:0a:77:cb:08:e5: 6d:cb:c8:8e:66:cf:35:bc:a4:5c:51:51:25:b0:ec: 70:88:ee:52:e6:49:51:dc:46:cc:70:30:1d:4c:a2: f2:a6:9b:86:80:ac:c9:1f:be:68:26:e3:22:58:f7: 01:06:2a:de:e3:a4:f3:14:6b:c1:47:83:9c:88:34: 5c:ac:6f:6a:56:93:c1:54:68:2a:dc:3d:9f:d4:a3: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7F:CE:D3:65:97:BA:9D:71:7C:6D:8F:E5:2F:39:10:AD:05:34:6E X509v3 Authority Key Identifier: keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:91:52:a0:67:f9:09:c8:80:5b:67:09:43:40:18:68:bb:c1: 8f:6d:a6:ff:4a:c1:b8:77:3e:6e:81:a9:56:97:64:21:bb:a7: 6a:e1:ab:4e:ca:ab:4b:fc:d4:01:17:7f:fe:f7:2e:bd:df:b4: 7c:23:ea:f7:21:42:ab:6a:bd:d1:7e:93:8f:64:8e:dd:ef:66: e8:dc:19:45:17:1d:3c:e2:75:07:18:9e:01:5f:4a:7f:4b:3f: fd:72:65:4a:6b:e5:2b:d0:2f:ad:3c:3e:65:6b:d1:12:b2:a2: 84:a8:3d:25:b6:37:4b:8c:4c:11:18:a7:92:a6:8e:5b:51:13: 2b:89:07:14:c1:28:f3:f5:60:4c:31:31:13:fd:c1:6b:fb:15: 90:02:1e:26:f8:43:a1:29:c6:92:fe:d5:36:20:b4:a3:5b:9e: 79:0c:9a:55:64:8b:c1:42:9d:38:a2:30:e0:f9:2b:ab:69:1e: 38:10:6e:26:b2:b4:92:fa:ad:a7:e7:f5:cc:9c:a7:d3:3e:2d: 24:7f:77:b4:04:e9:31:fb:14:cd:5f:b7:93:bf:93:1a:63:3a: 51:d0:eb:dc:81:8c:ce:03:e1:7b:f2:4b:34:56:54:2e:c6:72: ed:a8:89:f0:dd:5e:38:6d:32:27:aa:01:62:b6:2c:c4:18:cf: 11:9a:ae:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6uIrwkys9nIYYx8TG79WbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl MDgxOTUwHhcNMjYwMTAxMTgwMTEyWhcNMjYwMTAyMTgwMTEyWjAzMTEwLwYDVQQD Eyg3YjdmY2VkMzY1OTdiYTlkNzE3YzZkOGZlNTJmMzkxMGFkMDUzNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkgx8FJE8YmH0VoeLiMrJHi1Jbgm 0yv7n7tmzvE7Q38IjJ6ug/OYSkbdrvEL2WUOLuv+LmrueXfLnpBwRJLKN26XmURH vtkl4QVitJlnXMs/eCbFlx7pVVglE2caGzMja1gZzvccplY0hfp/cD/BaXfuxBqu 4OdNKLPdN7WMg0K57tVhWdwflvu1gASj7NYH9tCSAHWa95WD6dhs8u+a1gFKAY94 kEJMyxxJV23fCnfLCOVty8iOZs81vKRcUVElsOxwiO5S5klR3EbMcDAdTKLyppuG gKzJH75oJuMiWPcBBire46TzFGvBR4OciDRcrG9qVpPBVGgq3D2f1KNjbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt/ztNll7qdcXxtj+UvORCtBTRuMB8GA1UdIwQY MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpFSoGf5 CciAW2cJQ0AYaLvBj22m/0rBuHc+boGpVpdkIbunauGrTsqrS/zUARd//vcuvd+0 fCPq9yFCq2q90X6Tj2SO3e9m6NwZRRcdPOJ1BxieAV9Kf0s//XJlSmvlK9AvrTw+ ZWvRErKihKg9JbY3S4xMERinkqaOW1ETK4kHFMEo8/VgTDExE/3Ba/sVkAIeJvhD oSnGkv7VNiC0o1ueeQyaVWSLwUKdOKIw4Pkrq2keOBBuJrK0kvqtp+f1zJyn0z4t JH93tATpMfsUzV+3k7+TGmM6UdDr3IGMzgPhe/JLNFZULsZy7aiJ8N1eOG0yJ6oB YrYsxBjPEZquXg== -----END CERTIFICATE-----Generated at Thu Jan 1 21:22:11 2026 by rpki-client