This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json) Hash identifier: yiCmiaj87dqorOv2Sw26QwS6ljwnDoiD3lq2r2Cj9P4= Subject key identifier: 10:32:B7:D7:7E:43:8F:4B:12:19:EB:CE:8D:37:7C:4E:A0:D9:8B:36 Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04 Certificate serial: 019BF91AFBF8C454FA430D51CD2BB0CA0E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 07:00:53 +0000 Manifest this update: Mon 26 Jan 2026 07:00:53 +0000 Manifest next update: Tue 27 Jan 2026 07:00:53 +0000 Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: p1Z8H6ICBObJPKYYKjKI+IdoZ+SeD1vhN4/juujDlTo=) 2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:fb:f8:c4:54:fa:43:0d:51:cd:2b:b0:ca:0e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04 Validity Not Before: Jan 26 07:00:53 2026 GMT Not After : Jan 27 07:00:53 2026 GMT Subject: CN=1032b7d77e438f4b1219ebce8d377c4ea0d98b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:4c:a6:fd:fa:e3:13:11:a1:43:f2:65:60: be:47:19:69:c4:8e:42:61:ed:02:44:fc:98:0a:62: 9e:fc:34:c1:24:76:5a:ad:94:40:27:01:e3:af:cb: 48:37:ea:64:4b:6b:8d:52:0e:ac:60:54:15:df:33: 07:7c:a8:cc:33:89:4f:2a:5b:52:5c:a0:f7:55:ed: 01:40:c2:0e:f6:ac:a9:76:f0:1a:55:08:36:94:1d: 16:22:ee:05:37:3a:af:ac:f1:5a:ba:5d:be:82:17: 21:26:65:1d:21:63:99:f0:14:54:f6:e5:c0:5d:73: 1b:9a:2c:ae:7c:b9:c3:1f:a3:66:1e:14:dd:e2:e2: fe:e1:0b:3f:e6:5d:3f:38:3f:99:23:ab:05:35:47: 7f:ff:1d:9e:d7:b7:fc:07:61:6b:5b:65:c1:06:d8: 31:5d:35:67:1b:ad:62:fa:f5:4a:2b:d5:00:e4:f8: 6e:f8:d9:8d:87:33:07:cb:a5:63:ca:f7:cf:2f:0e: 49:0f:91:89:7f:5c:ec:72:5b:b6:61:79:09:ef:c2: 24:7c:3a:01:7f:41:32:ef:0b:37:2f:2a:cc:22:2a: 5a:df:4b:6a:c2:2c:08:fa:37:fc:68:93:a3:1d:8e: 76:97:d0:2a:89:ed:20:67:ea:15:be:21:fe:60:94: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:B7:D7:7E:43:8F:4B:12:19:EB:CE:8D:37:7C:4E:A0:D9:8B:36 X509v3 Authority Key Identifier: keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:08:57:05:cd:d8:c6:21:0e:a8:c2:9f:0a:8e:bb:9d:8d:13: c4:11:63:ea:38:30:ab:06:0a:4d:f8:9e:f3:64:99:2f:f6:25: 65:ce:b4:b8:43:36:ce:0b:95:92:30:f1:ac:d7:68:6c:c2:ee: 6b:85:d1:2e:72:12:92:3f:2f:79:d1:df:67:8e:15:56:1e:6b: 3d:cb:3a:ca:f1:fc:a5:3e:40:a7:dc:5f:88:a2:af:37:8c:51: 78:56:1f:05:cc:98:7a:0c:38:02:45:4e:07:7f:70:75:21:4f: 4d:96:8a:83:22:25:d9:24:fb:dd:1a:e0:61:02:26:e3:11:87: 4d:e0:e2:95:b4:54:45:07:a7:5e:6c:ee:4c:6f:e6:97:3f:1b: 65:f1:34:ab:9e:6d:66:bb:83:76:8d:46:91:45:6b:92:24:ac: c6:5c:bc:7c:1e:a8:f2:c5:97:3e:ae:8a:c8:76:d1:d2:da:c6: 43:8b:78:97:a4:a1:9c:42:50:a7:fd:69:19:b6:af:3f:a3:7a: c3:be:15:63:68:b6:10:52:73:a9:ee:fd:34:91:a3:04:97:05: 78:43:a3:11:84:11:36:6f:73:da:a1:c9:3b:3b:e3:6d:ce:88: a5:7b:fc:08:e7:b7:1b:6b:53:bf:76:8c:5c:02:19:51:2d:a0: 44:50:23:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gvv4xFT6Qw1RzSuwyg4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjExYTE4MGRmMTc5OTRlNDhhZDMzMTg3MmNmZDAwYWQ5 YWJhMDQwHhcNMjYwMTI2MDcwMDUzWhcNMjYwMTI3MDcwMDUzWjAzMTEwLwYDVQQD EygxMDMyYjdkNzdlNDM4ZjRiMTIxOWViY2U4ZDM3N2M0ZWEwZDk4YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fhMpv364xMRoUPyZWC+RxlpxI5C Ye0CRPyYCmKe/DTBJHZarZRAJwHjr8tIN+pkS2uNUg6sYFQV3zMHfKjMM4lPKltS XKD3Ve0BQMIO9qypdvAaVQg2lB0WIu4FNzqvrPFaul2+ghchJmUdIWOZ8BRU9uXA XXMbmiyufLnDH6NmHhTd4uL+4Qs/5l0/OD+ZI6sFNUd//x2e17f8B2FrW2XBBtgx XTVnG61i+vVKK9UA5Phu+NmNhzMHy6VjyvfPLw5JD5GJf1zsclu2YXkJ78IkfDoB f0Ey7ws3LyrMIipa30tqwiwI+jf8aJOjHY52l9Aqie0gZ+oVviH+YJQ7+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAyt9d+Q49LEhnrzo03fE6g2Ys2MB8GA1UdIwQY MBaAFF3xGhgN8XmU5IrTMYcs/QCtmroEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTct NmJjZTc3OTljYmVhLzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTctNmJjZTc3OTljYmVh LzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQhXBc3Y xiEOqMKfCo67nY0TxBFj6jgwqwYKTfie82SZL/YlZc60uEM2zguVkjDxrNdobMLu a4XRLnISkj8vedHfZ44VVh5rPcs6yvH8pT5Ap9xfiKKvN4xReFYfBcyYegw4AkVO B39wdSFPTZaKgyIl2ST73RrgYQIm4xGHTeDilbRURQenXmzuTG/mlz8bZfE0q55t ZruDdo1GkUVrkiSsxly8fB6o8sWXPq6KyHbR0trGQ4t4l6ShnEJQp/1pGbavP6N6 w74VY2i2EFJzqe79NJGjBJcFeEOjEYQRNm9z2qHJOzvjbc6IpXv8COe3G2tTv3aM XAIZUS2gRFAjFQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:50 2026 by rpki-client