This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json) Hash identifier: vfn56uUU3pDPEc/GTKr3OWqPhvn6M2D7DOJbll9P6I8= Subject key identifier: 87:D6:E2:CC:D7:52:B6:E4:22:BA:BC:6E:15:F4:FF:D2:C9:1E:86:5B Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Certificate serial: 019BF763E0FC0C722BF9BBC6146A6636AFF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft Manifest number: 06C7 Signing time: Sun 25 Jan 2026 23:01:16 +0000 Manifest this update: Sun 25 Jan 2026 23:01:16 +0000 Manifest next update: Mon 26 Jan 2026 23:01:16 +0000 Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=) 2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: 7/C06eJCXAJGSL41BGPYWgdBOK3eT5Nofv2xJcuXXB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:e0:fc:0c:72:2b:f9:bb:c6:14:6a:66:36:af:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Validity Not Before: Jan 25 23:01:16 2026 GMT Not After : Jan 26 23:01:16 2026 GMT Subject: CN=87d6e2ccd752b6e422babc6e15f4ffd2c91e865b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:f9:30:4d:c5:93:8f:e0:cf:fe:e1:4a:f2: 98:bc:fb:f7:2d:6b:23:4c:74:a5:1a:44:d4:9f:30: cb:41:09:44:6b:b6:34:82:03:c6:14:f0:35:4f:a8: de:95:81:c1:78:1e:25:c0:f5:51:a8:f3:5d:c7:c1: 00:f6:85:70:12:95:88:28:44:c7:04:8a:a0:53:51: ad:0a:55:68:7b:c8:44:ee:b9:24:e1:58:41:21:7f: 48:dd:a8:70:01:0a:99:eb:53:a6:e5:1a:3f:07:40: d8:3b:9a:35:ad:6b:58:7c:d4:2b:8a:83:ca:48:a5: 8c:dc:40:16:68:f9:5d:70:32:8c:4c:7d:4b:bd:98: ea:43:95:5c:58:d7:8f:c2:a0:7d:90:6e:d1:34:6a: 36:01:17:13:92:fe:1f:ed:6f:3d:01:cb:1b:5f:6c: a5:98:2e:af:1e:13:4e:99:23:02:32:17:21:f7:6c: 79:80:d1:02:9d:56:2f:18:0f:f6:58:37:3f:4f:a5: e6:19:e1:b3:fb:18:8e:a6:ff:de:97:f4:63:a9:87: 37:4a:e3:57:53:69:09:07:16:18:27:ea:09:b3:e9: 29:a9:24:70:66:5f:67:1b:38:a1:f4:c7:8f:a4:c6: 77:ab:70:2d:ef:1c:f1:36:5a:20:a1:f1:6f:df:e2: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:E2:CC:D7:52:B6:E4:22:BA:BC:6E:15:F4:FF:D2:C9:1E:86:5B X509v3 Authority Key Identifier: keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7d:6f:9d:83:c6:f7:73:42:79:1b:1d:9a:b5:4c:4f:1a:7f: 72:9e:ce:9b:ac:45:44:13:bb:62:a7:a9:61:2e:08:fa:a8:ef: 09:49:fd:e8:b5:12:27:ba:db:e5:5e:94:b1:30:1d:c2:c6:7a: 38:c5:12:ce:e4:d6:bb:10:9c:0d:76:68:17:6c:bc:ed:e0:e6: 52:b8:dd:de:42:96:3b:3d:6c:42:27:59:c4:ba:93:21:d5:30: 8f:14:da:54:7f:22:ab:a9:f8:6a:9b:d5:57:33:8d:b6:3b:4f: af:c1:78:6a:75:4e:22:6f:10:82:20:0a:c6:c5:87:85:05:94: c1:f3:1d:8d:88:22:8c:57:40:f8:17:02:22:00:10:70:25:26: b9:5a:e5:7d:81:68:c2:e0:1b:b7:f9:9f:69:a3:93:ef:b0:11: e3:a2:7d:53:a9:bb:f0:d0:19:40:b1:7e:5b:6a:fc:7b:d5:54: e7:81:57:b6:38:0c:bd:99:24:a8:04:bd:07:9b:d4:08:e0:f7: e4:eb:4d:bd:59:f6:98:e0:16:d6:d9:59:d7:a8:44:ad:a8:17: a1:a5:b9:08:90:ab:34:0e:d4:e5:88:89:0c:f4:23:0d:35:1d: af:fe:7e:c3:4e:a4:04:79:f7:a1:75:3d:5c:dd:1b:e0:a9:b7: c3:da:97:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y+D8DHIr+bvGFGpmNq/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk ZDhmZTgwHhcNMjYwMTI1MjMwMTE2WhcNMjYwMTI2MjMwMTE2WjAzMTEwLwYDVQQD Eyg4N2Q2ZTJjY2Q3NTJiNmU0MjJiYWJjNmUxNWY0ZmZkMmM5MWU4NjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sH5ME3Fk4/gz/7hSvKYvPv3LWsj THSlGkTUnzDLQQlEa7Y0ggPGFPA1T6jelYHBeB4lwPVRqPNdx8EA9oVwEpWIKETH BIqgU1GtClVoe8hE7rkk4VhBIX9I3ahwAQqZ61Om5Ro/B0DYO5o1rWtYfNQrioPK SKWM3EAWaPldcDKMTH1LvZjqQ5VcWNePwqB9kG7RNGo2ARcTkv4f7W89AcsbX2yl mC6vHhNOmSMCMhch92x5gNECnVYvGA/2WDc/T6XmGeGz+xiOpv/el/RjqYc3SuNX U2kJBxYYJ+oJs+kpqSRwZl9nGzih9MePpMZ3q3At7xzxNlogofFv3+JUOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfW4szXUrbkIrq8bhX0/9LJHoZbMB8GA1UdIwQY MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3 LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATH1vnYPG 93NCeRsdmrVMTxp/cp7Om6xFRBO7YqepYS4I+qjvCUn96LUSJ7rb5V6UsTAdwsZ6 OMUSzuTWuxCcDXZoF2y87eDmUrjd3kKWOz1sQidZxLqTIdUwjxTaVH8iq6n4apvV VzONtjtPr8F4anVOIm8QgiAKxsWHhQWUwfMdjYgijFdA+BcCIgAQcCUmuVrlfYFo wuAbt/mfaaOT77AR46J9U6m78NAZQLF+W2r8e9VU54FXtjgMvZkkqAS9B5vUCOD3 5OtNvVn2mOAW1tlZ16hEragXoaW5CJCrNA7U5YiJDPQjDTUdr/5+w06kBHn3oXU9 XN0b4Km3w9qXIg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:23 2026 by rpki-client