This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json) Hash identifier: C02Hw2CrpSuM/GIglWH53iLRysmmxfvDq07e2eZzpHU= Subject key identifier: FF:E2:BE:34:53:C1:7D:E1:A8:87:5D:35:9C:8B:3C:5B:19:14:3D:ED Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Certificate serial: 019BF2E2B1D29D5606C76891690E0326EB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft Manifest number: 0B54 Signing time: Sun 25 Jan 2026 02:01:41 +0000 Manifest this update: Sun 25 Jan 2026 02:01:41 +0000 Manifest next update: Mon 26 Jan 2026 02:01:41 +0000 Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=) 2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: dVgKROmMG7sETrePOIQC8H5l5Lkp1eIfHR0CM6JllrE=) 3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:b1:d2:9d:56:06:c7:68:91:69:0e:03:26:eb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Validity Not Before: Jan 25 02:01:41 2026 GMT Not After : Jan 26 02:01:41 2026 GMT Subject: CN=ffe2be3453c17de1a8875d359c8b3c5b19143ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:c7:9c:06:fb:9e:78:11:a5:ed:0c:84:0b: ac:5f:9e:65:67:e6:0d:b5:b1:83:c9:6b:b6:00:4a: 7c:37:c7:9e:bd:cb:5f:50:df:dd:c1:da:8c:24:49: 48:87:ff:21:ad:44:ed:b2:4a:27:be:74:e7:0f:0c: ac:6e:97:f6:ce:7c:1d:6e:51:21:fd:17:ec:b4:32: af:81:a6:03:fd:eb:8d:fa:1d:f8:ae:fb:b5:46:32: 27:9e:37:66:4b:b2:44:3d:1f:6f:a2:8c:4c:d8:37: 84:dd:76:ac:49:2d:b2:b0:fd:7f:58:09:ab:a3:fd: a6:0a:d6:cc:bf:c8:c4:da:e3:30:6e:69:96:a8:10: 39:88:62:b8:d4:a2:79:e8:1a:80:b7:1d:34:ca:86: 15:a3:bf:d7:9f:b2:99:37:49:64:cd:b2:00:e8:de: a9:4a:da:f0:c6:40:0f:b3:a2:c9:6b:7f:9c:a6:b4: 88:60:e5:6a:ef:72:fa:d6:fb:0f:3a:e4:54:cf:21: 0e:14:58:50:fc:78:86:c8:40:79:ea:20:ab:6a:a2: c8:50:97:6c:fd:64:8a:c9:72:28:80:3c:1d:cd:33: d7:14:ee:ae:d8:a0:29:94:bf:bc:4b:6e:5c:91:90: 5c:b7:f9:be:cd:58:c4:6a:c1:92:55:22:31:ab:b5: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E2:BE:34:53:C1:7D:E1:A8:87:5D:35:9C:8B:3C:5B:19:14:3D:ED X509v3 Authority Key Identifier: keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:87:cf:2b:bf:61:19:29:78:c5:f2:a5:65:89:be:97:e3:47: 70:e2:5d:25:06:cd:3b:48:49:21:0e:8e:4c:1b:dc:60:f5:c9: f3:03:4d:e8:a2:8d:e7:0e:28:15:b9:43:f4:d1:bf:1a:3c:7d: dc:65:73:89:da:af:75:2e:91:27:17:41:8e:d7:e5:dc:b9:f0: 1e:85:ad:45:dc:9c:e9:8a:36:ba:82:64:31:15:29:91:3f:28: 5d:a7:51:b4:d1:1f:c5:ab:2e:ec:72:6c:17:f6:a4:d2:f4:01: 10:8e:5d:54:c3:6b:8f:3e:00:cb:cc:51:ca:8d:8d:a9:7a:36: df:16:7b:95:a3:30:fb:78:e0:31:be:f4:30:ad:92:05:e8:a2: 16:6f:07:c0:19:67:fa:ca:c6:10:ed:e4:ac:0a:b1:53:21:2e: 20:fb:0a:55:d7:74:78:da:be:66:12:a9:4c:ee:59:f8:78:b5: 40:ab:81:69:51:4e:c1:c8:cb:76:fc:d9:74:1d:4d:b5:ec:93: f2:c8:cb:55:41:69:c9:49:83:72:99:b0:96:ac:7d:76:74:21: 67:57:14:86:f3:1d:d7:5b:f0:f7:a4:97:b2:9e:3d:88:5a:9f: 2b:cf:4e:94:fe:06:22:55:21:89:48:81:91:9e:c7:5f:b9:cb: 2d:21:1a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4rHSnVYGx2iRaQ4DJuswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4 OTE0YTIwHhcNMjYwMTI1MDIwMTQxWhcNMjYwMTI2MDIwMTQxWjAzMTEwLwYDVQQD EyhmZmUyYmUzNDUzYzE3ZGUxYTg4NzVkMzU5YzhiM2M1YjE5MTQzZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla/HnAb7nngRpe0MhAusX55lZ+YN tbGDyWu2AEp8N8eevctfUN/dwdqMJElIh/8hrUTtskonvnTnDwysbpf2znwdblEh /RfstDKvgaYD/euN+h34rvu1RjInnjdmS7JEPR9vooxM2DeE3XasSS2ysP1/WAmr o/2mCtbMv8jE2uMwbmmWqBA5iGK41KJ56BqAtx00yoYVo7/Xn7KZN0lkzbIA6N6p StrwxkAPs6LJa3+cprSIYOVq73L61vsPOuRUzyEOFFhQ/HiGyEB56iCraqLIUJds /WSKyXIogDwdzTPXFO6u2KAplL+8S25ckZBct/m+zVjEasGSVSIxq7XC/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/ivjRTwX3hqIddNZyLPFsZFD3tMB8GA1UdIwQY MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt NGNlNGQ4ZmVhNmVmLzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIfPK79h GSl4xfKlZYm+l+NHcOJdJQbNO0hJIQ6OTBvcYPXJ8wNN6KKN5w4oFblD9NG/Gjx9 3GVzidqvdS6RJxdBjtfl3LnwHoWtRdyc6Yo2uoJkMRUpkT8oXadRtNEfxasu7HJs F/ak0vQBEI5dVMNrjz4Ay8xRyo2NqXo23xZ7laMw+3jgMb70MK2SBeiiFm8HwBln +srGEO3krAqxUyEuIPsKVdd0eNq+ZhKpTO5Z+Hi1QKuBaVFOwcjLdvzZdB1NteyT 8sjLVUFpyUmDcpmwlqx9dnQhZ1cUhvMd11vw96SXsp49iFqfK89OlP4GIlUhiUiB kZ7HX7nLLSEaGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:30 2026 by rpki-client