This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json) Hash identifier: RsRMSSKMd2O7RMeAqFUWj6FEk/PqFu2+PyUJz9VldUA= Subject key identifier: 16:C6:09:0B:26:5F:46:66:A9:0A:C2:58:3C:F5:5C:71:2F:71:FD:CE Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Certificate serial: 019BF42BC61E3C803C295717BAE6D8D02318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 08:01:07 +0000 Manifest this update: Sun 25 Jan 2026 08:01:07 +0000 Manifest next update: Mon 26 Jan 2026 08:01:07 +0000 Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=) 2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=) 3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: 1jRAC/+0iZpxaxtN72Oi4mmzMoRPKuS9D+2LSaZpKPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:c6:1e:3c:80:3c:29:57:17:ba:e6:d8:d0:23:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Validity Not Before: Jan 25 08:01:07 2026 GMT Not After : Jan 26 08:01:07 2026 GMT Subject: CN=16c6090b265f4666a90ac2583cf55c712f71fdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:16:98:e5:e8:56:b5:43:e3:90:af:01:44: 6f:87:f2:08:ea:b4:63:4c:26:30:a8:48:22:23:f1: 97:de:d3:72:83:af:80:46:97:41:5e:50:5b:40:08: bd:ce:33:a3:91:02:2c:29:f2:6e:c7:5a:15:c9:77: 11:e2:00:36:75:ed:dc:19:e7:3a:eb:81:39:c9:5d: e7:5e:7b:de:2f:b0:d7:88:66:76:1f:ec:41:1b:40: fa:0c:a2:ad:47:fe:f4:78:77:ec:39:45:f0:15:38: 00:17:e6:38:e1:13:24:aa:90:55:46:82:f1:a6:e4: 3a:09:4d:9e:3b:55:45:68:67:28:5e:88:06:56:c4: ee:a9:03:fc:32:a8:29:7f:3d:5e:21:9c:9f:56:92: e6:cd:c9:c0:b9:d2:ae:56:9f:89:30:2d:ed:f5:1f: 55:bf:93:c7:33:41:db:ac:07:a5:da:dc:97:8b:b4: 2a:2d:43:16:dd:73:a0:37:35:7e:3d:1d:4a:10:b3: f0:0c:24:36:f3:e9:de:2f:1c:fd:5d:5c:2d:9d:cf: de:a5:4a:5d:bc:c4:29:60:f7:bd:c1:ea:e8:c5:f6: da:ad:33:c1:35:5f:36:17:ac:65:a3:e8:fc:13:51: 49:56:a3:6b:34:9a:41:5c:59:47:e6:b9:3a:94:b5: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C6:09:0B:26:5F:46:66:A9:0A:C2:58:3C:F5:5C:71:2F:71:FD:CE X509v3 Authority Key Identifier: keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:a4:9b:dc:88:b9:69:5e:cf:21:47:8b:6b:00:56:3f:c5: f1:47:cb:79:68:e6:6a:8b:11:df:91:3a:b0:ef:21:79:d2:92: 86:cf:23:eb:1c:fe:ec:4f:65:72:79:d8:76:74:5e:66:eb:a4: e5:ee:28:2b:4f:c4:f1:3b:31:c5:99:79:82:be:2b:bd:a7:ca: a2:1e:c2:c4:d4:a5:93:c9:d3:01:09:88:0d:62:61:52:14:46: 87:c5:a5:20:69:43:a8:30:9d:e5:a6:a0:71:35:5b:32:fb:66: a7:73:1a:41:18:69:a5:71:01:db:2d:30:96:8d:6b:6e:cb:8b: e7:f2:29:10:1e:b6:35:b6:f5:1a:43:7c:82:5d:78:2b:da:68: 30:5f:01:24:88:13:d9:14:bb:2b:48:59:0e:6e:99:1e:0a:61: f7:05:10:43:6e:9d:09:06:88:09:8e:17:8c:a2:6c:fd:45:63: a2:6f:1d:1a:26:64:fd:df:31:65:2e:f2:e7:ff:e6:05:32:69: 7a:75:0b:ca:d4:7a:7d:0d:41:0d:df:66:ce:87:86:49:ab:2f: 70:5e:06:32:f6:3e:b2:2d:1e:87:5e:ca:f2:97:99:ce:d3:08: 3b:67:03:40:a3:97:b4:be:b4:60:ab:f5:a3:24:63:8e:6c:da: fe:47:0b:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K8YePIA8KVcXuubY0CMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1 ZmJkMWMwHhcNMjYwMTI1MDgwMTA3WhcNMjYwMTI2MDgwMTA3WjAzMTEwLwYDVQQD EygxNmM2MDkwYjI2NWY0NjY2YTkwYWMyNTgzY2Y1NWM3MTJmNzFmZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqAWmOXoVrVD45CvAURvh/II6rRj TCYwqEgiI/GX3tNyg6+ARpdBXlBbQAi9zjOjkQIsKfJux1oVyXcR4gA2de3cGec6 64E5yV3nXnveL7DXiGZ2H+xBG0D6DKKtR/70eHfsOUXwFTgAF+Y44RMkqpBVRoLx puQ6CU2eO1VFaGcoXogGVsTuqQP8Mqgpfz1eIZyfVpLmzcnAudKuVp+JMC3t9R9V v5PHM0HbrAel2tyXi7QqLUMW3XOgNzV+PR1KELPwDCQ28+neLxz9XVwtnc/epUpd vMQpYPe9weroxfbarTPBNV82F6xlo+j8E1FJVqNrNJpBXFlH5rk6lLUWuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbGCQsmX0ZmqQrCWDz1XHEvcf3OMB8GA1UdIwQY MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOGkm9yI uWlezyFHi2sAVj/F8UfLeWjmaosR35E6sO8hedKShs8j6xz+7E9lcnnYdnReZuuk 5e4oK0/E8TsxxZl5gr4rvafKoh7CxNSlk8nTAQmIDWJhUhRGh8WlIGlDqDCd5aag cTVbMvtmp3MaQRhppXEB2y0wlo1rbsuL5/IpEB62Nbb1GkN8gl14K9poMF8BJIgT 2RS7K0hZDm6ZHgph9wUQQ26dCQaICY4XjKJs/UVjom8dGiZk/d8xZS7y5//mBTJp enULytR6fQ1BDd9mzoeGSasvcF4GMvY+si0eh17K8peZztMIO2cDQKOXtL60YKv1 oyRjjmza/kcLEg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:22:57 2026 by rpki-client