This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json) Hash identifier: AJMPln4ZfBGkmGjOqCePjv5vqqlJUzXuaQNNXy+90Us= Subject key identifier: D0:F6:5E:DA:EA:4A:59:0B:F1:18:A1:06:BF:C3:A3:C7:20:16:13:9B Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Certificate serial: 019BF875DE6E4C9B31D7A701A04B94EBC879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft Manifest number: 11FE Signing time: Mon 26 Jan 2026 04:00:32 +0000 Manifest this update: Mon 26 Jan 2026 04:00:32 +0000 Manifest next update: Tue 27 Jan 2026 04:00:32 +0000 Files and hashes: 1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=) 2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: rpt451jt42ZeXJcDMzsQowOpSfvqRR6XbHkFLP7BoX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:de:6e:4c:9b:31:d7:a7:01:a0:4b:94:eb:c8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Validity Not Before: Jan 26 04:00:32 2026 GMT Not After : Jan 27 04:00:32 2026 GMT Subject: CN=d0f65edaea4a590bf118a106bfc3a3c72016139b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:a2:34:cb:6f:c4:8e:95:8c:08:eb:1b:de: 1d:a0:05:9c:86:9f:ce:42:50:20:8b:ea:b4:43:bf: a0:e8:f2:fa:4c:40:04:98:02:dc:a8:65:b1:23:9b: e2:bb:72:97:6d:df:cd:ce:c2:a9:79:fe:f8:9c:65: ee:b7:9d:7a:fe:e7:25:94:d8:0f:88:91:f4:a7:b7: 73:25:a5:01:6f:64:f5:17:ed:2b:f1:e0:2d:6a:e3: 0e:e6:c8:0d:08:e0:60:33:c5:96:af:32:b7:3f:0a: 01:dc:14:78:3e:1d:79:aa:fb:3a:74:a1:38:e0:e8: c8:09:e7:ac:a7:13:44:91:b4:bb:f9:88:35:6d:d2: ac:52:47:31:4a:11:6f:d4:79:e7:42:16:40:ab:a6: 84:6f:ef:51:3d:86:17:d0:89:ff:dd:67:ea:96:22: 4b:13:4a:6b:bd:54:6e:8a:75:d5:d8:e4:26:dd:0e: 14:76:1a:07:a7:bd:e1:f4:9d:a4:83:6d:e3:80:51: 90:ef:07:42:74:36:00:10:60:af:d5:0b:17:b8:0e: 3c:06:3d:bf:02:e1:fd:81:a5:c1:05:c5:a8:db:ea: ff:22:38:03:60:0b:58:0d:65:d2:ac:0f:ce:fa:83: 3a:32:3d:0b:21:78:7c:68:bc:55:32:d2:74:44:94: 32:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F6:5E:DA:EA:4A:59:0B:F1:18:A1:06:BF:C3:A3:C7:20:16:13:9B X509v3 Authority Key Identifier: keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c4:13:44:ae:db:0a:8f:63:35:4d:3d:66:bb:57:e1:af:81: aa:65:f9:0a:2b:c6:95:6e:cb:14:0e:38:6f:d4:5d:b8:de:7e: c2:82:8e:30:95:54:08:fb:b9:21:7e:83:1f:bb:33:0e:cf:18: 28:e5:e3:74:f5:18:c7:f4:b1:ed:10:3a:96:80:22:ce:a3:7a: bf:dd:dd:29:a3:bc:a3:64:49:29:a1:47:00:b1:fb:17:6e:53: f5:98:87:34:18:c8:2e:f0:b3:b5:4a:99:4e:5c:ae:da:b9:1c: 8b:d5:b4:f2:d0:fc:19:38:49:84:31:c4:46:22:ad:ee:7e:31: 5f:24:07:6d:33:23:44:e4:72:34:9d:0c:8f:fd:8e:8b:28:9f: 50:46:19:22:ff:cb:0f:4b:63:8e:04:69:2e:50:5b:5b:32:4c: 9b:f8:46:7d:7d:7f:19:91:74:f3:00:a5:a9:2d:70:b4:7b:d1: 9f:43:fa:8e:0a:6d:19:e7:f4:c5:1f:3a:03:c2:e0:ad:b8:b7: 4f:cd:57:a9:14:c2:75:54:ef:66:2d:13:d5:01:9d:ca:bf:06: 5a:6d:8c:20:dd:01:4b:f9:cb:0f:4e:14:89:20:70:a7:d3:6e: dc:4c:99:19:80:9a:1c:61:4b:3c:f5:b4:f1:c2:3c:de:27:d2: 0d:f7:e6:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dd5uTJsx16cBoEuU68h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm NzJkOTMwHhcNMjYwMTI2MDQwMDMyWhcNMjYwMTI3MDQwMDMyWjAzMTEwLwYDVQQD EyhkMGY2NWVkYWVhNGE1OTBiZjExOGExMDZiZmMzYTNjNzIwMTYxMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJWiNMtvxI6VjAjrG94doAWchp/O QlAgi+q0Q7+g6PL6TEAEmALcqGWxI5viu3KXbd/NzsKpef74nGXut516/ucllNgP iJH0p7dzJaUBb2T1F+0r8eAtauMO5sgNCOBgM8WWrzK3PwoB3BR4Ph15qvs6dKE4 4OjICeespxNEkbS7+Yg1bdKsUkcxShFv1HnnQhZAq6aEb+9RPYYX0In/3WfqliJL E0prvVRuinXV2OQm3Q4UdhoHp73h9J2kg23jgFGQ7wdCdDYAEGCv1QsXuA48Bj2/ AuH9gaXBBcWo2+r/IjgDYAtYDWXSrA/O+oM6Mj0LIXh8aLxVMtJ0RJQy9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFND2XtrqSlkL8RihBr/Do8cgFhObMB8GA1UdIwQY MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8QTRK7b Co9jNU09ZrtX4a+BqmX5CivGlW7LFA44b9RduN5+woKOMJVUCPu5IX6DH7szDs8Y KOXjdPUYx/Sx7RA6loAizqN6v93dKaO8o2RJKaFHALH7F25T9ZiHNBjILvCztUqZ Tlyu2rkci9W08tD8GThJhDHERiKt7n4xXyQHbTMjRORyNJ0Mj/2OiyifUEYZIv/L D0tjjgRpLlBbWzJMm/hGfX1/GZF08wClqS1wtHvRn0P6jgptGef0xR86A8Lgrbi3 T81XqRTCdVTvZi0T1QGdyr8GWm2MIN0BS/nLD04UiSBwp9Nu3EyZGYCaHGFLPPW0 8cI83ifSDffmJw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:10 2026 by rpki-client