This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json) Hash identifier: 241m/24ypZAzEwvHVb32aFdN6Br3E4lbalq+xx2iqZQ= Subject key identifier: E8:B9:5C:EB:DC:54:A4:F8:E5:E8:BF:37:D1:3B:9F:22:A4:36:89:E3 Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019BF3BD7E722759D0BDE43FE35EDE1575BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 06:00:40 +0000 Manifest this update: Sun 25 Jan 2026 06:00:40 +0000 Manifest next update: Mon 26 Jan 2026 06:00:40 +0000 Files and hashes: 1: 5MQ7t76xz5o1VUyW1dJisXNk5Jo.roa (hash: FT8iwKYv0kNgK5WeEIsGI02McKnrcUBiN3g9glXLUYs=) 2: Vcrxz5upkyAccEnWWkm1jKbiHCU.roa (hash: DF9acpeNSt3QcU3RLTkyAoSPyBTgnqf4yVUPlH/IEUw=) 3: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: OLU93B0ubN+D4xsSCP4117fVIO+HBV7WFQHb5OAWxcU=) 4: d61QkjArffvt5fKMvIXWF8nIPcE.roa (hash: n77B2cSkql2uFL2mgGTUwbPJJQCN8pumVVKiMumdlmQ=) 5: vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa (hash: rxEx9pdbLlzRrifCSn69fPPljhSEaN1XwXY/F5cFM9M=) 6: x9IxkDkzEkDokkzWh7NpXLA6pSU.roa (hash: HHdD49yqs88lPuXMSPj56CT2/FilbQVuZopBY9/6oH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:7e:72:27:59:d0:bd:e4:3f:e3:5e:de:15:75:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Jan 25 06:00:40 2026 GMT Not After : Jan 26 06:00:40 2026 GMT Subject: CN=e8b95cebdc54a4f8e5e8bf37d13b9f22a43689e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:98:8b:88:9a:0b:85:1e:c4:f7:9f:7e:26:bb: 49:42:b4:fb:6e:c1:7a:1b:04:33:4e:03:f2:bd:35: 8f:c0:bc:21:bc:c3:bb:1e:17:cb:a3:eb:c8:fb:67: 10:dc:51:7f:cd:ff:0e:49:54:79:17:a2:2f:dc:db: 0b:9a:36:27:4f:9a:79:17:3a:09:a7:23:39:07:00: 6f:e2:c2:87:00:e9:66:d8:2f:1a:7b:3b:6e:ce:6a: bf:07:3f:79:ed:0b:0c:7c:73:0b:6c:54:4d:73:bf: 1d:37:f7:1f:58:77:c8:9f:af:f6:63:d8:a9:cc:72: dc:a1:3c:1d:9a:e9:64:4c:cc:e7:47:ac:50:d0:21: 9f:c5:28:86:9a:76:7f:dc:c7:eb:9c:49:a1:57:5d: 1b:f1:11:6c:60:27:70:d9:84:77:ac:e7:9e:5c:54: 83:93:e2:5c:62:67:91:de:4a:ee:fb:80:6d:f4:8d: e1:6a:6a:dd:a8:ed:94:94:7e:cb:b4:30:55:8a:9a: 41:c1:86:6f:d3:ee:88:30:af:60:a8:00:44:3f:70: 9c:e5:b0:5c:8f:15:df:78:e6:3b:dd:e1:af:bf:1a: c0:95:0d:de:cc:a9:3d:45:b1:f0:14:e2:b0:1e:c1: 68:13:c8:a7:14:fa:7c:25:e5:b5:60:7e:65:d7:76: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B9:5C:EB:DC:54:A4:F8:E5:E8:BF:37:D1:3B:9F:22:A4:36:89:E3 X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a6:a6:ca:62:fe:40:71:d5:27:86:56:05:31:7c:76:94:36: 73:82:d4:80:3a:2c:2b:98:45:89:4b:94:e5:e5:ba:a4:95:bb: 67:b2:5b:5b:b2:0a:56:ba:78:fc:7b:d6:2c:b4:f4:87:34:42: 41:4b:62:95:3e:dc:bb:86:3a:1c:dc:37:1f:1e:44:ba:85:36: 3b:c2:5b:c4:9d:c8:b0:c8:e7:ae:6e:68:fd:65:1c:e7:17:e5: 8c:76:f6:fd:b1:7c:73:f6:2c:38:bc:f6:9a:b6:2e:54:85:2f: 00:33:13:7c:e5:2d:15:c1:1e:d0:80:9d:a3:8b:53:6a:9d:3e: 03:d0:d7:a2:b6:bb:e8:02:bf:58:19:f9:b8:47:1b:7d:74:2a: 98:b2:03:75:68:bc:3b:53:6c:46:29:4f:d4:05:61:19:4b:dd: 5e:9b:e0:b4:14:8e:fd:c1:b9:e5:e9:ef:fd:82:23:7e:c6:9b: 26:72:10:a7:8d:74:25:73:79:f3:e2:a3:d0:0f:48:41:b4:c8: 49:47:ee:42:a1:bc:f6:85:8f:be:20:3e:6a:a7:59:e8:cb:8a: a9:26:e8:7a:c5:9a:55:06:70:ab:dd:4c:b1:25:87:07:da:cc: 4b:46:fb:a5:dc:d8:f1:c4:88:ae:8f:75:91:a5:54:0a:f7:65: 04:78:6d:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvX5yJ1nQveQ/417eFXW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjYwMTI1MDYwMDQwWhcNMjYwMTI2MDYwMDQwWjAzMTEwLwYDVQQD EyhlOGI5NWNlYmRjNTRhNGY4ZTVlOGJmMzdkMTNiOWYyMmE0MzY4OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZiLiJoLhR7E959+JrtJQrT7bsF6 GwQzTgPyvTWPwLwhvMO7HhfLo+vI+2cQ3FF/zf8OSVR5F6Iv3NsLmjYnT5p5FzoJ pyM5BwBv4sKHAOlm2C8aeztuzmq/Bz957QsMfHMLbFRNc78dN/cfWHfIn6/2Y9ip zHLcoTwdmulkTMznR6xQ0CGfxSiGmnZ/3MfrnEmhV10b8RFsYCdw2YR3rOeeXFSD k+JcYmeR3kru+4Bt9I3hamrdqO2UlH7LtDBVippBwYZv0+6IMK9gqABEP3Cc5bBc jxXfeOY73eGvvxrAlQ3ezKk9RbHwFOKwHsFoE8inFPp8JeW1YH5l13YZ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOi5XOvcVKT45ei/N9E7nyKkNonjMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKamymL+ QHHVJ4ZWBTF8dpQ2c4LUgDosK5hFiUuU5eW6pJW7Z7JbW7IKVrp4/HvWLLT0hzRC QUtilT7cu4Y6HNw3Hx5EuoU2O8JbxJ3IsMjnrm5o/WUc5xfljHb2/bF8c/YsOLz2 mrYuVIUvADMTfOUtFcEe0ICdo4tTap0+A9DXora76AK/WBn5uEcbfXQqmLIDdWi8 O1NsRilP1AVhGUvdXpvgtBSO/cG55env/YIjfsabJnIQp410JXN58+Kj0A9IQbTI SUfuQqG89oWPviA+aqdZ6MuKqSboesWaVQZwq91MsSWHB9rMS0b7pdzY8cSIro91 kaVUCvdlBHht1A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:26 2026 by rpki-client