This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json) Hash identifier: M3jYXlm0RUYAcCEsgn6BgpZa2cb/3jI/S8eJFrq59GM= Subject key identifier: C8:43:72:EE:0F:AD:94:96:93:CA:28:42:43:18:37:09:E4:4C:F9:D1 Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Certificate serial: 019BF808A32EDB44CF4F9E7A34776B3B08DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 02:01:14 +0000 Manifest this update: Mon 26 Jan 2026 02:01:14 +0000 Manifest next update: Tue 27 Jan 2026 02:01:14 +0000 Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=) 2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: RYBa6wmeCo+iCyqjSa+zFr/b+ojQ1R2V5mKgA1kq36E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:a3:2e:db:44:cf:4f:9e:7a:34:77:6b:3b:08:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Validity Not Before: Jan 26 02:01:14 2026 GMT Not After : Jan 27 02:01:14 2026 GMT Subject: CN=c84372ee0fad949693ca284243183709e44cf9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:9a:27:87:ab:4b:01:46:b4:b9:f8:c5:96: bb:59:5f:ce:6b:7f:4a:e5:9c:82:5c:45:fb:33:d1: 94:18:bc:29:e6:0d:db:c9:5d:ee:26:46:92:6a:f4: b6:7c:a4:47:98:fd:43:71:84:65:be:b8:b7:fd:de: 3b:b6:d2:6a:48:09:9e:47:32:ee:8b:38:17:5e:a2: 24:e0:a8:66:e1:56:6e:d1:bd:3e:cc:59:c2:12:1d: 5c:c5:a4:24:e9:1f:b2:cc:76:37:d0:08:d5:d6:95: 40:b3:50:1f:82:b9:9d:09:ed:0b:ba:d0:bf:8e:1c: b4:04:e0:56:25:03:58:25:5c:90:c8:9d:89:77:2f: 0e:a1:db:1e:a7:88:13:7c:34:7e:0c:3e:d7:96:80: 46:af:8c:ad:d2:37:1d:f3:39:cc:ab:00:69:b8:da: 7d:1f:a4:f2:0b:2a:bf:9a:40:bb:32:b0:df:68:28: 73:a7:1f:b4:a9:b6:31:0c:3b:f7:4e:bd:82:ad:39: da:6b:eb:b7:5f:81:b3:e9:0d:31:50:38:82:c6:e6: f5:d4:da:2b:0d:64:d4:d7:45:a4:fd:06:59:8c:b3: 02:e2:6f:c9:db:f9:b4:89:e0:57:ab:2a:ec:3d:30: 31:ed:9f:c3:8a:e4:13:57:ce:02:a1:72:bf:dd:ec: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:43:72:EE:0F:AD:94:96:93:CA:28:42:43:18:37:09:E4:4C:F9:D1 X509v3 Authority Key Identifier: keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:12:d3:d0:db:d0:bb:c4:46:38:cf:12:6b:c4:4d:a5:d7:9a: fc:8b:8b:c1:fd:40:5e:cb:f2:1d:73:e3:9f:59:f1:7c:1b:e9: 5b:47:e7:6e:b6:1b:07:a7:70:6c:48:5c:57:db:d5:ca:96:98: 14:77:9b:2b:95:9c:b0:1a:32:5a:70:33:90:bf:68:fd:3c:5f: 7f:88:47:4f:4a:73:3b:aa:66:42:7f:b7:22:63:4c:3c:c2:f8: fa:33:a3:a6:2d:ec:37:5d:4d:d3:43:9c:29:97:51:7c:52:63: 1a:d8:23:4f:23:8d:71:3f:1d:e5:3e:4b:cc:24:b3:0c:a9:ee: 08:fd:73:b6:85:d1:db:7c:2a:46:a5:d0:fa:e5:69:d6:24:bc: 3e:24:c7:d5:3f:69:5a:0d:04:a7:ef:82:9e:b3:56:d1:32:00: 06:93:98:7e:ef:f0:02:31:9a:da:45:66:19:b9:21:e4:15:5c: 53:98:12:b7:ee:e6:d2:4a:99:17:ed:23:6b:4b:ec:82:e0:bd: a5:91:4f:48:e0:21:4b:87:92:44:c8:e3:c9:6f:3f:0d:e4:52: 8b:15:c4:32:91:57:95:0f:12:58:ef:3c:56:eb:00:30:66:99: 43:37:5c:60:e2:67:19:45:e9:90:12:a7:39:f0:a1:c1:d9:e5: fa:22:09:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CKMu20TPT556NHdrOwjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0 Y2M4ZWQwHhcNMjYwMTI2MDIwMTE0WhcNMjYwMTI3MDIwMTE0WjAzMTEwLwYDVQQD EyhjODQzNzJlZTBmYWQ5NDk2OTNjYTI4NDI0MzE4MzcwOWU0NGNmOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYeaJ4erSwFGtLn4xZa7WV/Oa39K 5ZyCXEX7M9GUGLwp5g3byV3uJkaSavS2fKRHmP1DcYRlvri3/d47ttJqSAmeRzLu izgXXqIk4Khm4VZu0b0+zFnCEh1cxaQk6R+yzHY30AjV1pVAs1AfgrmdCe0LutC/ jhy0BOBWJQNYJVyQyJ2Jdy8Oodsep4gTfDR+DD7XloBGr4yt0jcd8znMqwBpuNp9 H6TyCyq/mkC7MrDfaChzpx+0qbYxDDv3Tr2CrTnaa+u3X4Gz6Q0xUDiCxub11Nor DWTU10Wk/QZZjLMC4m/J2/m0ieBXqyrsPTAx7Z/DiuQTV84CoXK/3eyvTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhDcu4PrZSWk8ooQkMYNwnkTPnRMB8GA1UdIwQY MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5 LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBLT0NvQ u8RGOM8Sa8RNpdea/IuLwf1AXsvyHXPjn1nxfBvpW0fnbrYbB6dwbEhcV9vVypaY FHebK5WcsBoyWnAzkL9o/Txff4hHT0pzO6pmQn+3ImNMPML4+jOjpi3sN11N00Oc KZdRfFJjGtgjTyONcT8d5T5LzCSzDKnuCP1ztoXR23wqRqXQ+uVp1iS8PiTH1T9p Wg0Ep++CnrNW0TIABpOYfu/wAjGa2kVmGbkh5BVcU5gSt+7m0kqZF+0ja0vsguC9 pZFPSOAhS4eSRMjjyW8/DeRSixXEMpFXlQ8SWO88VusAMGaZQzdcYOJnGUXpkBKn OfChwdnl+iIJmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:14 2026 by rpki-client