This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json) Hash identifier: uoIJOVDNZ5dI2O9TG7voRvpPM+iW6mXdQAyscFUUffM= Subject key identifier: 12:0C:CD:E0:63:48:48:2F:44:9E:3D:30:04:02:5C:A1:F1:58:3E:10 Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Certificate serial: 019BF72D680F7862B828042DF8DF62C6D00D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft Manifest number: 0619 Signing time: Sun 25 Jan 2026 22:01:46 +0000 Manifest this update: Sun 25 Jan 2026 22:01:46 +0000 Manifest next update: Mon 26 Jan 2026 22:01:46 +0000 Files and hashes: 1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=) 2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: NbuMeYiAJOrr2/oYZXBXEYY3r4ULkK/SDs/mYiLf3P8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:68:0f:78:62:b8:28:04:2d:f8:df:62:c6:d0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Validity Not Before: Jan 25 22:01:46 2026 GMT Not After : Jan 26 22:01:46 2026 GMT Subject: CN=120ccde06348482f449e3d3004025ca1f1583e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:f4:26:d3:9f:09:fc:dd:86:ce:c7:93:aa: b2:5a:d7:78:01:7a:98:0b:3a:95:3c:02:86:bd:87: f2:a2:90:57:b8:3a:f4:2c:13:57:07:91:49:bd:97: 83:93:d2:e6:ec:a3:30:c6:db:46:7a:15:f1:5f:e1: 44:94:ce:60:5b:a7:49:81:41:d7:8a:a4:ac:0e:1f: bc:93:df:e6:ab:3a:fa:3f:72:ac:03:88:76:69:59: b8:b0:83:d0:e8:ff:95:45:e4:4f:d7:22:8e:18:39: 45:98:7c:f5:7f:90:60:29:6a:38:b8:8d:3d:85:ec: d0:fb:81:79:4b:1d:42:b4:54:f2:7f:79:e7:2d:64: 25:d8:45:f1:ba:86:e4:77:22:b9:43:9a:05:95:6a: bb:69:a4:e7:68:07:22:b7:fe:73:6c:54:52:25:c5: 70:dd:9c:11:af:72:f6:d2:e9:51:32:0e:30:0a:4c: 95:89:40:9d:74:3c:e9:43:c0:f3:b9:9f:20:fc:c4: 1b:70:5f:d5:b8:67:68:71:25:12:0a:ad:e1:8a:2f: 7e:5a:9d:7a:c3:b5:71:49:6b:0a:77:f9:7a:0c:90: 25:4e:a2:4d:b6:b5:a4:29:fe:f5:6b:eb:23:ef:c1: 70:ba:71:61:97:f1:de:77:f1:ba:6e:59:42:a1:70: a3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0C:CD:E0:63:48:48:2F:44:9E:3D:30:04:02:5C:A1:F1:58:3E:10 X509v3 Authority Key Identifier: keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:74:ca:f6:57:ca:c4:53:8f:aa:78:4f:b5:7e:64:05:33:01: bf:05:06:18:02:a8:d4:56:b1:56:5a:cb:6b:73:03:23:8c:55: 77:a5:69:f5:0f:f1:10:f4:a9:b3:04:ec:a9:14:3c:ed:d9:8e: f6:a9:8b:42:54:ee:d9:14:5c:09:65:24:08:eb:80:be:b3:56: 22:5b:e5:0d:42:ba:73:92:53:75:f4:a8:f6:0c:c7:9e:ba:be: 5f:71:0c:0b:4c:ae:25:1e:06:40:64:89:d9:4e:7b:1f:c4:c1: ce:e3:78:5e:1a:31:f5:74:ce:fb:77:88:4d:0d:33:e9:2a:6d: 5a:da:fa:15:0f:2e:fa:15:d7:2e:78:82:ff:8e:e6:4d:88:a0: 34:fd:3e:cf:c4:15:01:97:98:89:a9:e0:f3:d4:85:28:25:b7: b1:52:51:9a:c2:17:31:96:0f:52:a4:92:a9:26:9d:81:f8:b7: a5:83:a4:15:12:c0:4e:e9:72:d1:c8:ac:ba:70:1c:2d:04:75: e0:96:81:1e:62:1b:3e:9f:eb:a5:60:57:d4:a4:d2:68:bd:de: 3d:a3:4e:b0:bb:3e:15:b0:85:4e:fe:e1:7a:cf:44:75:9a:c3: 15:1c:1a:8e:e4:bd:fa:37:5b:ad:78:82:4c:8f:de:7b:22:7d: 10:92:c3:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LWgPeGK4KAQt+N9ixtANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjhhMjc5NzY5ZDE5M2RmM2Y5NzgxZDJiYTRjMWQ5Mjc3 YjRmZDYwHhcNMjYwMTI1MjIwMTQ2WhcNMjYwMTI2MjIwMTQ2WjAzMTEwLwYDVQQD EygxMjBjY2RlMDYzNDg0ODJmNDQ5ZTNkMzAwNDAyNWNhMWYxNTgzZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Fv0JtOfCfzdhs7Hk6qyWtd4AXqY CzqVPAKGvYfyopBXuDr0LBNXB5FJvZeDk9Lm7KMwxttGehXxX+FElM5gW6dJgUHX iqSsDh+8k9/mqzr6P3KsA4h2aVm4sIPQ6P+VReRP1yKOGDlFmHz1f5BgKWo4uI09 hezQ+4F5Sx1CtFTyf3nnLWQl2EXxuobkdyK5Q5oFlWq7aaTnaAcit/5zbFRSJcVw 3ZwRr3L20ulRMg4wCkyViUCddDzpQ8DzuZ8g/MQbcF/VuGdocSUSCq3hii9+Wp16 w7VxSWsKd/l6DJAlTqJNtrWkKf71a+sj78FwunFhl/Hed/G6bllCoXCjhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIMzeBjSEgvRJ49MAQCXKHxWD4QMB8GA1UdIwQY MBaAFFxoonl2nRk98/l4HSukwdkne0/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYt MTUzOThiYTViMGU3LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYtMTUzOThiYTViMGU3 LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnTK9lfK xFOPqnhPtX5kBTMBvwUGGAKo1FaxVlrLa3MDI4xVd6Vp9Q/xEPSpswTsqRQ87dmO 9qmLQlTu2RRcCWUkCOuAvrNWIlvlDUK6c5JTdfSo9gzHnrq+X3EMC0yuJR4GQGSJ 2U57H8TBzuN4Xhox9XTO+3eITQ0z6SptWtr6FQ8u+hXXLniC/47mTYigNP0+z8QV AZeYiang89SFKCW3sVJRmsIXMZYPUqSSqSadgfi3pYOkFRLATuly0cisunAcLQR1 4JaBHmIbPp/rpWBX1KTSaL3ePaNOsLs+FbCFTv7hes9EdZrDFRwajuS9+jdbrXiC TI/eeyJ9EJLDvg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:48:21 2026 by rpki-client