This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json) Hash identifier: JtzzQf9fcLrS0RSmnT6MIHNIyw4/cb/2zw2qoZuvrvw= Subject key identifier: 9C:13:B5:F6:A0:7E:47:EF:0B:AC:D9:97:E4:AF:F8:99:13:AC:9A:27 Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Certificate serial: 019BF57516AB8FCF6967229D2730EE23F331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft Manifest number: 131E Signing time: Sun 25 Jan 2026 14:00:49 +0000 Manifest this update: Sun 25 Jan 2026 14:00:49 +0000 Manifest next update: Mon 26 Jan 2026 14:00:49 +0000 Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=) 2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: QHZuxQARJRha4sehPFSMpPCdijLZu4Dip5gaZDQcQBo=) 3: cK5cw8AbnJwJ192Oqw0smKvplRk.roa (hash: RGVdGmoEXQFd5Wi4cvPlmLz7WQCbTvTX46jvgdnciCM=) 4: vTQN-e7jjkgCyq3XzJURdRaJoTg.roa (hash: 2bGb5FVMPYjnm7xcUgpAVEoyGOCtPgBfKp3uSEh+l10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:16:ab:8f:cf:69:67:22:9d:27:30:ee:23:f3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Validity Not Before: Jan 25 14:00:49 2026 GMT Not After : Jan 26 14:00:49 2026 GMT Subject: CN=9c13b5f6a07e47ef0bacd997e4aff89913ac9a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:aa:fa:8f:76:73:d1:bc:d5:24:a8:cd:70: 4f:1d:2b:e9:c1:d6:1b:8b:6f:93:73:e7:a3:45:3b: e0:50:ba:c1:90:06:c7:2b:ca:1d:62:c2:d6:41:7a: 2a:39:82:16:0e:ea:0e:07:4e:12:9d:bf:21:9b:92: ef:4c:e0:b7:7d:20:70:b2:55:55:ff:8a:93:0f:98: b5:3a:9c:b7:e1:34:9b:21:7a:73:0c:85:ba:e7:aa: ea:c8:0f:e9:91:e1:79:41:55:1e:41:71:a6:f1:8a: e5:66:ea:42:15:c8:54:55:b6:d7:b3:6b:c9:63:9c: b2:35:62:82:47:d9:63:76:3c:6d:fb:2b:62:13:46: 1d:5d:5d:d6:00:ff:42:e5:4e:55:16:15:ad:9c:f9: fe:81:be:a7:d3:bc:01:cc:b7:56:37:c0:d9:ce:1d: ea:f7:91:c7:e7:e2:75:4c:82:bc:24:62:28:7e:01: d9:ed:d6:65:65:d8:de:0a:72:db:c3:bc:3d:3d:86: 0b:f4:9f:0c:cd:73:36:92:47:34:27:9c:a3:d2:d9: 54:a7:6b:7a:95:f5:b4:5c:93:21:b1:8a:01:60:35: e3:ac:0b:29:57:40:cb:1f:5f:9e:89:bc:a3:99:0d: eb:bf:8f:41:c8:d4:a8:d8:2d:43:fc:a6:a6:42:0d: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:13:B5:F6:A0:7E:47:EF:0B:AC:D9:97:E4:AF:F8:99:13:AC:9A:27 X509v3 Authority Key Identifier: keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e9:fd:17:d8:de:5b:81:b3:31:d6:2c:dd:ad:e9:15:2d:a0: c5:4a:12:78:b3:25:f5:5d:cf:af:d5:76:4f:f9:6b:3b:5b:d1: 38:5b:ee:ab:7d:ba:34:42:b6:0d:03:1c:a7:f3:66:bf:03:c5: cd:0c:d8:4c:f6:1c:9a:60:6c:d3:aa:50:f0:17:f0:7d:ac:f2: 79:b9:40:75:6b:e8:f4:3d:43:7a:74:8e:a3:d7:e7:6a:a6:ca: 5e:d7:e7:26:02:c5:32:d8:e7:0e:77:6d:25:8b:5b:82:9f:15: e0:25:ee:e5:ef:0e:04:08:d4:2b:af:c8:bf:fc:13:a3:e3:ec: 71:51:e6:f6:4f:ef:2a:0c:cb:49:a1:3c:19:a6:8d:d9:3a:01: dc:7a:b5:cc:2b:ad:b8:1c:65:09:a8:3b:9e:63:e6:dc:2e:2b: c4:bc:d7:4f:d8:76:41:56:7b:da:b9:4f:bc:15:29:51:1b:86: 8e:43:bb:41:67:33:df:1e:cd:28:f2:d7:cb:41:f2:34:5d:d3: 2c:69:96:66:17:b9:b7:38:1e:91:e9:55:a1:2b:7a:26:6e:b4: 21:4d:d7:c4:42:1d:95:14:cb:f6:2f:e5:88:4c:bf:86:c9:96: 1e:e0:eb:72:d2:74:a5:28:5f:3a:69:dd:5f:d5:43:42:ed:be: c7:32:8f:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dRarj89pZyKdJzDuI/MxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl NWNmOTYwHhcNMjYwMTI1MTQwMDQ5WhcNMjYwMTI2MTQwMDQ5WjAzMTEwLwYDVQQD Eyg5YzEzYjVmNmEwN2U0N2VmMGJhY2Q5OTdlNGFmZjg5OTEzYWM5YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJqq+o92c9G81SSozXBPHSvpwdYb i2+Tc+ejRTvgULrBkAbHK8odYsLWQXoqOYIWDuoOB04Snb8hm5LvTOC3fSBwslVV /4qTD5i1Opy34TSbIXpzDIW656rqyA/pkeF5QVUeQXGm8YrlZupCFchUVbbXs2vJ Y5yyNWKCR9ljdjxt+ytiE0YdXV3WAP9C5U5VFhWtnPn+gb6n07wBzLdWN8DZzh3q 95HH5+J1TIK8JGIofgHZ7dZlZdjeCnLbw7w9PYYL9J8MzXM2kkc0J5yj0tlUp2t6 lfW0XJMhsYoBYDXjrAspV0DLH1+eibyjmQ3rv49ByNSo2C1D/KamQg1nyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwTtfagfkfvC6zZl+Sv+JkTrJonMB8GA1UdIwQY MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqun9F9je W4GzMdYs3a3pFS2gxUoSeLMl9V3Pr9V2T/lrO1vROFvuq326NEK2DQMcp/NmvwPF zQzYTPYcmmBs06pQ8BfwfazyeblAdWvo9D1DenSOo9fnaqbKXtfnJgLFMtjnDndt JYtbgp8V4CXu5e8OBAjUK6/Iv/wTo+PscVHm9k/vKgzLSaE8GaaN2ToB3Hq1zCut uBxlCag7nmPm3C4rxLzXT9h2QVZ72rlPvBUpURuGjkO7QWcz3x7NKPLXy0HyNF3T LGmWZhe5tzgekelVoSt6Jm60IU3XxEIdlRTL9i/liEy/hsmWHuDrctJ0pShfOmnd X9VDQu2+xzKPBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:52:30 2026 by rpki-client