This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json) Hash identifier: e72jameeOOQZMZktdsAYbBHzzNRXrApRKgjbq5GjBGM= Subject key identifier: 14:8C:39:D5:AD:41:5D:39:D0:35:28:94:B4:0A:7C:A4:54:17:20:CD Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Certificate serial: 019BF3868D0ED292FF7E0E72CE6167C0FA9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft Manifest number: 0801 Signing time: Sun 25 Jan 2026 05:00:39 +0000 Manifest this update: Sun 25 Jan 2026 05:00:39 +0000 Manifest next update: Mon 26 Jan 2026 05:00:39 +0000 Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=) 2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: dddEAL9sxP/1Ufe5lS8omWuMEjObQI5Z6oLUfMIbxgQ=) 3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:8d:0e:d2:92:ff:7e:0e:72:ce:61:67:c0:fa:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Validity Not Before: Jan 25 05:00:39 2026 GMT Not After : Jan 26 05:00:39 2026 GMT Subject: CN=148c39d5ad415d39d0352894b40a7ca4541720cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:2b:c8:48:9b:9e:8c:c6:de:25:56:80:4a: 78:60:b6:5a:68:70:1c:c4:ef:f8:1d:25:01:3d:a7: 70:67:4b:31:dc:ba:fe:8a:76:f6:99:2a:bb:9c:a6: 3a:70:ad:e8:58:eb:ad:d7:6e:f9:6c:65:c1:67:ec: 26:c0:89:68:c9:85:4b:80:84:42:e3:0a:7e:28:aa: 0f:df:27:1b:68:88:3a:43:42:69:a6:a2:82:15:67: aa:53:10:13:1d:cb:c9:d5:e3:8a:41:1e:1e:08:4a: 83:5e:ad:f0:5a:cb:20:ca:b5:a6:16:23:3f:d5:a9: 05:8f:f8:88:8e:80:e6:50:c0:21:34:9e:e8:21:b3: 85:8e:51:6e:f3:af:77:1a:75:f7:f8:14:05:42:00: 81:1a:91:74:a2:06:a4:cf:5d:ba:b4:e0:75:d3:13: 04:29:2c:ab:f3:88:41:88:d8:ee:ff:f6:95:c8:fb: 62:cd:8c:c3:1c:ce:da:ef:98:94:47:57:37:09:7f: a0:f6:de:29:11:f0:b9:4f:1a:e8:e0:34:ed:46:74: 11:57:18:08:d6:15:78:9d:bc:e5:62:c8:3f:89:46: e0:63:b3:b4:dc:b1:15:4e:77:ff:ed:81:0d:58:87: c8:68:b4:5a:ae:7a:00:e3:57:2b:99:82:ef:1f:80: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8C:39:D5:AD:41:5D:39:D0:35:28:94:B4:0A:7C:A4:54:17:20:CD X509v3 Authority Key Identifier: keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2d:b7:af:e8:f6:a8:f3:14:35:9c:fd:68:6e:5e:26:77:1e: 4a:35:fc:89:a8:c9:98:d8:a9:3d:54:84:29:c0:71:e8:56:b6: 2e:c8:9a:a6:a0:bd:dc:28:6f:9c:74:75:da:f3:49:7b:d4:3a: ed:f1:3e:e3:4c:fa:94:13:dd:0b:2d:2c:9a:2e:2f:48:c0:26: cd:2e:7e:fe:0e:8d:b3:8c:da:6f:51:56:db:b2:95:0d:4a:6c: 44:d0:22:26:67:60:36:66:35:e3:e3:f6:50:00:d8:9a:0a:e1: fb:cd:7e:55:04:89:48:55:1c:9c:97:88:94:b0:a7:8c:8a:b5: e5:ec:93:ce:a4:f4:3c:4d:47:e6:e4:9f:c3:0c:4f:d8:3b:64: 8b:10:f9:b8:49:fd:52:66:ad:8a:52:11:cf:4e:13:0a:d8:50: 0a:27:f6:ae:1c:a4:09:e8:44:2b:ef:43:ac:1d:cb:03:16:79: c2:8f:3b:d3:0e:4a:98:6a:52:c6:3c:8e:25:ca:4b:86:ef:25: 68:ad:d8:41:45:b0:cb:8d:b0:de:09:df:cf:cd:f8:48:cb:8c: d0:0d:08:cf:c2:8c:08:9a:db:62:84:ad:d0:29:25:c8:a6:54: b9:ff:ed:87:3e:63:f0:09:b3:cf:6d:79:00:59:c2:9c:bb:03: c5:95:69:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzho0O0pL/fg5yzmFnwPqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4 MTk5ZTYwHhcNMjYwMTI1MDUwMDM5WhcNMjYwMTI2MDUwMDM5WjAzMTEwLwYDVQQD EygxNDhjMzlkNWFkNDE1ZDM5ZDAzNTI4OTRiNDBhN2NhNDU0MTcyMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU0ryEibnozG3iVWgEp4YLZaaHAc xO/4HSUBPadwZ0sx3Lr+inb2mSq7nKY6cK3oWOut1275bGXBZ+wmwIloyYVLgIRC 4wp+KKoP3ycbaIg6Q0JppqKCFWeqUxATHcvJ1eOKQR4eCEqDXq3wWssgyrWmFiM/ 1akFj/iIjoDmUMAhNJ7oIbOFjlFu8693GnX3+BQFQgCBGpF0ogakz126tOB10xME KSyr84hBiNju//aVyPtizYzDHM7a75iUR1c3CX+g9t4pEfC5Txro4DTtRnQRVxgI 1hV4nbzlYsg/iUbgY7O03LEVTnf/7YENWIfIaLRarnoA41crmYLvH4Cg1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSMOdWtQV050DUolLQKfKRUFyDNMB8GA1UdIwQY MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt ZGYyN2YxMGM3MDk3LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3 LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS23r+j2 qPMUNZz9aG5eJnceSjX8iajJmNipPVSEKcBx6Fa2LsiapqC93ChvnHR12vNJe9Q6 7fE+40z6lBPdCy0smi4vSMAmzS5+/g6Ns4zab1FW27KVDUpsRNAiJmdgNmY14+P2 UADYmgrh+81+VQSJSFUcnJeIlLCnjIq15eyTzqT0PE1H5uSfwwxP2DtkixD5uEn9 UmatilIRz04TCthQCif2rhykCehEK+9DrB3LAxZ5wo870w5KmGpSxjyOJcpLhu8l aK3YQUWwy42w3gnfz834SMuM0A0Iz8KMCJrbYoSt0CklyKZUuf/thz5j8Amzz215 AFnCnLsDxZVpmA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:59 2026 by rpki-client