This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json) Hash identifier: j0lFH3AIflM22JaKNDwOyA1qyqeGhMS23ERRODPVAZI= Subject key identifier: 22:69:5F:6D:8C:CF:14:3F:B9:EF:49:2A:91:BE:EA:3D:1E:5E:E2:D5 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019BF763BD79C844C506AC75C07D6CB664FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft Manifest number: 14FA Signing time: Sun 25 Jan 2026 23:01:07 +0000 Manifest this update: Sun 25 Jan 2026 23:01:07 +0000 Manifest next update: Mon 26 Jan 2026 23:01:07 +0000 Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=) 2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: zTIJJRICwVBZI2E5iBcLHIfdASa3j1lqwP8s0InLyr4=) 3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=) 4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:bd:79:c8:44:c5:06:ac:75:c0:7d:6c:b6:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Jan 25 23:01:07 2026 GMT Not After : Jan 26 23:01:07 2026 GMT Subject: CN=22695f6d8ccf143fb9ef492a91beea3d1e5ee2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:e0:bf:ef:06:36:54:3b:3d:65:e0:2a:28: b4:ce:d4:5a:4f:64:65:f3:f3:29:67:bf:cd:fd:4e: e2:4d:15:ac:d8:e9:e0:d4:27:f7:dc:51:c5:47:3f: 45:5b:0f:be:d7:d7:22:5e:ac:f1:73:73:e9:58:a8: d3:66:af:9e:38:3e:79:11:99:96:2a:3c:ba:c1:3c: be:64:c1:3e:40:9e:d7:42:a7:42:42:f9:ba:88:b4: df:47:94:42:25:10:90:72:2f:d6:d3:20:d0:6c:59: 4c:e9:38:3f:46:b1:68:93:66:52:c0:a3:d2:72:c5: af:94:8b:14:08:9c:78:42:1b:41:f0:25:44:85:26: bc:86:23:0c:8b:a3:16:1f:98:20:01:1d:a2:1d:77: 01:8e:8d:ea:84:94:ef:fb:38:3c:ca:d1:0b:1c:f7: ec:f1:23:e1:15:26:c6:e9:e7:b1:ea:29:c3:2e:a9: 4a:d9:d0:97:e2:8b:62:81:3b:8c:be:39:83:0b:b6: d1:71:da:59:92:56:4b:8c:fb:53:d1:ea:28:88:58: b6:5e:69:cd:95:a3:aa:21:fe:c9:b7:0d:40:05:f3: d4:68:96:a2:76:87:99:80:83:a7:f6:41:41:e7:6a: e6:48:a7:4f:38:bd:66:ad:85:d2:85:6a:e4:8d:8e: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:5F:6D:8C:CF:14:3F:B9:EF:49:2A:91:BE:EA:3D:1E:5E:E2:D5 X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:68:b1:2f:08:e8:57:0c:0b:fe:20:48:9e:46:f1:61:e2:8f: 6c:e5:09:81:e5:fb:71:96:ae:dc:5b:0b:a1:dc:cf:4a:0f:98: 95:00:f7:33:bf:23:25:ab:35:e5:7a:0b:ab:19:61:b4:ba:5b: e5:99:23:22:5a:b3:5d:d8:93:15:03:59:70:ef:08:72:d0:1e: 6e:84:1f:6c:3d:50:60:7c:21:66:a2:73:65:33:9b:44:a4:76: 7a:72:43:5f:73:cc:32:bb:0e:ca:ad:d3:06:80:d1:b5:ef:82: 37:48:de:ce:e6:8b:77:82:e1:62:d1:83:9e:34:29:9a:17:f4: b4:eb:b5:76:58:26:71:44:a9:53:c0:15:5a:d0:58:9f:45:fb: 0c:18:5d:82:81:0b:a0:58:1b:d7:f3:61:d8:48:f6:c8:69:c8: b3:88:5d:98:7d:2b:b3:dc:6f:49:d0:fa:63:f3:be:48:92:6d: 22:09:7e:61:59:11:61:44:ec:52:fc:3b:2d:77:ea:61:2f:f2: 64:2e:14:0f:37:5d:28:99:01:31:68:02:2b:12:70:97:f7:71: 94:a1:0a:a9:99:de:86:3f:06:34:25:3a:5d:74:81:b3:a4:52: 14:c2:bb:c6:a6:c6:ec:e7:b2:5c:aa:23:11:70:f4:12:91:bd: fb:8a:c2:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y715yETFBqx1wH1stmT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjYwMTI1MjMwMTA3WhcNMjYwMTI2MjMwMTA3WjAzMTEwLwYDVQQD EygyMjY5NWY2ZDhjY2YxNDNmYjllZjQ5MmE5MWJlZWEzZDFlNWVlMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3urgv+8GNlQ7PWXgKii0ztRaT2Rl 8/MpZ7/N/U7iTRWs2Ong1Cf33FHFRz9FWw++19ciXqzxc3PpWKjTZq+eOD55EZmW Kjy6wTy+ZME+QJ7XQqdCQvm6iLTfR5RCJRCQci/W0yDQbFlM6Tg/RrFok2ZSwKPS csWvlIsUCJx4QhtB8CVEhSa8hiMMi6MWH5ggAR2iHXcBjo3qhJTv+zg8ytELHPfs 8SPhFSbG6eex6inDLqlK2dCX4otigTuMvjmDC7bRcdpZklZLjPtT0eooiFi2XmnN laOqIf7Jtw1ABfPUaJaidoeZgIOn9kFB52rmSKdPOL1mrYXShWrkjY547wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJpX22MzxQ/ue9JKpG+6j0eXuLVMB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWixLwjo VwwL/iBInkbxYeKPbOUJgeX7cZau3FsLodzPSg+YlQD3M78jJas15XoLqxlhtLpb 5ZkjIlqzXdiTFQNZcO8IctAeboQfbD1QYHwhZqJzZTObRKR2enJDX3PMMrsOyq3T BoDRte+CN0jezuaLd4LhYtGDnjQpmhf0tOu1dlgmcUSpU8AVWtBYn0X7DBhdgoEL oFgb1/Nh2Ej2yGnIs4hdmH0rs9xvSdD6Y/O+SJJtIgl+YVkRYUTsUvw7LXfqYS/y ZC4UDzddKJkBMWgCKxJwl/dxlKEKqZnehj8GNCU6XXSBs6RSFMK7xqbG7OeyXKoj EXD0EpG9+4rCkA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:11 2026 by rpki-client