This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json) Hash identifier: lnJ5QhMzerm5i+kge8thx5VNcfVWM9LU+XGdMZUhkcE= Subject key identifier: 98:4E:67:9F:01:42:BD:27:FF:3B:21:86:40:F6:BA:94:8E:B6:09:1D Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Certificate serial: 019BF6514955DA40D642C4B799248C603B49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 18:01:20 +0000 Manifest this update: Sun 25 Jan 2026 18:01:20 +0000 Manifest next update: Mon 26 Jan 2026 18:01:20 +0000 Files and hashes: 1: D0436tyKbqXU-OEfmsttV7Y3X3E.roa (hash: MhUHo+gX9c4E0dYnIwVvXUt3H0EjkTPIpU18LdFcjK4=) 2: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=) 3: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: bQXb55cRdMGB+14IbMYIDCMYbNX8EWyQA19i/FY2oxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:49:55:da:40:d6:42:c4:b7:99:24:8c:60:3b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Validity Not Before: Jan 25 18:01:20 2026 GMT Not After : Jan 26 18:01:20 2026 GMT Subject: CN=984e679f0142bd27ff3b218640f6ba948eb6091d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:04:d3:64:bf:a3:58:26:27:3a:70:9c:78:8f: 83:67:e1:4c:18:6e:62:36:41:dc:aa:d4:6d:cd:c2: 00:f6:4b:dd:bf:a9:0c:6f:9f:57:06:1a:fc:0f:d0: a2:71:ad:b3:60:c4:a3:a2:54:70:1f:25:2a:21:05: d2:9d:bb:55:9c:9b:6b:3b:2b:a2:91:54:41:b3:98: f9:af:11:6e:a7:31:d2:90:84:53:35:bd:c4:23:13: 7e:b6:35:40:81:3d:c9:b4:44:ed:17:d6:d1:4f:a1: 83:02:2c:cb:29:39:b4:24:f2:1d:90:06:49:41:d0: 4f:0e:58:d2:0b:49:1c:a8:71:1b:68:65:af:40:1e: 06:43:8a:e6:16:6f:3e:85:c1:a7:e8:09:5f:76:7d: c7:de:63:ce:1d:b6:af:a2:04:65:fb:fb:de:85:3c: 8f:48:79:86:15:17:54:29:25:0d:c9:08:fa:96:ef: d6:c6:28:93:1f:74:2b:eb:66:44:8c:01:fe:f5:99: 4b:be:49:94:56:5b:3b:1f:18:36:e1:9d:d8:40:52: ef:44:fd:0b:bb:38:f2:a4:d8:1c:9d:b4:fc:bb:c1: 18:f2:c7:91:5a:93:94:bd:af:3d:bf:6e:54:d4:81: ef:be:28:fd:e2:da:fc:27:b0:56:66:19:32:ef:a0: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4E:67:9F:01:42:BD:27:FF:3B:21:86:40:F6:BA:94:8E:B6:09:1D X509v3 Authority Key Identifier: keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:cb:a9:50:48:3b:9b:44:36:a7:27:bb:68:87:65:61:0e: 58:70:5a:77:64:33:cc:ea:e8:90:ff:d9:fa:6b:a3:e8:44:96: 97:75:be:90:6c:c4:ea:e5:60:68:a4:97:23:60:7e:26:94:93: ab:81:98:f8:5b:ea:48:d2:2e:45:2c:37:a6:f6:63:4d:c2:db: 13:42:35:34:40:26:fc:96:63:bf:73:dd:87:78:54:6d:72:df: 33:51:ac:a6:61:a8:18:aa:54:ce:3d:30:4d:d3:fd:6e:d0:8c: 89:b8:ca:51:e6:74:40:37:9e:86:3f:d1:45:58:69:e4:f3:5e: 85:8e:ab:e2:11:e3:89:a8:0c:39:cf:1f:6b:e2:86:a9:93:ac: 63:ac:5c:f3:2c:4d:0f:67:0f:fb:8a:0b:a0:e2:34:b7:b5:aa: 99:cf:11:3e:d0:2c:13:cf:3e:06:7a:55:f1:04:76:48:0b:68: 9f:65:05:3b:78:34:ed:59:2b:6c:80:ff:bf:ed:ac:83:06:18: 4b:10:4e:7e:66:35:c4:42:53:a9:fd:9e:a4:52:80:4d:77:1b: 8f:68:23:7a:31:19:f7:d0:85:54:77:f7:70:21:5d:53:c3:1f: 96:6b:d7:59:a3:ed:3d:53:d7:4a:92:ab:7d:7d:f9:2a:25:76: 52:dc:f8:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UUlV2kDWQsS3mSSMYDtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl NGRmMDAwHhcNMjYwMTI1MTgwMTIwWhcNMjYwMTI2MTgwMTIwWjAzMTEwLwYDVQQD Eyg5ODRlNjc5ZjAxNDJiZDI3ZmYzYjIxODY0MGY2YmE5NDhlYjYwOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QTTZL+jWCYnOnCceI+DZ+FMGG5i NkHcqtRtzcIA9kvdv6kMb59XBhr8D9Cica2zYMSjolRwHyUqIQXSnbtVnJtrOyui kVRBs5j5rxFupzHSkIRTNb3EIxN+tjVAgT3JtETtF9bRT6GDAizLKTm0JPIdkAZJ QdBPDljSC0kcqHEbaGWvQB4GQ4rmFm8+hcGn6Alfdn3H3mPOHbavogRl+/vehTyP SHmGFRdUKSUNyQj6lu/WxiiTH3Qr62ZEjAH+9ZlLvkmUVls7Hxg24Z3YQFLvRP0L uzjypNgcnbT8u8EY8seRWpOUva89v25U1IHvvij94tr8J7BWZhky76DpyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhOZ58BQr0n/zshhkD2upSOtgkdMB8GA1UdIwQY MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5 LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInvLqVBI O5tENqcnu2iHZWEOWHBad2QzzOrokP/Z+muj6ESWl3W+kGzE6uVgaKSXI2B+JpST q4GY+FvqSNIuRSw3pvZjTcLbE0I1NEAm/JZjv3Pdh3hUbXLfM1GspmGoGKpUzj0w TdP9btCMibjKUeZ0QDeehj/RRVhp5PNehY6r4hHjiagMOc8fa+KGqZOsY6xc8yxN D2cP+4oLoOI0t7Wqmc8RPtAsE88+BnpV8QR2SAton2UFO3g07VkrbID/v+2sgwYY SxBOfmY1xEJTqf2epFKATXcbj2gjejEZ99CFVHf3cCFdU8MflmvXWaPtPVPXSpKr fX35KiV2Utz4BA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:12 2026 by rpki-client