This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json) Hash identifier: hha+vwYg4MsHoPd4owDqtna0cenicdoZpzobUdcFmX8= Subject key identifier: 68:5F:18:26:02:CA:06:5F:18:6C:2B:73:58:9F:36:61:A2:07:6F:C7 Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d Certificate serial: 019BF3BDA3C7D52E7A08B544394A52F50001 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 06:00:50 +0000 Manifest this update: Sun 25 Jan 2026 06:00:50 +0000 Manifest next update: Mon 26 Jan 2026 06:00:50 +0000 Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: /nWWPOF3ExBIV4b4J2ooWhu7uAyx1/gAMn6ZqPV0T+I=) 2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:a3:c7:d5:2e:7a:08:b5:44:39:4a:52:f5:00:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d Validity Not Before: Jan 25 06:00:50 2026 GMT Not After : Jan 26 06:00:50 2026 GMT Subject: CN=685f182602ca065f186c2b73589f3661a2076fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:5a:a2:13:e3:9d:b4:fe:22:c1:87:f2:a1: 38:86:1a:ee:e5:0c:21:2d:5c:2c:7f:ac:88:78:8d: a0:13:84:7e:0d:8b:ef:a2:85:02:ea:d4:64:20:3d: d1:c7:86:55:fc:7f:83:76:50:89:04:cf:f6:58:55: dc:d9:97:aa:3b:18:ae:62:67:6f:ce:5f:59:03:b7: fe:85:08:d5:43:82:54:b3:9a:4f:c6:af:f1:98:04: bd:7c:f6:e8:d1:02:af:a4:c0:ea:03:b0:26:6e:9b: 07:33:77:60:3c:cc:89:c8:4a:11:70:be:16:9c:ce: 86:55:71:b2:88:1b:27:5a:84:db:85:19:4b:db:4f: 43:63:51:55:74:c8:97:17:69:e2:6a:1d:e7:a1:3f: 87:5c:1e:b1:3f:b3:b4:4c:e6:a9:66:26:2b:f3:e4: 07:ac:9c:98:dd:21:45:9e:90:ac:fd:92:5a:f7:10: 73:8d:40:1c:d7:51:bd:4e:3a:91:01:28:87:ad:40: b6:37:83:4a:05:47:8a:64:60:ce:b4:5c:42:f4:17: 3b:bc:13:0d:e9:a8:4e:e0:dc:df:9e:3c:87:d6:f3: 61:e6:b7:0c:a7:7b:5e:07:c2:78:33:31:1c:12:0e: f3:0f:34:73:83:38:54:cb:c8:ec:58:34:df:96:ff: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:18:26:02:CA:06:5F:18:6C:2B:73:58:9F:36:61:A2:07:6F:C7 X509v3 Authority Key Identifier: keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e2:44:e9:3c:57:de:33:af:1c:97:45:78:7e:9f:6f:4d:6f: 4c:1e:1f:d2:9c:e7:d3:70:b5:b6:55:f6:e6:70:e0:dc:a3:c1: 6f:de:49:66:10:9d:f3:5d:22:30:6c:8e:77:77:2c:5d:e2:70: d6:ae:d8:56:b7:a2:91:98:c5:07:00:54:a9:2e:38:9e:0c:cd: 0b:1d:d5:ce:53:09:7a:85:92:da:41:c8:84:33:bf:bc:c4:05: eb:53:67:9d:27:02:cf:45:47:8c:70:d5:0b:77:2d:ca:06:78: e7:76:a5:06:b3:d3:2e:5b:ae:20:e9:59:19:16:8e:8d:ef:a8: 1e:a1:b2:d8:17:19:73:1b:dd:da:12:30:32:63:d9:50:23:85: fe:16:bf:f5:b3:2f:f9:c1:18:a0:9a:6d:99:90:17:c1:60:d1: 3b:76:77:d4:5a:6e:7d:e2:e4:9a:77:a5:28:83:f0:22:a5:1d: 4c:a1:cc:a5:36:8b:c7:a6:9b:37:57:9f:c3:d1:9a:10:f6:3b: ea:13:74:2c:e0:e8:ca:3e:41:7f:84:34:67:af:fc:ae:1a:55: 14:dd:52:3d:f6:65:8b:a9:c2:cc:92:a8:c4:7e:05:96:ec:1c: 9b:ea:06:ad:78:64:d0:6e:70:f4:42:d2:13:c4:a5:84:c6:9b: 2b:0f:cf:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvaPH1S56CLVEOUpS9QABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjY0OGYxMjkwZDQ0NzFiY2RiNTBiODJiZTRlZDkzMjAw MzA5NGQwHhcNMjYwMTI1MDYwMDUwWhcNMjYwMTI2MDYwMDUwWjAzMTEwLwYDVQQD Eyg2ODVmMTgyNjAyY2EwNjVmMTg2YzJiNzM1ODlmMzY2MWEyMDc2ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk9aohPjnbT+IsGH8qE4hhru5Qwh LVwsf6yIeI2gE4R+DYvvooUC6tRkID3Rx4ZV/H+DdlCJBM/2WFXc2ZeqOxiuYmdv zl9ZA7f+hQjVQ4JUs5pPxq/xmAS9fPbo0QKvpMDqA7AmbpsHM3dgPMyJyEoRcL4W nM6GVXGyiBsnWoTbhRlL209DY1FVdMiXF2niah3noT+HXB6xP7O0TOapZiYr8+QH rJyY3SFFnpCs/ZJa9xBzjUAc11G9TjqRASiHrUC2N4NKBUeKZGDOtFxC9Bc7vBMN 6ahO4NzfnjyH1vNh5rcMp3teB8J4MzEcEg7zDzRzgzhUy8jsWDTflv/hHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhfGCYCygZfGGwrc1ifNmGiB2/HMB8GA1UdIwQY MBaAFF4mSPEpDURxvNtQuCvk7ZMgAwlNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYt ZjU1ZmNkZjk3ODQ2LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYtZjU1ZmNkZjk3ODQ2 LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+JE6TxX 3jOvHJdFeH6fb01vTB4f0pzn03C1tlX25nDg3KPBb95JZhCd810iMGyOd3csXeJw 1q7YVreikZjFBwBUqS44ngzNCx3VzlMJeoWS2kHIhDO/vMQF61NnnScCz0VHjHDV C3ctygZ453alBrPTLluuIOlZGRaOje+oHqGy2BcZcxvd2hIwMmPZUCOF/ha/9bMv +cEYoJptmZAXwWDRO3Z31FpufeLkmnelKIPwIqUdTKHMpTaLx6abN1efw9GaEPY7 6hN0LODoyj5Bf4Q0Z6/8rhpVFN1SPfZli6nCzJKoxH4Fluwcm+oGrXhk0G5w9ELS E8SlhMabKw/Pag== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:08 2026 by rpki-client