This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json) Hash identifier: 12qLZ70xjDRY8bet0HlWGw75aWRVBLyKcnSy4CVV8ts= Subject key identifier: 90:1D:79:AB:83:1C:CE:68:C7:55:0C:10:B3:19:5C:07:D6:23:50:6D Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019BF5AC4AEDF1DA94663EEC02FDA2358B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft Manifest number: 0629 Signing time: Sun 25 Jan 2026 15:01:07 +0000 Manifest this update: Sun 25 Jan 2026 15:01:07 +0000 Manifest next update: Mon 26 Jan 2026 15:01:07 +0000 Files and hashes: 1: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (hash: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc=) 2: LNYXeGK0fNHFOXoFsTX923sjqo4.roa (hash: HMZywae9ctDuPusaGMZ0nvtbkQTFjTevWXrmDyy57E0=) 3: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (hash: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk=) 4: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: 4zhIJ8TZ4oJK4x514GM5NFB2Bqjp3LfeWHtMHtYOOCo=) 5: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (hash: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:4a:ed:f1:da:94:66:3e:ec:02:fd:a2:35:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Jan 25 15:01:07 2026 GMT Not After : Jan 26 15:01:07 2026 GMT Subject: CN=901d79ab831cce68c7550c10b3195c07d623506d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:17:8c:37:1d:d0:fc:ea:ec:24:54:b0:4f: 9e:31:ef:66:23:1c:8a:3f:11:98:ae:e5:db:ae:d4: 06:03:2f:2b:82:d8:51:24:46:7e:35:5b:fe:73:5b: 0c:8b:b7:9a:60:56:6e:54:ee:46:64:a3:be:b2:30: 78:1b:44:bf:d2:08:0f:4e:a0:b0:12:a9:4c:84:27: 99:b0:5c:4c:57:c9:48:3e:0f:90:ad:61:f6:87:53: 61:90:87:6b:06:d0:90:ca:a6:11:97:9b:07:ca:46: 23:9e:7c:ec:89:e8:32:8e:f5:77:44:ac:b7:6e:b1: af:06:7f:d8:d3:77:6c:32:2b:50:1f:79:74:85:40: 3a:3f:40:3b:95:cb:21:07:03:24:29:bc:45:a4:41: 50:d9:20:ea:29:6a:91:55:92:b4:0b:88:c3:6f:27: 5e:8c:25:57:3c:fe:52:ec:09:b1:6e:8f:f5:19:1f: 1e:80:30:a0:f9:c9:27:6f:63:fd:07:e3:43:c8:c4: 42:0e:27:98:cd:a6:9c:d1:5f:a2:99:c3:8c:1e:49: 9e:f9:c3:8b:8a:fe:5e:98:37:14:80:7c:38:ea:19: 0d:b7:18:92:78:2d:c7:0a:fc:9b:5e:5e:88:09:62: 53:b3:70:71:78:6e:37:b5:5f:1b:c2:f2:09:93:ea: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:79:AB:83:1C:CE:68:C7:55:0C:10:B3:19:5C:07:D6:23:50:6D X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:18:71:2d:b7:dd:26:6b:52:ce:4b:b9:e7:72:66:5a:17:0b: a1:9e:96:c9:02:1e:97:01:c2:2b:f6:fd:eb:17:1a:8f:82:a1: 60:bf:6e:24:ed:f3:3b:88:77:87:f3:38:1f:44:04:b5:ba:4f: b2:66:c0:5a:72:4e:8b:af:36:ee:2c:a5:f4:8c:cd:d4:28:de: a7:d2:75:9e:45:97:58:37:7d:98:4d:39:b6:e9:16:dd:f0:14: e8:f1:98:c5:2d:a6:22:94:02:ed:8f:cd:65:de:35:92:93:a1: 00:b7:44:ae:81:67:96:41:82:0a:0d:1a:33:a2:00:04:64:f1: 8e:70:70:e1:a8:98:3b:56:9d:eb:49:49:74:5b:80:78:4b:22: d4:4a:43:36:88:a4:f5:3b:7d:7d:2c:87:33:5c:23:c6:89:fd: 29:a9:74:71:68:3c:20:be:a0:84:07:f8:2f:64:eb:83:3b:48: 15:26:ea:dc:64:a3:8c:7e:ef:de:49:77:8b:ff:ad:ad:c9:db: 57:b7:6f:ee:2a:39:a0:56:61:30:7e:90:f4:b8:5d:ab:1f:a0: b2:dd:89:28:b9:d2:44:e0:f9:b6:f9:ac:b9:6f:e7:fa:d0:ec: 96:52:c7:c7:81:25:0e:ac:14:24:94:19:85:0f:b7:0f:60:d6: 75:e1:d6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rErt8dqUZj7sAv2iNYtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjYwMTI1MTUwMTA3WhcNMjYwMTI2MTUwMTA3WjAzMTEwLwYDVQQD Eyg5MDFkNzlhYjgzMWNjZTY4Yzc1NTBjMTBiMzE5NWMwN2Q2MjM1MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUIXjDcd0Pzq7CRUsE+eMe9mIxyK PxGYruXbrtQGAy8rgthRJEZ+NVv+c1sMi7eaYFZuVO5GZKO+sjB4G0S/0ggPTqCw EqlMhCeZsFxMV8lIPg+QrWH2h1NhkIdrBtCQyqYRl5sHykYjnnzsiegyjvV3RKy3 brGvBn/Y03dsMitQH3l0hUA6P0A7lcshBwMkKbxFpEFQ2SDqKWqRVZK0C4jDbyde jCVXPP5S7Amxbo/1GR8egDCg+cknb2P9B+NDyMRCDieYzaac0V+imcOMHkme+cOL iv5emDcUgHw46hkNtxiSeC3HCvybXl6ICWJTs3BxeG43tV8bwvIJk+pvBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAdeauDHM5ox1UMELMZXAfWI1BtMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhhxLbfd JmtSzku553JmWhcLoZ6WyQIelwHCK/b96xcaj4KhYL9uJO3zO4h3h/M4H0QEtbpP smbAWnJOi6827iyl9IzN1Cjep9J1nkWXWDd9mE05tukW3fAU6PGYxS2mIpQC7Y/N Zd41kpOhALdEroFnlkGCCg0aM6IABGTxjnBw4aiYO1ad60lJdFuAeEsi1EpDNoik 9Tt9fSyHM1wjxon9Kal0cWg8IL6ghAf4L2TrgztIFSbq3GSjjH7v3kl3i/+trcnb V7dv7io5oFZhMH6Q9Lhdqx+gst2JKLnSROD5tvmsuW/n+tDsllLHx4ElDqwUJJQZ hQ+3D2DWdeHWgQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:07 2026 by rpki-client