This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json) Hash identifier: 1qWob0Qqqgtu7W6Ul2Cu9xdjqlekdYSeodmVtWek59k= Subject key identifier: E8:65:63:BD:46:05:F2:91:B2:CD:76:E2:41:3D:8D:BB:2A:28:B7:F5 Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d Certificate serial: 019BF619ECF09428A8F328D7BF2C61D8B3A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft Manifest number: 1243 Signing time: Sun 25 Jan 2026 17:00:52 +0000 Manifest this update: Sun 25 Jan 2026 17:00:52 +0000 Manifest next update: Mon 26 Jan 2026 17:00:52 +0000 Files and hashes: 1: GqfcLrP9OkUTy-GX1d-k-vfcOX8.roa (hash: XFhkOuqDVaUrmegmAPvZHJBMmOe4H8O6VpNvMvQVK4k=) 2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: BoEqZVnNFvQGcigGpqgS3nYTW3Q68/mGEBnd1wFD3GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ec:f0:94:28:a8:f3:28:d7:bf:2c:61:d8:b3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d Validity Not Before: Jan 25 17:00:52 2026 GMT Not After : Jan 26 17:00:52 2026 GMT Subject: CN=e86563bd4605f291b2cd76e2413d8dbb2a28b7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:d7:c8:af:02:6f:d0:02:db:33:89:c9:12: c9:ab:71:17:0c:c7:01:23:01:29:84:aa:0c:ae:07: a3:ac:46:f2:84:6c:69:6b:d1:74:99:c9:0b:9e:9c: 5c:96:51:79:82:06:e2:91:17:9b:09:14:9f:15:44: bb:d7:ae:30:3c:7b:54:2f:2a:99:63:bd:36:93:54: 84:08:ee:dc:5a:3e:e6:04:2e:20:61:1d:b0:4e:4f: c0:5a:06:7e:56:03:83:2c:4f:df:c4:67:f1:c0:9c: d3:87:e1:0c:76:62:a7:c9:ce:81:19:11:93:13:bb: 93:1f:d5:7d:87:13:4c:63:a8:61:24:8f:ae:90:b4: 4b:dc:1c:05:d1:02:24:80:51:bc:79:88:f4:3e:75: 42:88:f9:9c:1d:5d:ba:ce:f5:f5:76:fe:6b:5b:3f: b4:cf:9d:b7:78:59:aa:5c:19:9c:61:d4:fe:8b:78: a5:32:9b:0c:8f:c7:48:50:26:6a:b6:c0:72:b2:f2: 93:82:aa:69:8c:c6:20:fb:36:87:58:75:16:59:88: aa:89:4f:ad:10:83:bb:04:91:07:c9:5b:45:70:3f: 54:46:e1:19:e7:45:8c:21:08:18:5f:5e:2f:87:c0: 56:8a:67:fa:e3:49:06:70:1e:c0:f4:44:60:3f:85: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:65:63:BD:46:05:F2:91:B2:CD:76:E2:41:3D:8D:BB:2A:28:B7:F5 X509v3 Authority Key Identifier: keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:63:48:2d:ae:46:57:45:69:ba:3b:36:6e:fd:d6:2a:1b:bc: c9:6e:ee:6d:9e:87:90:55:58:8f:1b:7e:e9:3d:ee:73:c6:8c: b5:cc:89:30:2d:e8:23:8b:17:b0:1b:a8:aa:c2:00:02:c3:99: 1b:dc:6d:57:e5:2a:8d:3d:e7:fd:42:e7:f3:d1:06:65:b9:4b: 3e:a3:9f:7f:5e:c7:56:74:e6:ba:35:3c:ec:12:88:0c:94:e5: b9:96:4a:49:e3:1a:9e:6e:92:23:0e:14:84:df:fb:e7:a2:7f: a3:de:b0:3d:95:6e:a4:d5:58:2f:ce:94:e6:1d:64:ae:4c:36: 9c:82:8b:38:96:4a:d1:9b:71:46:9a:05:f5:8f:3f:b5:91:6c: f0:db:d7:09:e6:54:63:dc:0b:6c:4a:8b:40:1d:ba:e5:03:39: ca:17:8b:88:2b:c3:7d:66:42:1f:7a:58:c1:13:b1:1c:04:b3: 0e:8c:d1:8b:91:e6:c2:fa:12:2f:cc:16:89:4a:3d:71:df:5e: a9:24:35:7d:1a:83:91:7d:fe:47:51:ba:c6:cd:cc:90:75:9f: 36:f6:15:62:93:23:c5:f1:7e:23:69:14:32:62:0d:ee:c5:68: 79:2f:35:1d:1e:44:fc:68:ad:ab:65:4f:72:62:53:0c:dc:5e: 5d:62:55:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GezwlCio8yjXvyxh2LOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTVhYzNiYmEyNjA1MzhjMzMzZTZjODYwZjIzNjAxMmM5 ODY3NWQwHhcNMjYwMTI1MTcwMDUyWhcNMjYwMTI2MTcwMDUyWjAzMTEwLwYDVQQD EyhlODY1NjNiZDQ2MDVmMjkxYjJjZDc2ZTI0MTNkOGRiYjJhMjhiN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppXXyK8Cb9AC2zOJyRLJq3EXDMcB IwEphKoMrgejrEbyhGxpa9F0mckLnpxcllF5ggbikRebCRSfFUS7164wPHtULyqZ Y702k1SECO7cWj7mBC4gYR2wTk/AWgZ+VgODLE/fxGfxwJzTh+EMdmKnyc6BGRGT E7uTH9V9hxNMY6hhJI+ukLRL3BwF0QIkgFG8eYj0PnVCiPmcHV26zvX1dv5rWz+0 z523eFmqXBmcYdT+i3ilMpsMj8dIUCZqtsBysvKTgqppjMYg+zaHWHUWWYiqiU+t EIO7BJEHyVtFcD9URuEZ50WMIQgYX14vh8BWimf640kGcB7A9ERgP4XacwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhlY71GBfKRss124kE9jbsqKLf1MB8GA1UdIwQY MBaAFF2lrDu6JgU4wzPmyGDyNgEsmGddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFXc083b21CVGpETS1iSVlQSTJBU3lZWjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kYWZlZjgtZTIyNy00MmQzLTgwN2Yt YmU4MTBhMDUwOTQ0LzEvWGFXc083b21CVGpETS1iSVlQSTJBU3lZWjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9kYWZlZjgtZTIyNy00MmQzLTgwN2YtYmU4MTBhMDUwOTQ0 LzEvWGFXc083b21CVGpETS1iSVlQSTJBU3lZWjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWNILa5G V0Vpujs2bv3WKhu8yW7ubZ6HkFVYjxt+6T3uc8aMtcyJMC3oI4sXsBuoqsIAAsOZ G9xtV+UqjT3n/ULn89EGZblLPqOff17HVnTmujU87BKIDJTluZZKSeManm6SIw4U hN/756J/o96wPZVupNVYL86U5h1krkw2nIKLOJZK0ZtxRpoF9Y8/tZFs8NvXCeZU Y9wLbEqLQB265QM5yheLiCvDfWZCH3pYwROxHASzDozRi5HmwvoSL8wWiUo9cd9e qSQ1fRqDkX3+R1G6xs3MkHWfNvYVYpMjxfF+I2kUMmIN7sVoeS81HR5E/Gitq2VP cmJTDNxeXWJVWg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:11 2026 by rpki-client