This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json) Hash identifier: R9hFshrtjYjAsZmdcw+QKtkzMyawgDB//i5j8ca0mJM= Subject key identifier: 5B:F9:AA:EA:6A:F0:02:78:20:4E:5A:00:D2:2F:63:C4:CD:85:DE:7D Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29 Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729 Certificate serial: 019BF763614AD6D49A8D3587B847B5C3B57E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft Manifest number: 1050 Signing time: Sun 25 Jan 2026 23:00:43 +0000 Manifest this update: Sun 25 Jan 2026 23:00:43 +0000 Manifest next update: Mon 26 Jan 2026 23:00:43 +0000 Files and hashes: 1: 6MOGH8oGvh6IYApLtSaZowTuqtk.roa (hash: HJrHUPLTq5etSutfssfFpw4hmCz6YgNXH+NQPFP+7uM=) 2: U2uOljUf-48wSNUQgF-2wsauE-g.roa (hash: 2YVcDn6Ax9cXhQHx8fyaxNd0XJvsq3/OJmSqm70WvIg=) 3: dtXdklEBCkjgbKoquL4DVM7xMqU.roa (hash: Drj4tg7W2VV/6vKkt0y7Sp3+nXq82WjkyEwAPPM25uA=) 4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: P3tM2XGvShbc7z7gybe68yxZDjo8UDj5T7VsN/QUTAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:61:4a:d6:d4:9a:8d:35:87:b8:47:b5:c3:b5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729 Validity Not Before: Jan 25 23:00:43 2026 GMT Not After : Jan 26 23:00:43 2026 GMT Subject: CN=5bf9aaea6af00278204e5a00d22f63c4cd85de7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:b7:08:5b:ec:d3:31:87:25:a4:ca:7f:85: 52:e9:30:be:97:35:40:4b:43:b1:cf:9d:e7:ac:4c: dc:0e:6b:c8:b8:d3:15:b0:88:26:38:56:37:63:f2: 72:93:d0:44:ae:89:3f:23:50:2b:e8:2b:95:da:33: 0d:18:c4:93:a4:2a:89:77:7f:ff:23:82:d1:58:14: 4f:27:46:8f:80:fa:31:ba:c6:d7:02:c3:04:65:27: 19:9b:33:b1:3e:2e:ce:f6:0a:db:57:09:4c:0f:0b: 75:29:fb:30:d7:22:81:61:8a:87:6b:95:b9:e0:4d: 39:18:e4:7e:94:61:fd:cb:43:fd:19:13:3b:f2:5a: 40:9b:b6:f3:77:42:5e:12:03:4b:95:c3:f9:6e:d6: a5:c6:65:32:ca:68:ca:fb:76:a9:e5:42:c0:e7:7b: 1f:6f:9e:fc:e1:20:23:f6:33:d8:cd:9c:4e:a1:70: 07:6d:ec:a8:46:26:9a:29:26:81:4b:06:7d:4b:dd: 98:f0:88:86:51:c3:2c:03:be:da:3f:8c:d8:9f:3c: 5b:fd:b2:77:3b:85:29:e4:78:3f:85:03:5e:06:dd: 0f:27:5c:2d:2d:b2:8e:73:ae:16:67:45:47:17:c8: a9:d5:98:1f:8e:da:3c:3e:82:38:88:34:05:1f:a4: e6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:AA:EA:6A:F0:02:78:20:4E:5A:00:D2:2F:63:C4:CD:85:DE:7D X509v3 Authority Key Identifier: keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1d:21:d8:7d:dc:e6:d9:1c:c6:1b:40:c8:30:8e:1a:cf:d8: 0e:10:5e:bb:25:77:2d:29:87:23:87:3e:45:0c:46:7a:d5:22: e9:17:32:05:1c:2d:7a:b2:fa:d4:a4:d2:d8:bf:2b:df:69:46: 71:af:08:c7:08:88:d8:ba:27:63:7a:c2:7b:dc:4c:bb:d1:12: 26:fb:91:5c:3f:48:9a:7d:a7:07:55:b2:f5:d3:5d:21:60:bf: 24:f8:01:22:58:fe:07:db:16:7a:ca:1d:cb:79:7b:08:30:f5: 4c:83:e9:3b:5c:f2:24:cc:24:0b:88:6e:fc:8b:0a:2d:84:dd: b0:9e:dd:02:b6:39:d6:4f:b2:e0:ac:32:cb:c8:5f:68:99:64: 59:72:64:d8:d2:f4:67:e9:11:f3:26:69:a1:35:c2:be:ac:03: bf:41:76:80:71:63:e7:4f:e2:37:7c:b7:c8:f0:35:ff:59:31: 35:56:42:01:7e:26:5c:4b:da:f6:4d:79:34:a3:77:d8:a5:1a: a6:e3:37:99:27:20:d6:51:1b:7d:d1:57:37:dc:e3:35:49:7b: 33:9b:17:9a:46:dd:89:00:90:0e:1e:fa:9a:90:3c:a7:fa:b4: 40:2c:3b:8c:e5:a8:91:c7:51:5c:d3:c3:1f:16:9f:81:3c:21: 07:6a:56:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2FK1tSajTWHuEe1w7V+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MmE1MjRmOWIxYjM4MDFkYmQ3Yzg5YTE2MGFlYzA3NmI1 N2U3MjkwHhcNMjYwMTI1MjMwMDQzWhcNMjYwMTI2MjMwMDQzWjAzMTEwLwYDVQQD Eyg1YmY5YWFlYTZhZjAwMjc4MjA0ZTVhMDBkMjJmNjNjNGNkODVkZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g23CFvs0zGHJaTKf4VS6TC+lzVA S0Oxz53nrEzcDmvIuNMVsIgmOFY3Y/Jyk9BErok/I1Ar6CuV2jMNGMSTpCqJd3// I4LRWBRPJ0aPgPoxusbXAsMEZScZmzOxPi7O9grbVwlMDwt1Kfsw1yKBYYqHa5W5 4E05GOR+lGH9y0P9GRM78lpAm7bzd0JeEgNLlcP5btalxmUyymjK+3ap5ULA53sf b5784SAj9jPYzZxOoXAHbeyoRiaaKSaBSwZ9S92Y8IiGUcMsA77aP4zYnzxb/bJ3 O4Up5Hg/hQNeBt0PJ1wtLbKOc64WZ0VHF8ip1Zgfjto8PoI4iDQFH6TmAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv5qupq8AJ4IE5aANIvY8TNhd59MB8GA1UdIwQY MBaAFMcqUk+bGzgB29fImhYK7AdrV+cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYt ZDdhNjg0YTU3YjE5LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYtZDdhNjg0YTU3YjE5 LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvR0h2H3c 5tkcxhtAyDCOGs/YDhBeuyV3LSmHI4c+RQxGetUi6RcyBRwterL61KTS2L8r32lG ca8IxwiI2LonY3rCe9xMu9ESJvuRXD9Imn2nB1Wy9dNdIWC/JPgBIlj+B9sWesod y3l7CDD1TIPpO1zyJMwkC4hu/IsKLYTdsJ7dArY51k+y4Kwyy8hfaJlkWXJk2NL0 Z+kR8yZpoTXCvqwDv0F2gHFj50/iN3y3yPA1/1kxNVZCAX4mXEva9k15NKN32KUa puM3mScg1lEbfdFXN9zjNUl7M5sXmkbdiQCQDh76mpA8p/q0QCw7jOWokcdRXNPD HxafgTwhB2pWGA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:09 2026 by rpki-client