This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json) Hash identifier: RMzOGvnBEI3FTJzLPV2UCpPi4urr0Wm3yhbHn6tJ7bQ= Subject key identifier: DD:AB:1D:6E:D4:DB:0D:40:7C:14:4E:37:2A:21:FC:1C:85:21:8C:F3 Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21 Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21 Certificate serial: 019BF7636C35AEA5220FC96CD934581719FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft Manifest number: 140D Signing time: Sun 25 Jan 2026 23:00:46 +0000 Manifest this update: Sun 25 Jan 2026 23:00:46 +0000 Manifest next update: Mon 26 Jan 2026 23:00:46 +0000 Files and hashes: 1: M-ZAizH3Jyc9LZTBrwMFMfJ5Pjs.roa (hash: ewZ193jdLfT/L5MLXvV3UajNvvWjflDdyAMOaO98puY=) 2: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: uWUw9A6KZE07JL0XL/vFrUrQUGUHe+2S1DvMMfHUwAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:6c:35:ae:a5:22:0f:c9:6c:d9:34:58:17:19:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21 Validity Not Before: Jan 25 23:00:46 2026 GMT Not After : Jan 26 23:00:46 2026 GMT Subject: CN=ddab1d6ed4db0d407c144e372a21fc1c85218cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a5:84:dc:cd:94:36:11:41:2e:d9:75:35:7a: 00:c1:9c:27:33:83:f5:0d:99:81:3c:f6:b7:4a:5e: 24:3f:23:0c:57:c2:6e:53:20:24:64:60:a2:37:41: a8:ec:42:72:86:eb:40:c4:f3:98:e0:01:b9:83:2a: ae:15:8a:e9:61:6b:8c:36:82:c8:59:4a:8a:3e:38: 13:4f:de:7a:5f:f7:a5:ae:ee:b3:04:2b:37:bb:9b: 0f:a9:1f:18:dd:f3:a7:96:ea:1f:4f:c2:07:72:23: 21:93:6a:bf:cb:d3:a4:4a:32:d8:6d:65:8a:a3:fb: 1a:ef:29:03:3d:19:49:0f:e4:32:5a:68:78:38:9e: c9:57:d5:9d:81:2b:40:de:4c:ab:a7:6e:1e:f6:a0: f7:39:eb:66:94:a1:27:7c:1c:c3:d7:eb:d8:2b:de: bc:8d:00:38:53:02:57:3c:9e:97:06:7d:88:db:22: 50:8b:d9:5c:d7:c8:c1:64:3f:2c:45:80:d0:6e:98: aa:e8:19:34:a8:68:00:e1:50:b2:c3:f4:52:1f:ed: e3:35:c8:cd:d9:b9:0c:8f:fc:eb:4e:2b:3d:f5:aa: 0a:c0:a4:77:c7:7a:ab:6e:6e:26:fa:1a:f4:e7:6e: 75:f7:f9:0f:20:73:0a:92:f7:3b:5b:79:b8:83:ce: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AB:1D:6E:D4:DB:0D:40:7C:14:4E:37:2A:21:FC:1C:85:21:8C:F3 X509v3 Authority Key Identifier: keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e9:16:bb:28:e8:7b:46:1f:97:a4:e3:c6:45:50:3b:f5:ab: 75:8c:ae:ec:2a:b1:99:0f:0b:46:14:ef:59:02:1c:50:59:05: 54:f3:4f:3b:7c:c3:1a:52:ff:80:a2:26:f1:87:b3:d1:af:ea: c9:e5:db:99:c5:4e:1c:2f:e6:47:eb:d9:2a:cc:20:d3:85:eb: 06:25:f9:80:3a:12:f0:1c:d5:8d:e6:a7:d4:f4:01:5c:48:95: 07:45:e3:c3:b5:c3:a4:59:00:ce:e4:c6:6c:3f:1a:1c:0e:eb: 8b:d4:65:a1:09:0c:df:4d:fa:71:41:ca:34:fd:79:be:2e:a0: 09:b2:3c:a4:d2:d4:c6:bf:b2:06:3d:b3:31:81:c4:af:42:27: 41:92:f7:fd:3e:c5:c1:a1:ea:a1:05:39:68:de:58:f6:ea:eb: d4:0e:2a:8a:21:78:c9:cd:f3:4c:13:bd:4a:1a:9e:a3:8e:de: 3f:08:27:36:cd:0a:0a:3c:1f:d2:6a:33:f1:8f:c3:dd:05:ed: f2:25:2c:4b:5e:91:e9:e6:4b:a2:fd:36:a4:28:23:d6:2c:28: 57:5e:9f:e9:5b:44:4e:66:00:d2:41:57:c3:50:2f:97:3b:58: a2:be:b6:c6:29:02:f3:12:b4:33:2e:98:46:b8:60:bf:2d:92: a3:0b:84:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2w1rqUiD8ls2TRYFxn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkY2ExN2ZjOGQzOWUwNDNlYTc2OWFmMjhiNTQ4YzlkMzk4 MzFkMjEwHhcNMjYwMTI1MjMwMDQ2WhcNMjYwMTI2MjMwMDQ2WjAzMTEwLwYDVQQD EyhkZGFiMWQ2ZWQ0ZGIwZDQwN2MxNDRlMzcyYTIxZmMxYzg1MjE4Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aWE3M2UNhFBLtl1NXoAwZwnM4P1 DZmBPPa3Sl4kPyMMV8JuUyAkZGCiN0Go7EJyhutAxPOY4AG5gyquFYrpYWuMNoLI WUqKPjgTT956X/elru6zBCs3u5sPqR8Y3fOnluofT8IHciMhk2q/y9OkSjLYbWWK o/sa7ykDPRlJD+QyWmh4OJ7JV9WdgStA3kyrp24e9qD3OetmlKEnfBzD1+vYK968 jQA4UwJXPJ6XBn2I2yJQi9lc18jBZD8sRYDQbpiq6Bk0qGgA4VCyw/RSH+3jNcjN 2bkMj/zrTis99aoKwKR3x3qrbm4m+hr052519/kPIHMKkvc7W3m4g87x4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2rHW7U2w1AfBRONyoh/ByFIYzzMB8GA1UdIwQY MBaAFF3KF/yNOeBD6naa8otUjJ05gx0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgt NjU2ZGJjMmYyNDM2LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgtNjU2ZGJjMmYyNDM2 LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXukWuyjo e0Yfl6TjxkVQO/WrdYyu7CqxmQ8LRhTvWQIcUFkFVPNPO3zDGlL/gKIm8Yez0a/q yeXbmcVOHC/mR+vZKswg04XrBiX5gDoS8BzVjean1PQBXEiVB0Xjw7XDpFkAzuTG bD8aHA7ri9RloQkM3036cUHKNP15vi6gCbI8pNLUxr+yBj2zMYHEr0InQZL3/T7F waHqoQU5aN5Y9urr1A4qiiF4yc3zTBO9Shqeo47ePwgnNs0KCjwf0moz8Y/D3QXt 8iUsS16R6eZLov02pCgj1iwoV16f6VtETmYA0kFXw1AvlztYor62xikC8xK0My6Y Rrhgvy2SowuEgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:51 2026 by rpki-client