This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json) Hash identifier: u18r6QhIL9ETffTHHpS+VIYHfTfQ/Vkfy86BoZpMOv8= Subject key identifier: 14:16:94:F7:00:E7:0F:26:A9:39:8D:42:D5:DE:A9:94:05:7B:69:D3 Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c Certificate serial: 019BF91BC5F12972A9A5DBE09F0844CDA617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 07:01:45 +0000 Manifest this update: Mon 26 Jan 2026 07:01:45 +0000 Manifest next update: Tue 27 Jan 2026 07:01:45 +0000 Files and hashes: 1: 7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa (hash: xzYsTyhKWQal1xfqWksT1weyCxFWFp7bUNSd2LqW3lA=) 2: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: Yal0ZBS15hOg/1OcJovP3xY766MVOn3IieJXij1OteU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:c5:f1:29:72:a9:a5:db:e0:9f:08:44:cd:a6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c Validity Not Before: Jan 26 07:01:45 2026 GMT Not After : Jan 27 07:01:45 2026 GMT Subject: CN=141694f700e70f26a9398d42d5dea994057b69d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:0b:ae:77:68:0a:09:f7:85:93:6a:bb:81: 65:ee:2d:13:12:7d:ba:26:9f:64:8a:57:87:29:d1: 89:1d:b7:fd:be:80:aa:8f:04:e6:30:83:82:87:97: cf:a1:e0:03:af:bc:cc:6a:26:a8:ef:f6:62:20:5b: ae:70:29:03:a5:6a:75:2e:4d:33:9e:2e:2d:df:c1: 88:b1:5a:6b:1e:fd:68:3f:f0:38:66:9b:5e:7b:b2: 38:42:22:10:16:7e:4b:19:4a:bf:a0:c0:7e:9f:c2: 89:ce:18:cb:2f:df:66:fa:cb:85:f9:00:88:a3:34: a1:b4:7c:04:3f:b9:fe:d2:62:22:ec:63:8f:d0:fb: 2b:04:55:8a:70:45:85:d1:8d:a8:70:5f:dd:b4:13: c2:80:fc:b9:48:2f:8d:16:a3:4f:22:46:9d:a3:dc: df:c8:90:c7:46:a7:cb:db:89:26:46:84:a9:f0:e2: 4d:2c:f0:e4:58:7b:1c:68:7c:20:ac:94:57:a6:52: fb:53:85:7a:fa:40:2a:71:51:f6:6b:8e:05:61:f7: 76:97:45:5c:0b:4d:8a:c2:a3:e8:7d:ee:b1:dd:1b: 17:c0:70:ef:3c:23:3e:bc:24:7c:e9:05:32:70:42: ed:f9:d5:e7:cc:b6:e1:50:b7:6e:3a:9b:d4:f8:23: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:16:94:F7:00:E7:0F:26:A9:39:8D:42:D5:DE:A9:94:05:7B:69:D3 X509v3 Authority Key Identifier: keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:22:a2:18:ca:00:1b:49:1c:2e:45:92:d5:3f:ef:00:8a: b3:fe:e5:a9:30:ef:a9:66:f8:6e:98:1c:8a:09:41:65:fd:5f: 8b:d2:c3:e1:55:5b:21:05:ec:a5:86:36:7f:97:fc:e7:de:f1: b1:b9:6f:05:ba:f5:e1:5c:6a:4a:75:76:4b:f6:4d:3e:af:3c: 4c:eb:f8:02:35:8d:1b:6d:44:3f:63:e2:2c:eb:71:33:d0:0d: 05:22:0e:08:1e:b2:8c:44:e2:c9:dd:a5:54:1e:c4:69:5e:bb: d2:5c:0d:de:50:bd:55:ca:2f:cc:39:3f:05:d3:88:03:7f:5e: f1:5f:4a:6f:09:0d:5c:0e:f5:d2:39:73:93:27:90:c2:4c:c3: 22:2f:eb:5a:a6:5c:6f:41:d7:c5:30:f0:06:79:45:00:20:29: fd:8b:40:39:97:e9:fc:25:97:fe:82:5e:6b:93:06:03:f1:b7: d0:4d:7a:50:98:36:37:b0:9b:ca:0c:ff:ba:66:4b:01:af:51: 4b:90:b2:3b:45:2b:5d:9d:8d:d0:78:47:1f:e8:98:5d:cf:5f: ff:95:38:21:27:d0:6c:8d:1c:d0:b4:3a:97:e9:4c:45:a4:d1: a8:03:77:9a:3d:18:ab:13:7f:34:e5:88:5a:5e:12:5a:81:d1: a4:20:12:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G8XxKXKppdvgnwhEzaYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2E2MmYxMzQ3YzE3NDJlNWI2ZTM3NDAyNDRkMzk4YjUz YTUxM2MwHhcNMjYwMTI2MDcwMTQ1WhcNMjYwMTI3MDcwMTQ1WjAzMTEwLwYDVQQD EygxNDE2OTRmNzAwZTcwZjI2YTkzOThkNDJkNWRlYTk5NDA1N2I2OWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmELrndoCgn3hZNqu4Fl7i0TEn26 Jp9kileHKdGJHbf9voCqjwTmMIOCh5fPoeADr7zMaiao7/ZiIFuucCkDpWp1Lk0z ni4t38GIsVprHv1oP/A4Zptee7I4QiIQFn5LGUq/oMB+n8KJzhjLL99m+suF+QCI ozShtHwEP7n+0mIi7GOP0PsrBFWKcEWF0Y2ocF/dtBPCgPy5SC+NFqNPIkado9zf yJDHRqfL24kmRoSp8OJNLPDkWHscaHwgrJRXplL7U4V6+kAqcVH2a44FYfd2l0Vc C02KwqPofe6x3RsXwHDvPCM+vCR86QUycELt+dXnzLbhULduOpvU+CNKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQWlPcA5w8mqTmNQtXeqZQFe2nTMB8GA1UdIwQY MBaAFF46YvE0fBdC5bbjdAJE05i1OlE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWIt MDI1NTQwYWZmMTVkLzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWItMDI1NTQwYWZmMTVk LzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiciohjK ABtJHC5FktU/7wCKs/7lqTDvqWb4bpgciglBZf1fi9LD4VVbIQXspYY2f5f8597x sblvBbr14VxqSnV2S/ZNPq88TOv4AjWNG21EP2PiLOtxM9ANBSIOCB6yjETiyd2l VB7EaV670lwN3lC9VcovzDk/BdOIA39e8V9KbwkNXA710jlzkyeQwkzDIi/rWqZc b0HXxTDwBnlFACAp/YtAOZfp/CWX/oJea5MGA/G30E16UJg2N7Cbygz/umZLAa9R S5CyO0UrXZ2N0HhHH+iYXc9f/5U4ISfQbI0c0LQ6l+lMRaTRqAN3mj0YqxN/NOWI Wl4SWoHRpCASgA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:43 2026 by rpki-client