This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: buSGCkdrucS3KruShXLjsfZUw+pObbceRVtpygYWOdI= Subject key identifier: E7:D6:27:13:A3:D9:14:E1:61:40:55:47:71:80:9E:40:95:25:47:AA Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019BF6512E6B18389FE4EE3267481714CF0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 1060 Signing time: Sun 25 Jan 2026 18:01:13 +0000 Manifest this update: Sun 25 Jan 2026 18:01:13 +0000 Manifest next update: Mon 26 Jan 2026 18:01:13 +0000 Files and hashes: 1: Dz-QfD9C-tgYZF8wEi6pv8-xE5k.roa (hash: BmhYmphbDyjKtKW2Lffb0KX2rP+E2lhX6e9V9e5bRCk=) 2: TfFQp15XKEs_AkFR6cJIjt7nXPU.roa (hash: szEnO8wBWZqMkhtHfLRZ7TOGFtVYTEMGAjRfOIzOLf8=) 3: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: 7lrxdvJ11hReI+XaiQPwG57VZnuisEpZ1V16Kz/VcH4=) 4: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 5: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 6: rrv6g7gCWvIScNAmNVO-0FMccls.roa (hash: oczaTnJ9vMlyEQX4SOk4rRdeUsfERY6lZY183Cg4/Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:2e:6b:18:38:9f:e4:ee:32:67:48:17:14:cf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Jan 25 18:01:13 2026 GMT Not After : Jan 26 18:01:13 2026 GMT Subject: CN=e7d62713a3d914e16140554771809e40952547aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:69:35:2c:e9:fe:18:a1:44:5c:f3:a9:eb: 7e:d5:87:30:2c:ae:7d:37:8b:1a:d7:b1:d6:7a:06: aa:51:33:65:10:52:7d:50:d7:36:98:0d:36:49:52: 96:14:48:0b:8e:97:ab:27:51:33:de:ec:73:e5:0f: ca:8b:2e:26:b7:60:27:9a:6b:e5:67:56:3b:2b:b8: 1c:18:c9:58:f2:e7:5e:03:be:ad:16:c7:92:6b:4b: c9:9d:24:ef:03:1b:48:6c:9b:3a:86:18:05:c5:d5: 95:fa:58:55:d3:a6:69:3f:48:d1:7a:3e:01:67:1c: 4b:4c:17:12:63:4b:4e:b7:a0:df:62:29:a1:c8:32: 25:a7:e5:84:1d:75:3a:36:83:72:98:fb:ee:c2:a8: e3:bb:dc:5a:eb:d2:02:cc:36:d2:5a:b1:21:31:9e: ae:0c:2b:87:27:9c:ef:66:c7:a2:60:43:89:d3:a2: 9d:22:2b:3b:71:5f:63:0a:96:d5:98:18:d2:c4:00: e7:be:0c:d5:e6:90:82:39:40:76:0a:63:cf:e7:d7: 81:5c:75:34:be:45:46:2d:6d:0a:44:a2:33:88:55: 74:de:94:c4:24:11:4c:55:e8:33:80:c0:6a:f9:a6: 0d:1a:92:52:3d:16:d2:8c:42:1f:65:98:62:5d:c7: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D6:27:13:A3:D9:14:E1:61:40:55:47:71:80:9E:40:95:25:47:AA X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f7:f0:f0:b4:68:ad:5e:dd:9e:0f:3a:ad:b6:d3:3d:20:94: 8d:24:7a:fc:86:37:24:d3:c6:9e:b4:5b:59:ef:21:84:eb:a5: 25:df:5a:58:31:cd:01:80:2c:dc:53:40:d1:50:c7:2a:08:47: 70:61:07:cd:ea:8e:2c:b4:ab:45:ff:2a:17:9a:04:7e:46:1c: 59:6f:33:ae:f4:a8:28:db:a6:aa:d0:92:db:cb:35:f2:d2:e7: c4:1b:94:7b:9c:71:a5:ac:13:66:3e:e9:b2:e1:2c:7a:ba:8d: 49:78:55:98:f0:3c:fd:b1:8a:83:63:8c:ae:1a:9b:0a:09:17: 24:08:80:4e:06:ba:a2:d4:1c:7a:97:72:30:09:a1:a1:3d:d9: ad:dd:5a:8a:2d:ae:ca:a9:d6:06:fc:3e:7e:ab:2e:21:9e:43: 2a:b2:cf:91:17:fd:25:5d:c1:3b:6f:b4:5c:26:cc:ef:0c:d4: 43:23:50:5f:94:8d:40:07:f7:be:f9:51:a7:c4:e5:85:cd:75: 54:f2:bd:f0:db:94:81:92:10:51:4d:c3:d0:c1:ca:a4:e2:40: ca:98:15:19:04:d7:0a:d2:8e:4f:c8:1e:ab:7a:0f:d7:ad:42: bb:33:12:c1:83:28:1a:72:2c:dd:b4:61:5a:9b:ec:8c:68:d3: 1a:c1:0a:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2US5rGDif5O4yZ0gXFM8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwMTI1MTgwMTEzWhcNMjYwMTI2MTgwMTEzWjAzMTEwLwYDVQQD EyhlN2Q2MjcxM2EzZDkxNGUxNjE0MDU1NDc3MTgwOWU0MDk1MjU0N2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCNpNSzp/hihRFzzqet+1YcwLK59 N4sa17HWegaqUTNlEFJ9UNc2mA02SVKWFEgLjperJ1Ez3uxz5Q/Kiy4mt2Anmmvl Z1Y7K7gcGMlY8udeA76tFseSa0vJnSTvAxtIbJs6hhgFxdWV+lhV06ZpP0jRej4B ZxxLTBcSY0tOt6DfYimhyDIlp+WEHXU6NoNymPvuwqjju9xa69ICzDbSWrEhMZ6u DCuHJ5zvZseiYEOJ06KdIis7cV9jCpbVmBjSxADnvgzV5pCCOUB2CmPP59eBXHU0 vkVGLW0KRKIziFV03pTEJBFMVegzgMBq+aYNGpJSPRbSjEIfZZhiXcc1GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfWJxOj2RThYUBVR3GAnkCVJUeqMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPfw8LRo rV7dng86rbbTPSCUjSR6/IY3JNPGnrRbWe8hhOulJd9aWDHNAYAs3FNA0VDHKghH cGEHzeqOLLSrRf8qF5oEfkYcWW8zrvSoKNumqtCS28s18tLnxBuUe5xxpawTZj7p suEserqNSXhVmPA8/bGKg2OMrhqbCgkXJAiATga6otQcepdyMAmhoT3Zrd1aii2u yqnWBvw+fqsuIZ5DKrLPkRf9JV3BO2+0XCbM7wzUQyNQX5SNQAf3vvlRp8Tlhc11 VPK98NuUgZIQUU3D0MHKpOJAypgVGQTXCtKOT8geq3oP161CuzMSwYMoGnIs3bRh WpvsjGjTGsEKDw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:56 2026 by rpki-client