This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json) Hash identifier: 7eExc5l/ZdgSNpGsHvkpt3pm4jrHCr325LCnrm4AI2Q= Subject key identifier: F0:5F:26:40:53:E2:AB:6A:3D:FA:66:1D:EC:2E:3A:E7:02:7F:03:0C Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1 Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1 Certificate serial: 019BF5073ECE798159A3BB35BCC81A993A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft Manifest number: 088B Signing time: Sun 25 Jan 2026 12:00:51 +0000 Manifest this update: Sun 25 Jan 2026 12:00:51 +0000 Manifest next update: Mon 26 Jan 2026 12:00:51 +0000 Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=) 2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=) 3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: SvS+I9dA5Cafj7MfVcVlyE/Z5YwtCXof96d99mSZ6LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:3e:ce:79:81:59:a3:bb:35:bc:c8:1a:99:3a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1 Validity Not Before: Jan 25 12:00:51 2026 GMT Not After : Jan 26 12:00:51 2026 GMT Subject: CN=f05f264053e2ab6a3dfa661dec2e3ae7027f030c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:87:d2:fe:32:13:eb:76:e4:54:ae:75:e7: 89:55:26:c7:f7:6b:c6:50:8f:0a:e6:ec:43:ec:10: e5:d3:ce:78:73:d1:c2:a4:4b:4f:5c:e9:24:5d:3c: 78:27:87:0f:25:46:a7:b7:66:87:3b:86:2d:5e:49: 92:55:a0:56:72:75:c1:38:d0:cf:c9:a8:d8:79:c1: 06:4c:8c:74:99:76:2c:07:51:c5:48:4d:2a:57:87: 8e:94:de:ee:f2:43:70:b2:42:ea:2b:f5:a7:d3:de: 26:6e:fc:49:7b:40:c6:41:02:0c:d8:7b:e0:d8:0a: 58:48:39:ec:2b:66:b8:65:c9:15:e4:a0:14:35:63: 0b:d2:9e:6e:8f:4c:73:0e:95:d6:06:bc:5b:b8:00: a2:ee:2a:36:15:97:b3:05:6b:a3:28:52:a4:0b:4d: 5b:b3:ed:8c:56:fb:15:97:bf:99:c7:48:ee:ae:03: 22:10:98:ec:72:a1:5f:41:ac:6e:32:d4:4f:65:cf: b3:fc:fe:fd:d0:81:f6:48:22:df:a6:ee:ea:ca:5c: bd:2e:d8:30:85:09:46:05:15:a1:18:cb:c7:3b:28: 5d:13:a8:3f:c4:52:6d:0b:b0:fb:32:0a:6f:87:7e: f8:8f:2c:db:13:8b:f0:0f:e0:ab:6a:cc:ed:89:4e: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:26:40:53:E2:AB:6A:3D:FA:66:1D:EC:2E:3A:E7:02:7F:03:0C X509v3 Authority Key Identifier: keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:87:d0:a2:ab:e5:ea:2d:7e:76:e0:70:c5:3f:b5:64:91:62: ec:1d:9d:4c:25:a8:bc:fa:23:82:b6:95:d1:e8:85:50:cf:bb: 5f:bc:b4:9b:aa:c5:85:bd:82:3f:8e:94:ce:c6:77:3b:59:b3: e0:28:42:24:51:3d:29:e2:53:92:c5:8e:2d:71:1d:c3:b6:84: 0a:7e:bd:11:c8:6b:b8:4f:de:49:d9:d3:55:36:70:a4:62:60: e7:b4:8a:f6:2f:b2:f6:e9:4b:73:c4:7c:6b:d9:e7:82:f1:cb: 90:42:7e:e3:5f:ae:8c:ed:cf:06:6b:73:54:9f:5d:49:ce:eb: 7c:69:ee:fc:8e:5f:89:4a:70:55:e2:fa:67:c5:77:ee:d1:c7: b6:00:cb:9c:80:2e:da:60:c5:78:2c:ff:8f:04:fc:5c:7a:01: dd:9a:e6:90:78:2e:17:cf:b9:5f:44:99:f1:87:39:56:3d:a1: 2a:a4:5a:55:df:2c:01:1c:4b:35:08:a9:be:d9:e0:0e:82:64: fd:cb:d2:96:09:22:ce:9c:00:72:c8:dc:54:45:33:48:e3:79: 3a:e1:6e:6b:56:4d:41:c9:1b:06:3c:63:ac:6a:01:48:bb:9e: b2:86:24:3a:c0:18:43:1e:af:90:2a:64:ac:64:5b:ec:6a:46: e0:05:fc:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Bz7OeYFZo7s1vMgamTpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmE1MWMwNzE0ODg0M2Q0MDA4MDViNDAzMzVlNzJkMzI0 MjY1ZjEwHhcNMjYwMTI1MTIwMDUxWhcNMjYwMTI2MTIwMDUxWjAzMTEwLwYDVQQD EyhmMDVmMjY0MDUzZTJhYjZhM2RmYTY2MWRlYzJlM2FlNzAyN2YwMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E+H0v4yE+t25FSudeeJVSbH92vG UI8K5uxD7BDl0854c9HCpEtPXOkkXTx4J4cPJUant2aHO4YtXkmSVaBWcnXBONDP yajYecEGTIx0mXYsB1HFSE0qV4eOlN7u8kNwskLqK/Wn094mbvxJe0DGQQIM2Hvg 2ApYSDnsK2a4ZckV5KAUNWML0p5uj0xzDpXWBrxbuACi7io2FZezBWujKFKkC01b s+2MVvsVl7+Zx0jurgMiEJjscqFfQaxuMtRPZc+z/P790IH2SCLfpu7qyly9Ltgw hQlGBRWhGMvHOyhdE6g/xFJtC7D7Mgpvh374jyzbE4vwD+CrasztiU5++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBfJkBT4qtqPfpmHewuOucCfwMMMB8GA1UdIwQY MBaAFMW6UcBxSIQ9QAgFtAM15y0yQmXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEt OWZmNWMxYTNiMGUwLzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEtOWZmNWMxYTNiMGUw LzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIfQoqvl 6i1+duBwxT+1ZJFi7B2dTCWovPojgraV0eiFUM+7X7y0m6rFhb2CP46UzsZ3O1mz 4ChCJFE9KeJTksWOLXEdw7aECn69EchruE/eSdnTVTZwpGJg57SK9i+y9ulLc8R8 a9nngvHLkEJ+41+ujO3PBmtzVJ9dSc7rfGnu/I5fiUpwVeL6Z8V37tHHtgDLnIAu 2mDFeCz/jwT8XHoB3ZrmkHguF8+5X0SZ8Yc5Vj2hKqRaVd8sARxLNQipvtngDoJk /cvSlgkizpwAcsjcVEUzSON5OuFua1ZNQckbBjxjrGoBSLuesoYkOsAYQx6vkCpk rGRb7GpG4AX8ZA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:04 2026 by rpki-client