This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json) Hash identifier: T65fWTq54FckcJE6kv6UYBUGKXpAlp5NLgssyo8UolU= Subject key identifier: E5:90:AE:3A:A0:38:25:DE:DD:45:BB:C9:CC:93:3D:09:F8:05:F7:2F Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0 Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0 Certificate serial: 019BF875EB6C7BA503E741790A1EB1135EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 04:00:36 +0000 Manifest this update: Mon 26 Jan 2026 04:00:36 +0000 Manifest next update: Tue 27 Jan 2026 04:00:36 +0000 Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: luaZgv0UpJAp+eZ60j6GQ10nkaPiuqjbppT5Lq4woNk=) 2: aeEP89HKT7e7KYklfEV6GwzzRq4.roa (hash: +iLAVwj6kbQSZH9/6AWgoWRz5/OYd1yxCHRY7Br0+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:eb:6c:7b:a5:03:e7:41:79:0a:1e:b1:13:5e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0 Validity Not Before: Jan 26 04:00:36 2026 GMT Not After : Jan 27 04:00:36 2026 GMT Subject: CN=e590ae3aa03825dedd45bbc9cc933d09f805f72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:2d:74:f0:b8:f9:06:12:1b:cd:f2:5f:57: 69:68:68:e0:47:e4:2a:ed:5b:ad:97:94:23:a4:4e: 01:5f:91:09:89:f0:35:16:20:9f:e1:b3:e1:da:f4: 0c:ad:4b:47:eb:a5:3e:9c:bd:ca:00:7f:e6:82:92: 3c:a4:e2:0c:dd:3b:0e:8a:c7:a8:4a:d0:39:d5:08: 40:8e:cd:a8:6f:a9:eb:df:96:f5:74:b4:8f:46:ce: 01:cd:e8:ca:25:33:04:64:12:fa:8d:05:0d:54:a6: df:21:9c:11:25:f7:68:d8:bd:12:36:28:eb:2d:09: 3b:93:c7:e6:84:e9:af:4f:3d:c8:d7:aa:15:e9:35: a4:33:4b:b8:06:76:e6:d9:9b:ae:e4:38:b9:fa:a0: a2:47:d7:00:a6:69:27:f3:2f:33:7b:08:8d:67:a7: d5:c0:d4:bf:d4:3e:be:70:cc:0b:99:be:6b:c1:50: 48:13:6d:8f:b3:d9:35:4d:ed:7a:be:d4:a2:fb:4d: 34:a4:30:37:8e:10:22:5b:9e:a0:ae:5b:0b:89:76: fa:63:3c:ad:f2:cc:0f:b9:75:76:1e:aa:f9:f0:20: 0d:d7:a6:57:d1:40:e4:65:e7:1b:fa:4b:73:f4:23: bf:26:ac:33:92:67:2e:3b:df:10:21:af:e2:af:29: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:AE:3A:A0:38:25:DE:DD:45:BB:C9:CC:93:3D:09:F8:05:F7:2F X509v3 Authority Key Identifier: keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:56:a3:c0:9d:43:da:af:76:2a:bb:13:d2:2c:20:c8:1b:60: 53:94:b8:25:a6:3a:d5:04:63:b0:18:bf:f1:c8:64:fe:6c:eb: 57:47:72:df:59:bf:f7:58:bf:b0:01:9a:82:b2:04:10:d0:82: 38:6e:af:ee:7e:47:29:44:41:a0:d4:a5:3a:ab:3c:c5:33:c1: 2f:82:4e:fd:ef:43:7f:26:59:f9:30:23:32:7e:8f:c7:67:4a: dc:5e:a8:66:73:17:44:14:86:32:15:30:b3:c6:07:71:7b:e6: 8e:78:aa:24:6b:8e:8d:2d:56:c4:82:9b:4d:44:30:42:a4:b6: d0:2c:72:8d:8f:0a:9b:85:89:16:cc:2e:17:c4:ed:cb:dd:03: b4:97:82:41:e0:9e:5d:d4:fa:79:bb:22:c4:d4:53:9e:4f:02: 9d:7c:b9:1c:46:0a:60:14:53:dd:30:b5:12:e1:db:3f:39:1d: 5a:6f:1e:b8:40:a9:b8:b6:59:95:02:d1:c1:93:10:fa:29:dc: bb:a9:f4:dc:6a:3c:f6:48:78:6e:35:fa:08:2c:ce:4b:79:84: 84:b3:9b:3d:4c:dd:31:c0:1e:12:df:84:d2:14:51:24:63:3d: f1:25:08:36:f6:0d:85:9f:9f:12:76:c8:3d:5c:32:41:ad:61: a2:63:a2:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4detse6UD50F5Ch6xE169MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMjljYmEyZGFjZjBlZjlmYTIyMDkwMDMyYmIxNTlhMTA5 MTQwZjAwHhcNMjYwMTI2MDQwMDM2WhcNMjYwMTI3MDQwMDM2WjAzMTEwLwYDVQQD EyhlNTkwYWUzYWEwMzgyNWRlZGQ0NWJiYzljYzkzM2QwOWY4MDVmNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31gtdPC4+QYSG83yX1dpaGjgR+Qq 7Vutl5QjpE4BX5EJifA1FiCf4bPh2vQMrUtH66U+nL3KAH/mgpI8pOIM3TsOiseo StA51QhAjs2ob6nr35b1dLSPRs4BzejKJTMEZBL6jQUNVKbfIZwRJfdo2L0SNijr LQk7k8fmhOmvTz3I16oV6TWkM0u4Bnbm2Zuu5Di5+qCiR9cApmkn8y8zewiNZ6fV wNS/1D6+cMwLmb5rwVBIE22Ps9k1Te16vtSi+000pDA3jhAiW56grlsLiXb6Yzyt 8swPuXV2Hqr58CAN16ZX0UDkZecb+ktz9CO/JqwzkmcuO98QIa/irylRDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWQrjqgOCXe3UW7ycyTPQn4BfcvMB8GA1UdIwQY MBaAFFwpy6Lazw75+iIJADK7FZoQkUDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYt NmQxZmE0MmQwYjgwLzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYtNmQxZmE0MmQwYjgw LzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwFajwJ1D 2q92KrsT0iwgyBtgU5S4JaY61QRjsBi/8chk/mzrV0dy31m/91i/sAGagrIEENCC OG6v7n5HKURBoNSlOqs8xTPBL4JO/e9DfyZZ+TAjMn6Px2dK3F6oZnMXRBSGMhUw s8YHcXvmjniqJGuOjS1WxIKbTUQwQqS20CxyjY8Km4WJFswuF8Tty90DtJeCQeCe XdT6ebsixNRTnk8CnXy5HEYKYBRT3TC1EuHbPzkdWm8euECpuLZZlQLRwZMQ+inc u6n03Go89kh4bjX6CCzOS3mEhLObPUzdMcAeEt+E0hRRJGM98SUINvYNhZ+fEnbI PVwyQa1homOirQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:35 2026 by rpki-client