This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json) Hash identifier: 8r91BV4korV6HuivAlifftde8Rr8zIq8HDQyrjUCFKg= Subject key identifier: 2B:5C:39:14:FC:22:BE:7A:62:2E:32:A4:1C:2F:13:D1:CA:C0:91:AB Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Certificate serial: 019BF34FC2688A9F96E5A880BF88F7C322AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft Manifest number: 0CD0 Signing time: Sun 25 Jan 2026 04:00:49 +0000 Manifest this update: Sun 25 Jan 2026 04:00:49 +0000 Manifest next update: Mon 26 Jan 2026 04:00:49 +0000 Files and hashes: 1: Ad7Pp9r5M7Wo4XWYiclohNzUXBA.roa (hash: haxwidB1aRIJpYmLRPgb8n1KRbAC9Bep58Pbjn7Bw+o=) 2: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: z2klsjSLL8HV6nF0o6bKizzjtab3ULsOCwrH5ZmUaio=) 3: vUm2P-SV22T5wOaUTtxuKZ8o8V4.roa (hash: mePIINJRIHSndAspP7XU6MW6J2iDzKwGYGxxInmc05Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:c2:68:8a:9f:96:e5:a8:80:bf:88:f7:c3:22:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Validity Not Before: Jan 25 04:00:49 2026 GMT Not After : Jan 26 04:00:49 2026 GMT Subject: CN=2b5c3914fc22be7a622e32a41c2f13d1cac091ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:e9:a7:c0:b7:ed:87:25:5e:cc:84:5d:be: 61:3a:42:be:56:77:dc:03:6e:91:45:15:3f:f9:f9: 01:2b:6d:1b:b3:a4:b2:5e:f1:05:1d:f6:ea:8c:f9: a1:1c:ae:a0:f0:6b:71:33:7f:87:c9:78:65:ef:83: ba:19:76:eb:ad:a7:12:06:42:7d:a8:5a:01:54:42: ce:9d:58:6c:b0:24:ee:fc:f2:08:0c:c8:6d:2b:b3: 4c:c1:98:3d:80:f9:9b:75:30:bf:ec:32:bf:8d:33: 81:d8:8a:4c:6c:37:60:07:c5:c4:9e:42:80:fe:90: 11:4e:27:1c:e1:cf:bd:9b:ef:70:af:a5:bf:0e:90: f1:4f:d4:b3:dc:2b:13:5b:f5:09:a0:ec:07:6d:8f: a0:16:32:f0:95:46:5b:7b:87:62:78:ae:be:ac:b0: a7:2f:f4:60:7f:26:c6:9f:bb:14:6d:fa:4d:c0:92: e7:2e:36:81:ae:a9:22:35:85:d4:10:82:5d:42:e7: b4:d4:df:34:cd:8b:dd:d4:99:5b:fa:f0:68:35:39: 12:63:3d:6a:69:6a:b5:09:40:34:cb:ee:99:71:d5: 3c:aa:3f:a6:c6:5d:65:ca:3c:9b:3b:f8:53:15:5a: 53:b2:2a:2f:d2:d7:25:ff:e5:36:a0:74:b8:e5:9a: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5C:39:14:FC:22:BE:7A:62:2E:32:A4:1C:2F:13:D1:CA:C0:91:AB X509v3 Authority Key Identifier: keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:bb:ac:b6:ff:0b:89:21:60:da:9b:d7:ec:fc:03:2d:49: dc:a4:b2:4d:fc:d9:7c:aa:3b:47:f6:b1:a8:4a:69:e0:33:47: bc:53:c3:f4:26:5d:5f:2a:b0:94:61:d0:99:24:16:b0:2c:cd: 5f:58:99:23:ed:2c:f0:ba:52:4a:fd:2e:e7:a4:de:3a:c2:8a: 2a:26:f6:71:04:cc:43:44:35:ce:23:c4:7c:d8:7b:25:df:a6: d6:9b:2c:87:d9:61:51:c2:99:52:10:ea:6d:62:af:63:19:32: f1:01:5a:cb:b2:48:1a:46:f7:f8:7f:45:2d:30:85:f1:fc:7a: 0e:c1:7c:91:0d:01:36:a0:f1:82:19:d3:f1:ef:18:e2:3d:2d: 70:a8:a4:7b:97:97:4f:fb:bf:ca:9c:52:67:1e:d0:91:29:4a: e8:e4:a9:81:40:5c:71:09:31:e3:4a:a3:9b:62:75:15:6f:e4: 8c:ed:92:32:fc:84:d0:19:7e:78:93:df:5d:22:b7:09:d0:1c: 02:f7:fe:9c:25:11:10:02:6c:7e:0d:d3:62:92:58:d6:0a:ba: ef:d9:e4:87:d5:09:62:f4:4e:94:32:81:a6:42:98:c3:5c:8f: 3b:c9:00:93:2d:fe:b2:b4:18:47:43:bd:60:8c:a2:2d:e2:52: 41:27:93:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT8Joip+W5aiAv4j3wyKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2 MWE3MDIwHhcNMjYwMTI1MDQwMDQ5WhcNMjYwMTI2MDQwMDQ5WjAzMTEwLwYDVQQD EygyYjVjMzkxNGZjMjJiZTdhNjIyZTMyYTQxYzJmMTNkMWNhYzA5MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zrpp8C37YclXsyEXb5hOkK+Vnfc A26RRRU/+fkBK20bs6SyXvEFHfbqjPmhHK6g8GtxM3+HyXhl74O6GXbrracSBkJ9 qFoBVELOnVhssCTu/PIIDMhtK7NMwZg9gPmbdTC/7DK/jTOB2IpMbDdgB8XEnkKA /pARTicc4c+9m+9wr6W/DpDxT9Sz3CsTW/UJoOwHbY+gFjLwlUZbe4dieK6+rLCn L/RgfybGn7sUbfpNwJLnLjaBrqkiNYXUEIJdQue01N80zYvd1Jlb+vBoNTkSYz1q aWq1CUA0y+6ZcdU8qj+mxl1lyjybO/hTFVpTsiov0tcl/+U2oHS45Zrx6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtcORT8Ir56Yi4ypBwvE9HKwJGrMB8GA1UdIwQY MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt MGRiY2JhMjc1NDE3LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3 LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg27rLb/ C4khYNqb1+z8Ay1J3KSyTfzZfKo7R/axqEpp4DNHvFPD9CZdXyqwlGHQmSQWsCzN X1iZI+0s8LpSSv0u56TeOsKKKib2cQTMQ0Q1ziPEfNh7Jd+m1pssh9lhUcKZUhDq bWKvYxky8QFay7JIGkb3+H9FLTCF8fx6DsF8kQ0BNqDxghnT8e8Y4j0tcKike5eX T/u/ypxSZx7QkSlK6OSpgUBccQkx40qjm2J1FW/kjO2SMvyE0Bl+eJPfXSK3CdAc Avf+nCUREAJsfg3TYpJY1gq679nkh9UJYvROlDKBpkKYw1yPO8kAky3+srQYR0O9 YIyiLeJSQSeTDw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:29 2026 by rpki-client