This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json) Hash identifier: 9ELf9tm63jwDRtgvoosxMv7rnXxnlaGm0NyImnU0hXU= Subject key identifier: C5:80:31:12:7E:EF:E7:85:15:53:3B:9C:DF:77:B5:75:F3:EB:D1:D4 Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03 Certificate serial: 019BFAD2915149D122D3689B521E06A246F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft Manifest number: 03B9 Signing time: Mon 26 Jan 2026 15:01:02 +0000 Manifest this update: Mon 26 Jan 2026 15:01:02 +0000 Manifest next update: Tue 27 Jan 2026 15:01:02 +0000 Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=) 2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: BqfBVN1mhdn+gk2zHrtlCvZUvgwMka29VEyA/BSwhH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:91:51:49:d1:22:d3:68:9b:52:1e:06:a2:46:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03 Validity Not Before: Jan 26 15:01:02 2026 GMT Not After : Jan 27 15:01:02 2026 GMT Subject: CN=c58031127eefe78515533b9cdf77b575f3ebd1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a7:46:1e:92:64:93:db:67:5b:c7:c7:14:96: 85:1d:4c:0c:98:92:20:ae:65:1a:36:f5:ee:b5:96: 12:52:8d:e1:d8:a6:a1:6e:15:27:43:f7:77:8f:fc: 15:d5:93:3b:e0:a6:33:53:e4:a1:83:55:f3:5f:39: 2d:b7:04:5c:94:e7:f0:5e:d9:43:f6:f2:74:8e:30: 75:7b:60:a8:ef:a4:b4:61:c0:69:9e:f7:b0:d3:88: 03:a1:fb:65:f4:c0:8a:83:7e:10:88:c9:ed:f7:ca: 2d:fb:3d:45:f9:11:0d:71:c5:aa:c0:e8:4e:66:e4: 14:52:c1:a7:a8:98:b6:ea:4c:b7:c0:28:4f:23:b4: c5:e6:0d:75:55:21:45:ba:ae:b8:54:df:ff:d3:67: 2c:cd:41:ef:39:6c:79:68:6b:e2:00:23:50:88:b4: 6a:2a:cc:98:2a:52:52:d8:5b:7f:da:36:73:c9:b3: 9c:0e:36:74:88:f9:9a:22:6d:a9:58:f9:de:ff:63: ac:4f:53:ff:07:cb:57:f9:11:fb:e5:b0:be:2e:21: e4:c8:86:12:95:77:63:02:76:18:78:06:a3:60:07: 7e:c0:c8:75:7a:51:2f:cd:61:17:8b:34:0f:1d:09: dc:a3:54:1a:e9:90:f1:02:c0:b9:3a:b2:cf:81:0f: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:80:31:12:7E:EF:E7:85:15:53:3B:9C:DF:77:B5:75:F3:EB:D1:D4 X509v3 Authority Key Identifier: keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:30:44:3d:ed:67:b0:18:c6:8f:77:0d:dc:dd:0a:7d:eb:09: 54:6b:4a:0c:dc:c2:e9:a2:71:5a:8c:2c:b5:ac:92:cd:c7:c6: 9d:7c:de:8e:38:7a:d1:87:4a:a4:24:43:9c:22:01:b3:b5:d3: e5:41:c8:89:d6:e9:8f:a3:81:c8:91:ca:34:f1:c5:e1:59:2a: ca:64:2d:de:dc:1b:b8:7c:fb:69:f0:58:ec:01:34:0e:88:8f: fc:72:f7:91:46:52:0f:d8:80:7c:bc:bc:8f:10:df:5f:0f:27: eb:b5:24:16:01:a8:92:ec:76:a1:c0:f7:b3:e3:4f:3b:61:64: 84:8e:ef:b2:e0:7e:0d:8b:fc:e2:e8:62:ea:80:9e:1c:db:cd: 93:9a:3f:80:3b:24:0e:c5:31:95:92:cc:50:12:b6:68:56:b9: 7c:fe:9e:e8:4a:7c:8b:2d:a3:77:2d:5d:d7:03:06:26:0e:03: 13:1c:bb:98:7c:b0:9d:b6:70:34:97:52:89:f5:c5:e3:4b:4f: 93:5e:6c:cd:4d:1e:4c:ba:81:0c:9e:00:7a:c0:e3:c2:fe:82: 8c:04:8d:a2:27:83:88:9d:1b:1c:b9:7a:5d:70:f0:c4:39:78: de:4f:14:6a:80:98:37:68:00:8c:1d:d8:9c:46:41:cb:44:fa: 06:7e:8f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60pFRSdEi02ibUh4Gokb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1 ZDJhMDMwHhcNMjYwMTI2MTUwMTAyWhcNMjYwMTI3MTUwMTAyWjAzMTEwLwYDVQQD EyhjNTgwMzExMjdlZWZlNzg1MTU1MzNiOWNkZjc3YjU3NWYzZWJkMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6adGHpJkk9tnW8fHFJaFHUwMmJIg rmUaNvXutZYSUo3h2KahbhUnQ/d3j/wV1ZM74KYzU+Shg1XzXzkttwRclOfwXtlD 9vJ0jjB1e2Co76S0YcBpnvew04gDoftl9MCKg34QiMnt98ot+z1F+RENccWqwOhO ZuQUUsGnqJi26ky3wChPI7TF5g11VSFFuq64VN//02cszUHvOWx5aGviACNQiLRq KsyYKlJS2Ft/2jZzybOcDjZ0iPmaIm2pWPne/2OsT1P/B8tX+RH75bC+LiHkyIYS lXdjAnYYeAajYAd+wMh1elEvzWEXizQPHQnco1Qa6ZDxAsC5OrLPgQ9zywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWAMRJ+7+eFFVM7nN93tXXz69HUMB8GA1UdIwQY MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDBEPe1n sBjGj3cN3N0KfesJVGtKDNzC6aJxWowstaySzcfGnXzejjh60YdKpCRDnCIBs7XT 5UHIidbpj6OByJHKNPHF4VkqymQt3twbuHz7afBY7AE0DoiP/HL3kUZSD9iAfLy8 jxDfXw8n67UkFgGokux2ocD3s+NPO2FkhI7vsuB+DYv84uhi6oCeHNvNk5o/gDsk DsUxlZLMUBK2aFa5fP6e6Ep8iy2jdy1d1wMGJg4DExy7mHywnbZwNJdSifXF40tP k15szU0eTLqBDJ4AesDjwv6CjASNoieDiJ0bHLl6XXDwxDl43k8UaoCYN2gAjB3Y nEZBy0T6Bn6Pow== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:14 2026 by rpki-client