This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json) Hash identifier: GPPfCPd5a2O0ysQIGPzmN5/emIRUZiIFVR21kZ56jEg= Subject key identifier: BC:E5:1B:69:77:F9:2D:87:FD:14:C8:AF:D8:39:85:34:6C:32:00:13 Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Certificate serial: 019BF72DA60B1FCF2DEE233C3452CFB1D5A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft Manifest number: 0FAA Signing time: Sun 25 Jan 2026 22:02:02 +0000 Manifest this update: Sun 25 Jan 2026 22:02:02 +0000 Manifest next update: Mon 26 Jan 2026 22:02:02 +0000 Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: SJ0PgjA6p2iEuQCPnp6mywBviglAtMBKguB+nKphZ98=) 2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=) 3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a6:0b:1f:cf:2d:ee:23:3c:34:52:cf:b1:d5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Validity Not Before: Jan 25 22:02:02 2026 GMT Not After : Jan 26 22:02:02 2026 GMT Subject: CN=bce51b6977f92d87fd14c8afd83985346c320013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:43:b1:0c:f2:2f:90:a2:b4:cc:d0:28:a2: 7d:d3:2c:3a:be:14:d4:1e:2b:70:17:a4:e4:3a:d6: 58:1a:00:a8:d8:b4:74:92:dc:51:30:1d:30:43:1d: 11:8e:5a:97:8f:06:14:bb:58:5c:7e:2a:d4:89:02: f6:e4:36:07:51:76:48:ef:d6:b2:b7:0a:91:92:0b: 30:5d:83:0b:c4:8d:00:95:3a:ee:54:40:7e:d8:ce: f3:79:c5:cd:22:52:1b:2e:5b:c4:f3:92:d6:17:33: 84:fd:1e:af:20:34:4b:cb:90:ce:00:73:f7:68:43: 68:87:bc:d7:f7:1d:e1:cb:85:9e:e5:82:01:33:e2: 2a:5b:ef:25:5a:6d:9a:7e:6b:a9:e1:2d:a8:e2:86: 7b:45:42:ec:89:54:7e:d7:ea:58:e4:f2:b1:e8:01: 65:5d:f2:5b:ae:31:f8:13:66:3b:03:97:bc:20:52: 43:1a:8c:6f:91:5c:e2:d2:7f:a3:f9:8d:c6:0e:8e: 75:e6:0d:e5:02:09:b7:81:08:1e:b2:29:6c:45:b7: 4e:b7:e4:5b:d4:e6:b7:61:b8:d8:e5:cd:6e:ac:29: b2:ea:dc:a2:7a:eb:53:2e:bb:8b:bc:55:7e:b6:c9: 9f:59:1b:29:f9:03:6f:d8:b0:70:81:d0:da:92:c3: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E5:1B:69:77:F9:2D:87:FD:14:C8:AF:D8:39:85:34:6C:32:00:13 X509v3 Authority Key Identifier: keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:96:53:3a:ca:e3:72:de:d5:6b:33:c6:0f:90:e8:d6:3a:9f: 8e:c9:1a:4a:0e:5d:20:0c:21:fe:e1:0f:c2:e4:44:43:ab:7b: 72:69:48:7d:eb:71:43:e8:bd:42:60:e5:2b:1b:c2:fe:96:0a: 66:83:05:f7:7b:05:22:0f:a5:61:7d:6b:90:d1:e1:45:ec:29: d8:fc:25:83:ac:ac:f2:51:65:5d:c0:9e:35:ba:51:a9:ae:1c: 1c:b7:db:ac:57:22:08:3c:cf:c0:5e:87:e9:8e:c1:9b:9b:df: de:0a:7a:5c:9c:7e:56:99:02:66:46:07:38:98:ad:21:71:eb: 85:3f:3e:3e:4e:be:67:80:f8:4f:42:6d:24:1c:44:76:48:5a: 6d:a8:41:ae:0c:bc:0a:bd:b7:2a:32:ac:64:18:f6:31:97:04: 59:37:ac:fe:27:4e:03:c2:99:03:a1:c7:26:a3:26:74:2e:f9: b4:9b:21:b7:7e:5c:bb:97:d2:c8:16:ec:33:07:58:15:74:6d: 98:79:b3:fb:4a:1d:84:7b:8a:6b:f9:16:21:d8:0f:fa:b8:ea: ea:5a:64:14:e5:9b:f8:67:3e:ed:74:3a:f1:38:e4:62:bf:63: 43:9d:61:85:8d:46:bf:94:2e:04:8c:91:38:fd:37:43:da:04: e9:ac:db:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LaYLH88t7iM8NFLPsdWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey YTYwZGUwHhcNMjYwMTI1MjIwMjAyWhcNMjYwMTI2MjIwMjAyWjAzMTEwLwYDVQQD EyhiY2U1MWI2OTc3ZjkyZDg3ZmQxNGM4YWZkODM5ODUzNDZjMzIwMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWVDsQzyL5CitMzQKKJ90yw6vhTU HitwF6TkOtZYGgCo2LR0ktxRMB0wQx0RjlqXjwYUu1hcfirUiQL25DYHUXZI79ay twqRkgswXYMLxI0AlTruVEB+2M7zecXNIlIbLlvE85LWFzOE/R6vIDRLy5DOAHP3 aENoh7zX9x3hy4We5YIBM+IqW+8lWm2afmup4S2o4oZ7RULsiVR+1+pY5PKx6AFl XfJbrjH4E2Y7A5e8IFJDGoxvkVzi0n+j+Y3GDo515g3lAgm3gQgesilsRbdOt+Rb 1Oa3YbjY5c1urCmy6tyieutTLruLvFV+tsmfWRsp+QNv2LBwgdDaksMuFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzlG2l3+S2H/RTIr9g5hTRsMgATMB8GA1UdIwQY MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZZTOsrj ct7VazPGD5Do1jqfjskaSg5dIAwh/uEPwuREQ6t7cmlIfetxQ+i9QmDlKxvC/pYK ZoMF93sFIg+lYX1rkNHhRewp2Pwlg6ys8lFlXcCeNbpRqa4cHLfbrFciCDzPwF6H 6Y7Bm5vf3gp6XJx+VpkCZkYHOJitIXHrhT8+Pk6+Z4D4T0JtJBxEdkhabahBrgy8 Cr23KjKsZBj2MZcEWTes/idOA8KZA6HHJqMmdC75tJsht35cu5fSyBbsMwdYFXRt mHmz+0odhHuKa/kWIdgP+rjq6lpkFOWb+Gc+7XQ68TjkYr9jQ51hhY1Gv5QuBIyR OP03Q9oE6azbGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:22:21 2026 by rpki-client