This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json) Hash identifier: lOxiNyX9O/hDVyylk3sjt7mb4lZQNibCXOi34cgB3tM= Subject key identifier: 70:C8:BD:9D:E6:C4:73:46:BC:86:72:32:1B:4D:A0:0B:0E:D9:37:0B Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330 Certificate serial: 019BF5752B4C4DFCDE6CCE0D6AD2A6212CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft Manifest number: 149D Signing time: Sun 25 Jan 2026 14:00:55 +0000 Manifest this update: Sun 25 Jan 2026 14:00:55 +0000 Manifest next update: Mon 26 Jan 2026 14:00:55 +0000 Files and hashes: 1: 7iD4K1gccNErcwUL56fdA_X6dFo.roa (hash: im8taFI4fIVJ8hCEmSfog0Wq6myLmqj/L7AJRggXUII=) 2: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: x1lpmf2ksd7gVIMFe6kH2ZnfObONfoXzmFimAWRESJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:2b:4c:4d:fc:de:6c:ce:0d:6a:d2:a6:21:2c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330 Validity Not Before: Jan 25 14:00:55 2026 GMT Not After : Jan 26 14:00:55 2026 GMT Subject: CN=70c8bd9de6c47346bc8672321b4da00b0ed9370b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:52:95:58:77:ae:f2:89:82:24:dd:72:44: 92:3a:3a:db:04:86:fd:3c:ef:2a:30:b7:01:f7:97: 40:7b:4b:a8:c0:f4:63:84:03:2e:2f:7c:a9:a9:5d: 7d:1a:ad:40:11:33:96:37:36:5d:da:ab:9a:cf:21: 50:3a:82:4b:c3:dd:b7:0f:2b:a6:3a:8e:d5:bc:7d: e9:57:94:1f:5b:c8:2a:75:6c:12:8e:93:7a:c1:c5: 08:b9:6d:13:8d:9d:85:c9:24:31:b2:96:13:64:35: 04:67:dc:31:57:a9:5f:db:56:09:58:8c:31:d2:da: 2c:96:85:7a:5c:f5:e6:9e:2d:2c:7f:ae:cd:47:91: 9d:96:be:cc:c1:be:af:17:e4:31:4f:f2:19:c3:cb: 4d:b1:fc:d1:71:ed:01:12:a8:8e:fa:76:2c:69:c5: 4b:c8:e9:33:ae:0a:7b:da:58:ea:a5:75:51:f1:ef: a0:07:4a:40:67:13:d2:10:02:f8:b0:6d:36:81:c5: 92:1b:06:0a:2f:2e:64:82:d9:d6:02:31:7b:fc:65: 21:ae:33:5b:71:4c:ed:b3:01:bd:bd:24:03:a8:98: 62:75:51:45:4c:e4:42:f0:54:cf:4d:ed:c6:1f:5c: 9f:6b:7d:6d:2e:53:6d:be:89:0c:19:76:15:da:f8: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C8:BD:9D:E6:C4:73:46:BC:86:72:32:1B:4D:A0:0B:0E:D9:37:0B X509v3 Authority Key Identifier: keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:87:49:b9:e4:de:7a:95:1f:e8:59:73:ac:18:f0:bc:f3:9c: d0:1c:86:7b:30:91:11:56:91:e1:1d:82:81:ab:78:8d:ed:19: 8b:b8:ea:42:34:75:96:95:24:d2:00:ef:9e:ac:50:c9:9d:88: 89:b0:a6:8f:27:2a:92:b2:7c:d8:30:dc:e2:a3:b6:b4:41:51: 78:a1:22:7f:8b:a0:a0:46:59:ac:ef:36:e2:d8:24:0a:ef:1a: ca:be:59:37:9c:bf:7e:f9:4c:a7:f2:81:67:df:f3:3d:99:95: 9e:72:df:93:e1:a7:8b:88:5e:73:5e:a3:d1:34:cb:c2:e5:58: d6:0f:9c:9a:a9:f9:5d:d3:71:f0:10:18:f3:21:1c:1b:af:ca: d3:ec:4b:04:f6:49:e4:c0:e8:85:51:a4:f3:12:0c:16:5e:43: 70:8e:66:ca:ed:d0:09:f4:7f:77:46:12:8d:4d:4b:be:d0:4e: d6:c0:5f:b5:75:1f:1c:9a:b6:72:03:9b:b7:32:f1:51:35:22: 1e:1b:66:5a:e6:05:3e:a1:31:e3:d3:fb:53:e9:7c:e9:e7:fe: 53:54:ea:6d:61:f4:75:98:f7:4e:f2:c5:12:6f:b4:2f:b6:e6: c8:44:09:fc:32:e9:89:24:4a:bb:df:87:21:68:a1:dd:68:80: 0f:7b:b1:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dStMTfzebM4NatKmISzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2ZkOTU4NmY5Y2NiMGZiNDQ4N2IyMDhjZGY0Njc1ZTVi YmYzMzAwHhcNMjYwMTI1MTQwMDU1WhcNMjYwMTI2MTQwMDU1WjAzMTEwLwYDVQQD Eyg3MGM4YmQ5ZGU2YzQ3MzQ2YmM4NjcyMzIxYjRkYTAwYjBlZDkzNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukdSlVh3rvKJgiTdckSSOjrbBIb9 PO8qMLcB95dAe0uowPRjhAMuL3ypqV19Gq1AETOWNzZd2quazyFQOoJLw923Dyum Oo7VvH3pV5QfW8gqdWwSjpN6wcUIuW0TjZ2FySQxspYTZDUEZ9wxV6lf21YJWIwx 0tosloV6XPXmni0sf67NR5Gdlr7Mwb6vF+QxT/IZw8tNsfzRce0BEqiO+nYsacVL yOkzrgp72ljqpXVR8e+gB0pAZxPSEAL4sG02gcWSGwYKLy5kgtnWAjF7/GUhrjNb cUztswG9vSQDqJhidVFFTORC8FTPTe3GH1yfa31tLlNtvokMGXYV2viNGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDIvZ3mxHNGvIZyMhtNoAsO2TcLMB8GA1UdIwQY MBaAFF5/2VhvnMsPtEh7IIzfRnXlu/MwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQt NGIwMWQ2M2U3OTVjLzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQtNGIwMWQ2M2U3OTVj LzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4dJueTe epUf6FlzrBjwvPOc0ByGezCREVaR4R2Cgat4je0Zi7jqQjR1lpUk0gDvnqxQyZ2I ibCmjycqkrJ82DDc4qO2tEFReKEif4ugoEZZrO824tgkCu8ayr5ZN5y/fvlMp/KB Z9/zPZmVnnLfk+Gni4hec16j0TTLwuVY1g+cmqn5XdNx8BAY8yEcG6/K0+xLBPZJ 5MDohVGk8xIMFl5DcI5myu3QCfR/d0YSjU1LvtBO1sBftXUfHJq2cgObtzLxUTUi HhtmWuYFPqEx49P7U+l86ef+U1TqbWH0dZj3TvLFEm+0L7bmyEQJ/DLpiSRKu9+H IWih3WiAD3ux4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:52 2026 by rpki-client