This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json) Hash identifier: 4gA6VS38cg1vItVC8UfGTijI5al+9OZCgd+6wuvOTLE= Subject key identifier: 90:BB:60:D2:85:20:56:C4:26:95:90:3C:FA:53:38:32:30:88:23:A9 Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Certificate serial: 019BF72CE478A69B3FDEF07537BE2F7CEDCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft Manifest number: 175A Signing time: Sun 25 Jan 2026 22:01:12 +0000 Manifest this update: Sun 25 Jan 2026 22:01:12 +0000 Manifest next update: Mon 26 Jan 2026 22:01:12 +0000 Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=) 2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=) 3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: SRhhfadXuVoaSrzeMu+2Sga7W/NilErncPxAB7keBRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:e4:78:a6:9b:3f:de:f0:75:37:be:2f:7c:ed:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Validity Not Before: Jan 25 22:01:12 2026 GMT Not After : Jan 26 22:01:12 2026 GMT Subject: CN=90bb60d2852056c42695903cfa533832308823a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:5e:b9:30:e1:5c:e0:60:c8:a4:d0:4e:a6: 00:46:2a:f4:26:be:da:b1:b2:4e:1e:10:e0:34:7e: dc:69:c5:42:54:4b:56:f0:3f:39:2d:58:57:ea:af: ff:53:2a:1d:79:9b:2a:d5:74:9c:89:7f:5e:9d:4d: ac:8e:1b:84:45:bd:3d:de:46:d1:77:32:f8:c3:17: 6e:cf:d5:55:94:4d:49:20:74:1c:d7:2d:d8:5c:3d: e4:12:d2:aa:04:be:cf:35:53:63:68:1e:e4:a5:d6: 66:aa:80:c1:99:41:ed:10:ec:49:18:d1:bf:b8:2b: 62:fb:71:34:6a:3d:04:52:7a:df:c7:f9:94:60:90: 8f:5d:eb:83:de:8f:af:7b:2b:b0:7e:52:40:30:76: 9c:f2:05:8b:14:8e:51:84:60:9f:95:76:ba:78:40: 9e:f5:58:52:a5:52:d7:b1:a1:fd:35:b4:bc:7c:13: e9:28:9f:e3:1b:a0:81:6a:ea:5a:7d:d7:c5:a3:f9: 70:e5:94:c5:d0:f6:14:50:09:ed:8e:87:c1:87:7e: 75:f7:42:91:28:21:c9:5d:eb:60:be:a9:18:41:99: 71:0a:c7:96:49:f4:0d:72:de:85:3d:9b:4c:02:65: cd:98:0b:d2:7a:1a:dd:f6:a5:bc:09:b9:19:a5:c8: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BB:60:D2:85:20:56:C4:26:95:90:3C:FA:53:38:32:30:88:23:A9 X509v3 Authority Key Identifier: keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2c:1e:20:05:42:41:f8:68:93:63:29:c7:f9:a6:c3:4e:28: 3c:1b:2d:ce:9c:a4:47:88:b2:15:fe:a8:bd:ce:2d:03:43:9d: a9:67:d5:de:79:0e:8a:9b:61:08:2e:ea:70:7a:a1:48:f1:47: e6:c7:0d:da:52:2d:87:c9:fd:96:8c:09:5b:fc:68:dc:9f:26: 76:75:18:71:58:9c:73:8d:e3:15:6f:73:a5:c0:88:4d:89:99: 60:c5:1d:c0:f9:69:2c:42:5f:43:5e:8a:f8:61:83:1e:8a:30: 20:cd:58:e0:8e:02:d5:a5:98:20:10:22:d6:bb:8e:fc:fc:88: 3f:ed:fc:c0:51:b5:22:50:b9:2f:a7:00:18:20:5b:db:c6:f0: ee:9f:33:e4:6b:5a:71:c5:5f:0a:64:5f:1d:10:94:f5:ac:54: e2:27:67:b3:de:eb:ae:39:14:b1:4b:75:a8:67:63:48:93:3b: 53:15:4e:3f:c8:62:cc:1a:14:10:6f:d1:6e:08:b1:91:9c:93: cc:de:44:85:66:11:cc:8d:3b:79:ac:2f:a2:ff:ff:35:b8:6e: a5:30:6f:b4:27:35:cc:b5:28:48:d4:22:95:04:7b:8a:0e:53: 7d:26:3d:1f:7a:c7:d6:b3:9c:65:db:0e:ed:88:1d:c8:17:0e: bc:d9:da:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LOR4pps/3vB1N74vfO3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTRhNGU2NTU4YmFiODlkMzZlM2JhMjFjOTVlMmFmZGQ2 OGZiZWEwHhcNMjYwMTI1MjIwMTEyWhcNMjYwMTI2MjIwMTEyWjAzMTEwLwYDVQQD Eyg5MGJiNjBkMjg1MjA1NmM0MjY5NTkwM2NmYTUzMzgzMjMwODgyM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUBeuTDhXOBgyKTQTqYARir0Jr7a sbJOHhDgNH7cacVCVEtW8D85LVhX6q//UyodeZsq1XSciX9enU2sjhuERb093kbR dzL4wxduz9VVlE1JIHQc1y3YXD3kEtKqBL7PNVNjaB7kpdZmqoDBmUHtEOxJGNG/ uCti+3E0aj0EUnrfx/mUYJCPXeuD3o+veyuwflJAMHac8gWLFI5RhGCflXa6eECe 9VhSpVLXsaH9NbS8fBPpKJ/jG6CBaupafdfFo/lw5ZTF0PYUUAntjofBh35190KR KCHJXetgvqkYQZlxCseWSfQNct6FPZtMAmXNmAvSehrd9qW8CbkZpciqMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJC7YNKFIFbEJpWQPPpTODIwiCOpMB8GA1UdIwQY MBaAFF8UpOZVi6uJ0247ohyV4q/daPvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQt ZGE4MWYwOGY2MDAxLzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQtZGE4MWYwOGY2MDAx LzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCweIAVC Qfhok2Mpx/mmw04oPBstzpykR4iyFf6ovc4tA0OdqWfV3nkOipthCC7qcHqhSPFH 5scN2lIth8n9lowJW/xo3J8mdnUYcVicc43jFW9zpcCITYmZYMUdwPlpLEJfQ16K +GGDHoowIM1Y4I4C1aWYIBAi1ruO/PyIP+38wFG1IlC5L6cAGCBb28bw7p8z5Gta ccVfCmRfHRCU9axU4idns97rrjkUsUt1qGdjSJM7UxVOP8hizBoUEG/RbgixkZyT zN5EhWYRzI07eawvov//NbhupTBvtCc1zLUoSNQilQR7ig5TfSY9H3rH1rOcZdsO 7YgdyBcOvNnaEw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:21 2026 by rpki-client