This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json) Hash identifier: fMqlIo55X2uRIg+uAXzYpc5Asn+PqUWVdWOO9yt1Roo= Subject key identifier: 0D:90:19:E7:65:7B:25:78:A2:A5:BF:45:A5:E5:EB:E0:EF:56:88:5B Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48 Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748 Certificate serial: 019BF575569C804BE1FBDA35F74BE5E6A010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 14:01:06 +0000 Manifest this update: Sun 25 Jan 2026 14:01:06 +0000 Manifest next update: Mon 26 Jan 2026 14:01:06 +0000 Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=) 2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: GkXAU6dAQHV8RAloeg9aysDkFyW4JDRUxwDYG+gHaoo=) 3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:56:9c:80:4b:e1:fb:da:35:f7:4b:e5:e6:a0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748 Validity Not Before: Jan 25 14:01:06 2026 GMT Not After : Jan 26 14:01:06 2026 GMT Subject: CN=0d9019e7657b2578a2a5bf45a5e5ebe0ef56885b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:92:5b:01:71:17:b1:e5:c2:cc:2b:cc:dd:37: 64:84:35:c9:8e:b5:29:7f:59:78:99:f2:3a:ad:61: 37:1d:59:c6:6f:38:63:b4:c8:0c:af:5b:24:47:fe: b2:cf:17:17:a5:58:b7:a3:e0:e0:ca:ef:f5:f6:37: 7b:81:ff:19:18:73:2b:03:48:1d:64:ef:6e:d2:f7: b7:b4:e6:23:01:66:ea:49:d5:06:51:85:34:51:1d: 91:14:64:bd:96:a1:d7:ce:2d:18:ac:45:42:df:77: b5:14:9a:17:1b:cb:2c:dd:64:6e:34:e0:89:1c:08: 69:85:5a:4d:6b:5a:44:6d:2f:47:0e:7f:ed:7a:7d: 56:d4:3d:bf:82:f7:a8:70:d2:80:bb:0a:e3:71:14: f7:d3:5d:d7:9c:ee:4e:17:34:0f:fc:70:56:f8:7d: 45:91:0f:f7:6c:cf:65:3f:a9:0a:bb:dc:d8:80:24: af:36:5e:0d:44:1b:68:34:85:69:66:30:a8:6f:6e: 4b:39:ce:8f:7c:e1:64:4a:08:67:43:7c:c1:b4:ee: b6:b2:c8:78:0a:0a:a3:62:44:07:db:6a:e7:a3:d2: 73:63:fb:53:dd:16:ee:f5:28:4f:64:02:46:be:1e: 53:d7:27:4a:01:4a:f4:94:cb:fa:32:24:a1:2a:83: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:90:19:E7:65:7B:25:78:A2:A5:BF:45:A5:E5:EB:E0:EF:56:88:5B X509v3 Authority Key Identifier: keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:32:68:61:52:c0:8a:f7:00:e2:b8:b1:f2:37:9d:24:6e: 91:e3:03:48:ed:ec:2e:4d:96:f0:2b:6e:29:c5:af:ef:9c:a3: 0d:ed:96:7c:29:b0:55:4e:9e:71:d7:b5:76:3d:5c:de:95:c3: 42:88:56:55:da:64:b0:2e:c3:6c:17:6f:a6:1f:16:68:7e:16: df:9e:13:dd:4b:04:9b:10:0f:91:2b:93:3b:55:57:4c:05:b9: 20:8c:22:1a:70:71:ed:0b:ce:7d:f5:ff:8f:c9:6c:02:bf:84: 41:98:6c:87:da:9c:ba:d6:09:d3:86:74:89:33:24:c6:50:92: c9:35:49:fe:bc:45:47:79:e5:9a:c2:23:5f:61:be:ae:3e:63: 82:b6:97:12:10:b8:e7:34:7f:65:fd:5b:5a:bd:1e:8e:cd:bc: 94:a8:75:90:de:ed:93:1b:49:00:0a:f4:e0:a7:71:9b:53:ad: 8f:0b:1d:21:fb:52:93:63:be:48:24:ef:8c:05:1b:6b:73:9d: 32:73:46:8a:06:73:3e:2e:00:c1:d4:4a:6e:e1:64:c5:8f:2d: 91:53:08:4c:d4:65:85:c2:64:d8:fd:85:b6:60:30:69:de:22: 1d:59:fb:52:64:cf:23:3d:8a:b7:9e:0d:21:ba:d8:23:a9:47: 2e:67:18:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dVacgEvh+9o190vl5qAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2 Y2U3NDgwHhcNMjYwMTI1MTQwMTA2WhcNMjYwMTI2MTQwMTA2WjAzMTEwLwYDVQQD EygwZDkwMTllNzY1N2IyNTc4YTJhNWJmNDVhNWU1ZWJlMGVmNTY4ODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJJbAXEXseXCzCvM3TdkhDXJjrUp f1l4mfI6rWE3HVnGbzhjtMgMr1skR/6yzxcXpVi3o+Dgyu/19jd7gf8ZGHMrA0gd ZO9u0ve3tOYjAWbqSdUGUYU0UR2RFGS9lqHXzi0YrEVC33e1FJoXG8ss3WRuNOCJ HAhphVpNa1pEbS9HDn/ten1W1D2/gveocNKAuwrjcRT3013XnO5OFzQP/HBW+H1F kQ/3bM9lP6kKu9zYgCSvNl4NRBtoNIVpZjCob25LOc6PfOFkSghnQ3zBtO62ssh4 CgqjYkQH22rno9JzY/tT3Rbu9ShPZAJGvh5T1ydKAUr0lMv6MiShKoPRdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2QGedleyV4oqW/RaXl6+DvVohbMB8GA1UdIwQY MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt ODBjM2VhNGZkMDAwLzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFUyaGFS wIr3AOK4sfI3nSRukeMDSO3sLk2W8CtuKcWv75yjDe2WfCmwVU6ecde1dj1c3pXD QohWVdpksC7DbBdvph8WaH4W354T3UsEmxAPkSuTO1VXTAW5IIwiGnBx7QvOffX/ j8lsAr+EQZhsh9qcutYJ04Z0iTMkxlCSyTVJ/rxFR3nlmsIjX2G+rj5jgraXEhC4 5zR/Zf1bWr0ejs28lKh1kN7tkxtJAAr04Kdxm1OtjwsdIftSk2O+SCTvjAUba3Od MnNGigZzPi4AwdRKbuFkxY8tkVMITNRlhcJk2P2FtmAwad4iHVn7UmTPIz2Kt54N IbrYI6lHLmcYDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:26 2026 by rpki-client