This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json) Hash identifier: aFqdWpUJ202wn12rzPp1F4t9/mq/K61mQ3EEpolpA1Q= Subject key identifier: EC:95:10:C1:CF:F2:CE:F3:78:B2:1E:12:66:F2:75:93:C5:A1:7F:46 Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836 Certificate serial: 019BF5E384E06842BBCAF195C200F2D743B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft Manifest number: 1160 Signing time: Sun 25 Jan 2026 16:01:27 +0000 Manifest this update: Sun 25 Jan 2026 16:01:27 +0000 Manifest next update: Mon 26 Jan 2026 16:01:27 +0000 Files and hashes: 1: KceNOn_bCzlpYzkGAtSH71ZEniE.roa (hash: ghG8vlvVhPRN/q5ENiLGfWe2Rdz70LqNWlKQluJ96vs=) 2: TnLGleLWbF6Xbip1RIdiru4lzlk.roa (hash: TwgWk/EYTVXEiwe/Z9ywXVNMqxvlSEZDhUOiWjsfVSk=) 3: WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa (hash: wF/mTYNEBbK6LQa44t3Ab29Zi1DQ3lUoIwP6+TkkiBA=) 4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: l/QDOxVWT1hOL8rQkgHoHTycg35cI5NNp7bHlCzG+KY=) 5: gXCR-cLYMaojwmIaH2ky7eyIf5g.roa (hash: I8h0Z2ywnH4bteSn3QmarASyoNf+QDRHyu/nb8W4GNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:84:e0:68:42:bb:ca:f1:95:c2:00:f2:d7:43:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836 Validity Not Before: Jan 25 16:01:27 2026 GMT Not After : Jan 26 16:01:27 2026 GMT Subject: CN=ec9510c1cff2cef378b21e1266f27593c5a17f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:27:c8:e2:73:66:8f:d9:da:10:62:01:b5: 68:8f:ff:fd:fa:0e:da:3a:a7:ba:6c:0a:6c:18:09: de:6f:fe:02:eb:5a:3d:8b:55:c2:63:1b:3d:09:1b: 38:df:35:dd:9f:3a:22:75:4d:d1:0f:e1:28:24:c8: 76:cb:3d:1c:08:ef:8f:9e:f1:6e:79:3f:cf:ae:c9: f2:f0:ea:8f:55:fc:e8:69:53:e6:f6:37:39:2d:37: fc:07:36:e0:88:ed:6b:df:f5:7e:e5:08:d1:92:80: cf:aa:cf:07:5c:70:c5:02:c8:40:b0:3a:f5:3c:09: 17:bc:ba:df:2a:8f:65:6e:4f:6a:9c:30:c5:66:ca: f9:4d:37:24:71:c5:5e:7a:61:c1:70:7d:11:de:a7: 3b:6b:92:53:7f:09:1c:ae:ae:5d:b4:f7:ec:d7:be: 0a:59:0e:4e:d2:35:dd:71:c8:48:4b:39:43:54:c1: c9:c9:67:97:d5:a0:9d:55:e1:d5:41:6e:95:fe:38: ab:a6:0c:56:d9:fd:62:f7:6f:c5:92:f7:53:5e:a1: b6:5e:6e:c0:ef:7f:a3:f9:f9:66:9b:5b:3d:30:1f: 01:94:55:0e:8c:e6:be:a1:e9:4f:86:01:dc:52:e4: 6c:a7:47:86:a7:68:5e:d7:0a:7e:6e:56:4d:c3:d8: dd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:10:C1:CF:F2:CE:F3:78:B2:1E:12:66:F2:75:93:C5:A1:7F:46 X509v3 Authority Key Identifier: keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:78:18:a1:b2:27:bb:0f:ff:cf:43:f5:25:9a:48:37:6f:cb: 44:38:0b:fc:f0:86:95:d3:b9:b7:57:9a:13:fb:47:cd:4f:7a: 81:35:98:a0:d6:43:6d:f8:64:b6:93:1f:20:39:09:2e:b6:4e: 2b:0e:43:5f:81:f7:c2:b2:ce:c1:a7:a7:33:f7:ce:79:06:88: 10:51:e7:6d:9a:46:2d:ef:20:16:f2:08:24:26:48:aa:fc:0a: 9a:f9:4f:0d:d1:73:cc:cb:b6:4d:ee:36:1b:5e:fa:cf:fe:f5: 17:7c:46:5f:d0:2e:59:74:48:bf:ff:9b:94:3a:64:96:b3:b0: 94:ce:9b:13:d2:b8:ab:30:2c:3f:49:0f:64:22:dc:7d:58:c4: 5d:f9:37:a0:63:26:33:da:4c:77:d4:fa:84:09:7a:f0:18:75: 5a:52:87:8e:77:53:24:58:55:a9:c9:b0:2c:fe:f8:32:4f:2a: 2f:c0:0b:cd:a2:15:ee:8a:be:0e:f8:40:27:ed:35:b3:dd:4f: d1:6b:7b:b9:e6:5a:4a:a5:c0:63:f0:62:dc:23:47:5f:0e:e7: 87:a6:8c:07:54:13:2f:cd:95:fe:1f:23:1d:e9:7f:19:a1:37: 1d:d0:1a:f8:fb:09:ac:e5:f5:83:71:fd:b5:ad:c4:c8:9a:55: 84:2e:8b:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv144TgaEK7yvGVwgDy10OwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWE0MjcwNzJiMzFkNDQ3ODRjMzc1ZGZhZTQyMjc4ZTcx ZmE4MzYwHhcNMjYwMTI1MTYwMTI3WhcNMjYwMTI2MTYwMTI3WjAzMTEwLwYDVQQD EyhlYzk1MTBjMWNmZjJjZWYzNzhiMjFlMTI2NmYyNzU5M2M1YTE3ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrAnyOJzZo/Z2hBiAbVoj//9+g7a Oqe6bApsGAneb/4C61o9i1XCYxs9CRs43zXdnzoidU3RD+EoJMh2yz0cCO+PnvFu eT/Prsny8OqPVfzoaVPm9jc5LTf8BzbgiO1r3/V+5QjRkoDPqs8HXHDFAshAsDr1 PAkXvLrfKo9lbk9qnDDFZsr5TTckccVeemHBcH0R3qc7a5JTfwkcrq5dtPfs174K WQ5O0jXdcchISzlDVMHJyWeX1aCdVeHVQW6V/jirpgxW2f1i92/FkvdTXqG2Xm7A 73+j+flmm1s9MB8BlFUOjOa+oelPhgHcUuRsp0eGp2he1wp+blZNw9jd2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyVEMHP8s7zeLIeEmbydZPFoX9GMB8GA1UdIwQY MBaAFF8aQnBysx1EeEw3XfrkInjnH6g2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhwQ2NIS3pIVVI0VERkZC11UWllT2NmcURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNzdmNjQtYjg0My00NjlmLTg1NDct ZGQyMGJiMjA4YmJhLzEvWHhwQ2NIS3pIVVI0VERkZC11UWllT2NmcURZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8wNzdmNjQtYjg0My00NjlmLTg1NDctZGQyMGJiMjA4YmJh LzEvWHhwQ2NIS3pIVVI0VERkZC11UWllT2NmcURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIngYobIn uw//z0P1JZpIN2/LRDgL/PCGldO5t1eaE/tHzU96gTWYoNZDbfhktpMfIDkJLrZO Kw5DX4H3wrLOwaenM/fOeQaIEFHnbZpGLe8gFvIIJCZIqvwKmvlPDdFzzMu2Te42 G176z/71F3xGX9AuWXRIv/+blDpklrOwlM6bE9K4qzAsP0kPZCLcfVjEXfk3oGMm M9pMd9T6hAl68Bh1WlKHjndTJFhVqcmwLP74Mk8qL8ALzaIV7oq+DvhAJ+01s91P 0Wt7ueZaSqXAY/Bi3CNHXw7nh6aMB1QTL82V/h8jHel/GaE3HdAa+PsJrOX1g3H9 ta3EyJpVhC6Lpg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:29 2026 by rpki-client