This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json) Hash identifier: Nj7h0eoUzEhmtwyVnmeSNyBkvXAycIYdAXS8+5fSd40= Subject key identifier: B1:A3:D5:F8:DD:2E:F6:F2:28:00:11:A2:4F:E2:CF:39:03:AE:90:FD Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Certificate serial: 019BF6F5C063E7C6E4280AEA2E964F2F95CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 21:00:59 +0000 Manifest this update: Sun 25 Jan 2026 21:00:59 +0000 Manifest next update: Mon 26 Jan 2026 21:00:59 +0000 Files and hashes: 1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=) 2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: +j8+pJSF6RUpGOcA6dz5+yHIuTSVFdF/XlUGAr+cs9U=) 3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=) 4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=) 5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=) 6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c0:63:e7:c6:e4:28:0a:ea:2e:96:4f:2f:95:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Validity Not Before: Jan 25 21:00:59 2026 GMT Not After : Jan 26 21:00:59 2026 GMT Subject: CN=b1a3d5f8dd2ef6f2280011a24fe2cf3903ae90fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:de:7a:06:6e:bd:18:78:66:18:c8:30:68: 23:de:1d:de:5e:0a:61:7a:4f:fe:88:d7:ce:63:12: 87:d7:01:05:26:d7:e0:82:b5:66:9f:96:30:51:42: 68:84:45:ad:c0:18:6c:75:bd:4b:b9:8d:3e:88:64: 5a:21:53:8d:3b:f8:c0:fd:61:0d:81:51:56:ea:22: d5:3f:b3:6b:05:a3:32:59:ac:24:b8:41:99:ef:f2: 26:8c:68:2a:62:a8:42:cc:dd:b5:24:cb:07:89:8d: a3:0b:ba:a4:20:1f:64:9b:b3:94:8c:33:f7:b9:59: bb:20:98:3e:4b:61:ca:cf:d2:4a:ed:ca:16:81:c6: e8:7e:e1:db:aa:91:94:49:32:0d:4f:2d:10:bc:0b: 44:5d:49:91:45:dd:9c:15:b9:f8:3f:83:df:fb:a3: ef:4e:86:c6:90:1b:b4:68:b0:20:ba:1d:1f:98:64: f5:0c:8c:9c:f7:d6:32:05:4c:69:17:69:6c:6c:0a: 4e:5d:b7:b5:ae:dd:56:43:50:ee:66:46:4c:76:25: d8:4b:7a:ef:d1:8a:a6:c5:c4:77:b1:95:26:41:b8: 96:c8:cf:07:0a:78:5b:02:9a:61:87:d9:3a:b8:2b: 96:8a:30:c0:9e:9e:19:de:36:a7:2e:92:d4:b3:2a: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A3:D5:F8:DD:2E:F6:F2:28:00:11:A2:4F:E2:CF:39:03:AE:90:FD X509v3 Authority Key Identifier: keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:30:c4:40:32:96:49:18:93:2d:56:73:c3:88:f7:5d:61:dc: f9:fb:56:5d:bc:50:84:ca:13:97:c8:5a:44:91:c5:65:13:28: 62:3c:e7:d7:9f:51:0d:d5:ba:4e:2b:b7:93:e7:35:99:d2:ad: 05:fa:99:a5:aa:9f:3e:c1:c8:3d:b0:4e:6b:9b:6a:ca:60:9b: dc:73:b2:b0:3c:a4:de:2f:ae:44:a0:5b:45:18:cd:81:67:78: 65:f3:e7:b7:24:06:4f:b5:4e:f1:93:41:6b:f7:0d:9f:34:73: a9:fb:5f:03:e1:9c:83:1f:2d:43:16:62:32:68:6c:3f:21:2a: e9:02:2f:54:33:b0:08:a6:b9:36:7f:2c:fb:e6:77:10:64:be: 07:eb:0f:ec:92:c4:ee:7c:81:36:86:48:2e:41:e6:97:f8:00: b8:1b:d4:59:dd:0a:0a:43:c2:1b:6b:9a:05:2a:39:3e:93:d0: 3b:bd:3f:b4:61:02:83:6d:8c:13:f7:f3:a0:3f:af:46:dd:0e: 7f:91:2c:74:30:cb:2d:39:78:5a:4f:f9:15:7f:76:42:ac:87: b2:b4:32:0e:fe:60:06:da:e5:2b:03:c3:25:b7:da:44:ab:da: 5f:67:10:59:fb:a0:87:05:6b:b1:ed:f4:c8:5c:8e:13:1a:e0: de:c5:61:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cBj58bkKArqLpZPL5XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz NTAzMzYwHhcNMjYwMTI1MjEwMDU5WhcNMjYwMTI2MjEwMDU5WjAzMTEwLwYDVQQD EyhiMWEzZDVmOGRkMmVmNmYyMjgwMDExYTI0ZmUyY2YzOTAzYWU5MGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/PeegZuvRh4ZhjIMGgj3h3eXgph ek/+iNfOYxKH1wEFJtfggrVmn5YwUUJohEWtwBhsdb1LuY0+iGRaIVONO/jA/WEN gVFW6iLVP7NrBaMyWawkuEGZ7/ImjGgqYqhCzN21JMsHiY2jC7qkIB9km7OUjDP3 uVm7IJg+S2HKz9JK7coWgcbofuHbqpGUSTINTy0QvAtEXUmRRd2cFbn4P4Pf+6Pv TobGkBu0aLAguh0fmGT1DIyc99YyBUxpF2lsbApOXbe1rt1WQ1DuZkZMdiXYS3rv 0YqmxcR3sZUmQbiWyM8HCnhbApphh9k6uCuWijDAnp4Z3janLpLUsypd5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGj1fjdLvbyKAARok/izzkDrpD9MB8GA1UdIwQY MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTDEQDKW SRiTLVZzw4j3XWHc+ftWXbxQhMoTl8haRJHFZRMoYjzn159RDdW6Tiu3k+c1mdKt BfqZpaqfPsHIPbBOa5tqymCb3HOysDyk3i+uRKBbRRjNgWd4ZfPntyQGT7VO8ZNB a/cNnzRzqftfA+Gcgx8tQxZiMmhsPyEq6QIvVDOwCKa5Nn8s++Z3EGS+B+sP7JLE 7nyBNoZILkHml/gAuBvUWd0KCkPCG2uaBSo5PpPQO70/tGECg22ME/fzoD+vRt0O f5EsdDDLLTl4Wk/5FX92QqyHsrQyDv5gBtrlKwPDJbfaRKvaX2cQWfughwVrse30 yFyOExrg3sVh9Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:23 2026 by rpki-client