This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json) Hash identifier: F0V70+J04j+QfBrfbyFf1piz3pPe2hcqjNzkryp7tZA= Subject key identifier: 7D:F8:5B:04:38:EA:59:1F:5C:A6:E6:0D:05:93:BB:CA:DD:80:4A:66 Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Certificate serial: 019BF6509E8A15C5F097F2BA443A0DB34100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft Manifest number: 02A8 Signing time: Sun 25 Jan 2026 18:00:37 +0000 Manifest this update: Sun 25 Jan 2026 18:00:37 +0000 Manifest next update: Mon 26 Jan 2026 18:00:37 +0000 Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: 7f+lkSi0zg/PwVU7+41iq0dfACiDoaKF8exo7O7OfU8=) 2: qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa (hash: +Jw2Q4FKG2QkwU/uXp8CWjul2mV/WblFFkYVNeXAnL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:9e:8a:15:c5:f0:97:f2:ba:44:3a:0d:b3:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Validity Not Before: Jan 25 18:00:37 2026 GMT Not After : Jan 26 18:00:37 2026 GMT Subject: CN=7df85b0438ea591f5ca6e60d0593bbcadd804a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:bb:fd:9e:37:4d:67:7b:b8:9b:5f:7c:a9: 4d:46:02:bb:73:c2:14:76:65:06:b3:79:5f:f6:b0: 0f:46:d3:68:c7:4e:b6:d9:91:01:a7:17:d6:94:71: ab:ae:b3:de:cd:27:65:0e:f0:3e:08:b6:06:61:79: 07:72:cd:db:6e:b8:28:ab:28:d1:1b:ca:b9:9c:7a: e5:af:c4:2f:c0:cd:90:1f:58:a4:40:73:4d:53:fb: 27:93:4c:2f:04:98:76:ba:ed:a5:ce:36:82:40:11: 72:0f:ad:f8:6f:c8:6a:d8:68:3d:2f:f1:4b:c8:52: 02:4e:38:c4:12:82:6c:c4:a9:ff:64:b5:34:2f:67: 8c:df:4c:86:de:77:40:e9:45:45:6e:3d:fd:bb:60: de:86:03:6f:52:df:7b:ee:64:ad:98:dd:b0:08:5c: 68:a8:3d:70:20:5e:62:4b:e5:7b:e9:18:0f:6b:b4: 28:f8:92:20:f1:7c:70:1f:3a:18:62:77:f5:25:dc: c1:29:87:9a:d7:97:f9:41:6a:58:8c:a8:c6:a1:fc: d5:71:e4:b5:99:ed:c9:95:13:32:6d:3b:c7:d8:ad: 70:70:f3:74:7a:31:d8:db:7a:de:6b:8f:75:9f:ea: 79:72:6e:55:d8:a7:4b:e5:47:06:d7:b1:74:f3:9e: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F8:5B:04:38:EA:59:1F:5C:A6:E6:0D:05:93:BB:CA:DD:80:4A:66 X509v3 Authority Key Identifier: keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5e:99:bc:8b:46:f9:82:e8:6f:98:45:ea:23:b1:3e:ed:24: 17:9a:70:0c:2f:e7:03:ad:ea:6e:d1:66:17:59:83:b7:11:16: 58:76:97:6c:d1:ff:24:4c:4d:c5:73:2d:04:94:1f:2e:c4:97: 0e:41:19:5f:f6:2e:68:9a:9b:35:f4:c2:aa:c0:d6:bb:65:89: 9f:95:a6:06:b6:ef:d4:e6:09:07:bb:57:ba:80:fb:66:40:4a: ad:97:e8:49:32:13:42:e5:a3:67:13:9f:86:5c:13:1d:05:7c: 80:28:d3:fd:7d:38:1b:11:3a:59:c9:5a:a2:24:2f:22:dc:60: 22:2e:da:3d:92:bf:1b:87:ed:6a:db:29:52:91:99:e6:29:c0: b5:71:77:d5:c1:a5:cd:8f:4d:19:57:ec:53:fb:f2:a7:01:13: 70:25:7f:0a:5a:c1:0d:c8:ee:ee:08:a3:c9:3e:99:62:d5:c4: a9:13:18:4e:93:c2:e9:30:4e:8c:d6:7a:67:be:51:71:70:9d: 40:60:0d:bb:93:76:7b:a8:a8:5f:09:e6:c9:20:6d:83:c3:fc: 17:a1:f5:43:28:39:d4:cb:a3:77:a7:78:c3:97:12:26:f1:a5: 85:cd:a3:68:06:65:0d:8a:59:50:96:f3:c5:b4:6f:b0:88:b6: 8a:f9:38:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UJ6KFcXwl/K6RDoNs0EAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYWM1MGIzNGIyYmFmZGM0NmRjNWI3NWQzOWJjMGRkODlh NjhmMmMwHhcNMjYwMTI1MTgwMDM3WhcNMjYwMTI2MTgwMDM3WjAzMTEwLwYDVQQD Eyg3ZGY4NWIwNDM4ZWE1OTFmNWNhNmU2MGQwNTkzYmJjYWRkODA0YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6i7/Z43TWd7uJtffKlNRgK7c8IU dmUGs3lf9rAPRtNox0622ZEBpxfWlHGrrrPezSdlDvA+CLYGYXkHcs3bbrgoqyjR G8q5nHrlr8QvwM2QH1ikQHNNU/snk0wvBJh2uu2lzjaCQBFyD634b8hq2Gg9L/FL yFICTjjEEoJsxKn/ZLU0L2eM30yG3ndA6UVFbj39u2DehgNvUt977mStmN2wCFxo qD1wIF5iS+V76RgPa7Qo+JIg8XxwHzoYYnf1JdzBKYea15f5QWpYjKjGofzVceS1 me3JlRMybTvH2K1wcPN0ejHY23rea491n+p5cm5V2KdL5UcG17F0857FgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH34WwQ46lkfXKbmDQWTu8rdgEpmMB8GA1UdIwQY MBaAFF6sULNLK6/cRtxbddObwN2Jpo8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYt NzA1OGYxMWZhYzgyLzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYtNzA1OGYxMWZhYzgy LzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEl6ZvItG +YLob5hF6iOxPu0kF5pwDC/nA63qbtFmF1mDtxEWWHaXbNH/JExNxXMtBJQfLsSX DkEZX/YuaJqbNfTCqsDWu2WJn5WmBrbv1OYJB7tXuoD7ZkBKrZfoSTITQuWjZxOf hlwTHQV8gCjT/X04GxE6WclaoiQvItxgIi7aPZK/G4ftatspUpGZ5inAtXF31cGl zY9NGVfsU/vypwETcCV/ClrBDcju7gijyT6ZYtXEqRMYTpPC6TBOjNZ6Z75RcXCd QGANu5N2e6ioXwnmySBtg8P8F6H1Qyg51Mujd6d4w5cSJvGlhc2jaAZlDYpZUJbz xbRvsIi2ivk45A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:43 2026 by rpki-client