This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json) Hash identifier: o9T5Gl1ezGtGq/zz+uhFKmVByoticR+bcI3jXcg9tFc= Subject key identifier: F2:10:6D:CC:9C:2C:EB:50:A0:86:6C:F4:1C:47:C6:5D:28:15:51:2E Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Certificate serial: 019BF4D0A4175E35A92F168F021710594C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft Manifest number: 1354 Signing time: Sun 25 Jan 2026 11:01:12 +0000 Manifest this update: Sun 25 Jan 2026 11:01:12 +0000 Manifest next update: Mon 26 Jan 2026 11:01:12 +0000 Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=) 2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: XVHOE6JkNxfQCMM2mJDSrmPgEo0XJ2YLZer5vHeiRsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:a4:17:5e:35:a9:2f:16:8f:02:17:10:59:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Validity Not Before: Jan 25 11:01:12 2026 GMT Not After : Jan 26 11:01:12 2026 GMT Subject: CN=f2106dcc9c2ceb50a0866cf41c47c65d2815512e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:a9:6d:8c:2e:64:69:1b:d7:69:6b:79:0f: ed:df:d0:2f:71:9c:fb:2e:75:32:ce:3b:40:b8:92: 9f:11:71:b6:30:01:4e:fc:82:ee:32:14:54:63:03: c8:b7:c6:a9:04:7f:55:7e:52:cf:42:90:98:9e:db: b2:13:7d:ca:67:11:48:02:96:1d:96:ff:bf:f4:dd: fe:81:46:f1:39:e9:3a:74:2a:d9:3b:f4:1a:cb:3b: 5d:e2:86:87:63:43:ac:b6:35:dd:bf:60:d5:b8:f1: 6b:98:1b:b2:a7:71:ec:e9:0e:e4:78:50:e9:82:db: b6:1d:74:14:bf:ac:f5:83:14:a6:7e:66:fb:0c:13: 3f:8d:bf:5e:3b:6f:3c:39:41:c9:89:b5:72:2b:2b: 7e:cd:94:c3:3d:a2:7c:c8:44:54:7c:d1:f8:04:e2: 7b:d8:53:74:17:2b:5c:d0:87:87:4b:88:54:f8:fc: be:ca:be:e8:6e:20:22:6c:30:52:44:24:81:83:49: 81:ff:6d:64:8f:4b:71:a8:f6:ce:46:df:82:d6:b9: 09:d1:c1:70:df:09:e7:e7:10:b7:95:f8:65:5f:8e: 34:7e:a6:67:1c:39:49:ef:cf:e9:1f:4c:87:a7:21: 45:71:f4:fc:cd:53:ee:88:5b:33:ad:6b:3d:f1:87: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:6D:CC:9C:2C:EB:50:A0:86:6C:F4:1C:47:C6:5D:28:15:51:2E X509v3 Authority Key Identifier: keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:70:26:4d:ba:96:07:88:da:ca:a7:c4:32:1b:fd:47:0a:45: 09:25:ff:40:8f:d9:a9:6e:c0:91:83:e0:16:a8:bd:6b:8c:30: 61:f4:e5:4f:ac:be:12:5f:1f:63:59:14:51:47:93:ea:9b:f0: b1:04:6c:ee:dc:61:a3:2d:16:a0:f7:bc:21:3c:ae:b5:18:31: c5:c0:c0:2a:c4:27:b1:4b:a8:22:c5:4c:c5:9b:31:80:07:4e: 62:53:e4:58:18:39:b7:50:ec:79:a5:75:e7:fe:7b:63:a3:80: 97:ec:36:86:e7:4d:6f:ea:14:3e:70:8c:3c:55:c1:c0:c4:53: fe:19:78:54:b6:5c:93:40:1b:4e:48:ec:bf:c9:19:34:ac:64: 68:5d:f5:76:9a:b1:b0:20:b1:fd:d9:92:02:ac:28:79:9d:1e: 4c:bb:94:f8:bd:a3:87:cd:45:95:50:0a:8a:51:da:71:b5:3e: f7:c9:11:ad:24:14:65:31:fd:ba:af:e4:7b:f7:9d:4f:b9:32: 4c:0b:32:90:56:eb:d4:2b:ff:83:f4:c8:3f:22:7e:48:5f:89: 35:09:b1:61:3b:a2:c4:56:f7:fa:5e:08:31:8d:1c:13:2f:48: 06:ba:e0:e6:0a:39:ef:36:47:31:77:a3:ed:a0:d3:7c:64:c4: 2d:4e:4f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00KQXXjWpLxaPAhcQWUyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMTEwYTJiMGFlYjM3ZjBjOTMyYTk2YmRiYmY3ZWYzNmMy MTE5N2MwHhcNMjYwMTI1MTEwMTEyWhcNMjYwMTI2MTEwMTEyWjAzMTEwLwYDVQQD EyhmMjEwNmRjYzljMmNlYjUwYTA4NjZjZjQxYzQ3YzY1ZDI4MTU1MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQapbYwuZGkb12lreQ/t39AvcZz7 LnUyzjtAuJKfEXG2MAFO/ILuMhRUYwPIt8apBH9VflLPQpCYntuyE33KZxFIApYd lv+/9N3+gUbxOek6dCrZO/Qayztd4oaHY0OstjXdv2DVuPFrmBuyp3Hs6Q7keFDp gtu2HXQUv6z1gxSmfmb7DBM/jb9eO288OUHJibVyKyt+zZTDPaJ8yERUfNH4BOJ7 2FN0Fytc0IeHS4hU+Py+yr7obiAibDBSRCSBg0mB/21kj0txqPbORt+C1rkJ0cFw 3wnn5xC3lfhlX440fqZnHDlJ78/pH0yHpyFFcfT8zVPuiFszrWs98YcsUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIQbcycLOtQoIZs9BxHxl0oFVEuMB8GA1UdIwQY MBaAFFwRCisK6zfwyTKpa9u/fvNsIRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzIt YTQ0MjI0ZmFjM2ZmLzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzItYTQ0MjI0ZmFjM2Zm LzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHAmTbqW B4jayqfEMhv9RwpFCSX/QI/ZqW7AkYPgFqi9a4wwYfTlT6y+El8fY1kUUUeT6pvw sQRs7txhoy0WoPe8ITyutRgxxcDAKsQnsUuoIsVMxZsxgAdOYlPkWBg5t1DseaV1 5/57Y6OAl+w2hudNb+oUPnCMPFXBwMRT/hl4VLZck0AbTkjsv8kZNKxkaF31dpqx sCCx/dmSAqwoeZ0eTLuU+L2jh81FlVAKilHacbU+98kRrSQUZTH9uq/ke/edT7ky TAsykFbr1Cv/g/TIPyJ+SF+JNQmxYTuixFb3+l4IMY0cEy9IBrrg5go57zZHMXej 7aDTfGTELU5Pxw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:30 2026 by rpki-client