This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: me3TctwQoGJ9oPx3iw8r3JFBBckraKNwpma9w0pkKJ0= Subject key identifier: BA:90:7D:F8:67:09:0B:EC:F7:63:A6:28:9D:38:DD:52:B5:18:39:FE Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019BF2E2A3F4092418EF0BCA8B9375B7D948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 17FF Signing time: Sun 25 Jan 2026 02:01:37 +0000 Manifest this update: Sun 25 Jan 2026 02:01:37 +0000 Manifest next update: Mon 26 Jan 2026 02:01:37 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: MaGLlkogbpXONvn7mGVN99wfV9w5A8lgjogO2HMFtIw=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:a3:f4:09:24:18:ef:0b:ca:8b:93:75:b7:d9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jan 25 02:01:37 2026 GMT Not After : Jan 26 02:01:37 2026 GMT Subject: CN=ba907df867090becf763a6289d38dd52b51839fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:08:94:03:a5:93:e5:ea:67:db:d9:7d:bf:6d: e0:61:97:df:b5:e8:1c:00:37:4f:3b:1d:b1:b0:33: 3d:50:d0:70:9d:8c:cd:0f:35:df:dd:11:6f:6f:e4: 6c:a7:e6:6e:3d:16:67:79:3f:77:6b:ee:cf:b4:a3: 95:26:6a:f9:f6:14:07:8a:9d:7c:66:3d:1b:f1:fe: 50:63:55:cb:30:1c:73:2a:d5:ae:83:98:5e:88:ff: 93:5e:58:19:24:33:32:fa:b5:bd:2b:04:02:9d:72: 9d:e4:f1:be:40:8c:1d:6d:8c:6c:9a:a6:4d:df:c7: 55:67:ea:b0:79:bd:0f:bc:dd:d5:19:a6:16:1e:35: d0:33:1f:82:f1:25:f5:44:40:6b:12:7f:f6:1e:73: 83:6f:1b:9f:f0:10:7b:de:f0:9b:b0:ef:c2:8d:9a: 96:e0:c5:03:84:e8:ec:54:55:42:e2:c2:d0:a0:e6: b1:27:e8:49:24:40:36:35:c7:5c:09:86:b4:4e:28: 0a:a8:83:ae:27:ed:0e:86:67:f4:f6:e2:88:6c:57: 0a:b1:01:dc:65:bc:d1:a3:5c:12:e3:42:62:1a:54: e0:69:78:ec:78:a7:6b:fa:8d:1f:b4:a0:8a:9e:67: 86:0e:1c:e6:ac:19:a8:e5:24:c0:b5:89:42:c5:22: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:7D:F8:67:09:0B:EC:F7:63:A6:28:9D:38:DD:52:B5:18:39:FE X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f7:6e:93:b1:a2:fe:1f:2a:89:b5:88:9f:de:95:2c:9e:51: 7d:6a:bb:04:ec:b9:00:98:27:7e:16:78:53:97:85:5d:78:55: 9c:73:c9:b7:7b:7e:7a:ca:dc:fb:92:3c:10:ec:4e:26:2c:6b: c7:23:1c:b4:74:56:28:de:97:a1:b8:4a:4c:30:9a:b8:09:db: 91:b5:e5:d7:8d:dc:d5:48:28:04:8d:cd:8a:5a:7e:47:54:5d: 69:e4:76:07:a3:3b:de:eb:7b:f4:c9:41:60:0e:40:71:8a:a5: c9:74:38:f7:a9:d5:47:eb:3b:59:5f:49:fb:e4:03:fe:b5:9c: 98:ad:38:5c:8d:90:f0:fe:89:80:99:dc:24:7d:fd:2f:d9:09: 2e:33:e2:44:ea:34:ca:7b:98:e0:a2:00:83:99:9a:b8:5c:09: 9e:be:4f:86:4f:af:e6:30:70:97:c8:69:47:5f:63:a3:43:c8: 19:9a:cc:9c:6b:06:2d:cb:6f:25:b1:bc:20:35:40:53:f3:44: c0:16:5c:71:b9:97:49:15:24:8e:e1:63:d8:ad:74:6d:8f:61: 9a:19:57:25:5c:35:e7:f7:6c:3a:f8:0c:20:47:51:ff:67:d4: 1c:a7:57:e7:1e:82:79:53:ed:10:55:4c:ff:f6:ba:a5:19:ec: cf:b4:88:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4qP0CSQY7wvKi5N1t9lIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMTI1MDIwMTM3WhcNMjYwMTI2MDIwMTM3WjAzMTEwLwYDVQQD EyhiYTkwN2RmODY3MDkwYmVjZjc2M2E2Mjg5ZDM4ZGQ1MmI1MTgzOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wiUA6WT5epn29l9v23gYZfftegc ADdPOx2xsDM9UNBwnYzNDzXf3RFvb+Rsp+ZuPRZneT93a+7PtKOVJmr59hQHip18 Zj0b8f5QY1XLMBxzKtWug5heiP+TXlgZJDMy+rW9KwQCnXKd5PG+QIwdbYxsmqZN 38dVZ+qweb0PvN3VGaYWHjXQMx+C8SX1REBrEn/2HnODbxuf8BB73vCbsO/CjZqW 4MUDhOjsVFVC4sLQoOaxJ+hJJEA2NcdcCYa0TigKqIOuJ+0Ohmf09uKIbFcKsQHc ZbzRo1wS40JiGlTgaXjseKdr+o0ftKCKnmeGDhzmrBmo5STAtYlCxSLluQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqQffhnCQvs92OmKJ043VK1GDn+MB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPduk7Gi /h8qibWIn96VLJ5RfWq7BOy5AJgnfhZ4U5eFXXhVnHPJt3t+esrc+5I8EOxOJixr xyMctHRWKN6XobhKTDCauAnbkbXl143c1UgoBI3Nilp+R1RdaeR2B6M73ut79MlB YA5AcYqlyXQ496nVR+s7WV9J++QD/rWcmK04XI2Q8P6JgJncJH39L9kJLjPiROo0 ynuY4KIAg5mauFwJnr5Phk+v5jBwl8hpR19jo0PIGZrMnGsGLctvJbG8IDVAU/NE wBZccbmXSRUkjuFj2K10bY9hmhlXJVw15/dsOvgMIEdR/2fUHKdX5x6CeVPtEFVM //a6pRnsz7SIkA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:30 2026 by rpki-client