This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: ncAXdktvzyiRg4oHkL115W9mzu3oZUdjg0+n2pSOTXw= Subject key identifier: 83:8D:7E:01:17:93:CD:9A:21:BD:46:46:1B:64:E6:6A:AA:89:54:59 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019BF763BDB9B4AC9B2CF83752A258CE47C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 10A6 Signing time: Sun 25 Jan 2026 23:01:07 +0000 Manifest this update: Sun 25 Jan 2026 23:01:07 +0000 Manifest next update: Mon 26 Jan 2026 23:01:07 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: f3S+rN9sIEjzxrTmnCG/NFxCzE0rRuJxD7Ydk3mT5D8=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:bd:b9:b4:ac:9b:2c:f8:37:52:a2:58:ce:47:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 25 23:01:07 2026 GMT Not After : Jan 26 23:01:07 2026 GMT Subject: CN=838d7e011793cd9a21bd46461b64e66aaa895459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:fd:22:30:84:76:6e:37:87:4e:a3:ea:22: 5f:f1:01:11:fe:74:42:57:b3:e7:36:de:36:da:90: ca:0f:d8:33:4e:88:28:4d:6b:15:5e:dd:0d:88:fa: 5e:0c:50:ca:a9:13:66:5f:b1:96:a4:9b:07:43:c0: 8e:6c:f7:74:1f:ab:1c:c7:62:73:be:42:2e:45:fd: 74:07:6c:43:e1:1b:bc:2e:f4:7f:22:2f:8f:d7:3f: e0:06:8e:50:a8:d5:3d:4b:54:69:be:2e:3a:0e:f8: 38:8a:f3:da:e3:ff:48:82:58:a3:30:b1:24:b9:ec: 54:06:6d:4e:a9:d7:22:17:7f:36:fc:26:61:c3:1f: 4a:f3:69:c4:28:56:b1:8d:80:c8:57:c7:1f:2e:d3: a9:32:26:29:49:db:e6:4c:99:9f:fd:15:0f:d5:b9: f1:d5:f5:0d:4f:9c:ba:1a:40:f5:c1:9b:2c:58:d1: ea:b9:7c:e7:58:6c:3c:2c:56:6c:00:95:77:ec:6c: ba:be:9d:81:4f:1d:44:81:ad:12:67:05:70:06:35: 26:d0:ed:10:6b:6e:ad:d3:3f:61:7b:80:32:ed:10: 92:4c:5b:96:84:ef:cf:6b:bf:29:0a:48:ef:09:81: 3a:16:de:1a:de:e7:d2:17:a5:b3:7a:dc:df:96:d1: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:7E:01:17:93:CD:9A:21:BD:46:46:1B:64:E6:6A:AA:89:54:59 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a6:93:2c:13:44:36:a9:f5:fa:84:78:5b:17:86:25:0e:cc: 5a:3f:a8:e1:d8:d4:f3:dc:f6:59:9e:8a:33:dc:d8:71:56:56: 14:c9:41:44:81:b5:c1:ed:ae:3c:c3:90:0a:aa:65:e6:d2:c1: 94:a1:bd:d1:70:c4:68:18:1f:83:9f:b8:ad:1d:30:23:a9:df: f4:d6:47:69:9a:bf:dc:13:eb:f2:c3:7d:86:5e:9f:39:c1:36: a7:59:b7:31:58:88:c1:cd:77:a9:ea:40:07:4a:51:4d:bf:9c: 96:02:5e:b6:68:32:e9:e5:6c:c9:7b:e5:ef:eb:46:6a:45:9e: e0:5d:62:78:f7:02:fc:f2:dd:b3:17:6c:1f:7f:05:12:d9:ed: ed:80:c9:fb:a3:34:71:11:15:ae:1e:d3:88:c6:82:ac:89:e2: c8:37:9b:50:f7:5e:b0:d1:69:5c:3c:95:e0:c0:4f:ec:3e:37: 52:e1:07:cc:ff:69:4f:f5:fa:52:e5:5b:11:15:8c:0e:fe:a5: bb:70:e7:7a:d9:0d:e0:ee:0a:c0:02:6f:0b:e3:86:31:69:20: aa:8e:76:d0:43:4c:0f:da:74:1b:d7:70:bb:b6:ee:ba:d2:5b: 43:15:56:fd:21:98:5c:b7:fb:11:38:b3:de:f8:b7:bd:77:5d: 5f:c9:de:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y725tKybLPg3UqJYzkfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTI1MjMwMTA3WhcNMjYwMTI2MjMwMTA3WjAzMTEwLwYDVQQD Eyg4MzhkN2UwMTE3OTNjZDlhMjFiZDQ2NDYxYjY0ZTY2YWFhODk1NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHH9IjCEdm43h06j6iJf8QER/nRC V7PnNt422pDKD9gzTogoTWsVXt0NiPpeDFDKqRNmX7GWpJsHQ8CObPd0H6scx2Jz vkIuRf10B2xD4Ru8LvR/Ii+P1z/gBo5QqNU9S1Rpvi46Dvg4ivPa4/9IglijMLEk uexUBm1OqdciF382/CZhwx9K82nEKFaxjYDIV8cfLtOpMiYpSdvmTJmf/RUP1bnx 1fUNT5y6GkD1wZssWNHquXznWGw8LFZsAJV37Gy6vp2BTx1Ega0SZwVwBjUm0O0Q a26t0z9he4Ay7RCSTFuWhO/Pa78pCkjvCYE6Ft4a3ufSF6WzetzfltGzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIONfgEXk82aIb1GRhtk5mqqiVRZMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKaTLBNE Nqn1+oR4WxeGJQ7MWj+o4djU89z2WZ6KM9zYcVZWFMlBRIG1we2uPMOQCqpl5tLB lKG90XDEaBgfg5+4rR0wI6nf9NZHaZq/3BPr8sN9hl6fOcE2p1m3MViIwc13qepA B0pRTb+clgJetmgy6eVsyXvl7+tGakWe4F1iePcC/PLdsxdsH38FEtnt7YDJ+6M0 cREVrh7TiMaCrIniyDebUPdesNFpXDyV4MBP7D43UuEHzP9pT/X6UuVbERWMDv6l u3DnetkN4O4KwAJvC+OGMWkgqo520ENMD9p0G9dwu7buutJbQxVW/SGYXLf7ETiz 3vi3vXddX8nesw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:33 2026 by rpki-client