This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json) Hash identifier: kvM/4nWXGx6WCCGm1Re9Rp2S7wMvMUxbPu8DG+IRf+Q= Subject key identifier: 42:CF:A3:0F:E3:F6:EB:80:BA:46:4D:87:78:3B:EF:32:02:83:A0:06 Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Certificate serial: 019BF6BF8536CD912BB51294E58B0679F6E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft Manifest number: 0F49 Signing time: Sun 25 Jan 2026 20:01:45 +0000 Manifest this update: Sun 25 Jan 2026 20:01:45 +0000 Manifest next update: Mon 26 Jan 2026 20:01:45 +0000 Files and hashes: 1: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: RZfmIpVGzxf5N2fWibU56ra6w6mGX6bBLNbCwT9uft8=) 2: yeEabSTnkLeywBVAwxOdpvb42Eo.roa (hash: PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:85:36:cd:91:2b:b5:12:94:e5:8b:06:79:f6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Validity Not Before: Jan 25 20:01:45 2026 GMT Not After : Jan 26 20:01:45 2026 GMT Subject: CN=42cfa30fe3f6eb80ba464d87783bef320283a006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:95:eb:2e:93:85:b3:1f:1f:80:a1:67:61: 13:3a:a5:4f:1b:57:8f:5a:5e:f1:19:da:e6:8e:a7: c8:14:5f:82:03:30:bb:1b:98:55:88:11:cd:e9:be: b0:d9:90:57:26:b3:e2:8b:d6:c7:ff:a8:9b:ad:9f: ab:57:6e:f1:dd:d2:7c:4a:5e:9d:19:b6:f8:64:6c: b7:fd:28:6d:d1:c2:11:ef:03:dc:bb:23:7e:8d:a0: e9:ae:30:a0:44:a5:af:dd:b7:f0:5e:7d:95:f9:f2: d7:61:e4:73:4d:92:21:44:fe:43:b5:c8:83:ce:ac: ba:5f:05:e4:6a:d0:ac:4b:53:ce:5a:34:b3:30:9e: 84:32:05:6a:6e:3a:52:87:0c:d3:5b:b0:bc:52:7e: 6b:e5:c3:6c:5e:8e:d5:38:89:2e:ff:01:b5:3d:da: 43:9c:b3:9d:cb:ac:9f:6d:d4:62:bf:e7:fd:c4:24: 00:57:9a:d0:a6:25:e3:f3:5b:b2:2e:ce:f9:68:c5: 3a:21:ee:ab:2e:9c:f4:10:57:ff:67:b5:5b:00:57: 35:6d:07:88:e6:83:4f:85:ab:e5:eb:e2:c0:99:9a: 98:25:48:db:33:ac:ca:58:61:14:62:87:cc:9a:c8: 83:7b:22:bc:62:4b:85:7d:5b:bb:f5:09:00:5e:d8: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:A3:0F:E3:F6:EB:80:BA:46:4D:87:78:3B:EF:32:02:83:A0:06 X509v3 Authority Key Identifier: keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:50:d9:7a:12:5b:1f:46:f8:9e:2e:5b:70:ff:21:03:c2:7e: af:15:14:5d:6b:16:ab:b0:b4:40:9f:dc:9f:bc:bc:ab:3d:ab: ca:69:22:37:a4:bd:ca:a4:2e:71:11:38:4c:39:ec:90:44:17: f4:92:6c:11:8d:da:ec:be:4e:05:d4:f1:06:a0:84:5b:9f:e7: 3e:7b:a0:f9:3a:01:3c:41:86:de:d7:f0:85:76:c1:31:70:7e: c7:08:ad:94:32:22:26:72:e2:a0:9f:68:62:b7:3c:2a:3b:64: 63:5b:af:1e:a2:e3:9c:22:4e:a1:4a:83:5a:cf:0f:cb:f6:3b: 3a:5d:87:73:e3:ab:65:6c:1d:6c:57:c8:a8:bb:06:e0:af:67: bc:dc:da:66:bd:20:b1:b3:d1:d4:b2:82:6f:7e:4a:93:5d:77: 47:54:a7:ea:51:42:37:a1:a8:33:83:4d:18:44:5f:d1:a2:1e: 3f:af:8e:95:67:47:aa:2c:17:48:56:0e:03:ce:17:36:12:4d: 30:bb:61:9e:43:ab:29:9a:0b:c2:43:24:6b:3b:b9:c8:a2:d7: bd:89:8d:72:9b:5a:9f:08:95:8b:9d:00:fd:94:ae:32:40:d2: 05:43:bd:22:5e:07:56:53:64:35:24:3c:54:59:9f:d7:77:36: 22:a6:e9:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v4U2zZErtRKU5YsGefbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2NiN2Q5ODJjN2Y5ZWRiYzkzZDRjYjQyYjk0ZmEwMjlj MzgyZGYwHhcNMjYwMTI1MjAwMTQ1WhcNMjYwMTI2MjAwMTQ1WjAzMTEwLwYDVQQD Eyg0MmNmYTMwZmUzZjZlYjgwYmE0NjRkODc3ODNiZWYzMjAyODNhMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGCV6y6ThbMfH4ChZ2ETOqVPG1eP Wl7xGdrmjqfIFF+CAzC7G5hViBHN6b6w2ZBXJrPii9bH/6ibrZ+rV27x3dJ8Sl6d Gbb4ZGy3/Sht0cIR7wPcuyN+jaDprjCgRKWv3bfwXn2V+fLXYeRzTZIhRP5DtciD zqy6XwXkatCsS1POWjSzMJ6EMgVqbjpShwzTW7C8Un5r5cNsXo7VOIku/wG1PdpD nLOdy6yfbdRiv+f9xCQAV5rQpiXj81uyLs75aMU6Ie6rLpz0EFf/Z7VbAFc1bQeI 5oNPhavl6+LAmZqYJUjbM6zKWGEUYofMmsiDeyK8YkuFfVu79QkAXthEZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELPow/j9uuAukZNh3g77zICg6AGMB8GA1UdIwQY MBaAFF48t9mCx/ntvJPUy0K5T6Apw4LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYt OWYyY2M2NGUwNzQ1LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYtOWYyY2M2NGUwNzQ1 LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVDZehJb H0b4ni5bcP8hA8J+rxUUXWsWq7C0QJ/cn7y8qz2rymkiN6S9yqQucRE4TDnskEQX 9JJsEY3a7L5OBdTxBqCEW5/nPnug+ToBPEGG3tfwhXbBMXB+xwitlDIiJnLioJ9o Yrc8KjtkY1uvHqLjnCJOoUqDWs8Py/Y7Ol2Hc+OrZWwdbFfIqLsG4K9nvNzaZr0g sbPR1LKCb35Kk113R1Sn6lFCN6GoM4NNGERf0aIeP6+OlWdHqiwXSFYOA84XNhJN MLthnkOrKZoLwkMkazu5yKLXvYmNcptanwiVi50A/ZSuMkDSBUO9Il4HVlNkNSQ8 VFmf13c2Iqbpiw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:40 2026 by rpki-client