This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json) Hash identifier: ig6ttBj75SixNLmjCnQCU6SQEcs2Ff8dGtWej+Uhlmg= Subject key identifier: 83:E5:29:0B:92:4F:D1:3D:FF:7E:84:D2:91:0A:D6:24:06:1C:4B:4C Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Certificate serial: 019BF4992E129FBBED37901DDF79AD16E7D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft Manifest number: 0B7E Signing time: Sun 25 Jan 2026 10:00:38 +0000 Manifest this update: Sun 25 Jan 2026 10:00:38 +0000 Manifest next update: Mon 26 Jan 2026 10:00:38 +0000 Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=) 2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=) 3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=) 4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=) 5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: rzC+yZq24EFw3sKbcMkHvB25YQX+Mg8hA306dsa4QKo=) 6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=) 7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=) 8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:2e:12:9f:bb:ed:37:90:1d:df:79:ad:16:e7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Validity Not Before: Jan 25 10:00:38 2026 GMT Not After : Jan 26 10:00:38 2026 GMT Subject: CN=83e5290b924fd13dff7e84d2910ad624061c4b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:3b:4a:af:d3:a2:01:f3:f3:0b:9d:3d:93: 66:0d:1e:00:31:86:7e:49:a8:cf:c3:b3:11:df:e4: d4:29:06:84:13:22:aa:78:0d:26:05:2e:00:bf:4d: 5e:6c:4c:9a:c3:1c:5e:ad:d2:52:9f:5a:78:16:0d: d7:ff:9f:60:97:cd:f3:28:ad:5a:fa:49:16:f9:60: cc:2d:7d:42:e9:3f:b0:14:d4:dd:1d:91:89:07:ef: ec:06:47:b9:5d:41:4f:25:1b:f4:db:01:16:ea:b2: b2:5e:a7:11:73:41:41:ff:26:68:a4:a0:37:a9:d9: 5a:4f:2d:9d:2d:8a:0d:a7:ee:7a:00:a0:5d:67:9f: a2:b1:f0:51:fb:e5:2b:72:9f:24:43:37:c9:7e:d5: 95:62:90:70:d5:11:59:e5:e5:b9:d7:5f:33:f8:66: dd:7c:77:95:fd:7c:6c:8e:03:56:67:1a:8b:00:aa: 45:a2:6b:20:06:5f:b3:e0:14:fb:b8:30:81:d3:e6: 9c:79:8f:3a:10:25:57:0b:83:58:7a:36:a4:18:79: 20:95:bc:86:4f:c7:bd:6a:c1:7f:a2:e5:22:14:d9: 68:e6:7e:7d:7e:23:ec:00:20:5b:7c:2d:68:d8:87: cb:af:1f:4c:82:d5:49:4b:b2:b8:fe:b7:48:72:6f: 34:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E5:29:0B:92:4F:D1:3D:FF:7E:84:D2:91:0A:D6:24:06:1C:4B:4C X509v3 Authority Key Identifier: keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bd:47:38:58:c7:e5:53:0f:7e:4a:c4:ea:cb:c6:36:fb:00: e2:16:07:24:2a:1b:33:f8:bc:b4:d3:4a:7c:9d:63:da:20:59: da:a7:09:bf:83:3f:06:14:21:8b:2d:61:33:8d:ce:2b:94:66: 1b:10:17:70:72:d7:5b:62:0f:40:6b:76:d4:c0:7a:9d:11:46: 30:f0:16:f6:94:54:f0:71:e2:47:42:0d:e1:23:96:03:88:e6: 75:9b:da:c2:56:a0:97:98:1d:83:27:08:3e:b1:b9:34:7d:95: 17:10:b8:7e:9f:22:1f:57:b4:27:12:d4:95:ad:c5:87:db:74: a5:b5:13:22:96:24:db:9a:8e:19:87:96:5d:72:2d:d0:32:93: 1d:86:16:8e:c5:c5:0b:0e:6c:10:17:de:8d:fa:ea:4f:79:96: be:e1:90:36:96:6e:9e:39:01:b5:17:74:7d:e0:eb:2f:07:6e: 9a:72:2f:1b:a5:ac:20:2c:42:1a:61:4a:db:51:37:09:21:28: 3f:54:0a:1d:f4:51:53:87:d2:9e:87:c6:1b:0c:e4:a0:19:f8: fb:02:ac:4a:2a:ea:0f:6d:82:5d:02:cd:01:a1:54:e0:55:e0: 09:8a:b8:e3:92:0c:40:c8:ea:2a:4a:9e:cb:e6:45:cb:ff:9e: c5:57:59:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mS4Sn7vtN5Ad33mtFufRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl NmRiMGUwHhcNMjYwMTI1MTAwMDM4WhcNMjYwMTI2MTAwMDM4WjAzMTEwLwYDVQQD Eyg4M2U1MjkwYjkyNGZkMTNkZmY3ZTg0ZDI5MTBhZDYyNDA2MWM0YjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyE7Sq/TogHz8wudPZNmDR4AMYZ+ SajPw7MR3+TUKQaEEyKqeA0mBS4Av01ebEyawxxerdJSn1p4Fg3X/59gl83zKK1a +kkW+WDMLX1C6T+wFNTdHZGJB+/sBke5XUFPJRv02wEW6rKyXqcRc0FB/yZopKA3 qdlaTy2dLYoNp+56AKBdZ5+isfBR++Urcp8kQzfJftWVYpBw1RFZ5eW5118z+Gbd fHeV/XxsjgNWZxqLAKpFomsgBl+z4BT7uDCB0+aceY86ECVXC4NYejakGHkglbyG T8e9asF/ouUiFNlo5n59fiPsACBbfC1o2IfLrx9MgtVJS7K4/rdIcm80NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPlKQuST9E9/36E0pEK1iQGHEtMMB8GA1UdIwQY MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl71HOFjH 5VMPfkrE6svGNvsA4hYHJCobM/i8tNNKfJ1j2iBZ2qcJv4M/BhQhiy1hM43OK5Rm GxAXcHLXW2IPQGt21MB6nRFGMPAW9pRU8HHiR0IN4SOWA4jmdZvawlagl5gdgycI PrG5NH2VFxC4fp8iH1e0JxLUla3Fh9t0pbUTIpYk25qOGYeWXXIt0DKTHYYWjsXF Cw5sEBfejfrqT3mWvuGQNpZunjkBtRd0feDrLwdumnIvG6WsICxCGmFK21E3CSEo P1QKHfRRU4fSnofGGwzkoBn4+wKsSirqD22CXQLNAaFU4FXgCYq445IMQMjqKkqe y+ZFy/+exVdZPg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:46 2026 by rpki-client