This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json) Hash identifier: o5IJAfcR2gtQAXOk0kz5kUJU55DAuPgmi0RT6XsFO5U= Subject key identifier: EC:51:09:0B:C7:78:B1:B5:E2:AC:B9:16:8A:DF:9E:23:FC:C7:63:97 Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Certificate serial: 019BF6879455455C9B18D6EE2EFB37EF1E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft Manifest number: 0B7F Signing time: Sun 25 Jan 2026 19:00:39 +0000 Manifest this update: Sun 25 Jan 2026 19:00:39 +0000 Manifest next update: Mon 26 Jan 2026 19:00:39 +0000 Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=) 2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=) 3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=) 4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=) 5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: Y88goOGCJDk5f8XJhu0QDOxTKVRALJ5p+BuUzmdo9ZE=) 6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=) 7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=) 8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:94:55:45:5c:9b:18:d6:ee:2e:fb:37:ef:1e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Validity Not Before: Jan 25 19:00:39 2026 GMT Not After : Jan 26 19:00:39 2026 GMT Subject: CN=ec51090bc778b1b5e2acb9168adf9e23fcc76397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:28:42:39:2b:03:1e:83:d5:b8:a0:c0:75: 2b:f2:5d:2c:9a:52:a3:f0:42:67:d2:11:92:3f:f9: 8e:25:f4:a0:28:b9:99:9f:e5:96:1e:49:9b:e6:4f: 3e:c5:d9:9c:e5:c6:57:22:a7:84:93:3b:73:4c:11: 37:dd:58:9a:cc:ae:9d:fc:e2:a0:05:d1:ce:80:6c: 2d:11:66:1a:8e:9b:ac:9a:09:97:39:ec:6a:65:02: 62:24:91:ab:52:37:25:1a:36:49:d2:5a:e2:02:fd: 04:06:c7:90:a3:3d:2b:2e:d0:bf:62:17:37:19:63: 3b:93:21:05:e6:54:d9:b5:9c:f0:50:80:e1:0c:d1: 99:f5:fd:db:f6:de:7a:8e:51:6c:dd:ce:e2:ee:1f: 46:99:f8:d0:50:09:b0:ba:af:1d:54:41:f5:d9:45: 0b:ac:79:25:19:87:c1:e6:45:8a:a9:39:af:9a:de: b7:ce:11:1d:ad:72:67:fd:ee:7a:83:0b:21:ae:41: 6a:ab:fb:56:6f:e7:12:2f:e3:4d:ee:57:50:89:cd: dc:31:c4:98:39:81:a9:6f:41:cc:91:aa:25:c5:29: d0:a2:57:e8:72:62:5b:c3:d2:67:6c:c7:b9:0b:6a: f9:9b:a9:03:14:ac:b7:e1:f0:24:9a:51:41:d6:4c: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:09:0B:C7:78:B1:B5:E2:AC:B9:16:8A:DF:9E:23:FC:C7:63:97 X509v3 Authority Key Identifier: keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8e:e2:08:c5:25:2a:ef:fb:f9:62:64:43:c2:24:24:44:1d: 4f:3e:4a:99:21:d4:a5:b0:1b:72:bf:46:2a:f4:54:ce:12:ff: 29:6b:66:9b:74:09:a6:14:d7:86:6c:f1:b0:ac:30:6d:3d:70: 29:43:e0:05:85:7b:d2:4a:cd:d0:d7:5f:47:ae:44:be:80:c3: 9e:36:ed:5f:93:07:d8:d4:65:a4:a4:f8:b8:42:b7:66:da:90: 9b:9d:48:6f:6a:fe:ef:75:5d:ca:e5:63:b5:dd:7b:9e:5d:5d: 58:9a:ee:05:2c:ae:dc:a2:67:fa:c7:02:ec:1b:5a:40:d9:f2: 5b:9f:aa:6d:58:b5:53:2b:00:d3:be:a6:34:81:3a:c8:7d:b3: 3a:cc:f6:63:fe:02:c0:3b:05:e2:e9:84:e0:e9:09:d0:f4:cc: cb:c3:4b:97:42:ab:e9:9a:14:cd:b0:92:6c:ba:8a:5f:d1:8f: 55:f7:2a:e9:1c:a7:be:2f:66:d4:85:9e:f5:4f:e5:c9:9f:8a: 45:96:e4:90:2e:ef:51:7a:a3:6a:a6:25:1d:b4:1d:b8:a7:4b: 89:c4:9d:67:fd:2a:ed:07:66:2a:42:19:73:42:b5:cd:cd:e7: 62:b4:51:b1:a5:5b:93:69:42:60:00:3e:25:49:bd:4d:0e:3e: d2:30:a7:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h5RVRVybGNbuLvs37x4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl NmRiMGUwHhcNMjYwMTI1MTkwMDM5WhcNMjYwMTI2MTkwMDM5WjAzMTEwLwYDVQQD EyhlYzUxMDkwYmM3NzhiMWI1ZTJhY2I5MTY4YWRmOWUyM2ZjYzc2Mzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/4oQjkrAx6D1bigwHUr8l0smlKj 8EJn0hGSP/mOJfSgKLmZn+WWHkmb5k8+xdmc5cZXIqeEkztzTBE33ViazK6d/OKg BdHOgGwtEWYajpusmgmXOexqZQJiJJGrUjclGjZJ0lriAv0EBseQoz0rLtC/Yhc3 GWM7kyEF5lTZtZzwUIDhDNGZ9f3b9t56jlFs3c7i7h9GmfjQUAmwuq8dVEH12UUL rHklGYfB5kWKqTmvmt63zhEdrXJn/e56gwshrkFqq/tWb+cSL+NN7ldQic3cMcSY OYGpb0HMkaolxSnQolfocmJbw9JnbMe5C2r5m6kDFKy34fAkmlFB1kyARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxRCQvHeLG14qy5ForfniP8x2OXMB8GA1UdIwQY MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFo7iCMUl Ku/7+WJkQ8IkJEQdTz5KmSHUpbAbcr9GKvRUzhL/KWtmm3QJphTXhmzxsKwwbT1w KUPgBYV70krN0NdfR65EvoDDnjbtX5MH2NRlpKT4uEK3ZtqQm51Ib2r+73VdyuVj td17nl1dWJruBSyu3KJn+scC7BtaQNnyW5+qbVi1UysA076mNIE6yH2zOsz2Y/4C wDsF4umE4OkJ0PTMy8NLl0Kr6ZoUzbCSbLqKX9GPVfcq6Rynvi9m1IWe9U/lyZ+K RZbkkC7vUXqjaqYlHbQduKdLicSdZ/0q7QdmKkIZc0K1zc3nYrRRsaVbk2lCYAA+ JUm9TQ4+0jCnlg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:53:25 2026 by rpki-client