This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json) Hash identifier: PzDJWSQEs5Df1t4pMMyQvNvKADaNsAS4Rh0s6rQ9t7E= Subject key identifier: 45:BF:CD:A5:79:EB:68:4C:63:96:87:88:5F:14:43:6B:F1:44:F2:AC Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Certificate serial: 019BF8E45C652562C66C6C7922B83E3E34E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 06:01:13 +0000 Manifest this update: Mon 26 Jan 2026 06:01:13 +0000 Manifest next update: Tue 27 Jan 2026 06:01:13 +0000 Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=) 2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=) 3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: 4rAfI4nSM19476YHolzq3caXfrBrey9pHGqkoxL/shg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:5c:65:25:62:c6:6c:6c:79:22:b8:3e:3e:34:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Validity Not Before: Jan 26 06:01:13 2026 GMT Not After : Jan 27 06:01:13 2026 GMT Subject: CN=45bfcda579eb684c639687885f14436bf144f2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:ba:31:eb:89:a9:30:49:ab:fa:52:44:72: bf:b1:e7:00:6a:59:5e:bd:78:68:72:7f:f9:7b:42: 98:4a:93:ab:f9:57:64:ce:13:42:3f:a0:8a:be:42: ad:54:79:8f:c3:be:8d:c4:9c:78:56:e8:11:b0:8b: dd:d4:73:73:41:87:1a:f3:99:42:be:19:f4:dd:0a: 2d:76:1a:9b:bb:d2:53:fa:f3:9a:97:a6:07:9d:8d: 4b:3a:71:d8:1d:ae:86:0f:d0:8a:5c:ae:ff:4b:fc: ba:8e:19:b2:56:b6:9e:ef:2b:a0:c9:67:d1:13:3d: 48:f8:ed:07:ca:a7:f8:dd:92:58:89:d9:0b:5b:78: ee:28:a9:db:aa:7c:a1:9c:e3:1f:9e:53:ce:ab:06: b3:aa:a7:1c:74:cd:7e:49:77:92:a1:e9:da:ce:82: 2b:9e:44:bc:13:4d:72:e3:73:4a:57:a4:0f:19:42: af:b8:23:b0:58:bc:0b:a6:57:10:dc:bd:dc:2b:43: 21:bc:75:95:4b:64:45:10:94:e2:aa:0e:74:45:10: 29:76:c9:be:0c:26:2c:2c:e3:9e:b6:b4:c7:51:08: 96:dd:4e:c6:61:d5:3d:27:f8:56:1b:06:7b:c6:b3: 8a:c9:19:1f:86:c1:4a:42:60:8b:5c:fb:df:1c:7b: c8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BF:CD:A5:79:EB:68:4C:63:96:87:88:5F:14:43:6B:F1:44:F2:AC X509v3 Authority Key Identifier: keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fa:70:4a:93:79:3f:db:8e:51:e7:56:a7:be:78:31:e6:f0: 37:2e:9e:d3:05:9f:fc:67:ab:1b:d7:12:9f:fd:9f:11:c0:41: ac:01:3e:e0:d3:45:d1:06:ca:bd:9f:f9:d6:31:bf:c1:7d:e6: 53:f8:4b:1d:f7:2d:5e:05:2d:6a:ae:74:05:9c:64:7a:1d:bc: b7:8b:c9:d3:d7:84:9d:b8:43:21:2c:9a:7c:4e:3c:09:fd:aa: 08:ab:f7:f9:41:3a:7b:49:ab:57:aa:df:a4:5e:09:d3:71:92: b3:76:ce:ea:d6:3e:a4:3e:35:a4:e0:28:32:7a:af:e9:96:42: fe:4b:1e:77:4d:d9:4f:11:6b:e0:0d:f9:4c:a5:98:de:29:7a: e4:6d:17:4b:ae:d8:04:fc:9d:f5:8c:59:b4:24:ad:ee:35:a2: ac:24:6d:07:ea:e6:07:87:cc:40:89:8a:01:0f:5b:b4:db:13: 65:6c:67:f5:2b:5c:00:4a:a2:ce:94:c3:30:32:3b:3a:bf:5b: f8:70:06:59:40:26:51:d3:9b:5c:4b:4a:73:37:cb:f0:11:b6: 1b:74:0b:a9:d7:4d:e9:b6:15:82:43:c7:51:f7:a5:50:09:d0: 0b:d7:f4:a0:0c:1f:ea:c9:e9:5e:30:1c:5a:88:2c:47:40:b8: d2:81:5a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45FxlJWLGbGx5Irg+PjTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi OWNiOTMwHhcNMjYwMTI2MDYwMTEzWhcNMjYwMTI3MDYwMTEzWjAzMTEwLwYDVQQD Eyg0NWJmY2RhNTc5ZWI2ODRjNjM5Njg3ODg1ZjE0NDM2YmYxNDRmMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3e6MeuJqTBJq/pSRHK/secAalle vXhocn/5e0KYSpOr+VdkzhNCP6CKvkKtVHmPw76NxJx4VugRsIvd1HNzQYca85lC vhn03Qotdhqbu9JT+vOal6YHnY1LOnHYHa6GD9CKXK7/S/y6jhmyVrae7yugyWfR Ez1I+O0Hyqf43ZJYidkLW3juKKnbqnyhnOMfnlPOqwazqqccdM1+SXeSoenazoIr nkS8E01y43NKV6QPGUKvuCOwWLwLplcQ3L3cK0MhvHWVS2RFEJTiqg50RRApdsm+ DCYsLOOetrTHUQiW3U7GYdU9J/hWGwZ7xrOKyRkfhsFKQmCLXPvfHHvIewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW/zaV562hMY5aHiF8UQ2vxRPKsMB8GA1UdIwQY MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2 LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPpwSpN5 P9uOUedWp754MebwNy6e0wWf/GerG9cSn/2fEcBBrAE+4NNF0QbKvZ/51jG/wX3m U/hLHfctXgUtaq50BZxkeh28t4vJ09eEnbhDISyafE48Cf2qCKv3+UE6e0mrV6rf pF4J03GSs3bO6tY+pD41pOAoMnqv6ZZC/ksed03ZTxFr4A35TKWY3il65G0XS67Y BPyd9YxZtCSt7jWirCRtB+rmB4fMQImKAQ9btNsTZWxn9StcAEqizpTDMDI7Or9b +HAGWUAmUdObXEtKczfL8BG2G3QLqddN6bYVgkPHUfelUAnQC9f0oAwf6snpXjAc WogsR0C40oFazA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:38 2026 by rpki-client