This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: fp2BL+qVrJkLTLPm4gjVFtvWmxdvjMCmNkjLHvA2w/g=
Subject key identifier: 7F:CC:B2:30:26:25:34:22:5D:74:0D:68:32:EC:AD:30:00:D4:75:B9
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019BF65112353F1EAB46B94C9E14FF642ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 07A9
Signing time: Sun 25 Jan 2026 18:01:06 +0000
Manifest this update: Sun 25 Jan 2026 18:01:06 +0000
Manifest next update: Mon 26 Jan 2026 18:01:06 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: RF8LuDnHFcsmGeavim4U85n8aG1OoJpdKCCQ+3dDc+k=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:12:35:3f:1e:ab:46:b9:4c:9e:14:ff:64:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Jan 25 18:01:06 2026 GMT
Not After : Jan 26 18:01:06 2026 GMT
Subject: CN=7fccb230262534225d740d6832ecad3000d475b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:18:a7:c5:e4:4b:67:b5:5a:06:ac:a0:a7:
4e:8b:4f:5c:b8:8a:7d:fa:19:7b:53:36:4a:25:2d:
43:0f:ef:17:e3:ef:8d:8b:51:bf:40:c5:a0:27:c1:
e2:e9:47:6a:ef:ed:32:14:a8:9e:c8:6d:01:0f:3e:
1d:c9:81:b5:50:10:b2:96:f0:fa:f6:6d:d6:ac:ea:
52:f1:b5:ef:d5:47:e4:21:09:04:74:16:21:5d:e9:
d3:bd:35:8d:45:09:cb:40:2a:21:6e:37:25:2b:d7:
a0:1a:fa:28:f8:d3:50:36:25:31:83:0d:f0:1c:54:
8c:cb:a9:7c:02:26:23:f3:01:b4:17:eb:44:56:3f:
65:f1:78:e7:19:2e:bb:75:2a:2e:f6:c3:91:e4:4c:
a0:89:a2:a5:76:36:11:73:06:97:76:bb:76:4d:c2:
6a:fa:8a:52:10:46:cd:7d:df:76:d8:2a:80:a3:fc:
7f:53:b3:cb:1b:95:cb:67:06:11:d8:41:d7:2e:ff:
03:40:69:35:e7:56:63:64:20:bc:ee:83:7a:5c:a6:
25:76:25:b2:ce:ab:cc:44:3b:80:56:66:9f:d1:d8:
f5:71:b6:32:83:3e:77:41:fb:2a:06:d7:fb:45:27:
eb:81:4a:26:e5:b8:97:da:ed:c5:ad:9b:11:0a:cf:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:B2:30:26:25:34:22:5D:74:0D:68:32:EC:AD:30:00:D4:75:B9
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6d:39:71:0b:c1:be:ef:56:e9:12:df:03:51:65:42:3f:db:
38:5c:fd:3e:22:96:09:8b:60:77:3c:a4:4a:9c:47:e1:46:ba:
59:01:1e:85:ec:b8:81:a3:75:0b:d2:cc:0c:2d:a4:f5:9d:35:
92:5d:74:32:14:58:7b:bf:7f:98:43:ae:8e:9a:5f:e2:9b:e1:
68:e2:14:94:a8:ec:09:c4:b5:61:ea:ef:fe:90:31:7b:66:e5:
16:8f:34:34:fa:47:45:ea:a2:cd:f7:a5:f4:7e:dd:b8:35:f1:
17:9d:fa:96:1e:56:63:22:88:04:ce:77:5d:2c:d6:25:52:bb:
d8:99:e7:a3:d5:fc:67:ea:0a:54:1c:48:ca:92:e6:4e:9a:51:
bf:6c:8f:a7:a7:54:8f:7f:be:6f:72:05:08:df:0c:cf:65:01:
66:2e:bc:ae:cf:0c:0e:32:5f:96:9f:26:71:b9:f4:7f:fa:28:
41:97:0a:5c:e7:6b:86:ea:0a:55:4a:d9:2a:ad:7b:11:d9:ad:
61:7e:99:27:27:22:8b:59:07:98:36:9c:4e:53:f9:5c:ed:50:
74:93:93:25:2d:95:55:66:8c:a4:70:58:fa:b8:28:a2:7d:fa:
33:d3:dc:14:1a:0e:a1:59:7a:0b:00:b5:92:09:20:95:99:12:
e1:41:71:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2URI1Px6rRrlMnhT/ZCraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0
NjU4MjQwHhcNMjYwMTI1MTgwMTA2WhcNMjYwMTI2MTgwMTA2WjAzMTEwLwYDVQQD
Eyg3ZmNjYjIzMDI2MjUzNDIyNWQ3NDBkNjgzMmVjYWQzMDAwZDQ3NWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv0Yp8XkS2e1WgasoKdOi09cuIp9
+hl7UzZKJS1DD+8X4++Ni1G/QMWgJ8Hi6Udq7+0yFKieyG0BDz4dyYG1UBCylvD6
9m3WrOpS8bXv1UfkIQkEdBYhXenTvTWNRQnLQCohbjclK9egGvoo+NNQNiUxgw3w
HFSMy6l8AiYj8wG0F+tEVj9l8XjnGS67dSou9sOR5EygiaKldjYRcwaXdrt2TcJq
+opSEEbNfd922CqAo/x/U7PLG5XLZwYR2EHXLv8DQGk151ZjZCC87oN6XKYldiWy
zqvMRDuAVmaf0dj1cbYygz53QfsqBtf7RSfrgUom5biX2u3FrZsRCs/l8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/MsjAmJTQiXXQNaDLsrTAA1HW5MB8GA1UdIwQY
MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt
ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz
LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASG05cQvB
vu9W6RLfA1FlQj/bOFz9PiKWCYtgdzykSpxH4Ua6WQEehey4gaN1C9LMDC2k9Z01
kl10MhRYe79/mEOujppf4pvhaOIUlKjsCcS1Yerv/pAxe2blFo80NPpHReqizfel
9H7duDXxF536lh5WYyKIBM53XSzWJVK72Jnno9X8Z+oKVBxIypLmTppRv2yPp6dU
j3++b3IFCN8Mz2UBZi68rs8MDjJflp8mcbn0f/ooQZcKXOdrhuoKVUrZKq17Edmt
YX6ZJycii1kHmDacTlP5XO1QdJOTJS2VVWaMpHBY+rgoon36M9PcFBoOoVl6CwC1
kgkglZkS4UFxrg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:42 2026 by rpki-client