This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json) Hash identifier: Y44Ukg3+ZhVRojpUvg2NC0UKKyxQpKGj46TvG641C/M= Subject key identifier: 99:73:CB:71:A7:4F:F5:41:68:83:7E:9E:22:D1:67:3C:FC:2E:1D:C8 Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be Certificate serial: 019BF4D044E62FBACCCF9C87D64622D23AC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft Manifest number: 1046 Signing time: Sun 25 Jan 2026 11:00:48 +0000 Manifest this update: Sun 25 Jan 2026 11:00:48 +0000 Manifest next update: Mon 26 Jan 2026 11:00:48 +0000 Files and hashes: 1: Huv8_F7CU0_Jslnzwh9x9lhwpc0.roa (hash: que/wANCXPBVboi+Ao6/Mhrzm4uO58lF/bE0KnuyKBc=) 2: TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa (hash: rGtYPfugPBoAr+vznSLu3abrcQ5ZUu7nfMCulcJMbYg=) 3: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: 4ApqFs5zn8J75YpR8VOWtzhVDazpKepYM12NeP+aEgA=) 4: YcTggkw1dIIwon9zpxmI36qcgzY.roa (hash: hJIPq4cJhvmtr5AA2Y+pzfZ+vAbq2fL2IZZMCvtTNqY=) 5: qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa (hash: ABpLHA3uxkTxF69tefDioKBR4SIb/ghL74K+XaKX/Ag=) 6: wDhMGJ9NzXfEad9sT6Le_xs3iaE.roa (hash: zPKoEOiN3uariB64Rf296KkD/lWfDnDeFg2GGweepII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:44:e6:2f:ba:cc:cf:9c:87:d6:46:22:d2:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be Validity Not Before: Jan 25 11:00:48 2026 GMT Not After : Jan 26 11:00:48 2026 GMT Subject: CN=9973cb71a74ff54168837e9e22d1673cfc2e1dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:a1:56:a5:48:7a:88:dd:fb:26:2a:96:e9: 18:81:86:1e:ea:5f:89:af:e4:ef:d8:6c:a3:ce:b2: ab:f4:89:8c:87:52:79:53:de:46:03:64:d5:0c:a4: a1:a0:39:7b:85:39:7a:d1:61:76:7b:00:dc:da:59: d1:74:87:f2:95:1d:2e:17:3f:99:fa:43:d6:47:fb: 5a:7a:48:4c:ba:d7:94:df:ad:18:14:4d:ff:c7:39: 24:46:11:b9:3e:b0:62:49:81:c9:a0:a1:da:06:b7: 3e:3c:87:47:42:b0:eb:98:33:7f:fd:5a:fd:a4:4c: 73:01:19:fe:44:22:01:a1:3c:05:51:39:f8:ab:b1: 49:50:96:cf:e0:dd:96:b1:5b:f8:ac:fe:e1:5f:03: d6:09:6d:34:f2:8e:59:ba:b9:09:c1:95:62:1f:00: 10:a7:80:69:11:e2:d0:1f:8a:2f:11:d0:d0:a8:d6: fb:e9:ec:5c:6a:9b:44:f1:d1:17:a6:dc:bc:6e:b9: 4d:23:70:e2:aa:20:a6:ed:5d:09:79:a0:57:1b:38: aa:3d:63:cc:b1:0e:39:4f:79:58:97:31:19:ab:f9: c1:23:0a:87:b9:0e:3b:7b:55:3f:12:d3:da:ec:45: e3:bd:25:df:51:6f:21:db:1b:a2:9a:4b:64:84:e9: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:73:CB:71:A7:4F:F5:41:68:83:7E:9E:22:D1:67:3C:FC:2E:1D:C8 X509v3 Authority Key Identifier: keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d5:4c:24:aa:e6:31:6b:45:48:89:62:bf:04:a0:00:ba:92: d8:b3:cd:26:61:ba:24:9c:6f:2d:6a:d4:38:95:0e:fe:d4:d5: 84:ca:93:6d:9f:f7:60:85:4e:68:50:3c:fd:be:ef:ca:84:e8: 1f:0d:c8:98:b2:12:5f:29:07:4d:bb:b1:4b:a5:9d:bf:82:e5: 25:36:36:a0:39:0a:04:c0:46:d5:06:e1:13:36:3d:1b:75:65: 86:3d:3e:86:e2:40:9c:ab:09:c2:16:31:5e:5c:05:26:89:db: 7c:22:57:94:da:28:ba:36:ed:b7:cf:c0:9e:44:72:34:3e:33: 4e:32:8d:22:64:ff:f5:eb:8e:88:5c:ea:5e:22:a9:7d:29:bf: 81:30:bd:28:07:1c:63:3b:1d:bd:e6:c8:cc:a9:4f:60:18:07: 29:5f:d0:b7:52:fd:52:9d:fa:36:61:4a:8c:1e:ee:d6:be:4e: e4:4d:5f:ca:36:75:92:a1:2a:30:fc:a3:83:a8:ea:d2:5f:09: 9c:26:0f:1f:a3:e3:dc:07:16:0a:b8:e7:71:c3:27:68:3b:53: 7b:52:05:a2:08:76:1d:e2:4b:27:a7:ac:d6:d5:8e:2e:da:48: b1:09:53:57:0e:bd:17:a6:7f:68:32:84:dc:6f:88:8d:48:c1: 43:5c:a3:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00ETmL7rMz5yH1kYi0jrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw OTkxYmUwHhcNMjYwMTI1MTEwMDQ4WhcNMjYwMTI2MTEwMDQ4WjAzMTEwLwYDVQQD Eyg5OTczY2I3MWE3NGZmNTQxNjg4MzdlOWUyMmQxNjczY2ZjMmUxZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EqhVqVIeojd+yYqlukYgYYe6l+J r+Tv2GyjzrKr9ImMh1J5U95GA2TVDKShoDl7hTl60WF2ewDc2lnRdIfylR0uFz+Z +kPWR/taekhMuteU360YFE3/xzkkRhG5PrBiSYHJoKHaBrc+PIdHQrDrmDN//Vr9 pExzARn+RCIBoTwFUTn4q7FJUJbP4N2WsVv4rP7hXwPWCW008o5ZurkJwZViHwAQ p4BpEeLQH4ovEdDQqNb76excaptE8dEXpty8brlNI3DiqiCm7V0JeaBXGziqPWPM sQ45T3lYlzEZq/nBIwqHuQ47e1U/EtPa7EXjvSXfUW8h2xuimktkhOkW9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlzy3GnT/VBaIN+niLRZzz8Lh3IMB8GA1UdIwQY MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt NzVkOWNlNWI4ZDljLzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdVMJKrm MWtFSIlivwSgALqS2LPNJmG6JJxvLWrUOJUO/tTVhMqTbZ/3YIVOaFA8/b7vyoTo Hw3ImLISXykHTbuxS6Wdv4LlJTY2oDkKBMBG1QbhEzY9G3Vlhj0+huJAnKsJwhYx XlwFJonbfCJXlNooujbtt8/AnkRyND4zTjKNImT/9euOiFzqXiKpfSm/gTC9KAcc YzsdvebIzKlPYBgHKV/Qt1L9Up36NmFKjB7u1r5O5E1fyjZ1kqEqMPyjg6jq0l8J nCYPH6Pj3AcWCrjnccMnaDtTe1IFogh2HeJLJ6es1tWOLtpIsQlTVw69F6Z/aDKE 3G+IjUjBQ1yjbg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:08 2026 by rpki-client