This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json) Hash identifier: RxaBlImBy9p629BsNQl5ivTvykJjKJmXMm5RYW+BDJo= Subject key identifier: FE:0D:1C:D1:1A:99:AE:D4:AB:9D:72:9B:E6:F8:D4:BE:47:CA:E8:54 Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Certificate serial: 019BF3F4CC63D844D2921297B10C1C581837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 07:01:05 +0000 Manifest this update: Sun 25 Jan 2026 07:01:05 +0000 Manifest next update: Mon 26 Jan 2026 07:01:05 +0000 Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=) 2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: KCp0K14B4Z/7v2pVCgC0KfbkFe9MA1Pjz1X7lLLaanU=) 3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=) 4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:cc:63:d8:44:d2:92:12:97:b1:0c:1c:58:18:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Validity Not Before: Jan 25 07:01:05 2026 GMT Not After : Jan 26 07:01:05 2026 GMT Subject: CN=fe0d1cd11a99aed4ab9d729be6f8d4be47cae854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:27:0f:d1:1b:3a:b9:71:b0:80:f1:66:4a: 03:9f:d0:e5:2d:16:6e:f3:22:b1:7d:74:54:21:83: 18:15:f3:fe:86:6b:ae:4a:01:dc:13:bb:f4:e5:7c: 9a:1d:0d:5a:0b:4c:59:47:e7:4e:0c:b7:c3:fb:ee: 15:33:e1:c8:fa:ff:b5:e7:be:fe:33:aa:7b:38:f3: 10:d7:70:8f:b7:60:10:8d:52:f5:d8:cf:a6:35:68: 24:60:c2:e9:20:42:bb:98:21:1d:db:b3:9b:43:a9: ee:42:df:1e:59:60:0c:59:dd:e4:51:69:aa:c9:27: 54:ee:da:17:33:3b:30:d2:7c:58:df:ca:f0:9b:4b: f8:8d:c9:64:a2:46:e4:33:85:c7:35:fd:8d:b0:8d: a9:72:e0:86:a3:bc:10:5b:4a:9a:a6:ed:c1:23:be: 66:c4:0a:ae:42:0a:ca:77:7f:49:84:ca:c0:c2:78: 0d:59:98:36:bf:c6:7e:32:d1:8d:4b:62:09:09:c9: 40:40:37:8e:19:2d:55:f4:e5:78:18:d2:2a:8c:c7: cc:ed:cf:2d:1e:af:4e:29:6e:27:b8:a0:3b:18:40: a4:40:11:1e:3b:be:0a:d9:33:58:7e:e1:fc:fd:86: f2:41:4c:54:94:a2:71:74:82:75:aa:9d:5f:ad:20: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0D:1C:D1:1A:99:AE:D4:AB:9D:72:9B:E6:F8:D4:BE:47:CA:E8:54 X509v3 Authority Key Identifier: keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:26:74:45:0e:1b:27:2d:e5:96:21:d9:b8:dc:6c:d5:1b:59: 01:67:3e:33:20:c0:56:0f:d8:97:98:b0:cd:d4:47:df:dd:14: 60:db:2d:77:ce:1e:ae:3d:c9:4f:7a:ee:d9:67:d0:a8:bd:97: d4:4c:1e:d8:d2:51:84:73:c1:02:8a:93:2d:46:85:ae:b6:9d: 70:46:a7:ad:11:d2:88:9d:1d:40:e7:77:bb:15:7c:b8:cd:7b: 20:ea:0d:b5:fb:93:2f:f1:d2:ab:f1:8d:ec:45:e9:d9:21:04: 88:99:ad:bf:a1:6e:25:d9:38:cb:be:ef:a0:4c:61:c5:24:e9: b8:b7:d1:8a:81:bb:5a:00:c0:ae:6a:14:9a:f9:59:af:a3:f0: 44:bf:ce:f7:79:f9:09:93:78:5a:3f:a6:15:36:87:fd:c3:ac: 64:9a:d8:a7:94:94:a4:8c:f1:f2:a4:dd:95:c9:35:3c:f5:ab: 74:23:ac:33:4d:55:f5:80:ae:9e:05:36:96:b4:f3:91:41:c4: 3d:2c:f9:70:43:e5:fa:dd:13:5a:9e:09:25:7a:cf:86:9a:19: cf:40:50:1b:97:8a:07:98:b8:5c:c7:af:08:4b:8f:91:ef:12: 8e:a2:eb:54:e3:02:2d:7e:11:54:b2:06:6c:01:1d:28:5d:92: a9:1e:73:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Mxj2ETSkhKXsQwcWBg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2 NWE2MDYwHhcNMjYwMTI1MDcwMTA1WhcNMjYwMTI2MDcwMTA1WjAzMTEwLwYDVQQD EyhmZTBkMWNkMTFhOTlhZWQ0YWI5ZDcyOWJlNmY4ZDRiZTQ3Y2FlODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr0nD9EbOrlxsIDxZkoDn9DlLRZu 8yKxfXRUIYMYFfP+hmuuSgHcE7v05XyaHQ1aC0xZR+dODLfD++4VM+HI+v+1577+ M6p7OPMQ13CPt2AQjVL12M+mNWgkYMLpIEK7mCEd27ObQ6nuQt8eWWAMWd3kUWmq ySdU7toXMzsw0nxY38rwm0v4jclkokbkM4XHNf2NsI2pcuCGo7wQW0qapu3BI75m xAquQgrKd39JhMrAwngNWZg2v8Z+MtGNS2IJCclAQDeOGS1V9OV4GNIqjMfM7c8t Hq9OKW4nuKA7GECkQBEeO74K2TNYfuH8/YbyQUxUlKJxdIJ1qp1frSDU2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4NHNEama7Uq51ym+b41L5HyuhUMB8GA1UdIwQY MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5 LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCZ0RQ4b Jy3lliHZuNxs1RtZAWc+MyDAVg/Yl5iwzdRH390UYNstd84erj3JT3ru2WfQqL2X 1Ewe2NJRhHPBAoqTLUaFrradcEanrRHSiJ0dQOd3uxV8uM17IOoNtfuTL/HSq/GN 7EXp2SEEiJmtv6FuJdk4y77voExhxSTpuLfRioG7WgDArmoUmvlZr6PwRL/O93n5 CZN4Wj+mFTaH/cOsZJrYp5SUpIzx8qTdlck1PPWrdCOsM01V9YCungU2lrTzkUHE PSz5cEPl+t0TWp4JJXrPhpoZz0BQG5eKB5i4XMevCEuPke8SjqLrVOMCLX4RVLIG bAEdKF2SqR5zIA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:36 2026 by rpki-client