This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json) Hash identifier: IBZxTGrZkpRJvxKd/4aTuc9/ep0Iuka0MoUhREu12ZM= Subject key identifier: 6F:F5:41:05:27:46:0E:57:2E:FE:0D:AC:84:01:AA:C8:98:CE:E6:A7 Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Certificate serial: 019BF499684E7A15F7BB9AD6707272C0D074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 10:00:52 +0000 Manifest this update: Sun 25 Jan 2026 10:00:52 +0000 Manifest next update: Mon 26 Jan 2026 10:00:52 +0000 Files and hashes: 1: 5ncwIjdV-lgqxsPk6TejDPmjLoU.roa (hash: gvOpAQoTeSfO+y1nRziJ19qDe2iH3kf8RYDheGEeWc8=) 2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: TdhE83WXzEKZj2irwI3P0g2C5AGC5WJLNhLEPAan86s=) 3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:68:4e:7a:15:f7:bb:9a:d6:70:72:72:c0:d0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Validity Not Before: Jan 25 10:00:52 2026 GMT Not After : Jan 26 10:00:52 2026 GMT Subject: CN=6ff5410527460e572efe0dac8401aac898cee6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:d2:d5:44:ce:d2:7b:84:cc:a9:1e:03:dd: 8e:eb:3b:d6:33:62:d3:61:63:a5:20:60:63:92:bc: 32:65:72:e9:a4:b7:3a:cf:dd:3b:ed:05:16:9e:8a: bd:fa:82:cd:e8:a6:10:e2:71:3d:95:a9:fe:9b:63: d4:45:37:e9:a2:d5:a6:d1:d6:10:67:1b:58:ab:66: fd:26:87:b9:1b:02:71:b0:87:93:d8:55:b6:15:c2: d8:e8:63:8f:c2:5b:a5:b9:58:bd:bf:02:3c:be:40: 23:63:12:d8:b9:b4:44:ed:8f:df:05:49:41:5a:b5: c8:f9:06:72:98:15:51:e2:39:a9:d3:e2:1b:68:80: f1:dd:0d:43:db:bf:50:94:b6:b5:fe:e6:20:6b:9e: 45:fe:8f:46:00:aa:ae:46:e9:5a:57:fb:cc:fe:90: 06:e4:cf:3f:7f:bc:49:61:31:ed:b0:b4:67:a4:a0: b1:8b:1d:51:f9:cb:b1:a8:00:f3:79:1a:eb:02:fd: ab:fb:b4:bb:89:01:b7:40:7c:25:aa:25:88:51:25: 91:02:9b:56:e4:c4:08:66:60:5c:2c:15:ff:42:36: 43:b4:3e:d5:9a:2f:42:4a:1e:ea:06:9e:bc:61:0e: fb:5f:bf:d2:f3:53:2c:a1:7f:1e:9b:79:72:0c:20: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F5:41:05:27:46:0E:57:2E:FE:0D:AC:84:01:AA:C8:98:CE:E6:A7 X509v3 Authority Key Identifier: keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1f:30:d7:6e:58:b7:dc:b9:99:35:40:83:36:6f:da:ee:87: 74:8c:9b:24:5b:1e:e2:09:36:2b:0e:64:c9:df:92:3d:94:8a: 40:96:fb:a7:c4:42:bc:a7:68:41:4b:d0:4c:8b:b4:79:81:93: 89:aa:ad:4e:33:74:c2:36:c3:fa:61:c2:d6:6b:4e:11:b8:c8: 3b:2e:36:2b:e4:ac:d8:d9:8e:1e:60:16:c2:2e:43:05:69:2e: 1e:8c:ac:33:19:51:45:ff:cd:eb:a4:be:ad:0e:76:9b:21:be: 9b:38:4c:59:14:35:66:ee:20:c3:80:a6:5f:6b:80:cd:d2:05: 09:ca:41:13:a2:a3:60:28:25:6a:af:a0:d0:07:a8:84:aa:49: a7:40:dd:bf:ff:59:c1:60:04:67:71:c3:40:74:1d:af:26:f9: 30:68:14:2e:7e:b7:7d:3b:61:bd:2e:fe:19:5a:97:e1:fd:08: e8:69:65:02:81:10:09:e7:d9:78:5c:af:d2:f0:30:87:c2:a7: 64:e8:7d:eb:ca:a4:b1:90:5c:57:dc:8b:d1:99:cf:3c:26:9b: 4e:01:93:37:cd:7a:ed:21:f1:57:8c:6c:b9:00:ce:10:50:00: 8f:b3:f4:ac:02:6d:59:2d:9a:0b:58:a1:4b:eb:33:9a:fb:95: 91:cf:8c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mWhOehX3u5rWcHJywNB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy YTBmZDgwHhcNMjYwMTI1MTAwMDUyWhcNMjYwMTI2MTAwMDUyWjAzMTEwLwYDVQQD Eyg2ZmY1NDEwNTI3NDYwZTU3MmVmZTBkYWM4NDAxYWFjODk4Y2VlNmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8TS1UTO0nuEzKkeA92O6zvWM2LT YWOlIGBjkrwyZXLppLc6z9077QUWnoq9+oLN6KYQ4nE9lan+m2PURTfpotWm0dYQ ZxtYq2b9Joe5GwJxsIeT2FW2FcLY6GOPwluluVi9vwI8vkAjYxLYubRE7Y/fBUlB WrXI+QZymBVR4jmp0+IbaIDx3Q1D279QlLa1/uYga55F/o9GAKquRulaV/vM/pAG 5M8/f7xJYTHtsLRnpKCxix1R+cuxqADzeRrrAv2r+7S7iQG3QHwlqiWIUSWRAptW 5MQIZmBcLBX/QjZDtD7Vmi9CSh7qBp68YQ77X7/S81MsoX8em3lyDCBaHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/1QQUnRg5XLv4NrIQBqsiYzuanMB8GA1UdIwQY MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaB8w125Y t9y5mTVAgzZv2u6HdIybJFse4gk2Kw5kyd+SPZSKQJb7p8RCvKdoQUvQTIu0eYGT iaqtTjN0wjbD+mHC1mtOEbjIOy42K+Ss2NmOHmAWwi5DBWkuHoysMxlRRf/N66S+ rQ52myG+mzhMWRQ1Zu4gw4CmX2uAzdIFCcpBE6KjYCglaq+g0AeohKpJp0Ddv/9Z wWAEZ3HDQHQdryb5MGgULn63fTthvS7+GVqX4f0I6GllAoEQCefZeFyv0vAwh8Kn ZOh968qksZBcV9yL0ZnPPCabTgGTN8167SHxV4xsuQDOEFAAj7P0rAJtWS2aC1ih S+szmvuVkc+MVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:11 2026 by rpki-client