This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json) Hash identifier: 0iZ87lh1JLc+B27R8ut5tinJQm+Tv7BmnCK+p/sHc5Y= Subject key identifier: FD:A4:BB:D3:D0:EC:90:77:16:18:53:91:A6:5B:65:84:35:90:41:E9 Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084 Certificate serial: 019BF76364F234CA4331BC164F7388B49462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft Manifest number: 0770 Signing time: Sun 25 Jan 2026 23:00:44 +0000 Manifest this update: Sun 25 Jan 2026 23:00:44 +0000 Manifest next update: Mon 26 Jan 2026 23:00:44 +0000 Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: bYarrl8KCMTDAbQRsRBtd5O5L7rVxadkAr5YcCCC7nE=) 2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:64:f2:34:ca:43:31:bc:16:4f:73:88:b4:94:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa386e97656d648ab5381b29666414081b00084 Validity Not Before: Jan 25 23:00:44 2026 GMT Not After : Jan 26 23:00:44 2026 GMT Subject: CN=fda4bbd3d0ec907716185391a65b6584359041e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b4:fa:e3:46:1d:06:e2:76:3d:b8:9b:cb:d6: 37:0c:6e:10:81:01:60:31:39:6a:b3:6f:01:b9:02: f3:a2:56:91:25:1e:8f:db:30:ef:c8:80:37:d5:6d: 6f:e1:77:d5:1b:29:aa:d8:6a:c9:c1:ec:23:13:76: e2:8f:74:da:d2:3a:23:fb:ba:0d:2c:39:f4:62:51: a7:77:bf:9f:14:77:42:a0:c9:71:88:bb:03:09:b9: 71:fa:0a:bb:9c:23:b6:1c:f1:0e:a8:69:fb:fa:0b: 7e:1b:a0:bf:20:a0:7a:a0:fa:2f:ea:79:79:32:c0: 84:9e:1d:c8:9b:ac:6f:01:25:2a:c9:b3:07:d2:4a: 00:23:d2:81:d0:01:6d:7e:37:eb:9a:f4:41:a2:50: 24:ff:61:f8:dc:30:9c:75:a0:05:7f:9b:76:02:a7: 1c:d9:f9:a1:7a:86:9a:16:0e:ca:11:e4:55:bb:23: e6:84:6e:23:3f:4d:38:1c:6b:16:9f:56:97:52:49: 8a:a7:04:83:10:d2:75:99:a1:4a:75:34:af:90:a6: 67:c7:68:5f:97:05:df:55:53:ad:68:71:af:f1:d2: 40:12:f4:a3:1f:42:ef:c2:15:b9:c0:a4:c5:db:52: 4d:ce:b2:8d:5d:c5:4d:02:85:76:14:cb:05:83:4b: db:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A4:BB:D3:D0:EC:90:77:16:18:53:91:A6:5B:65:84:35:90:41:E9 X509v3 Authority Key Identifier: keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f1:6e:4b:ec:23:26:f1:c6:30:98:3b:ab:c0:ee:9a:4c:39: 81:d1:29:af:61:7e:f8:01:4a:ab:97:a4:49:fd:96:20:aa:6b: 0c:a3:70:bb:37:61:66:36:26:d4:d6:30:2d:66:44:63:8a:19: 40:30:ee:1d:eb:1b:06:ed:b4:54:f7:26:e0:4f:00:51:83:79: b5:5c:df:fa:9c:26:1f:74:5f:88:17:87:34:1d:43:8b:37:8d: e4:b6:f4:84:4d:18:5d:77:13:ff:67:f3:35:41:7e:a1:56:19: 5c:65:88:85:73:3f:95:14:eb:a0:48:74:c0:5c:82:dd:9e:6b: 1a:78:e4:d2:98:2b:21:76:29:91:79:2c:20:ad:cd:72:43:e0: ef:21:a8:e6:c0:52:20:0b:2d:6d:cd:65:e9:71:26:0c:c1:ad: 32:48:fb:01:ca:44:aa:0a:52:ad:9e:02:8d:5d:18:54:ab:58: 69:c1:4a:15:e2:d8:1e:a0:d8:86:20:98:ce:e5:b9:c3:12:8e: 7a:a5:3d:92:8c:26:bf:dc:b8:7c:b7:ff:90:00:bf:fa:47:6b: bc:df:13:1f:5f:b9:47:19:c8:3e:77:66:d0:6c:56:84:f9:0f: 3d:ff:1f:c6:c6:d9:73:9c:8e:3f:b8:39:e9:cd:83:fa:f2:d8: c7:95:02:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2TyNMpDMbwWT3OItJRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi MDAwODQwHhcNMjYwMTI1MjMwMDQ0WhcNMjYwMTI2MjMwMDQ0WjAzMTEwLwYDVQQD EyhmZGE0YmJkM2QwZWM5MDc3MTYxODUzOTFhNjViNjU4NDM1OTA0MWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bT640YdBuJ2Pbiby9Y3DG4QgQFg MTlqs28BuQLzolaRJR6P2zDvyIA31W1v4XfVGymq2GrJwewjE3bij3Ta0joj+7oN LDn0YlGnd7+fFHdCoMlxiLsDCblx+gq7nCO2HPEOqGn7+gt+G6C/IKB6oPov6nl5 MsCEnh3Im6xvASUqybMH0koAI9KB0AFtfjfrmvRBolAk/2H43DCcdaAFf5t2Aqcc 2fmheoaaFg7KEeRVuyPmhG4jP004HGsWn1aXUkmKpwSDENJ1maFKdTSvkKZnx2hf lwXfVVOtaHGv8dJAEvSjH0LvwhW5wKTF21JNzrKNXcVNAoV2FMsFg0vbEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2ku9PQ7JB3FhhTkaZbZYQ1kEHpMB8GA1UdIwQY MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfFuS+wj JvHGMJg7q8Dumkw5gdEpr2F++AFKq5ekSf2WIKprDKNwuzdhZjYm1NYwLWZEY4oZ QDDuHesbBu20VPcm4E8AUYN5tVzf+pwmH3RfiBeHNB1DizeN5Lb0hE0YXXcT/2fz NUF+oVYZXGWIhXM/lRTroEh0wFyC3Z5rGnjk0pgrIXYpkXksIK3NckPg7yGo5sBS IAstbc1l6XEmDMGtMkj7AcpEqgpSrZ4CjV0YVKtYacFKFeLYHqDYhiCYzuW5wxKO eqU9kowmv9y4fLf/kAC/+kdrvN8TH1+5RxnIPndm0GxWhPkPPf8fxsbZc5yOP7g5 6c2D+vLYx5UCyA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:05 2026 by rpki-client