This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json) Hash identifier: fxUmKRtRWFrIlNaSceFhumNy6A2tml65i/8x9d1lZLg= Subject key identifier: 52:76:45:0D:C2:44:E1:0E:C9:B2:90:DB:0B:15:B2:CB:2B:6B:24:31 Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Certificate serial: 019BF42BB90A09F66D369723A254E98556AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft Manifest number: 17F7 Signing time: Sun 25 Jan 2026 08:01:04 +0000 Manifest this update: Sun 25 Jan 2026 08:01:04 +0000 Manifest next update: Mon 26 Jan 2026 08:01:04 +0000 Files and hashes: 1: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: rWA9h7Iz7oe33Wc4NTva2bKqJ2bPlB9TMQueSRwM8uE=) 2: jsSqg78ULSvmpupVCQNL6_0SILs.roa (hash: DcuPkehqrCtPQd4eYdKMaI2G2BUNq353lrv8e7aY2Jc=) 3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:b9:0a:09:f6:6d:36:97:23:a2:54:e9:85:56:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Validity Not Before: Jan 25 08:01:04 2026 GMT Not After : Jan 26 08:01:04 2026 GMT Subject: CN=5276450dc244e10ec9b290db0b15b2cb2b6b2431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:e0:5b:df:4a:22:61:98:37:a1:4f:c4:46: 28:3d:25:e3:08:34:a0:64:4b:7e:57:08:7e:82:53: 7e:ac:27:73:43:e3:be:1b:d1:85:56:5f:3f:45:be: 29:c8:dc:13:d3:d9:08:fa:64:e8:f4:33:06:1b:c5: 78:ef:96:67:f9:05:af:cf:56:54:94:e1:50:92:85: 4d:4e:65:ef:76:cb:68:15:0d:ce:39:11:1e:ff:5d: c9:9a:77:77:78:9b:9d:b1:56:f3:25:c6:ab:ec:a8: fb:de:dc:6e:ac:9e:4b:93:78:79:0f:ef:da:c1:f8: e5:9e:72:e4:96:ee:b4:48:80:6f:47:5e:8b:a9:22: c7:d0:a3:c7:cc:73:46:99:0b:cb:30:9c:e2:af:a6: 1e:ab:7d:8e:22:75:44:e7:81:25:ce:fe:7e:62:c0: e4:db:41:33:33:33:b8:39:dc:b4:42:e8:42:54:d9: b2:fd:fb:29:35:16:79:3f:73:0c:2c:58:4e:66:db: 5d:ae:ba:dc:f7:30:e6:d8:1f:63:2d:20:ce:52:2e: 61:bc:43:71:5f:37:a8:40:b9:7b:2c:18:b1:c0:61: cb:a7:a4:c4:b0:b8:49:88:2c:d9:97:da:ae:02:91: c5:46:a9:b8:a7:a1:01:07:63:ef:cc:c9:19:49:ec: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:45:0D:C2:44:E1:0E:C9:B2:90:DB:0B:15:B2:CB:2B:6B:24:31 X509v3 Authority Key Identifier: keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:42:95:cd:60:2c:93:94:ba:c8:4d:41:cf:ad:59:39:87:88: fb:fd:71:e1:42:8c:3d:57:46:f2:24:ce:2e:67:d7:81:e6:88: 3f:2a:ec:70:dc:62:5a:4e:7c:77:3c:a0:ec:e0:e7:85:49:fa: 62:9f:92:bc:34:3c:72:c8:37:86:d5:96:ae:ac:03:d9:12:a9: 40:43:5f:d1:e2:57:ae:e1:32:6c:de:26:64:ba:bd:2b:0d:d5: 71:78:da:85:85:7d:c5:04:fa:98:b4:70:80:41:91:89:5b:8f: 1f:6a:f0:80:10:fe:68:14:c2:61:af:72:7a:8a:85:d6:0a:5a: fb:26:ea:9c:76:ed:b7:f3:fe:f2:39:3c:37:b5:b1:0e:27:5a: 84:e3:1c:12:db:03:5f:3d:91:9a:62:df:d6:b1:78:37:61:f9: 30:7f:2f:37:aa:5f:b4:bf:1b:8e:e6:8a:f0:44:b5:5b:b6:d2: ef:a2:ba:d7:4d:34:ff:e2:b5:0c:92:16:12:45:b1:ed:50:82: 7a:8f:ca:11:a2:b4:ca:e7:fd:c3:be:83:55:4f:bb:19:d8:15: bf:d1:08:a4:16:e7:33:68:49:80:19:9f:98:ac:84:f0:fd:5e: 45:b5:fa:23:3d:45:54:5a:7d:38:dc:cc:4b:61:3c:ca:0f:81: d8:54:43:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K7kKCfZtNpcjolTphVaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh ZDhiZGEwHhcNMjYwMTI1MDgwMTA0WhcNMjYwMTI2MDgwMTA0WjAzMTEwLwYDVQQD Eyg1Mjc2NDUwZGMyNDRlMTBlYzliMjkwZGIwYjE1YjJjYjJiNmIyNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/HgW99KImGYN6FPxEYoPSXjCDSg ZEt+Vwh+glN+rCdzQ+O+G9GFVl8/Rb4pyNwT09kI+mTo9DMGG8V475Zn+QWvz1ZU lOFQkoVNTmXvdstoFQ3OOREe/13Jmnd3eJudsVbzJcar7Kj73txurJ5Lk3h5D+/a wfjlnnLklu60SIBvR16LqSLH0KPHzHNGmQvLMJzir6Yeq32OInVE54Elzv5+YsDk 20EzMzO4Ody0QuhCVNmy/fspNRZ5P3MMLFhOZttdrrrc9zDm2B9jLSDOUi5hvENx XzeoQLl7LBixwGHLp6TEsLhJiCzZl9quApHFRqm4p6EBB2PvzMkZSew14wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ2RQ3CROEOybKQ2wsVsssrayQxMB8GA1UdIwQY MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt YjhkYjE1YjUzMWEyLzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEKVzWAs k5S6yE1Bz61ZOYeI+/1x4UKMPVdG8iTOLmfXgeaIPyrscNxiWk58dzyg7ODnhUn6 Yp+SvDQ8csg3htWWrqwD2RKpQENf0eJXruEybN4mZLq9Kw3VcXjahYV9xQT6mLRw gEGRiVuPH2rwgBD+aBTCYa9yeoqF1gpa+ybqnHbtt/P+8jk8N7WxDidahOMcEtsD Xz2RmmLf1rF4N2H5MH8vN6pftL8bjuaK8ES1W7bS76K61000/+K1DJIWEkWx7VCC eo/KEaK0yuf9w76DVU+7GdgVv9EIpBbnM2hJgBmfmKyE8P1eRbX6Iz1FVFp9ONzM S2E8yg+B2FRDvg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:22 2026 by rpki-client