This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json) Hash identifier: 1Hexl3fShNht9gpqMsiUgBJsln+aOCzjebYs13hujlo= Subject key identifier: 82:DA:F3:26:CE:E6:85:90:C0:13:59:EC:F3:38:6A:ED:91:34:3D:10 Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Certificate serial: 019BF6BEB77E6D5BDD29E8BABDE7A63187BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft Manifest number: 0DCE Signing time: Sun 25 Jan 2026 20:00:52 +0000 Manifest this update: Sun 25 Jan 2026 20:00:52 +0000 Manifest next update: Mon 26 Jan 2026 20:00:52 +0000 Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 5oFxlXdKnn0ZWfBA/M3nZYzmlM6iMYn+bAjSsFkQdKA=) 2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=) 3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:b7:7e:6d:5b:dd:29:e8:ba:bd:e7:a6:31:87:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Validity Not Before: Jan 25 20:00:52 2026 GMT Not After : Jan 26 20:00:52 2026 GMT Subject: CN=82daf326cee68590c01359ecf3386aed91343d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:54:9b:26:d5:f3:0e:9d:4a:0f:d8:db:b4: 5b:07:25:04:3e:27:dc:a6:77:49:18:56:d1:50:53: c3:2d:bf:22:ec:f2:cf:7c:c6:8c:2a:3b:dc:f1:df: 46:0a:19:74:9e:8e:bb:bf:96:f5:68:b8:4a:0d:99: 27:2d:5b:c3:88:c9:49:69:ce:74:fc:4e:68:64:f8: 7d:7c:1c:e2:b7:d0:90:9e:c1:f6:a6:aa:8e:57:e0: 9a:ae:8d:16:62:68:6f:03:11:53:70:91:2e:5f:67: 6d:1c:f3:b1:64:71:0c:a3:3f:f3:d8:22:fa:0d:22: 0c:a5:60:a8:d6:80:b1:c0:e0:06:0a:26:60:8f:1a: 95:05:a5:b2:03:98:d7:5d:5b:bc:e2:18:ba:33:fe: 62:86:b6:bf:b7:67:ed:02:c5:89:e5:aa:0f:ae:02: 84:3c:00:b7:48:8c:43:14:04:6f:ea:cb:bf:70:6f: a5:13:75:21:2b:03:47:b7:0b:0d:02:ee:d2:be:70: 1d:be:1f:4c:f4:76:90:cf:61:4c:8e:75:be:e3:ca: 00:2e:a9:95:32:dc:ff:8c:bd:f9:41:d7:4b:1e:7d: 14:e0:1a:61:28:8e:8b:61:2d:6a:bc:32:2b:0a:66: e3:e5:45:2b:35:cc:9c:b2:11:58:86:59:f9:1d:84: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DA:F3:26:CE:E6:85:90:C0:13:59:EC:F3:38:6A:ED:91:34:3D:10 X509v3 Authority Key Identifier: keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6c:ea:30:3b:e8:f6:be:c7:61:5b:a8:f9:af:f4:85:6c:c4: dc:bd:2a:64:3f:d9:7e:00:b7:5e:5e:ab:3e:4d:80:30:8a:a7: b4:51:ca:ca:86:77:e3:9f:42:f9:86:80:96:2c:2f:cb:1a:e0: 7f:5c:f3:7b:e3:14:31:ac:b8:a4:89:c6:41:5f:22:17:d2:70: 57:d3:7f:46:8c:7d:73:8b:58:bc:6e:78:77:31:cd:15:c9:52: 72:8d:d7:f0:14:e0:f4:81:e7:12:da:bc:d4:40:53:6f:b6:3d: f5:d5:27:9c:30:b4:05:73:e4:f3:ca:04:7e:8d:ff:8a:41:83: 3a:05:44:38:4b:24:c6:a2:46:86:17:75:47:30:0f:ec:4a:15: fa:f3:3e:19:5b:ff:22:1d:de:80:b9:c7:7f:ac:47:85:4d:e5: ea:fd:fc:9c:21:fe:80:eb:49:ed:4c:ea:98:ba:e7:a7:11:8d: b6:35:92:d5:8e:60:82:06:ad:a0:be:21:2c:89:24:12:1a:fd: 8d:2b:4b:61:86:d9:d9:4a:ca:82:10:38:55:f7:68:59:f1:ee: 2b:51:af:cc:93:37:46:43:f5:94:25:79:5a:bd:39:2e:26:c0: 51:71:0a:56:b8:1f:eb:23:c6:13:cd:95:b0:95:16:e5:2e:96: 69:e1:65:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vrd+bVvdKei6veemMYe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5 OTNjMDQwHhcNMjYwMTI1MjAwMDUyWhcNMjYwMTI2MjAwMDUyWjAzMTEwLwYDVQQD Eyg4MmRhZjMyNmNlZTY4NTkwYzAxMzU5ZWNmMzM4NmFlZDkxMzQzZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsshUmybV8w6dSg/Y27RbByUEPifc pndJGFbRUFPDLb8i7PLPfMaMKjvc8d9GChl0no67v5b1aLhKDZknLVvDiMlJac50 /E5oZPh9fBzit9CQnsH2pqqOV+Caro0WYmhvAxFTcJEuX2dtHPOxZHEMoz/z2CL6 DSIMpWCo1oCxwOAGCiZgjxqVBaWyA5jXXVu84hi6M/5ihra/t2ftAsWJ5aoPrgKE PAC3SIxDFARv6su/cG+lE3UhKwNHtwsNAu7SvnAdvh9M9HaQz2FMjnW+48oALqmV Mtz/jL35QddLHn0U4BphKI6LYS1qvDIrCmbj5UUrNcycshFYhln5HYREfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILa8ybO5oWQwBNZ7PM4au2RND0QMB8GA1UdIwQY MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt YzY5ODcxZjVkMzA1LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1 LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGzqMDvo 9r7HYVuo+a/0hWzE3L0qZD/ZfgC3Xl6rPk2AMIqntFHKyoZ3459C+YaAliwvyxrg f1zze+MUMay4pInGQV8iF9JwV9N/Rox9c4tYvG54dzHNFclSco3X8BTg9IHnEtq8 1EBTb7Y99dUnnDC0BXPk88oEfo3/ikGDOgVEOEskxqJGhhd1RzAP7EoV+vM+GVv/ Ih3egLnHf6xHhU3l6v38nCH+gOtJ7UzqmLrnpxGNtjWS1Y5gggatoL4hLIkkEhr9 jStLYYbZ2UrKghA4VfdoWfHuK1GvzJM3RkP1lCV5Wr05LibAUXEKVrgf6yPGE82V sJUW5S6WaeFlZw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:30 2026 by rpki-client