This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json) Hash identifier: LqTjyFOe41XWmPIlUsHqKkvCWrG06D8suTD/MBiu3RI= Subject key identifier: C8:74:B0:BB:9C:DB:37:7F:8D:0A:E1:23:54:E9:94:5C:DC:18:4F:02 Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Certificate serial: 019BF8768BEEAEE57682900808252EEBB563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft Manifest number: 0C10 Signing time: Mon 26 Jan 2026 04:01:16 +0000 Manifest this update: Mon 26 Jan 2026 04:01:16 +0000 Manifest next update: Tue 27 Jan 2026 04:01:16 +0000 Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: eryWLm4Es/kYIEJWZ+p6MMrrpg48x8XozNYbqzhUNdk=) 2: zX6QTKu5bdfzDlEKlxRngpN7jFg.roa (hash: Es/vRwC7rF9QD60Cujq+vg2mRaTno8Hpf1rSpL/09/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:8b:ee:ae:e5:76:82:90:08:08:25:2e:eb:b5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Validity Not Before: Jan 26 04:01:16 2026 GMT Not After : Jan 27 04:01:16 2026 GMT Subject: CN=c874b0bb9cdb377f8d0ae12354e9945cdc184f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:b5:2b:fa:84:9e:f4:0d:f3:08:ef:b5:eb: d2:1b:98:fe:b7:d1:45:f5:03:60:48:f6:36:dd:a4: 17:1a:85:d7:b4:ef:6f:5d:40:d4:57:16:20:7f:10: 4f:b0:32:74:7a:f8:5e:f3:2e:47:d8:02:ab:b7:c4: f6:ff:e1:d4:41:25:65:77:bb:e8:75:cb:2e:1e:9c: 85:43:1e:00:0e:30:5c:d9:6f:ee:99:5f:e7:ff:a4: 95:b6:83:3f:d0:0e:e4:d1:d1:b6:c7:65:6a:c8:58: 76:73:e7:d8:10:cf:2e:97:38:ab:b0:b2:b8:a9:7e: 78:0d:f8:95:ea:4e:bc:a9:88:4d:9b:6c:e1:9a:45: c7:53:e6:85:69:f0:01:72:cc:13:7c:86:71:22:4b: 5f:4f:c9:15:f7:f7:b7:59:e4:cb:3f:d1:b3:02:9b: 9b:0a:c9:5e:56:b5:c7:88:0b:0f:1c:7e:fa:05:cb: 94:03:e8:ac:e0:b0:4f:18:75:fe:ff:82:12:b6:fe: 33:0d:b1:ab:55:5e:79:62:ba:5f:e6:f0:6c:8c:93: 7f:a3:5b:b1:6e:2d:db:12:2b:ed:9d:81:5f:db:3c: a6:a2:d3:78:58:64:c3:21:64:68:50:bd:7f:9b:ff: 12:2b:eb:db:55:5d:44:56:92:85:c9:8c:38:ad:d6: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:B0:BB:9C:DB:37:7F:8D:0A:E1:23:54:E9:94:5C:DC:18:4F:02 X509v3 Authority Key Identifier: keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:00:01:63:98:a9:1a:8e:46:74:37:7a:75:4c:cf:4d:84:6a: 0a:49:5e:a4:c6:d3:cb:5b:80:4a:1c:16:1e:47:53:f2:04:bf: d2:5b:89:0a:3c:8d:ea:ea:45:3e:d3:9c:c1:4e:1a:4c:98:d0: 2a:cc:fa:2f:f2:bf:bc:e1:a6:ef:bf:f3:fb:35:26:96:58:36: a0:b2:2c:2f:e8:c9:72:13:0d:d9:70:9d:4b:7c:fd:cf:2f:ed: cc:b6:cf:47:f9:74:2b:5c:f7:8f:f0:15:71:b7:3f:7f:98:c0: 80:5d:bb:50:58:a0:f6:ea:c4:44:77:ca:a0:92:1e:66:7d:89: 3d:66:3f:09:ac:74:d3:e7:2a:3a:8d:a5:8b:d7:39:b2:d6:17: 48:39:aa:de:09:f4:74:0d:ff:2a:24:bc:37:08:b5:fe:42:75: ae:1a:b0:32:0f:bf:93:ab:75:5f:3a:a3:76:c4:aa:cc:8f:5b: ba:f1:26:d4:b9:02:f5:72:99:d2:8d:41:43:c1:36:9a:67:2f: d8:0a:2e:d1:e5:54:0d:7f:96:cd:35:5a:07:10:47:44:88:f7: 18:04:73:32:41:fd:44:1c:ee:f2:96:95:22:7f:d0:88:86:c0: 18:9a:79:6b:37:27:61:00:77:01:49:73:26:73:87:a9:ca:0b: 9a:e5:70:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dovuruV2gpAICCUu67VjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTdiNmFlZjBiZDI0MTEzMDRlNGYzYzY5NTdjODJlYjI1 NjdjZDMwHhcNMjYwMTI2MDQwMTE2WhcNMjYwMTI3MDQwMTE2WjAzMTEwLwYDVQQD EyhjODc0YjBiYjljZGIzNzdmOGQwYWUxMjM1NGU5OTQ1Y2RjMTg0ZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pi1K/qEnvQN8wjvtevSG5j+t9FF 9QNgSPY23aQXGoXXtO9vXUDUVxYgfxBPsDJ0evhe8y5H2AKrt8T2/+HUQSVld7vo dcsuHpyFQx4ADjBc2W/umV/n/6SVtoM/0A7k0dG2x2VqyFh2c+fYEM8ulzirsLK4 qX54DfiV6k68qYhNm2zhmkXHU+aFafABcswTfIZxIktfT8kV9/e3WeTLP9GzApub CsleVrXHiAsPHH76BcuUA+is4LBPGHX+/4IStv4zDbGrVV55Yrpf5vBsjJN/o1ux bi3bEivtnYFf2zymotN4WGTDIWRoUL1/m/8SK+vbVV1EVpKFyYw4rdZBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh0sLuc2zd/jQrhI1TplFzcGE8CMB8GA1UdIwQY MBaAFF+ntq7wvSQRME5PPGlXyC6yVnzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAt YjNlNDNkMzA1Yjg5LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAtYjNlNDNkMzA1Yjg5 LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwABY5ip Go5GdDd6dUzPTYRqCklepMbTy1uAShwWHkdT8gS/0luJCjyN6upFPtOcwU4aTJjQ Ksz6L/K/vOGm77/z+zUmllg2oLIsL+jJchMN2XCdS3z9zy/tzLbPR/l0K1z3j/AV cbc/f5jAgF27UFig9urERHfKoJIeZn2JPWY/Cax00+cqOo2li9c5stYXSDmq3gn0 dA3/KiS8Nwi1/kJ1rhqwMg+/k6t1XzqjdsSqzI9buvEm1LkC9XKZ0o1BQ8E2mmcv 2Aou0eVUDX+WzTVaBxBHRIj3GARzMkH9RBzu8paVIn/QiIbAGJp5azcnYQB3AUlz JnOHqcoLmuVwig== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:53 2026 by rpki-client