This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json) Hash identifier: /14idKPtpZvWWRD1xHEGnTqriPiMmtgzsUe5ndvV0Zs= Subject key identifier: C0:80:D0:68:84:7C:87:ED:8B:10:1B:99:37:68:3C:A4:0C:3A:C5:ED Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf Certificate serial: 019BF6885233E352EE8BD586B97D2D6EAE72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 19:01:27 +0000 Manifest this update: Sun 25 Jan 2026 19:01:27 +0000 Manifest next update: Mon 26 Jan 2026 19:01:27 +0000 Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=) 2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: pGdlEwxMxroah8gGcjdkhgkXMPAc3EdjLeC1YWuCrrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:52:33:e3:52:ee:8b:d5:86:b9:7d:2d:6e:ae:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf Validity Not Before: Jan 25 19:01:27 2026 GMT Not After : Jan 26 19:01:27 2026 GMT Subject: CN=c080d068847c87ed8b101b9937683ca40c3ac5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5b:fe:0c:53:34:84:72:84:1f:bd:bc:1b:76: fa:08:42:b9:d0:81:f0:b8:14:27:52:41:4f:a8:01: b3:ba:e1:c2:da:dd:29:3a:ae:e7:af:95:7f:29:47: c5:96:7a:f2:ea:35:7e:f1:19:36:65:23:3f:8e:d7: db:b7:58:3b:96:22:f0:9e:3c:41:c0:e0:51:8e:0e: b0:c2:75:af:93:99:9e:f6:00:a2:aa:43:98:a0:a4: 95:1f:23:67:e0:7e:92:12:f6:d4:07:9b:86:66:fa: 31:b3:56:3d:e3:76:b5:9b:ec:a0:fc:9d:e4:e9:a0: 5b:58:a2:e5:13:fe:cd:81:47:10:dc:55:39:71:81: 8b:94:aa:35:2f:3b:2b:81:f1:66:44:e3:2b:66:72: 60:6e:6a:cc:a9:a9:e7:11:26:7b:25:81:a9:2d:fd: 03:bd:91:25:8e:8d:18:2a:49:97:aa:c5:30:68:8f: 59:1c:ca:41:05:dd:f7:1e:b7:a2:d7:7b:50:6a:8d: 78:2c:a3:00:bc:5e:c3:b8:fd:6c:e0:ea:e2:29:67: 79:9d:a3:1c:45:67:55:c4:6d:09:f9:e9:8f:54:90: 9e:6d:82:c7:9f:81:05:95:a3:81:d1:d4:1d:f8:21: 2a:b4:c5:f5:f1:5e:08:c5:08:4e:33:42:fe:55:d4: 18:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:D0:68:84:7C:87:ED:8B:10:1B:99:37:68:3C:A4:0C:3A:C5:ED X509v3 Authority Key Identifier: keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:99:57:32:b1:db:7e:57:9b:fe:60:ef:ae:74:36:32:e2:1d: 19:f1:fd:e4:a7:c2:73:39:ae:55:a4:84:cc:3e:ca:41:98:e9: bc:c0:93:36:cd:65:77:82:5c:f5:fb:05:f4:b1:02:f5:d6:66: f6:b7:a3:41:89:52:61:af:9c:2e:19:44:90:79:a2:9b:9f:89: cc:45:db:9b:59:96:ec:d2:43:e6:27:83:69:d2:48:0e:2c:c7: 29:05:8d:41:08:d2:ad:51:63:5e:a6:43:a2:2a:2c:5a:44:16: 3b:92:89:3c:0d:19:87:a1:9a:d2:e1:24:aa:be:26:42:1e:9f: 0e:fe:b9:2f:cb:28:c2:f6:4c:94:35:74:36:58:f5:de:f4:62: 84:b7:6f:09:4c:f9:8f:da:70:5c:aa:61:c1:5a:b3:e9:17:b0: 12:00:52:77:02:ff:98:ad:54:05:11:37:0e:e8:cd:e6:f5:5d: b7:cd:25:6e:ee:00:01:cc:16:d9:6b:f4:3d:8d:48:94:93:f3: 95:b1:0e:12:91:cd:84:b0:32:02:f4:0a:9c:c4:31:80:a3:1d: 4e:07:75:bf:b5:60:2d:05:fe:01:f6:32:60:71:3d:29:05:21: 72:69:d5:4a:70:e2:cf:05:5b:b2:a0:3b:7e:81:30:b8:23:7a: c5:f5:9f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFIz41Lui9WGuX0tbq5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw ODRmZGYwHhcNMjYwMTI1MTkwMTI3WhcNMjYwMTI2MTkwMTI3WjAzMTEwLwYDVQQD EyhjMDgwZDA2ODg0N2M4N2VkOGIxMDFiOTkzNzY4M2NhNDBjM2FjNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Fv+DFM0hHKEH728G3b6CEK50IHw uBQnUkFPqAGzuuHC2t0pOq7nr5V/KUfFlnry6jV+8Rk2ZSM/jtfbt1g7liLwnjxB wOBRjg6wwnWvk5me9gCiqkOYoKSVHyNn4H6SEvbUB5uGZvoxs1Y943a1m+yg/J3k 6aBbWKLlE/7NgUcQ3FU5cYGLlKo1LzsrgfFmROMrZnJgbmrMqannESZ7JYGpLf0D vZEljo0YKkmXqsUwaI9ZHMpBBd33Hrei13tQao14LKMAvF7DuP1s4OriKWd5naMc RWdVxG0J+emPVJCebYLHn4EFlaOB0dQd+CEqtMX18V4IxQhOM0L+VdQYDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCA0GiEfIftixAbmTdoPKQMOsXtMB8GA1UdIwQY MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJlXMrHb fleb/mDvrnQ2MuIdGfH95KfCczmuVaSEzD7KQZjpvMCTNs1ld4Jc9fsF9LEC9dZm 9rejQYlSYa+cLhlEkHmim5+JzEXbm1mW7NJD5ieDadJIDizHKQWNQQjSrVFjXqZD oiosWkQWO5KJPA0Zh6Ga0uEkqr4mQh6fDv65L8sowvZMlDV0Nlj13vRihLdvCUz5 j9pwXKphwVqz6RewEgBSdwL/mK1UBRE3DujN5vVdt80lbu4AAcwW2Wv0PY1IlJPz lbEOEpHNhLAyAvQKnMQxgKMdTgd1v7VgLQX+AfYyYHE9KQUhcmnVSnDizwVbsqA7 foEwuCN6xfWf1g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:31:14 2026 by rpki-client