This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json) Hash identifier: RJWVzENI1gc7Kqp0DbBITN3kiOZi8do5u5gqrUIuTG8= Subject key identifier: 07:57:6E:75:D4:0B:64:71:2C:48:61:E2:97:FC:36:3E:9A:C7:2D:87 Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Certificate serial: 019BF83EF8D89CD37799BC50F18DE0EE9370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 03:00:35 +0000 Manifest this update: Mon 26 Jan 2026 03:00:35 +0000 Manifest next update: Tue 27 Jan 2026 03:00:35 +0000 Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: a4X7Cf2qooUAsyzBecmFruCQV32R1Y9WP/g5s7/pNyA=) 2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:f8:d8:9c:d3:77:99:bc:50:f1:8d:e0:ee:93:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Validity Not Before: Jan 26 03:00:35 2026 GMT Not After : Jan 27 03:00:35 2026 GMT Subject: CN=07576e75d40b64712c4861e297fc363e9ac72d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:06:a0:5e:13:87:8e:25:42:f4:3c:be:dd: dc:12:31:6a:39:e7:45:b2:5d:f5:57:53:38:f2:cc: 48:4a:09:8a:8f:20:45:69:9b:bc:7c:ef:3d:a3:28: 98:df:4f:26:8b:13:27:0a:c0:5f:97:50:83:36:22: b8:34:3c:46:43:c0:06:09:3f:da:75:68:6c:ef:16: 1b:e3:96:04:75:d3:cc:ab:ce:7a:d8:b0:54:05:e3: 24:01:bc:e3:ad:e5:d7:8f:f3:e8:c2:63:d4:74:39: bd:e7:5f:2d:f0:32:cf:a6:e8:c6:e9:b2:3a:90:cb: c1:22:94:8f:c6:e5:4b:31:c6:fe:af:96:84:73:7d: ff:00:33:b5:3b:2a:ef:d5:ed:ea:d5:96:bb:4f:c8: f8:0f:40:a9:91:7b:6f:15:28:d7:ea:0e:15:d0:fa: d6:f4:5f:4e:de:9a:1c:5b:5a:2e:d9:23:c3:23:61: ec:90:5b:3d:65:7d:47:1e:83:73:02:da:8f:53:82: df:3e:90:e4:e4:e4:2e:a5:07:90:e2:be:33:e6:5d: a8:18:c1:92:56:f8:ad:24:b1:cb:bd:0c:7d:35:6c: b7:7c:16:c5:80:c2:f2:44:54:02:17:cc:ab:fa:d6: 84:17:74:14:be:8b:df:58:78:b5:14:bc:58:4f:be: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:57:6E:75:D4:0B:64:71:2C:48:61:E2:97:FC:36:3E:9A:C7:2D:87 X509v3 Authority Key Identifier: keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0c:77:34:46:0f:f5:1c:bf:45:92:84:d3:a2:0b:e5:72:38: f1:ba:3b:ff:99:07:b7:46:25:41:d8:95:71:98:83:cd:94:32: 50:b3:15:95:0f:a0:6c:64:d8:f4:04:81:e2:f4:9a:05:37:67: b4:32:20:52:df:f0:b4:15:f0:ef:ee:33:ea:39:a9:d8:43:99: 35:4d:d9:bd:f2:a5:e3:38:29:a9:76:56:e3:34:6b:a2:bd:9a: af:e5:6f:05:b9:47:3c:59:60:0c:fe:ac:60:a4:a4:0d:63:ec: 19:db:e7:db:fd:1b:ce:50:2f:a2:c8:7d:d1:36:12:7a:b9:7e: 17:04:64:c6:63:6d:02:e2:f4:94:ea:b4:77:10:f9:8a:68:56: 66:5d:d6:e7:1d:3f:06:cb:cb:fe:9a:02:3a:e0:2e:08:41:3a: 5c:5c:8e:5d:ed:8e:3f:42:12:a1:6c:24:5a:73:75:3b:8a:48: eb:31:c0:ee:bd:66:d7:32:52:a1:85:a1:6d:bc:89:f3:7a:04: b1:fe:26:50:ef:c0:b8:74:59:74:13:1b:c2:22:09:a8:37:c5: 4e:a1:c0:f5:37:78:09:5d:34:47:e1:ed:96:80:b0:5a:71:a3: 75:15:51:de:fc:41:99:e5:51:8e:f6:21:a5:d4:14:e8:5b:1e: 26:d2:37:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PvjYnNN3mbxQ8Y3g7pNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk NzAxNDIwHhcNMjYwMTI2MDMwMDM1WhcNMjYwMTI3MDMwMDM1WjAzMTEwLwYDVQQD EygwNzU3NmU3NWQ0MGI2NDcxMmM0ODYxZTI5N2ZjMzYzZTlhYzcyZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg4GoF4Th44lQvQ8vt3cEjFqOedF sl31V1M48sxISgmKjyBFaZu8fO89oyiY308mixMnCsBfl1CDNiK4NDxGQ8AGCT/a dWhs7xYb45YEddPMq8562LBUBeMkAbzjreXXj/PowmPUdDm9518t8DLPpujG6bI6 kMvBIpSPxuVLMcb+r5aEc33/ADO1Oyrv1e3q1Za7T8j4D0CpkXtvFSjX6g4V0PrW 9F9O3pocW1ou2SPDI2HskFs9ZX1HHoNzAtqPU4LfPpDk5OQupQeQ4r4z5l2oGMGS VvitJLHLvQx9NWy3fBbFgMLyRFQCF8yr+taEF3QUvovfWHi1FLxYT77tcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdXbnXUC2RxLEhh4pf8Nj6axy2HMB8GA1UdIwQY MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwx3NEYP 9Ry/RZKE06IL5XI48bo7/5kHt0YlQdiVcZiDzZQyULMVlQ+gbGTY9ASB4vSaBTdn tDIgUt/wtBXw7+4z6jmp2EOZNU3ZvfKl4zgpqXZW4zRror2ar+VvBblHPFlgDP6s YKSkDWPsGdvn2/0bzlAvosh90TYSerl+FwRkxmNtAuL0lOq0dxD5imhWZl3W5x0/ BsvL/poCOuAuCEE6XFyOXe2OP0ISoWwkWnN1O4pI6zHA7r1m1zJSoYWhbbyJ83oE sf4mUO/AuHRZdBMbwiIJqDfFTqHA9Td4CV00R+HtloCwWnGjdRVR3vxBmeVRjvYh pdQU6FseJtI3hQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:48 2026 by rpki-client