This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json) Hash identifier: 8vvmd/E90enH+vsitVsaX681EsIkCK/7PLJRTU8ul9A= Subject key identifier: B0:95:4F:23:B5:F4:45:4D:B3:A3:80:FC:B9:F7:EC:57:C3:FE:99:60 Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491 Certificate serial: 019BF79ADCD1E3B87EF640627114720B4897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft Manifest number: 0A0C Signing time: Mon 26 Jan 2026 00:01:19 +0000 Manifest this update: Mon 26 Jan 2026 00:01:19 +0000 Manifest next update: Tue 27 Jan 2026 00:01:19 +0000 Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=) 2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: pblOPwjXlU/VHvJBaZws1fPuozIkxiJ/v6hUhAAFOmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:dc:d1:e3:b8:7e:f6:40:62:71:14:72:0b:48:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491 Validity Not Before: Jan 26 00:01:19 2026 GMT Not After : Jan 27 00:01:19 2026 GMT Subject: CN=b0954f23b5f4454db3a380fcb9f7ec57c3fe9960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1d:d0:df:5f:19:f0:fb:5e:22:ec:7c:5b:d7: 12:2e:d1:ed:f0:5b:f4:46:5b:f3:7e:45:c4:74:d8: bf:fb:bf:bd:40:9f:2b:c4:2e:f1:e4:e4:33:04:8b: 57:34:00:c7:35:ca:34:60:7c:9d:74:a0:bc:52:82: 2c:c1:92:a7:0c:b8:81:92:1b:37:9e:a0:e2:5c:07: 80:b0:e4:24:44:4e:60:9f:f2:43:cf:49:a3:26:08: aa:47:2b:d4:8f:15:96:f3:90:79:7a:2e:f8:f1:91: a5:5f:e7:a4:3f:1a:47:06:88:80:4d:ad:26:f5:39: aa:1d:1c:b7:92:b0:24:06:b4:a9:4c:19:72:25:79: 4c:20:47:5b:c1:b5:22:7f:d7:73:94:3b:79:34:2d: 32:9a:22:68:f7:ef:0f:5d:da:aa:e0:e5:fd:3d:e4: a7:7b:c9:bd:05:b1:9d:d1:04:bd:76:f0:dd:43:ed: ce:28:57:60:90:dd:48:11:ee:67:35:9d:61:9e:7f: 5f:61:e4:e7:f1:15:52:56:03:65:93:dd:1f:21:ab: dc:3d:89:bd:5d:f6:04:a7:cc:37:ba:15:37:30:aa: d0:ac:c0:ba:90:28:b9:df:b8:d8:2d:16:07:10:f8: b2:d7:1e:52:ce:d8:93:63:bf:f4:ee:54:4c:f3:7e: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:95:4F:23:B5:F4:45:4D:B3:A3:80:FC:B9:F7:EC:57:C3:FE:99:60 X509v3 Authority Key Identifier: keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ad:42:cb:6d:f9:e9:ec:60:93:f9:de:49:8f:c5:0a:3e:1a: 07:fe:19:eb:04:a2:2e:aa:22:9d:43:6a:ab:dc:36:8c:18:33: a8:2b:db:0f:38:b3:5f:5e:68:bd:09:d0:2e:15:17:52:37:b7: 08:86:30:53:7f:44:8a:b6:9f:18:a7:33:c1:fc:2c:75:56:ac: c9:9a:22:e9:f7:12:a0:cb:6f:55:92:42:aa:f0:15:17:52:5c: ad:67:23:01:2e:29:6a:1b:61:fd:a6:d1:86:2e:b3:77:58:49: 79:b3:fe:db:6a:20:1a:58:a5:20:78:54:d7:10:24:d6:91:7f: 74:e3:4c:dd:41:c1:b2:92:30:8c:9c:59:7e:21:62:48:f7:65: ba:3d:f1:0c:14:d5:8d:27:1e:fa:98:4a:0c:c5:7c:a8:98:10: 63:a6:7c:f6:d0:8b:89:84:30:19:58:1e:a3:60:0e:54:35:6c: b3:a5:37:28:db:4e:81:98:d7:d5:43:00:da:8b:cf:b3:8c:2b: 9b:6a:c4:ea:cc:ed:92:71:2e:cc:d3:33:5a:3a:b7:93:f8:a9: 70:18:76:4e:b4:86:1c:09:02:53:62:c7:29:42:ec:7d:bd:8d: 10:b2:bb:c7:07:3c:a3:50:3a:ce:b9:f5:ad:50:d3:8b:7c:e3: 8a:2c:dd:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mtzR47h+9kBicRRyC0iXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw Nzg0OTEwHhcNMjYwMTI2MDAwMTE5WhcNMjYwMTI3MDAwMTE5WjAzMTEwLwYDVQQD EyhiMDk1NGYyM2I1ZjQ0NTRkYjNhMzgwZmNiOWY3ZWM1N2MzZmU5OTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR3Q318Z8PteIux8W9cSLtHt8Fv0 RlvzfkXEdNi/+7+9QJ8rxC7x5OQzBItXNADHNco0YHyddKC8UoIswZKnDLiBkhs3 nqDiXAeAsOQkRE5gn/JDz0mjJgiqRyvUjxWW85B5ei748ZGlX+ekPxpHBoiATa0m 9TmqHRy3krAkBrSpTBlyJXlMIEdbwbUif9dzlDt5NC0ymiJo9+8PXdqq4OX9PeSn e8m9BbGd0QS9dvDdQ+3OKFdgkN1IEe5nNZ1hnn9fYeTn8RVSVgNlk90fIavcPYm9 XfYEp8w3uhU3MKrQrMC6kCi537jYLRYHEPiy1x5SztiTY7/07lRM837wLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCVTyO19EVNs6OA/Ln37FfD/plgMB8GA1UdIwQY MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK1Cy235 6exgk/neSY/FCj4aB/4Z6wSiLqoinUNqq9w2jBgzqCvbDzizX15ovQnQLhUXUje3 CIYwU39EirafGKczwfwsdVasyZoi6fcSoMtvVZJCqvAVF1JcrWcjAS4pahth/abR hi6zd1hJebP+22ogGlilIHhU1xAk1pF/dONM3UHBspIwjJxZfiFiSPdluj3xDBTV jSce+phKDMV8qJgQY6Z89tCLiYQwGVgeo2AOVDVss6U3KNtOgZjX1UMA2ovPs4wr m2rE6sztknEuzNMzWjq3k/ipcBh2TrSGHAkCU2LHKULsfb2NELK7xwc8o1A6zrn1 rVDTi3zjiizdAA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:52 2026 by rpki-client