This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json) Hash identifier: u2mX50eEkjFND7M4IbrQxJTxxwqxcv5A0FOwAHjRIWc= Subject key identifier: 00:B6:3A:61:69:B6:45:69:DE:55:5A:69:EA:58:BF:08:E1:E9:DD:5F Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Certificate serial: 019BFCC0B825843D774E5D7855085E3AFE6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft Manifest number: 074B Signing time: Tue 27 Jan 2026 00:00:46 +0000 Manifest this update: Tue 27 Jan 2026 00:00:46 +0000 Manifest next update: Wed 28 Jan 2026 00:00:46 +0000 Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: BrG22dMQHy6w9hAkUL3knhYnwaZUUZYitPeFhcQpUcs=) 2: f0h0BRc01GJbNEhbsgMRjt_Mi4w.roa (hash: kvtuOpQL+PzUZw9RNcnmJmxQ64DQiEtwmabASxtpCEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:b8:25:84:3d:77:4e:5d:78:55:08:5e:3a:fe:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Validity Not Before: Jan 27 00:00:46 2026 GMT Not After : Jan 28 00:00:46 2026 GMT Subject: CN=00b63a6169b64569de555a69ea58bf08e1e9dd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:ae:85:ee:9b:8a:91:fe:d1:98:ba:f6:9e: a3:9a:8b:66:bf:fe:51:7e:db:21:70:2a:6b:e0:b1: 4f:77:08:4a:ac:d6:71:30:d4:37:64:d5:82:0b:7c: b2:e1:68:3c:c8:8a:2c:f5:0a:fa:93:a4:49:a4:2f: d0:91:71:0b:e0:89:da:f3:0a:7d:19:04:a7:8e:f2: 12:59:a4:ab:4d:f1:b4:8f:ad:65:06:ff:ad:bc:62: 7a:27:87:bf:29:57:af:96:c6:26:fa:cf:e0:a4:e9: 87:df:23:50:b7:a7:8c:42:50:a7:eb:cf:1a:be:f4: b6:a0:19:bf:09:4c:80:5c:3e:2f:68:f5:82:c5:be: d8:d4:a8:02:5f:51:7c:7d:56:01:a0:30:6f:27:f0: c8:d6:0a:63:76:96:a4:ec:44:09:bf:8f:5e:79:58: 8c:73:e4:8d:d4:46:2e:4e:a8:2d:32:42:43:ab:47: 5b:c7:3d:c8:b7:bc:45:f6:56:43:c6:31:bc:79:f0: 85:3b:e6:83:88:c0:fc:f7:90:58:4d:b1:98:2f:2d: 85:a8:e4:d2:77:0e:33:2a:d3:ff:f5:b4:0d:45:3b: ef:8b:c7:64:c4:97:f8:c1:6f:48:b4:f1:29:58:42: a1:50:eb:66:b8:f1:60:07:cd:43:05:c4:3e:44:5c: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B6:3A:61:69:B6:45:69:DE:55:5A:69:EA:58:BF:08:E1:E9:DD:5F X509v3 Authority Key Identifier: keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8f:dd:79:d8:44:0b:d2:42:f1:e9:48:e1:d4:26:47:c3:74: b0:11:88:3c:08:d7:ee:1d:93:6e:59:60:03:3c:e1:0e:c2:69: d3:03:99:ee:c9:0b:30:88:a7:d7:c1:93:6a:dc:47:f6:2e:30: c6:b3:b9:04:e0:e5:ef:ea:86:e2:22:17:0a:44:4f:92:a5:a9: 35:d7:47:b5:84:23:75:e1:79:69:af:ce:ce:2b:16:1f:e4:1d: 85:7c:de:d1:60:45:19:6d:28:8b:9e:73:01:45:cd:44:83:fe: 53:a1:84:9e:d1:c6:08:23:e7:4c:a4:d9:ac:10:af:ab:c4:71: 74:e1:db:d1:48:c8:62:3e:c1:a4:1e:47:fe:f0:71:e5:96:c1: dc:f7:93:10:14:73:07:78:c9:0c:f6:90:6e:57:3e:5a:55:0a: 2a:ba:dd:75:3a:40:72:ed:09:34:a8:61:66:01:7a:ae:0a:2d: bf:99:90:0f:4b:10:5f:21:5a:58:96:d2:b2:eb:c9:73:8f:5e: c1:b1:a1:d5:c7:74:63:a2:29:ca:9c:07:f4:b0:db:06:af:00: 9a:1b:cf:da:ed:42:62:73:f2:fa:1a:4a:49:5b:9a:69:cd:96: 58:2c:a6:b9:40:49:f5:cb:e7:b6:02:04:87:18:96:69:18:4f: a9:f7:40:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wLglhD13Tl14VQheOv5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMWM2M2EyMzY5ZGY3ZGZlY2YzYzg1MDg1OTMzNDFjZDM2 OWIyMzcwHhcNMjYwMTI3MDAwMDQ2WhcNMjYwMTI4MDAwMDQ2WjAzMTEwLwYDVQQD EygwMGI2M2E2MTY5YjY0NTY5ZGU1NTVhNjllYTU4YmYwOGUxZTlkZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YKuhe6bipH+0Zi69p6jmotmv/5R ftshcCpr4LFPdwhKrNZxMNQ3ZNWCC3yy4Wg8yIos9Qr6k6RJpC/QkXEL4Ina8wp9 GQSnjvISWaSrTfG0j61lBv+tvGJ6J4e/KVevlsYm+s/gpOmH3yNQt6eMQlCn688a vvS2oBm/CUyAXD4vaPWCxb7Y1KgCX1F8fVYBoDBvJ/DI1gpjdpak7EQJv49eeViM c+SN1EYuTqgtMkJDq0dbxz3It7xF9lZDxjG8efCFO+aDiMD895BYTbGYLy2FqOTS dw4zKtP/9bQNRTvvi8dkxJf4wW9ItPEpWEKhUOtmuPFgB81DBcQ+RFz/6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC2OmFptkVp3lVaaepYvwjh6d1fMB8GA1UdIwQY MBaAFFwcY6I2nfff7PPIUIWTNBzTabI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUt NjdhMThkNjJlYzJkLzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUtNjdhMThkNjJlYzJk LzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4/dedhE C9JC8elI4dQmR8N0sBGIPAjX7h2TbllgAzzhDsJp0wOZ7skLMIin18GTatxH9i4w xrO5BODl7+qG4iIXCkRPkqWpNddHtYQjdeF5aa/OzisWH+QdhXze0WBFGW0oi55z AUXNRIP+U6GEntHGCCPnTKTZrBCvq8RxdOHb0UjIYj7BpB5H/vBx5ZbB3PeTEBRz B3jJDPaQblc+WlUKKrrddTpAcu0JNKhhZgF6rgotv5mQD0sQXyFaWJbSsuvJc49e wbGh1cd0Y6IpypwH9LDbBq8AmhvP2u1CYnPy+hpKSVuaac2WWCymuUBJ9cvntgIE hxiWaRhPqfdAFQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:16:17 2026 by rpki-client