This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json) Hash identifier: UL5RLCPIAEYBqNIzFN7FAeQPtOophfHVt46K+2DmMuE= Subject key identifier: 96:CB:60:D9:06:8B:B3:20:87:55:32:A5:62:56:D4:A2:43:BA:18:C0 Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69 Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769 Certificate serial: 019BFBE4D81FB6D3AFE6EDD8F1A0BE373BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 20:00:37 +0000 Manifest this update: Mon 26 Jan 2026 20:00:37 +0000 Manifest next update: Tue 27 Jan 2026 20:00:37 +0000 Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: 3JYd2l8o7bkqSamgT2GQ4aB0xL1vw0zBq3G3y8ScQMQ=) 2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:d8:1f:b6:d3:af:e6:ed:d8:f1:a0:be:37:3b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769 Validity Not Before: Jan 26 20:00:37 2026 GMT Not After : Jan 27 20:00:37 2026 GMT Subject: CN=96cb60d9068bb320875532a56256d4a243ba18c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:dc:bc:11:90:b9:20:40:6f:4b:86:74:02: b4:f4:4b:b6:b3:f2:ff:d0:3f:22:f0:7e:34:a1:2b: 32:2a:ae:2f:95:ce:07:20:6a:c1:60:8c:d5:11:78: 95:10:3b:ac:64:08:41:fa:26:dc:ba:97:e9:b5:68: 72:be:7d:fd:94:e7:56:9d:87:b5:40:e6:a3:a3:61: 09:ac:10:09:e4:79:e1:fa:21:7d:96:c0:ef:eb:93: 5d:9d:a9:cf:21:50:16:1f:bf:7d:10:79:a4:4e:c7: 6b:4f:a9:90:34:60:df:d1:25:a8:57:48:52:26:6f: a7:48:2a:96:a7:bd:47:d3:78:d2:b7:e4:1d:9b:28: ac:4c:e0:b4:6f:10:cf:36:0a:db:08:f4:12:2b:59: 65:37:cc:1a:a9:74:75:ad:7e:b1:f3:8e:47:65:8b: 9f:0f:36:25:09:84:c3:ec:93:8e:56:b0:b4:d3:66: 1e:46:d4:8f:7d:52:74:1e:ce:8b:24:f0:39:df:60: 77:7e:8e:8c:02:23:cb:ce:91:9b:99:82:ae:5c:ab: 8d:a9:d2:49:57:64:d5:fe:16:78:dd:ad:66:98:92: fb:ca:63:cb:f9:5f:ec:71:ea:da:8f:6c:c4:ad:db: 68:35:84:ae:67:23:f8:1f:4e:39:e1:e1:93:b5:77: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CB:60:D9:06:8B:B3:20:87:55:32:A5:62:56:D4:A2:43:BA:18:C0 X509v3 Authority Key Identifier: keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c6:b8:5e:ca:37:1e:f2:da:c0:0f:c0:61:0f:fa:1f:3d:fc: aa:ef:42:26:76:47:0c:6a:00:55:27:58:6b:03:6c:c8:cf:4e: 14:26:41:f5:0f:0f:71:96:64:da:52:18:3b:62:81:7e:f8:f2: 78:00:8e:f7:12:26:16:77:1f:ef:e5:fa:ff:cd:fc:3b:24:91: 79:1d:16:7c:4e:fa:88:85:0b:c8:05:c5:79:0c:fa:21:01:9d: bb:bf:71:18:8d:30:b1:80:a5:fd:ef:a5:2a:20:7b:6f:1d:f3: 47:6e:60:c9:f9:bd:f8:15:e1:dc:a3:b4:48:e2:2f:d2:35:6b: e6:f6:0c:d1:9e:c0:38:e8:be:bb:13:46:b5:2a:0c:60:27:64: 17:1c:f1:a1:9a:58:07:13:54:29:81:5d:0f:9e:ae:85:ac:0b: 6c:0d:bd:c5:05:73:d5:5a:6e:51:8e:51:f5:a7:89:5c:61:60: 84:88:4d:1c:d8:06:fe:02:08:9d:a2:0f:f1:65:cf:73:40:24: 9a:1c:32:17:78:fc:52:3d:75:8d:56:cc:40:18:5d:13:f0:75: 7a:6e:8e:15:2e:6f:d7:82:e3:62:eb:d5:ce:a7:0f:01:87:eb: 05:eb:66:4e:40:cc:f2:5e:23:5b:9c:6e:e8:96:52:d2:64:fa: 77:eb:2e:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75NgfttOv5u3Y8aC+Nzv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzNkN2ZiOTY3YTViNWMyMDNmNDM0YzAwZmZmMTI1MzRl NjE3NjkwHhcNMjYwMTI2MjAwMDM3WhcNMjYwMTI3MjAwMDM3WjAzMTEwLwYDVQQD Eyg5NmNiNjBkOTA2OGJiMzIwODc1NTMyYTU2MjU2ZDRhMjQzYmExOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH3cvBGQuSBAb0uGdAK09Eu2s/L/ 0D8i8H40oSsyKq4vlc4HIGrBYIzVEXiVEDusZAhB+ibcupfptWhyvn39lOdWnYe1 QOajo2EJrBAJ5Hnh+iF9lsDv65NdnanPIVAWH799EHmkTsdrT6mQNGDf0SWoV0hS Jm+nSCqWp71H03jSt+QdmyisTOC0bxDPNgrbCPQSK1llN8waqXR1rX6x845HZYuf DzYlCYTD7JOOVrC002YeRtSPfVJ0Hs6LJPA532B3fo6MAiPLzpGbmYKuXKuNqdJJ V2TV/hZ43a1mmJL7ymPL+V/sceraj2zErdtoNYSuZyP4H0454eGTtXcAgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbLYNkGi7Mgh1UypWJW1KJDuhjAMB8GA1UdIwQY MBaAFF0z1/uWeltcID9DTAD/8SU05hdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEt MThiZGE1M2M1ODQyLzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEtMThiZGE1M2M1ODQy LzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8a4Xso3 HvLawA/AYQ/6Hz38qu9CJnZHDGoAVSdYawNsyM9OFCZB9Q8PcZZk2lIYO2KBfvjy eACO9xImFncf7+X6/838OySReR0WfE76iIULyAXFeQz6IQGdu79xGI0wsYCl/e+l KiB7bx3zR25gyfm9+BXh3KO0SOIv0jVr5vYM0Z7AOOi+uxNGtSoMYCdkFxzxoZpY BxNUKYFdD56uhawLbA29xQVz1VpuUY5R9aeJXGFghIhNHNgG/gIInaIP8WXPc0Ak mhwyF3j8Uj11jVbMQBhdE/B1em6OFS5v14LjYuvVzqcPAYfrBetmTkDM8l4jW5xu 6JZS0mT6d+suuA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:25 2026 by rpki-client