This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json) Hash identifier: 5vQ13eE2H0QHRFWNlK8KU8xgb9AMv6Eak+sz6Okh2yc= Subject key identifier: C9:C2:5C:8C:12:E3:2F:5B:0C:A4:F0:74:FF:BC:21:15:7A:04:6E:47 Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61 Certificate serial: 019BD80F6DA1A5ADD5843C895AD20DE6CB4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft Manifest number: 17D7 Signing time: Mon 19 Jan 2026 21:00:48 +0000 Manifest this update: Mon 19 Jan 2026 21:00:48 +0000 Manifest next update: Tue 20 Jan 2026 21:00:48 +0000 Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=) 2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=) 3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: iwxHzbasVN4eq/Hlbxr65l701akg7QzdNHzK/XyJVYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:0f:6d:a1:a5:ad:d5:84:3c:89:5a:d2:0d:e6:cb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61 Validity Not Before: Jan 19 21:00:48 2026 GMT Not After : Jan 20 21:00:48 2026 GMT Subject: CN=c9c25c8c12e32f5b0ca4f074ffbc21157a046e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:08:f6:a1:f7:92:da:3e:23:6e:fa:90:49: 13:e0:47:33:75:42:9c:95:a3:db:4f:a1:0c:dd:dc: 57:7d:32:61:25:b2:f2:0b:3d:9a:b9:81:e5:61:50: 5f:32:82:1b:d2:35:4c:99:67:ed:a2:b4:db:b6:40: 97:35:bf:fe:97:70:b4:79:c8:78:88:6c:4f:0a:f9: 28:96:25:3a:a5:b9:1e:20:14:f5:7b:09:ed:3b:11: 5a:ed:74:f1:59:7a:32:c1:a3:6f:6a:c5:7a:df:d6: 92:1e:6d:ae:24:b5:69:2a:07:0f:c7:56:75:90:26: 0c:3e:9a:75:5b:8f:b5:bb:53:c0:d8:80:78:0d:35: 10:ec:76:85:93:00:54:11:e0:44:ee:de:c3:48:f8: 1a:5e:0a:11:9c:41:0b:13:81:21:3a:bb:62:2e:ad: 5a:0d:fe:14:c7:90:6a:29:c3:cf:d6:5a:f4:bb:44: 4d:e7:e5:75:9b:57:16:13:f5:a9:75:f3:a7:8a:29: c1:03:40:43:1a:d1:31:84:f2:d9:98:c3:56:a3:e0: 59:7f:22:56:39:e0:8a:82:19:d9:31:8d:cb:8a:d2: bf:d7:d9:d0:6c:ac:e1:e0:2d:9b:fd:b0:a3:05:f0: f9:01:7b:25:8e:b4:b7:96:e5:91:91:83:b8:33:24: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:5C:8C:12:E3:2F:5B:0C:A4:F0:74:FF:BC:21:15:7A:04:6E:47 X509v3 Authority Key Identifier: keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:36:fc:c7:b1:42:22:e9:02:19:bb:0c:6f:12:64:13:e8:de: bf:56:05:72:ff:51:c0:2e:f4:34:e7:85:17:2a:79:ac:5c:e8: 46:dc:14:e7:6b:2a:ab:00:a8:b6:3d:a3:59:f1:bb:13:b2:5a: a5:67:8a:68:1f:c3:0a:bf:b6:14:c0:4a:59:8f:ac:57:98:5d: 49:68:32:63:19:de:44:71:63:f9:bc:79:36:e2:6a:2f:3c:09: 95:4c:f3:46:0b:56:d2:58:eb:3b:01:22:89:7f:22:b0:4c:e5: 58:10:52:f2:0e:cb:64:a1:e9:bc:be:72:f3:6d:dc:c4:2c:cd: 3c:c1:ff:88:f5:4a:fd:25:44:ad:f6:89:d6:8c:05:b9:ae:0f: 4c:50:a9:8a:b5:72:9d:12:4b:73:9d:55:51:04:6e:85:d4:22: a9:d7:21:78:01:fe:fd:29:81:e7:fe:52:9c:84:85:e6:5d:38: d5:c4:13:6a:a3:97:aa:78:dc:c8:7c:d8:48:e2:13:e7:32:e2: f0:6d:5b:00:47:f8:89:9a:25:55:64:9b:5d:91:e7:2c:c6:71: f1:69:18:28:00:dd:56:3f:82:a7:f7:d7:97:b4:d2:40:9b:74: 6a:6e:be:79:d6:95:6f:e5:fc:65:82:7c:b1:4f:6a:59:24:7a: bd:6d:e8:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYD22hpa3VhDyJWtIN5stNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDk5ZjQ5OTc4Yjk2MGZhMzFmODFhY2Y1NDY3MTI3M2Rj N2ZmNjEwHhcNMjYwMTE5MjEwMDQ4WhcNMjYwMTIwMjEwMDQ4WjAzMTEwLwYDVQQD EyhjOWMyNWM4YzEyZTMyZjViMGNhNGYwNzRmZmJjMjExNTdhMDQ2ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXoI9qH3kto+I276kEkT4EczdUKc laPbT6EM3dxXfTJhJbLyCz2auYHlYVBfMoIb0jVMmWftorTbtkCXNb/+l3C0ech4 iGxPCvkoliU6pbkeIBT1ewntOxFa7XTxWXoywaNvasV639aSHm2uJLVpKgcPx1Z1 kCYMPpp1W4+1u1PA2IB4DTUQ7HaFkwBUEeBE7t7DSPgaXgoRnEELE4EhOrtiLq1a Df4Ux5BqKcPP1lr0u0RN5+V1m1cWE/WpdfOniinBA0BDGtExhPLZmMNWo+BZfyJW OeCKghnZMY3LitK/19nQbKzh4C2b/bCjBfD5AXsljrS3luWRkYO4MyT7gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnCXIwS4y9bDKTwdP+8IRV6BG5HMB8GA1UdIwQY MBaAFF8Jn0mXi5YPox+BrPVGcSc9x/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2Mt ZjVkMmNiNzk0NTZkLzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2MtZjVkMmNiNzk0NTZk LzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzb8x7FC IukCGbsMbxJkE+jev1YFcv9RwC70NOeFFyp5rFzoRtwU52sqqwCotj2jWfG7E7Ja pWeKaB/DCr+2FMBKWY+sV5hdSWgyYxneRHFj+bx5NuJqLzwJlUzzRgtW0ljrOwEi iX8isEzlWBBS8g7LZKHpvL5y823cxCzNPMH/iPVK/SVErfaJ1owFua4PTFCpirVy nRJLc51VUQRuhdQiqdcheAH+/SmB5/5SnISF5l041cQTaqOXqnjcyHzYSOIT5zLi 8G1bAEf4iZolVWSbXZHnLMZx8WkYKADdVj+Cp/fXl7TSQJt0am6+edaVb+X8ZYJ8 sU9qWSR6vW3ojA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:01:51 2026 by rpki-client