This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json) Hash identifier: xVOGCluuOQSoyrLFEq69TiszapV2+U8sxOfptkbCcp0= Subject key identifier: 34:55:E0:F9:9E:F4:DA:6D:CE:7E:06:A5:10:EA:69:EC:9F:34:34:4F Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Certificate serial: 019BFB09A10516512BBEB1AE408BE91716BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 16:01:10 +0000 Manifest this update: Mon 26 Jan 2026 16:01:10 +0000 Manifest next update: Tue 27 Jan 2026 16:01:10 +0000 Files and hashes: 1: NjFTWAITqtXkX8ho3Skr9Pp4rlc.roa (hash: c1GgwCiaU4VxxQHZOScOAW3pt5JnM4YNabIqdNefJ1o=) 2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: KGHnzrDW+tQU66D4Ii4VngP9REE4zvCL8WyWtOkgDUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:a1:05:16:51:2b:be:b1:ae:40:8b:e9:17:16:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Validity Not Before: Jan 26 16:01:10 2026 GMT Not After : Jan 27 16:01:10 2026 GMT Subject: CN=3455e0f99ef4da6dce7e06a510ea69ec9f34344f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:76:56:97:bb:02:80:34:ab:41:6d:0b:33: ef:6c:15:b1:1b:0e:ba:ed:5b:18:e6:2f:cc:3d:fe: 10:c2:82:c1:8d:21:7d:77:fa:ef:fb:3b:a2:fd:8d: 15:08:c1:fa:95:78:86:96:ee:cf:ae:24:e1:7b:56: df:08:b9:b8:a3:08:d3:89:28:4f:5e:7e:6d:51:72: 2e:1a:76:42:0b:6a:d7:52:db:4b:06:3c:58:f2:b0: 27:ea:6e:39:f1:9a:be:e4:22:5f:20:c0:08:dc:3e: 9e:78:e1:4f:04:57:64:af:65:75:36:c0:0b:22:6c: 34:69:22:5c:50:14:e3:39:b9:eb:1b:5e:31:c6:12: 7a:f5:f6:b6:ab:d1:76:e6:3b:6f:7e:58:2a:8f:84: 05:34:1e:b6:ea:76:fc:e6:3c:69:0e:98:31:95:9b: 31:a5:3f:36:f2:40:a5:b9:58:d7:d1:58:f9:cc:bf: 65:fb:73:41:db:db:6e:f7:c2:6c:d6:bd:12:82:3f: 54:95:9c:ab:4a:ec:ca:ec:35:ee:1a:67:d4:22:0e: 5c:8c:a0:a2:97:45:74:11:b7:a9:e4:b6:82:3a:02: 21:ce:c4:37:7e:e2:3e:3f:c4:d2:2e:a0:b0:ba:ef: 24:6f:76:0b:7d:33:a5:d1:a6:01:4b:5f:c1:53:60: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:55:E0:F9:9E:F4:DA:6D:CE:7E:06:A5:10:EA:69:EC:9F:34:34:4F X509v3 Authority Key Identifier: keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c6:5b:84:a4:49:6e:95:41:2a:6a:4b:8a:8f:46:c3:11:f8: 29:9a:23:16:64:d9:2d:54:1a:b4:01:23:91:c9:9a:43:0d:9f: 6c:67:a3:f2:59:da:f9:78:8c:7d:37:1d:fb:97:3c:de:39:5a: cd:d2:fb:2a:4e:55:2f:16:72:d5:01:ec:27:dd:63:b9:cf:9a: 35:18:b6:d5:86:ee:b5:1d:21:4e:58:66:43:2b:bd:5f:6a:86: 32:8a:c0:11:8d:45:6d:22:cd:ea:df:e1:ed:a7:a4:51:06:bc: 45:ea:ec:53:32:7b:29:23:f3:3e:61:68:90:a2:9b:c3:e9:17: 31:7b:0c:36:43:80:38:cb:8b:6f:9b:51:bc:9c:20:1e:35:dc: 98:3c:85:3d:1b:c5:81:57:82:6a:1f:33:0e:b0:31:fb:7f:12: 77:c0:33:c7:da:4d:10:0f:01:5b:65:f4:12:18:9d:76:7c:c5: 2b:42:3b:25:a3:50:17:64:9a:0e:f3:4c:d9:c2:15:87:0e:49: df:40:a9:bc:1c:52:ea:c7:f3:59:9a:cb:9f:f6:b8:d6:23:25: 19:9a:1e:f0:9b:fa:cf:93:fc:f0:16:78:06:f5:85:b9:44:2e: a2:b0:f8:0e:63:0c:e7:fc:d8:77:5b:c5:26:86:72:90:e1:e5: 1c:58:23:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CaEFFlErvrGuQIvpFxa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3 MzMwZjIwHhcNMjYwMTI2MTYwMTEwWhcNMjYwMTI3MTYwMTEwWjAzMTEwLwYDVQQD EygzNDU1ZTBmOTllZjRkYTZkY2U3ZTA2YTUxMGVhNjllYzlmMzQzNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl052Vpe7AoA0q0FtCzPvbBWxGw66 7VsY5i/MPf4QwoLBjSF9d/rv+zui/Y0VCMH6lXiGlu7PriThe1bfCLm4owjTiShP Xn5tUXIuGnZCC2rXUttLBjxY8rAn6m458Zq+5CJfIMAI3D6eeOFPBFdkr2V1NsAL Imw0aSJcUBTjObnrG14xxhJ69fa2q9F25jtvflgqj4QFNB626nb85jxpDpgxlZsx pT828kCluVjX0Vj5zL9l+3NB29tu98Js1r0Sgj9UlZyrSuzK7DXuGmfUIg5cjKCi l0V0Ebep5LaCOgIhzsQ3fuI+P8TSLqCwuu8kb3YLfTOl0aYBS1/BU2AN2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRV4Pme9Nptzn4GpRDqaeyfNDRPMB8GA1UdIwQY MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2 LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscZbhKRJ bpVBKmpLio9GwxH4KZojFmTZLVQatAEjkcmaQw2fbGej8lna+XiMfTcd+5c83jla zdL7Kk5VLxZy1QHsJ91juc+aNRi21YbutR0hTlhmQyu9X2qGMorAEY1FbSLN6t/h 7aekUQa8RersUzJ7KSPzPmFokKKbw+kXMXsMNkOAOMuLb5tRvJwgHjXcmDyFPRvF gVeCah8zDrAx+38Sd8Azx9pNEA8BW2X0EhiddnzFK0I7JaNQF2SaDvNM2cIVhw5J 30CpvBxS6sfzWZrLn/a41iMlGZoe8Jv6z5P88BZ4BvWFuUQuorD4DmMM5/zYd1vF JoZykOHlHFgjKw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:35:28 2026 by rpki-client