This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json) Hash identifier: S70/by/MAqL6m3uxDTFPgWecH2GRolN1PFHHWpvwLak= Subject key identifier: B3:EB:3C:26:89:9C:A1:5C:A7:7C:DF:EF:44:70:71:EA:07:DB:B0:FE Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Certificate serial: 019BFB0A121B4E2C286C6D0138F0423996F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft Manifest number: 0764 Signing time: Mon 26 Jan 2026 16:01:39 +0000 Manifest this update: Mon 26 Jan 2026 16:01:39 +0000 Manifest next update: Tue 27 Jan 2026 16:01:39 +0000 Files and hashes: 1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=) 2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=) 3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: QqTKc9bhQhk4IqovZxQR9w4vXtVcNKrKAnpFPdHDMbw=) 4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=) 5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:12:1b:4e:2c:28:6c:6d:01:38:f0:42:39:96:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Validity Not Before: Jan 26 16:01:39 2026 GMT Not After : Jan 27 16:01:39 2026 GMT Subject: CN=b3eb3c26899ca15ca77cdfef447071ea07dbb0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:e7:06:76:c4:1e:fa:8b:35:00:79:08:d9: 86:7a:b4:e5:67:51:34:d3:ee:02:e8:31:40:7b:c1: 86:6c:d7:51:29:3a:5b:64:c7:c9:1c:9c:e2:5f:7c: b4:79:a0:9e:79:ec:8d:23:f9:29:c5:a5:ba:93:5b: 70:10:c0:18:c9:d4:fa:52:28:95:f4:0a:f9:cf:5c: a4:96:bf:ac:4b:93:36:b3:9f:f8:2d:f2:67:24:21: 07:1f:1d:15:53:44:c1:5c:80:0f:0b:bf:97:f1:14: 9c:cf:17:bb:87:df:ec:2b:b6:1f:02:30:f2:5c:a1: 90:bd:eb:f2:a9:53:da:46:cb:35:8a:e1:5f:9d:3c: ae:23:b1:66:86:5e:db:1a:44:26:6f:4f:fc:5a:3c: ec:a5:71:a7:5d:02:c0:d2:74:37:a3:e9:25:66:73: c7:75:ff:de:7d:e5:b5:14:fa:97:4c:68:39:69:80: 38:04:5e:2a:86:4f:8f:b9:6f:0f:14:ac:83:74:07: d6:98:fc:33:5a:4e:25:3d:7d:60:e0:53:8c:43:4d: d2:d2:62:83:3c:85:87:99:be:da:44:72:f2:1e:91: e0:87:6d:0d:e0:62:51:67:83:c6:85:b3:f2:e7:8e: 15:3a:e6:41:64:95:60:f6:6b:fe:22:6f:cd:28:29: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EB:3C:26:89:9C:A1:5C:A7:7C:DF:EF:44:70:71:EA:07:DB:B0:FE X509v3 Authority Key Identifier: keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5c:bf:48:26:32:fe:76:5b:9c:f9:d5:61:7d:d0:f6:01:78: cc:1d:d2:50:34:2a:18:60:fd:38:5e:bf:98:09:8e:b2:d2:26: 1c:d0:c1:f6:82:1c:76:ae:d2:ba:12:5f:3d:c3:ce:88:a7:e7: fc:14:80:da:1d:2d:4c:26:50:68:a0:69:d0:82:cd:16:6b:26: 1c:c0:49:9b:03:f0:72:f7:63:6f:bb:28:84:4a:f8:e0:bf:02: c9:ae:1b:0b:0d:13:01:9d:e5:37:66:90:92:a5:1c:52:a6:be: 5e:2b:7b:0b:ba:21:ff:c9:54:00:27:d5:4f:33:f5:74:40:fa: 57:5c:87:e7:fe:b3:b7:60:3f:a3:b5:f0:00:14:fc:e0:52:2f: 95:e8:eb:f4:5d:3a:d0:c8:71:cf:6f:5d:34:6e:7c:ef:80:23: bb:65:d0:97:49:cf:f6:34:cc:94:57:dc:82:ca:1e:44:7a:07: 36:1f:fc:db:5d:12:c4:c9:26:49:75:7e:08:c7:b0:72:e4:96: 3e:55:c3:eb:7b:9d:be:49:44:76:6c:dd:7d:15:ec:b2:04:39: 88:f5:dd:71:17:11:9b:43:c2:45:49:45:3c:06:01:e4:27:58: d2:78:ad:c6:6f:99:d9:93:70:4e:2f:d9:8e:8f:ce:ef:73:0f: 88:39:b1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ChIbTiwobG0BOPBCOZbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl YmFjYmYwHhcNMjYwMTI2MTYwMTM5WhcNMjYwMTI3MTYwMTM5WjAzMTEwLwYDVQQD EyhiM2ViM2MyNjg5OWNhMTVjYTc3Y2RmZWY0NDcwNzFlYTA3ZGJiMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSvnBnbEHvqLNQB5CNmGerTlZ1E0 0+4C6DFAe8GGbNdRKTpbZMfJHJziX3y0eaCeeeyNI/kpxaW6k1twEMAYydT6UiiV 9Ar5z1yklr+sS5M2s5/4LfJnJCEHHx0VU0TBXIAPC7+X8RSczxe7h9/sK7YfAjDy XKGQvevyqVPaRss1iuFfnTyuI7Fmhl7bGkQmb0/8WjzspXGnXQLA0nQ3o+klZnPH df/efeW1FPqXTGg5aYA4BF4qhk+PuW8PFKyDdAfWmPwzWk4lPX1g4FOMQ03S0mKD PIWHmb7aRHLyHpHgh20N4GJRZ4PGhbPy544VOuZBZJVg9mv+Im/NKCkouQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPrPCaJnKFcp3zf70RwceoH27D+MB8GA1UdIwQY MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcly/SCYy /nZbnPnVYX3Q9gF4zB3SUDQqGGD9OF6/mAmOstImHNDB9oIcdq7SuhJfPcPOiKfn /BSA2h0tTCZQaKBp0ILNFmsmHMBJmwPwcvdjb7sohEr44L8Cya4bCw0TAZ3lN2aQ kqUcUqa+Xit7C7oh/8lUACfVTzP1dED6V1yH5/6zt2A/o7XwABT84FIvlejr9F06 0Mhxz29dNG5874Aju2XQl0nP9jTMlFfcgsoeRHoHNh/8210SxMkmSXV+CMewcuSW PlXD63udvklEdmzdfRXssgQ5iPXdcRcRm0PCRUlFPAYB5CdY0nitxm+Z2ZNwTi/Z jo/O73MPiDmx1g== -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:50 2026 by rpki-client