This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json) Hash identifier: wWSf8y5KKls18uXEP3mBLnll+ODLiIvAqPVzg5u0n8M= Subject key identifier: C5:C3:8D:AE:62:9C:C1:58:DE:2F:3C:C6:0B:FE:14:C9:29:20:F7:E2 Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Certificate serial: 019BFD65E70AEE7D6CC77D2F50A1311484F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft Manifest number: 177D Signing time: Tue 27 Jan 2026 03:01:12 +0000 Manifest this update: Tue 27 Jan 2026 03:01:12 +0000 Manifest next update: Wed 28 Jan 2026 03:01:12 +0000 Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=) 2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: poKfD0BW1+y5Zl3g6tJshIsbQPfuT+ZW6z0aAnPB4sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:e7:0a:ee:7d:6c:c7:7d:2f:50:a1:31:14:84:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Validity Not Before: Jan 27 03:01:12 2026 GMT Not After : Jan 28 03:01:12 2026 GMT Subject: CN=c5c38dae629cc158de2f3cc60bfe14c92920f7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:c4:8f:d5:41:08:76:3a:1e:52:c0:22:49: b8:5a:53:6e:d1:36:bf:0f:01:c2:c9:1a:15:b1:9e: 74:37:a4:73:fa:cb:2c:ab:f2:0c:e1:4a:b3:e5:88: 7f:be:20:75:3d:75:f7:ea:f3:1f:08:f0:44:81:43: 09:f2:81:0e:ea:d9:ae:6b:0e:d9:bc:c0:76:07:9b: 37:b2:0e:5c:49:67:83:e6:f3:0f:bd:6b:66:6d:fe: b4:cc:00:1f:b1:b9:84:34:fa:dc:fa:5e:d2:21:e3: 9f:0d:66:72:85:8d:3d:7b:6b:78:ba:ea:1a:06:4a: 13:a6:55:31:a6:e9:76:d4:e1:c2:60:e1:e6:d8:e9: ed:c0:e4:10:55:a4:26:59:3b:33:2c:f3:06:36:07: 7f:38:fd:3d:03:52:7e:a4:3c:b5:fc:0d:d9:e0:83: a5:7e:26:df:bd:78:13:f6:9f:94:f6:d3:98:5a:ff: c8:12:f1:85:40:28:6d:18:f1:c3:cc:ed:67:eb:3b: 54:82:ae:1c:ec:6d:76:24:ea:54:b6:64:94:7c:98: 8e:6f:b6:a0:e1:db:69:a9:88:53:03:e3:90:c2:71: 2d:e4:9c:ba:c7:53:63:3a:71:11:8e:74:c3:bc:2c: 25:82:96:36:6d:2c:f5:38:74:77:16:1b:c6:69:23: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:8D:AE:62:9C:C1:58:DE:2F:3C:C6:0B:FE:14:C9:29:20:F7:E2 X509v3 Authority Key Identifier: keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4d:8b:3b:dc:94:bd:f0:a0:5e:bd:5b:9d:fe:16:b0:fd:12: 89:9f:0c:6b:58:c8:14:19:e1:7d:91:2a:4d:a1:db:0a:e5:82: eb:3a:ca:24:f4:57:5c:16:b4:a6:d6:d3:b2:d6:f1:ec:49:d0: 96:52:10:4b:d7:32:a5:ec:da:2b:76:33:9e:89:e6:97:4a:28: ef:81:c0:75:ec:8a:75:96:4b:05:39:d5:8e:d9:f9:84:f6:49: e0:56:ec:30:24:aa:1b:d5:55:e1:56:28:60:45:8c:4a:20:e0: 3b:5f:d5:77:da:67:89:bb:9e:81:c6:5d:f1:87:ca:70:2c:fc: 1a:aa:c1:0f:48:e4:5d:8e:d5:75:3d:77:72:55:fc:42:18:71: 6c:f7:47:1e:4c:40:a8:d8:c4:1d:08:7a:90:09:4f:11:f6:01: 88:c3:3a:0b:cd:e1:dd:a5:70:d1:e7:af:25:44:7d:03:6b:61: 7e:92:22:29:12:d4:af:03:ea:32:82:6f:98:fc:57:51:b0:f7: 59:58:5e:6d:bc:f8:c2:07:f1:1e:fb:3c:eb:c1:a9:ee:92:1d: 06:b1:48:69:d4:34:84:0a:ba:5b:f0:62:22:27:fd:d1:7e:8f: 4b:ab:d6:8e:7d:70:b7:9f:02:58:6e:11:08:e4:57:6c:e7:7c: 03:79:6f:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZecK7n1sx30vUKExFIT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDY5MTBjZjFlMmUyYjFjYTM0NzNjNGI3ZDA5MjAyMGU3 YjdjNjEwHhcNMjYwMTI3MDMwMTEyWhcNMjYwMTI4MDMwMTEyWjAzMTEwLwYDVQQD EyhjNWMzOGRhZTYyOWNjMTU4ZGUyZjNjYzYwYmZlMTRjOTI5MjBmN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29vEj9VBCHY6HlLAIkm4WlNu0Ta/ DwHCyRoVsZ50N6Rz+sssq/IM4Uqz5Yh/viB1PXX36vMfCPBEgUMJ8oEO6tmuaw7Z vMB2B5s3sg5cSWeD5vMPvWtmbf60zAAfsbmENPrc+l7SIeOfDWZyhY09e2t4uuoa BkoTplUxpul21OHCYOHm2OntwOQQVaQmWTszLPMGNgd/OP09A1J+pDy1/A3Z4IOl fibfvXgT9p+U9tOYWv/IEvGFQChtGPHDzO1n6ztUgq4c7G12JOpUtmSUfJiOb7ag 4dtpqYhTA+OQwnEt5Jy6x1NjOnERjnTDvCwlgpY2bSz1OHR3FhvGaSPbyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXDja5inMFY3i88xgv+FMkpIPfiMB8GA1UdIwQY MBaAFFzWkQzx4uKxyjRzxLfQkgIOe3xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQt MTcyYzYwYjNlMzZkLzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQtMTcyYzYwYjNlMzZk LzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU2LO9yU vfCgXr1bnf4WsP0SiZ8Ma1jIFBnhfZEqTaHbCuWC6zrKJPRXXBa0ptbTstbx7EnQ llIQS9cypezaK3Yznonml0oo74HAdeyKdZZLBTnVjtn5hPZJ4FbsMCSqG9VV4VYo YEWMSiDgO1/Vd9pnibuegcZd8YfKcCz8GqrBD0jkXY7VdT13clX8QhhxbPdHHkxA qNjEHQh6kAlPEfYBiMM6C83h3aVw0eevJUR9A2thfpIiKRLUrwPqMoJvmPxXUbD3 WVhebbz4wgfxHvs868Gp7pIdBrFIadQ0hAq6W/BiIif90X6PS6vWjn1wt58CWG4R CORXbOd8A3lvzg== -----END CERTIFICATE-----Generated at Tue Jan 27 13:23:26 2026 by rpki-client