This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json) Hash identifier: 0ccXltN8jiGaPJ6dqlUhzlS3dSdjp6jCpu5sWxrBwnI= Subject key identifier: F6:AF:6D:2F:1A:13:DF:F2:17:2E:7E:3E:52:8F:27:F0:5D:57:4E:E5 Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21 Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21 Certificate serial: 019BFB4066101426AA0FC8714995BDD8095E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft Manifest number: 140F Signing time: Mon 26 Jan 2026 17:01:00 +0000 Manifest this update: Mon 26 Jan 2026 17:01:00 +0000 Manifest next update: Tue 27 Jan 2026 17:01:00 +0000 Files and hashes: 1: M-ZAizH3Jyc9LZTBrwMFMfJ5Pjs.roa (hash: ewZ193jdLfT/L5MLXvV3UajNvvWjflDdyAMOaO98puY=) 2: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: K9AZsp7uM+68tQlBbum+mDeyZVXyTfMpRso9wkYVm9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:66:10:14:26:aa:0f:c8:71:49:95:bd:d8:09:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21 Validity Not Before: Jan 26 17:01:00 2026 GMT Not After : Jan 27 17:01:00 2026 GMT Subject: CN=f6af6d2f1a13dff2172e7e3e528f27f05d574ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:40:c7:34:4d:e9:03:32:0c:dc:19:a7:c2: 71:e7:cb:34:b3:69:c5:a3:25:4e:37:6a:0a:48:7e: 52:bf:4e:5b:bc:7d:77:74:79:c7:db:86:8f:fa:44: 0b:58:1b:45:f4:bb:53:29:cc:da:32:5a:85:a6:76: 7a:e2:1c:69:a0:63:3b:d5:3d:ca:87:35:19:e9:d2: 9d:17:26:e4:31:33:07:15:df:47:8d:43:9d:d5:23: 69:46:f5:7d:bf:fd:0e:b2:78:3d:9b:1c:40:14:ce: da:fa:f3:e6:ce:94:5d:f3:9a:84:8b:b1:da:38:df: aa:cc:18:0f:14:fc:0e:b0:a5:1b:42:36:de:14:54: 0e:7f:f3:6c:2d:43:34:45:69:5f:d9:2b:ca:05:a4: bd:8c:51:92:69:5e:31:01:fc:40:1d:b8:a4:9c:e8: 34:e9:41:61:55:cb:44:ba:e5:40:27:79:4a:e9:36: 44:d4:ff:af:0f:41:6e:70:16:36:30:5e:16:fb:df: 7e:40:02:36:22:b8:38:4d:5a:2f:bb:98:94:47:c4: b0:35:9e:40:f9:78:f4:09:f8:3e:ae:05:00:0e:37: be:f1:d6:4e:61:52:af:b1:65:44:f5:4e:03:f8:aa: 46:ce:1b:37:bd:95:f7:a2:f3:c1:1a:fb:b5:76:bb: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AF:6D:2F:1A:13:DF:F2:17:2E:7E:3E:52:8F:27:F0:5D:57:4E:E5 X509v3 Authority Key Identifier: keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:82:1a:e2:7c:f3:b1:3f:5d:30:60:8e:91:25:02:85:ae:2c: 38:f7:a8:cd:a4:10:19:47:a5:de:75:83:a8:1f:0f:4c:a3:51: 7d:cb:6f:14:96:98:6a:de:98:1d:5c:7b:4a:02:c5:00:96:46: 95:5a:49:7c:98:53:9e:dd:83:b4:ff:5e:08:79:a7:20:92:1f: c9:44:be:62:24:71:51:1d:d4:4c:7f:78:73:46:0d:36:e8:7e: c8:87:7b:d9:d3:20:fd:52:bf:e4:77:0e:3c:dd:71:5e:9b:0d: 6b:2d:3b:69:97:a1:5d:ab:c7:85:6b:43:3b:ff:90:15:a5:e0: 48:e7:34:e4:12:1b:e3:53:74:1d:92:ba:ef:0e:37:bd:94:1a: f9:fc:19:7a:29:2d:bf:08:22:77:43:07:a3:6e:69:79:b7:af: 09:d3:8a:5e:e3:95:b8:9c:b1:16:80:3b:ec:1f:7e:57:8a:d4: a8:0e:81:9f:de:b2:8b:b8:06:b2:16:b2:fe:db:67:34:d7:68: df:a4:2f:5a:ee:6d:e0:ab:ed:34:75:62:34:08:16:cc:17:9e: 5b:db:74:e6:05:0c:1d:10:da:16:63:7d:fe:be:31:7b:8c:5d: 28:c8:7d:53:38:70:59:26:3e:d8:f1:bc:f9:6d:0a:6e:3c:e8: 77:55:c8:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QGYQFCaqD8hxSZW92AleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkY2ExN2ZjOGQzOWUwNDNlYTc2OWFmMjhiNTQ4YzlkMzk4 MzFkMjEwHhcNMjYwMTI2MTcwMTAwWhcNMjYwMTI3MTcwMTAwWjAzMTEwLwYDVQQD EyhmNmFmNmQyZjFhMTNkZmYyMTcyZTdlM2U1MjhmMjdmMDVkNTc0ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT1AxzRN6QMyDNwZp8Jx58s0s2nF oyVON2oKSH5Sv05bvH13dHnH24aP+kQLWBtF9LtTKczaMlqFpnZ64hxpoGM71T3K hzUZ6dKdFybkMTMHFd9HjUOd1SNpRvV9v/0Osng9mxxAFM7a+vPmzpRd85qEi7Ha ON+qzBgPFPwOsKUbQjbeFFQOf/NsLUM0RWlf2SvKBaS9jFGSaV4xAfxAHbiknOg0 6UFhVctEuuVAJ3lK6TZE1P+vD0FucBY2MF4W+99+QAI2Irg4TVovu5iUR8SwNZ5A +Xj0Cfg+rgUADje+8dZOYVKvsWVE9U4D+KpGzhs3vZX3ovPBGvu1drvhEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPavbS8aE9/yFy5+PlKPJ/BdV07lMB8GA1UdIwQY MBaAFF3KF/yNOeBD6naa8otUjJ05gx0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgt NjU2ZGJjMmYyNDM2LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgtNjU2ZGJjMmYyNDM2 LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYIa4nzz sT9dMGCOkSUCha4sOPeozaQQGUel3nWDqB8PTKNRfctvFJaYat6YHVx7SgLFAJZG lVpJfJhTnt2DtP9eCHmnIJIfyUS+YiRxUR3UTH94c0YNNuh+yId72dMg/VK/5HcO PN1xXpsNay07aZehXavHhWtDO/+QFaXgSOc05BIb41N0HZK67w43vZQa+fwZeikt vwgid0MHo25pebevCdOKXuOVuJyxFoA77B9+V4rUqA6Bn96yi7gGshay/ttnNNdo 36QvWu5t4KvtNHViNAgWzBeeW9t05gUMHRDaFmN9/r4xe4xdKMh9UzhwWSY+2PG8 +W0Kbjzod1XIew== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:24 2026 by rpki-client