This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: jRpxSozVZrlZDX9qNGrHq1m2AgcrJifRJ1C1s4QSCfo= Subject key identifier: 8C:01:AD:A8:B2:A3:5E:80:D6:09:92:01:99:C7:DB:47:E0:B5:BF:AA Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019BFA2E7B6D4FCFA477984B6D0B5246844D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 1062 Signing time: Mon 26 Jan 2026 12:01:48 +0000 Manifest this update: Mon 26 Jan 2026 12:01:48 +0000 Manifest next update: Tue 27 Jan 2026 12:01:48 +0000 Files and hashes: 1: Dz-QfD9C-tgYZF8wEi6pv8-xE5k.roa (hash: BmhYmphbDyjKtKW2Lffb0KX2rP+E2lhX6e9V9e5bRCk=) 2: TfFQp15XKEs_AkFR6cJIjt7nXPU.roa (hash: szEnO8wBWZqMkhtHfLRZ7TOGFtVYTEMGAjRfOIzOLf8=) 3: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: yt6IvwKVLW6gbEwaNlJevqfiNUZjKMDpdaP8c/rF2LM=) 4: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 5: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 6: rrv6g7gCWvIScNAmNVO-0FMccls.roa (hash: oczaTnJ9vMlyEQX4SOk4rRdeUsfERY6lZY183Cg4/Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:7b:6d:4f:cf:a4:77:98:4b:6d:0b:52:46:84:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Jan 26 12:01:48 2026 GMT Not After : Jan 27 12:01:48 2026 GMT Subject: CN=8c01ada8b2a35e80d609920199c7db47e0b5bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:51:a4:d4:20:78:06:34:90:db:88:f0:5d: c2:7f:5b:09:fa:5f:f9:b7:4f:be:10:bb:f2:cf:3f: 3e:ea:b1:0b:b9:62:b0:8b:a3:c4:1f:c2:b4:db:9f: 22:0f:b0:09:b8:2d:2d:ff:2f:06:9a:57:0e:38:e3: c1:63:4f:d5:0f:f4:e0:16:1a:e8:0a:c0:69:72:39: 7b:98:77:76:ae:9b:1d:94:e5:6e:e7:99:84:45:ae: 75:d5:78:9a:4a:a9:d6:79:4d:54:ba:29:8c:d8:fb: 71:a2:d6:b7:43:50:80:4d:bc:76:59:ef:a7:81:9d: 0c:2d:5e:12:a1:bc:49:67:ce:f6:0f:43:2f:cc:34: 74:1d:98:36:7a:26:e7:35:ed:30:82:44:ed:c6:03: d1:7a:af:0e:f7:2c:40:cd:d3:0a:e1:e8:4f:5d:9b: 56:4f:4c:53:1d:90:54:3c:3f:66:fd:87:44:c4:21: f0:4d:81:aa:89:92:b8:dd:4f:7f:98:a6:3e:e6:4c: 9f:5b:bf:27:04:60:53:ee:c5:0a:e4:f9:7a:3b:49: 6f:64:c2:91:49:a9:1a:20:05:56:2a:5b:ac:b9:69: 8d:37:05:53:71:75:6e:38:5c:f9:d2:fa:fd:3e:09: 1c:c4:59:0d:56:82:cb:9b:aa:34:c5:d7:55:58:71: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:01:AD:A8:B2:A3:5E:80:D6:09:92:01:99:C7:DB:47:E0:B5:BF:AA X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:42:6a:2a:50:b7:ae:4a:dd:62:12:0d:92:b3:74:63:90:83: b6:b3:89:8c:76:37:fd:85:3b:73:8d:9a:b3:15:44:ae:98:73: 82:0b:2c:7e:35:55:ec:51:f7:a2:5b:59:fe:d0:4f:5b:a0:a1: f0:ee:4d:bc:a0:17:0f:82:ed:a4:27:49:92:43:29:4d:25:44: b0:c4:91:e0:71:4f:cf:ad:c9:ea:bc:f9:8e:d8:6a:ff:f7:07: c2:55:96:ac:46:53:c2:77:f8:32:4c:e4:3c:5c:7b:49:15:00: 9b:bb:47:a6:e9:b2:d0:79:d7:cc:59:38:9a:6d:d8:b9:a9:e9: 69:fe:b1:1e:a1:a3:8f:a1:97:f7:44:fa:29:09:d5:4c:75:27: 45:bc:f3:95:57:f8:70:fb:6f:7c:63:5d:2c:18:79:7c:b2:1f: 00:27:8d:e3:91:a6:9f:48:fc:48:34:99:2b:44:46:66:38:81: b4:a9:54:dc:44:f7:a7:4b:84:7d:48:bf:3a:1b:bc:47:b8:7f: 95:d4:d4:f2:23:86:89:54:64:71:8d:ad:ab:13:1e:6c:ba:93: 46:26:53:69:db:28:c4:6f:b9:73:82:f0:d2:54:68:33:12:ec: d3:e6:cc:76:d8:31:51:8e:f7:6b:0e:f4:4f:e2:e2:a8:6e:a7: 82:70:c5:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LnttT8+kd5hLbQtSRoRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwMTI2MTIwMTQ4WhcNMjYwMTI3MTIwMTQ4WjAzMTEwLwYDVQQD Eyg4YzAxYWRhOGIyYTM1ZTgwZDYwOTkyMDE5OWM3ZGI0N2UwYjViZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkJRpNQgeAY0kNuI8F3Cf1sJ+l/5 t0++ELvyzz8+6rELuWKwi6PEH8K0258iD7AJuC0t/y8GmlcOOOPBY0/VD/TgFhro CsBpcjl7mHd2rpsdlOVu55mERa511XiaSqnWeU1UuimM2Ptxota3Q1CATbx2We+n gZ0MLV4SobxJZ872D0MvzDR0HZg2eibnNe0wgkTtxgPReq8O9yxAzdMK4ehPXZtW T0xTHZBUPD9m/YdExCHwTYGqiZK43U9/mKY+5kyfW78nBGBT7sUK5Pl6O0lvZMKR SakaIAVWKlusuWmNNwVTcXVuOFz50vr9PgkcxFkNVoLLm6o0xddVWHEphQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwBraiyo16A1gmSAZnH20fgtb+qMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkJqKlC3 rkrdYhINkrN0Y5CDtrOJjHY3/YU7c42asxVErphzggssfjVV7FH3oltZ/tBPW6Ch 8O5NvKAXD4LtpCdJkkMpTSVEsMSR4HFPz63J6rz5jthq//cHwlWWrEZTwnf4Mkzk PFx7SRUAm7tHpumy0HnXzFk4mm3Yuanpaf6xHqGjj6GX90T6KQnVTHUnRbzzlVf4 cPtvfGNdLBh5fLIfACeN45Gmn0j8SDSZK0RGZjiBtKlU3ET3p0uEfUi/Ohu8R7h/ ldTU8iOGiVRkcY2tqxMebLqTRiZTadsoxG+5c4Lw0lRoMxLs0+bMdtgxUY73aw70 T+LiqG6ngnDFFg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:06 2026 by rpki-client