This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json) Hash identifier: /ekTPFUsKgdUznKPjG4s9ww1I5ujz49y1AXR+8ZiLsg= Subject key identifier: 96:2E:26:13:45:8D:63:BF:D3:E3:DC:7C:31:05:2E:D7:F0:78:09:8E Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Certificate serial: 019BF91BC3638C60F9F4B8E6EB5510B8AD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft Manifest number: 0FAB Signing time: Mon 26 Jan 2026 07:01:44 +0000 Manifest this update: Mon 26 Jan 2026 07:01:44 +0000 Manifest next update: Tue 27 Jan 2026 07:01:44 +0000 Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: ZizlRohmAAyaN3Z1+FZCQ8OeyANRyEINt0w+D4RCj+g=) 2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=) 3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:c3:63:8c:60:f9:f4:b8:e6:eb:55:10:b8:ad:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Validity Not Before: Jan 26 07:01:44 2026 GMT Not After : Jan 27 07:01:44 2026 GMT Subject: CN=962e2613458d63bfd3e3dc7c31052ed7f078098e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:9c:bd:69:71:a5:d3:99:4c:ec:6c:ef:ea: af:8a:34:ce:38:11:97:0b:e9:bc:70:35:ba:31:80: 5d:91:73:6a:a0:7b:e9:b8:9f:e9:07:ff:b3:5c:f5: 86:90:4c:c6:b4:0c:bb:d8:ac:6c:91:a2:04:83:26: 5f:c0:18:ef:f1:7a:09:ee:64:7c:e7:93:17:67:ba: aa:ed:4c:98:f3:51:c2:cd:e6:fd:ba:ab:cc:cf:11: 53:63:ec:c6:f9:1c:07:a9:b7:93:23:56:78:63:72: a7:b7:59:42:1b:1e:70:c3:6c:85:3a:c7:19:51:af: ae:f8:db:63:64:b0:25:06:b8:9b:93:a2:9a:43:8c: 64:64:65:e7:53:25:3c:90:76:a4:0a:09:4c:38:7c: bf:ec:c4:e6:d0:14:ae:85:60:88:8c:47:b4:bb:4e: 0e:f6:71:fe:04:c3:97:4f:59:90:d2:ce:dc:55:5b: eb:da:b0:57:25:e8:f2:76:1e:5e:be:a1:d1:c3:f6: e2:ea:9b:69:57:72:b4:76:1f:a5:51:19:3d:f7:52: c0:9f:f3:5f:de:bd:8d:0f:30:50:1a:ce:af:b9:3b: 88:87:32:50:8a:e7:0a:19:4f:1b:a0:97:81:84:a3: 81:53:08:25:20:01:a6:59:4e:97:03:1e:e3:5e:f3: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2E:26:13:45:8D:63:BF:D3:E3:DC:7C:31:05:2E:D7:F0:78:09:8E X509v3 Authority Key Identifier: keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e4:65:61:cf:22:d9:3b:3d:2b:80:60:8c:98:c0:83:8d:64: 3f:f3:b0:09:0d:48:0f:80:51:c6:aa:6f:4b:ee:b8:43:db:d4: 6d:bd:78:64:65:78:ac:5f:8b:5b:3d:f2:9a:51:99:bd:93:dd: 29:fd:56:e1:af:1d:21:cb:0d:54:c7:7a:f8:f2:cf:84:80:7f: ea:ae:63:97:db:72:8e:0b:06:0e:c0:29:e0:61:c8:38:2a:b3: 94:c3:2c:86:c4:08:3b:65:87:67:3a:47:1e:20:71:84:59:a4: 11:15:bc:18:d6:56:14:4b:02:b6:3c:7b:80:51:4c:37:3e:d5: b8:e9:9c:34:aa:65:a0:4e:a7:b7:04:8a:d2:52:26:8e:0a:e0: 93:be:ac:30:03:6b:49:fd:6b:7e:f1:e7:db:36:bc:93:d8:d6: b9:0f:e7:8a:92:bc:a2:28:05:75:7b:ad:28:f6:e3:0a:b9:fc: 67:48:bb:fa:82:8f:b5:f5:77:86:1e:7e:7b:09:4d:2e:15:73: 0e:30:ab:94:64:25:bf:a7:cc:f3:9c:6a:95:22:c2:28:bb:04: dd:b4:b9:6b:e0:1b:7b:07:f5:0f:6b:73:d2:da:c9:5c:d8:b0: e1:e0:1c:df:8d:6a:f1:95:67:8f:f5:46:33:3c:f5:e4:32:a9: de:75:36:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G8NjjGD59Ljm61UQuK0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey YTYwZGUwHhcNMjYwMTI2MDcwMTQ0WhcNMjYwMTI3MDcwMTQ0WjAzMTEwLwYDVQQD Eyg5NjJlMjYxMzQ1OGQ2M2JmZDNlM2RjN2MzMTA1MmVkN2YwNzgwOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9icvWlxpdOZTOxs7+qvijTOOBGX C+m8cDW6MYBdkXNqoHvpuJ/pB/+zXPWGkEzGtAy72KxskaIEgyZfwBjv8XoJ7mR8 55MXZ7qq7UyY81HCzeb9uqvMzxFTY+zG+RwHqbeTI1Z4Y3Knt1lCGx5ww2yFOscZ Ua+u+NtjZLAlBribk6KaQ4xkZGXnUyU8kHakCglMOHy/7MTm0BSuhWCIjEe0u04O 9nH+BMOXT1mQ0s7cVVvr2rBXJejydh5evqHRw/bi6ptpV3K0dh+lURk991LAn/Nf 3r2NDzBQGs6vuTuIhzJQiucKGU8boJeBhKOBUwglIAGmWU6XAx7jXvOQGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYuJhNFjWO/0+PcfDEFLtfweAmOMB8GA1UdIwQY MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+RlYc8i 2Ts9K4BgjJjAg41kP/OwCQ1ID4BRxqpvS+64Q9vUbb14ZGV4rF+LWz3ymlGZvZPd Kf1W4a8dIcsNVMd6+PLPhIB/6q5jl9tyjgsGDsAp4GHIOCqzlMMshsQIO2WHZzpH HiBxhFmkERW8GNZWFEsCtjx7gFFMNz7VuOmcNKploE6ntwSK0lImjgrgk76sMANr Sf1rfvHn2za8k9jWuQ/nipK8oigFdXutKPbjCrn8Z0i7+oKPtfV3hh5+ewlNLhVz DjCrlGQlv6fM85xqlSLCKLsE3bS5a+Abewf1D2tz0trJXNiw4eAc341q8ZVnj/VG Mzz15DKp3nU2Yw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:21:14 2026 by rpki-client