This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json) Hash identifier: pX+Z1VKo4W2nGYHag/Pb4wgmmu/yGpBxJ1oKjHoR0jI= Subject key identifier: 29:77:55:0E:2F:CB:BE:C3:D1:63:0E:A6:5C:03:E9:35:FD:BC:2D:A8 Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330 Certificate serial: 019BFD2EBAE653BE99B7E63E94A9A2417611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft Manifest number: 14A1 Signing time: Tue 27 Jan 2026 02:00:56 +0000 Manifest this update: Tue 27 Jan 2026 02:00:56 +0000 Manifest next update: Wed 28 Jan 2026 02:00:56 +0000 Files and hashes: 1: 7iD4K1gccNErcwUL56fdA_X6dFo.roa (hash: im8taFI4fIVJ8hCEmSfog0Wq6myLmqj/L7AJRggXUII=) 2: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: GMRr643Xlo2vaFFU+5AMuYiuZx04v4+e5zZuy7rPU+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:ba:e6:53:be:99:b7:e6:3e:94:a9:a2:41:76:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330 Validity Not Before: Jan 27 02:00:56 2026 GMT Not After : Jan 28 02:00:56 2026 GMT Subject: CN=2977550e2fcbbec3d1630ea65c03e935fdbc2da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:f5:77:26:67:b6:de:82:6a:44:b8:4c:30: 5d:82:88:c2:61:11:c4:6d:66:96:ae:f5:92:cf:fb: f8:e1:5a:7d:e6:4c:08:9c:0a:b2:b2:ea:a2:c5:b1: 50:aa:9c:75:87:71:5a:04:bb:f0:ae:08:ba:6b:1a: 8e:cf:9f:23:1b:b1:1b:86:d8:16:02:d8:a7:1e:d4: f7:d5:a2:e2:b1:14:e6:aa:a5:1c:45:19:2c:76:ad: e2:c3:26:a3:d5:2d:b5:7c:2b:e2:6f:0c:eb:64:f8: 5d:22:03:5f:7d:76:ae:4e:af:b4:ae:39:9d:a6:7b: 3e:c4:a6:57:f9:79:ba:3b:01:23:63:08:e7:15:f9: 42:78:ca:99:ae:93:d4:7d:96:b3:d5:d7:4a:17:b8: 80:b1:c8:79:8e:7e:01:80:36:7f:44:77:c5:05:ca: 45:6a:ef:5e:80:76:6d:a4:b1:ee:99:21:2f:5b:26: 9d:6d:62:e8:59:58:68:2a:cf:20:4d:37:fa:d1:66: 82:30:05:de:5b:3a:78:f4:fb:be:0d:7a:4e:ba:c9: c7:04:f1:b9:cc:93:22:20:3f:7d:a9:7c:55:3a:82: 51:9d:d9:b0:a5:a9:e2:29:09:e7:2e:7c:eb:8c:9c: fa:7e:4e:21:22:9e:64:6c:2e:2b:c6:19:83:21:0e: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:77:55:0E:2F:CB:BE:C3:D1:63:0E:A6:5C:03:E9:35:FD:BC:2D:A8 X509v3 Authority Key Identifier: keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:0b:42:04:36:c2:61:7d:db:53:e1:b1:e6:ab:fa:81:42:27: 78:a8:ae:75:d0:79:b3:a5:04:da:a3:95:20:eb:d6:0f:30:50: 82:e9:15:3b:d8:fb:aa:51:40:b5:7c:ee:69:fe:a5:99:79:1a: eb:c5:9d:11:f3:5c:0d:80:74:7f:a4:38:a8:22:e0:c3:87:2a: be:56:0d:5e:33:7a:df:f0:ef:0f:33:9a:68:c7:e6:61:b6:2c: 43:5a:4b:83:4e:c2:67:b0:92:83:f0:c5:ab:47:01:d5:e5:fb: 9f:64:5a:98:2e:78:f8:92:77:44:5d:35:19:0a:7b:16:6d:13: 19:ae:9d:a1:6b:a7:c9:77:a0:ca:b6:c0:26:23:e7:0f:5d:a0: 0d:3f:6a:a7:6f:a0:e2:9b:6a:ea:ac:64:42:c3:a3:30:98:de: f9:14:9f:f3:e4:16:ec:4f:08:e7:06:d0:07:52:03:36:23:55: b1:a0:da:b8:50:fb:e0:e6:ee:db:2d:72:dc:af:f8:b6:04:59: 91:fe:f9:79:42:3b:9e:41:5c:3e:60:53:6d:1e:2b:93:15:44: 16:38:f4:dc:91:93:91:33:f7:9c:b3:f4:d4:67:e1:d7:e2:03: 97:7c:04:5f:9b:0d:08:6d:11:f7:16:84:ac:b7:05:37:a7:e0: 51:03:f9:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LrrmU76Zt+Y+lKmiQXYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2ZkOTU4NmY5Y2NiMGZiNDQ4N2IyMDhjZGY0Njc1ZTVi YmYzMzAwHhcNMjYwMTI3MDIwMDU2WhcNMjYwMTI4MDIwMDU2WjAzMTEwLwYDVQQD EygyOTc3NTUwZTJmY2JiZWMzZDE2MzBlYTY1YzAzZTkzNWZkYmMyZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZz1dyZntt6CakS4TDBdgojCYRHE bWaWrvWSz/v44Vp95kwInAqysuqixbFQqpx1h3FaBLvwrgi6axqOz58jG7EbhtgW AtinHtT31aLisRTmqqUcRRksdq3iwyaj1S21fCvibwzrZPhdIgNffXauTq+0rjmd pns+xKZX+Xm6OwEjYwjnFflCeMqZrpPUfZaz1ddKF7iAsch5jn4BgDZ/RHfFBcpF au9egHZtpLHumSEvWyadbWLoWVhoKs8gTTf60WaCMAXeWzp49Pu+DXpOusnHBPG5 zJMiID99qXxVOoJRndmwpaniKQnnLnzrjJz6fk4hIp5kbC4rxhmDIQ5HVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl3VQ4vy77D0WMOplwD6TX9vC2oMB8GA1UdIwQY MBaAFF5/2VhvnMsPtEh7IIzfRnXlu/MwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQt NGIwMWQ2M2U3OTVjLzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQtNGIwMWQ2M2U3OTVj LzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQtCBDbC YX3bU+Gx5qv6gUIneKiuddB5s6UE2qOVIOvWDzBQgukVO9j7qlFAtXzuaf6lmXka 68WdEfNcDYB0f6Q4qCLgw4cqvlYNXjN63/DvDzOaaMfmYbYsQ1pLg07CZ7CSg/DF q0cB1eX7n2RamC54+JJ3RF01GQp7Fm0TGa6doWunyXegyrbAJiPnD12gDT9qp2+g 4ptq6qxkQsOjMJje+RSf8+QW7E8I5wbQB1IDNiNVsaDauFD74Obu2y1y3K/4tgRZ kf75eUI7nkFcPmBTbR4rkxVEFjj03JGTkTP3nLP01Gfh1+IDl3wEX5sNCG0R9xaE rLcFN6fgUQP5Sw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:09:52 2026 by rpki-client