This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json) Hash identifier: afkFWgv0Za0f/fCRF2YE91Y/tLHqrNS9vtl8sHf6n+E= Subject key identifier: 35:E3:5D:BB:FD:53:22:B0:DB:02:CA:DB:DD:38:6F:DC:5C:38:DE:87 Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Certificate serial: 019BFA2D8C9C1305CE595F6DC8B4FD303FDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft Manifest number: 02AA Signing time: Mon 26 Jan 2026 12:00:47 +0000 Manifest this update: Mon 26 Jan 2026 12:00:47 +0000 Manifest next update: Tue 27 Jan 2026 12:00:47 +0000 Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: QhV+2AseCQnafSNZGGCjY5sQ0OMU0xXqDHxRpQqHK3c=) 2: qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa (hash: +Jw2Q4FKG2QkwU/uXp8CWjul2mV/WblFFkYVNeXAnL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:8c:9c:13:05:ce:59:5f:6d:c8:b4:fd:30:3f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Validity Not Before: Jan 26 12:00:47 2026 GMT Not After : Jan 27 12:00:47 2026 GMT Subject: CN=35e35dbbfd5322b0db02cadbdd386fdc5c38de87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:28:a5:91:c0:00:61:78:5f:a6:1e:a3:ec: 37:bf:eb:41:76:6d:3b:ca:e4:b3:05:1c:ef:15:dd: fd:5d:80:4b:4b:cc:3a:be:25:3a:e3:78:53:bb:e4: b4:90:71:48:ed:c0:e5:0e:0b:f6:1e:ed:3c:26:ae: 43:f4:a3:fe:8f:59:78:58:d6:13:4e:96:b7:e9:f3: 89:f6:a3:4a:36:be:aa:be:b6:3a:45:e8:8a:98:3e: 6e:dc:6e:82:96:7d:e6:fc:b6:f8:c0:29:bc:b7:c1: d4:40:0a:17:6d:1a:c3:41:25:41:f9:a7:1e:f4:72: c1:fa:8a:fb:dc:69:ce:b9:6a:cb:94:01:64:b1:5f: 60:48:91:2b:34:27:3f:ba:a1:5b:d7:0b:6e:23:d8: ff:58:64:21:92:f1:64:9f:c1:34:c6:cd:01:ad:22: 48:37:11:16:ac:7c:82:be:2d:47:c5:1d:10:1b:cf: 10:32:72:11:2e:4f:68:57:75:74:78:38:a9:6f:17: 02:4f:1a:54:e4:99:f1:67:7d:0e:85:8e:fa:4f:2e: e4:17:d8:27:61:c5:5a:2a:fe:80:dd:df:6d:af:19: b6:ec:e4:5a:aa:e0:f5:73:e0:16:27:3f:cf:7f:ce: 61:c2:04:1d:01:3e:1b:9c:9d:ec:97:a0:19:f4:53: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E3:5D:BB:FD:53:22:B0:DB:02:CA:DB:DD:38:6F:DC:5C:38:DE:87 X509v3 Authority Key Identifier: keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c4:af:b1:2b:38:7c:49:fa:d8:94:d2:eb:1f:b0:38:0a:fd: 8d:7e:28:31:0d:12:3a:91:74:98:e7:1a:e7:e3:12:bf:83:d9: 69:0e:37:2f:19:91:30:9e:ff:68:23:18:f6:e5:22:dd:0f:c7: 5e:08:1f:0e:d4:67:40:31:ea:a3:f4:10:6a:9a:fd:5b:67:78: c4:7a:4b:0f:3b:19:cf:77:7c:b6:fc:09:a6:b5:6f:5b:14:5b: 2d:cc:bf:b1:94:d0:2e:bd:6e:fb:08:54:79:dc:64:2e:d6:47: 81:e5:04:0b:d8:20:48:87:0e:af:d0:85:e0:34:06:b9:13:0c: 53:f1:60:eb:70:6a:89:f1:33:ce:f4:ac:13:49:06:49:f0:6e: f2:32:6d:b2:75:1d:2f:eb:a2:87:a9:c4:e8:40:56:07:45:4a: e9:3e:57:a1:0f:e3:a4:c4:53:e3:0f:92:5c:9c:7b:63:bd:a4: 87:4b:aa:58:13:34:03:6d:78:32:5d:06:52:13:1d:52:40:ff: 60:7c:34:13:7b:39:61:90:d5:84:9c:38:65:f8:b2:05:27:63: 0d:c1:6d:eb:4d:09:5b:4e:61:96:66:9b:2f:c5:c1:ed:8a:13: 87:68:30:e9:2c:c8:d9:49:60:d5:64:cc:a5:d1:d4:91:4c:80: cc:4b:d9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LYycEwXOWV9tyLT9MD/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYWM1MGIzNGIyYmFmZGM0NmRjNWI3NWQzOWJjMGRkODlh NjhmMmMwHhcNMjYwMTI2MTIwMDQ3WhcNMjYwMTI3MTIwMDQ3WjAzMTEwLwYDVQQD EygzNWUzNWRiYmZkNTMyMmIwZGIwMmNhZGJkZDM4NmZkYzVjMzhkZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIcopZHAAGF4X6Yeo+w3v+tBdm07 yuSzBRzvFd39XYBLS8w6viU643hTu+S0kHFI7cDlDgv2Hu08Jq5D9KP+j1l4WNYT Tpa36fOJ9qNKNr6qvrY6ReiKmD5u3G6Cln3m/Lb4wCm8t8HUQAoXbRrDQSVB+ace 9HLB+or73GnOuWrLlAFksV9gSJErNCc/uqFb1wtuI9j/WGQhkvFkn8E0xs0BrSJI NxEWrHyCvi1HxR0QG88QMnIRLk9oV3V0eDipbxcCTxpU5JnxZ30OhY76Ty7kF9gn YcVaKv6A3d9trxm27ORaquD1c+AWJz/Pf85hwgQdAT4bnJ3sl6AZ9FNKcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXjXbv9UyKw2wLK2904b9xcON6HMB8GA1UdIwQY MBaAFF6sULNLK6/cRtxbddObwN2Jpo8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYt NzA1OGYxMWZhYzgyLzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYtNzA1OGYxMWZhYzgy LzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsSvsSs4 fEn62JTS6x+wOAr9jX4oMQ0SOpF0mOca5+MSv4PZaQ43LxmRMJ7/aCMY9uUi3Q/H XggfDtRnQDHqo/QQapr9W2d4xHpLDzsZz3d8tvwJprVvWxRbLcy/sZTQLr1u+whU edxkLtZHgeUEC9ggSIcOr9CF4DQGuRMMU/Fg63BqifEzzvSsE0kGSfBu8jJtsnUd L+uih6nE6EBWB0VK6T5XoQ/jpMRT4w+SXJx7Y72kh0uqWBM0A214Ml0GUhMdUkD/ YHw0E3s5YZDVhJw4ZfiyBSdjDcFt600JW05hlmabL8XB7YoTh2gw6SzI2Ulg1WTM pdHUkUyAzEvZEw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:55 2026 by rpki-client