This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json) Hash identifier: /Tsqhgh7bdjJACHF1Mp2xWAPxce5vP43ezQAF2dg2Lo= Subject key identifier: 77:B0:56:2B:EA:6E:0B:F0:54:69:C9:C0:4E:36:BF:AB:27:FE:58:17 Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605 Certificate serial: 019BFA9B60A7577C4CBC2FA1AFF663B464DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft Manifest number: 06CB Signing time: Mon 26 Jan 2026 14:00:45 +0000 Manifest this update: Mon 26 Jan 2026 14:00:45 +0000 Manifest next update: Tue 27 Jan 2026 14:00:45 +0000 Files and hashes: 1: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: /6kw7I28xg9ssZZltKKoLTgooA+Qen8ddjVZ0hiexgE=) 2: ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa (hash: 3TzGgdPPeRvq5m4XrgUnNCdTHF2ADSRfiiLFr+IcrFs=) 3: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=) 4: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:60:a7:57:7c:4c:bc:2f:a1:af:f6:63:b4:64:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605 Validity Not Before: Jan 26 14:00:45 2026 GMT Not After : Jan 27 14:00:45 2026 GMT Subject: CN=77b0562bea6e0bf05469c9c04e36bfab27fe5817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:35:c4:74:11:f1:87:57:88:74:ea:8e:9b: a1:08:96:27:3b:49:31:17:c6:c7:86:58:1a:33:85: 9f:78:c1:0a:a3:e2:11:09:7d:e8:2d:a5:f5:0e:de: 96:b5:64:4b:04:94:a2:94:4c:7c:a2:9f:19:e8:0b: 20:11:27:87:ed:a8:a7:b8:c0:ae:2a:1a:1e:76:09: 52:3a:94:95:50:4b:d6:65:52:10:5f:06:8f:5f:2a: bd:70:89:a3:72:d5:c1:6e:22:69:e5:a5:be:bd:1d: 72:8c:94:e2:6e:f2:28:0c:e1:b4:16:e0:0b:b3:dc: 06:6c:4b:ec:4d:94:d2:32:8d:91:e5:5b:0f:79:29: 8b:8f:bd:57:39:43:02:5d:76:f1:20:52:16:b0:8e: 6d:39:d3:5d:8c:dd:de:3f:d4:ec:e3:1e:ba:fd:b5: ac:11:5d:2c:32:c8:2f:07:a0:ae:e0:32:ea:2d:fd: 7a:d1:b5:26:8d:dc:ff:a9:68:97:57:5f:e7:19:08: a2:94:f2:a9:a2:d2:fb:42:b7:37:c5:e0:14:95:03: dd:7a:2c:52:bb:b9:cb:c4:53:63:ad:c6:04:bb:86: a7:a1:71:6a:2c:39:92:fb:cc:4f:53:6d:11:7c:2b: 18:a4:f2:1d:9d:13:94:6b:e6:6c:1a:e1:57:0b:73: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B0:56:2B:EA:6E:0B:F0:54:69:C9:C0:4E:36:BF:AB:27:FE:58:17 X509v3 Authority Key Identifier: keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f1:4d:6f:2f:c0:b1:31:ac:d7:ba:fc:7f:70:5a:13:e3:f7: 23:3b:be:1e:22:81:28:e8:b0:a7:03:6e:4d:1a:a0:cb:c0:49: 18:8f:4b:f3:eb:0c:1b:86:ed:bd:28:4b:9c:3e:86:61:d2:6d: 20:ef:05:4f:9c:e6:28:e1:8f:5f:aa:13:6d:cf:7c:66:3d:1c: 1b:8a:83:6b:98:83:4c:dd:6f:d7:34:96:b9:5c:fd:63:55:01: 94:a2:95:37:6d:2a:80:3e:af:67:69:2b:39:66:04:06:27:6e: 08:c9:78:fc:f6:4c:1c:16:55:b6:9a:20:0b:b3:32:a0:85:23: aa:98:0b:c1:f9:6b:c2:f2:a4:90:fa:d7:05:06:55:f0:41:3a: 89:ac:ea:76:87:7e:ee:7d:6e:79:87:1f:8d:0b:ba:e7:b1:73: e4:fe:d3:bf:b9:1d:74:7e:2f:ce:27:d1:f2:ba:d7:20:41:9d: e4:75:80:2a:0c:a5:38:31:50:21:f9:6e:dd:84:06:75:84:fb: a5:4c:74:98:2b:a3:e4:70:a6:b0:8a:fc:24:e8:fc:67:7e:af: 87:60:bf:44:55:7c:f4:05:e2:1e:01:c4:41:1c:ac:37:86:13: 28:20:05:b1:96:00:fc:cd:a5:77:d2:08:5c:7f:0c:26:ff:66: 74:b3:d0:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m2CnV3xMvC+hr/ZjtGTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx N2Q2MDUwHhcNMjYwMTI2MTQwMDQ1WhcNMjYwMTI3MTQwMDQ1WjAzMTEwLwYDVQQD Eyg3N2IwNTYyYmVhNmUwYmYwNTQ2OWM5YzA0ZTM2YmZhYjI3ZmU1ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDk1xHQR8YdXiHTqjpuhCJYnO0kx F8bHhlgaM4WfeMEKo+IRCX3oLaX1Dt6WtWRLBJSilEx8op8Z6AsgESeH7ainuMCu KhoedglSOpSVUEvWZVIQXwaPXyq9cImjctXBbiJp5aW+vR1yjJTibvIoDOG0FuAL s9wGbEvsTZTSMo2R5VsPeSmLj71XOUMCXXbxIFIWsI5tOdNdjN3eP9Ts4x66/bWs EV0sMsgvB6Cu4DLqLf160bUmjdz/qWiXV1/nGQiilPKpotL7Qrc3xeAUlQPdeixS u7nLxFNjrcYEu4anoXFqLDmS+8xPU20RfCsYpPIdnROUa+ZsGuFXC3M7qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHewVivqbgvwVGnJwE42v6sn/lgXMB8GA1UdIwQY MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct NWQzYTQyMWEwZjEwLzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvFNby/A sTGs17r8f3BaE+P3Izu+HiKBKOiwpwNuTRqgy8BJGI9L8+sMG4btvShLnD6GYdJt IO8FT5zmKOGPX6oTbc98Zj0cG4qDa5iDTN1v1zSWuVz9Y1UBlKKVN20qgD6vZ2kr OWYEBiduCMl4/PZMHBZVtpogC7MyoIUjqpgLwflrwvKkkPrXBQZV8EE6iazqdod+ 7n1ueYcfjQu657Fz5P7Tv7kddH4vzifR8rrXIEGd5HWAKgylODFQIflu3YQGdYT7 pUx0mCuj5HCmsIr8JOj8Z36vh2C/RFV89AXiHgHEQRysN4YTKCAFsZYA/M2ld9II XH8MJv9mdLPQJA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:39 2026 by rpki-client