This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json) Hash identifier: LB2SsTUdgIAq8kzpxRXJrClULDlaLSMRpYGj9JUdUKM= Subject key identifier: B7:3A:4A:A9:24:78:F6:2F:00:88:5D:57:EF:4B:82:3D:08:0D:ED:CA Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e Certificate serial: 019BFB772E5E7665D8C45CAB50A7E5EB4FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft Manifest number: 15C5 Signing time: Mon 26 Jan 2026 18:00:50 +0000 Manifest this update: Mon 26 Jan 2026 18:00:50 +0000 Manifest next update: Tue 27 Jan 2026 18:00:50 +0000 Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=) 2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: DjOajj5ODaPUjpk8kaom+A10q4WxaQ1fKlyMtpd8zkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:2e:5e:76:65:d8:c4:5c:ab:50:a7:e5:eb:4f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e Validity Not Before: Jan 26 18:00:50 2026 GMT Not After : Jan 27 18:00:50 2026 GMT Subject: CN=b73a4aa92478f62f00885d57ef4b823d080dedca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:54:ca:f8:83:28:c4:7c:b2:80:4e:17:80: 61:1a:c6:41:10:de:49:58:de:34:b9:22:b7:e7:e3: a1:40:82:ef:b3:d1:ca:a7:3b:40:90:cb:f1:2f:65: 3b:e0:b8:f5:4d:2f:be:0a:ca:96:de:ee:95:5a:48: f4:da:b3:0a:67:8a:1d:86:82:40:ac:0b:b5:d8:7c: 00:5d:62:ce:59:f8:06:d8:f6:9d:15:1d:67:43:aa: cf:d9:ef:bd:e1:fd:ba:66:b3:5f:87:05:fe:90:23: 97:88:05:d1:10:93:40:ad:3b:1b:56:48:de:00:25: a8:b0:01:c7:79:ff:94:54:2f:6f:da:38:37:15:f2: a9:3e:5d:95:ca:36:a7:45:94:c5:4b:f8:b0:b4:9d: ae:ca:a1:04:00:23:d7:ed:cc:d4:fb:f8:20:23:de: 57:c8:dc:e7:10:46:d6:c3:af:f5:6e:e8:da:de:e7: e2:07:0d:c8:1f:e6:de:b1:97:f7:0e:b1:92:02:0e: 81:99:ec:62:25:f5:62:b7:dc:28:33:5a:a6:3a:67: dd:a1:32:b7:71:18:2e:e6:e8:a0:ce:9d:a7:e3:f3: bf:2b:44:d4:bc:5b:ce:15:39:1c:43:19:61:ce:19: cc:84:33:58:fa:41:db:13:71:32:44:d7:d3:58:2e: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3A:4A:A9:24:78:F6:2F:00:88:5D:57:EF:4B:82:3D:08:0D:ED:CA X509v3 Authority Key Identifier: keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:35:53:5b:b1:2c:b3:52:86:31:cc:40:28:1e:16:bb:2a:c8: dc:6d:1d:c7:6e:0f:d7:8a:a5:c9:97:08:98:a2:46:84:bb:82: 48:6a:2b:cc:30:52:8f:30:48:e6:31:22:2a:06:10:c2:4f:71: d9:07:69:9f:97:44:f1:b8:ce:eb:97:42:44:ef:94:70:6c:96: 8d:ad:60:70:72:16:27:a4:e0:e7:aa:31:39:39:e7:3a:6d:82: ef:1e:ea:80:4a:ab:86:bc:0c:57:57:99:47:72:53:07:dd:fb: 95:9f:ad:55:94:31:79:77:74:2b:25:4e:96:79:ac:72:e9:52: da:de:c1:80:d7:5c:dc:4c:bc:ef:f8:cd:c8:cb:9f:36:a6:5f: fc:c7:6e:f4:a6:3c:44:a4:97:ac:b6:15:22:27:ba:2f:35:3f: 39:9e:f0:5b:df:d9:c1:ff:7b:e6:15:82:81:6e:39:d1:a1:c5: ab:9b:0f:98:7a:19:b4:9b:48:f3:1b:48:0a:f6:ea:c0:3d:db: 88:12:89:66:7c:89:b6:21:cf:58:3a:ee:f9:c6:ca:26:16:4b: 4b:25:f2:1d:55:09:15:87:5f:b1:7a:cd:52:6d:3d:72:92:36: e5:12:d7:77:24:97:d3:32:38:d3:31:89:89:17:9b:7a:b1:eb: cf:49:bd:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dy5edmXYxFyrUKfl60+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzI1YmVmZDhiN2U4NWUzNDcxMDQyMDZkOGMwYWI4YTZl MGZiNGUwHhcNMjYwMTI2MTgwMDUwWhcNMjYwMTI3MTgwMDUwWjAzMTEwLwYDVQQD EyhiNzNhNGFhOTI0NzhmNjJmMDA4ODVkNTdlZjRiODIzZDA4MGRlZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BBUyviDKMR8soBOF4BhGsZBEN5J WN40uSK35+OhQILvs9HKpztAkMvxL2U74Lj1TS++CsqW3u6VWkj02rMKZ4odhoJA rAu12HwAXWLOWfgG2PadFR1nQ6rP2e+94f26ZrNfhwX+kCOXiAXREJNArTsbVkje ACWosAHHef+UVC9v2jg3FfKpPl2VyjanRZTFS/iwtJ2uyqEEACPX7czU+/ggI95X yNznEEbWw6/1buja3ufiBw3IH+besZf3DrGSAg6BmexiJfVit9woM1qmOmfdoTK3 cRgu5uigzp2n4/O/K0TUvFvOFTkcQxlhzhnMhDNY+kHbE3EyRNfTWC6wgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc6SqkkePYvAIhdV+9Lgj0IDe3KMB8GA1UdIwQY MBaAFF0yW+/Yt+heNHEEIG2MCrim4PtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2Ut Zjk5OTViNzhhODVmLzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2UtZjk5OTViNzhhODVm LzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDVTW7Es s1KGMcxAKB4WuyrI3G0dx24P14qlyZcImKJGhLuCSGorzDBSjzBI5jEiKgYQwk9x 2Qdpn5dE8bjO65dCRO+UcGyWja1gcHIWJ6Tg56oxOTnnOm2C7x7qgEqrhrwMV1eZ R3JTB937lZ+tVZQxeXd0KyVOlnmsculS2t7BgNdc3Ey87/jNyMufNqZf/Mdu9KY8 RKSXrLYVIie6LzU/OZ7wW9/Zwf975hWCgW450aHFq5sPmHoZtJtI8xtICvbqwD3b iBKJZnyJtiHPWDru+cbKJhZLSyXyHVUJFYdfsXrNUm09cpI25RLXdySX0zI40zGJ iReberHrz0m9mQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:38 2026 by rpki-client