This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json) Hash identifier: Mw3pYyj1ETwSNyBMcWlrLXbK8ftRquD4juYM7+45Mm0= Subject key identifier: AD:67:8A:31:BE:9F:7B:AF:99:18:63:49:C0:00:33:5A:F4:FF:1A:DA Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Certificate serial: 019BFEAF9ACF3486ABAF312CD8C47CA98F3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 09:01:19 +0000 Manifest this update: Tue 27 Jan 2026 09:01:19 +0000 Manifest next update: Wed 28 Jan 2026 09:01:19 +0000 Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=) 2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=) 3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: 2jIqXjqTLESQu6ZwrFFbruMniaIBk8h6G7W57AE/JGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:9a:cf:34:86:ab:af:31:2c:d8:c4:7c:a9:8f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Validity Not Before: Jan 27 09:01:19 2026 GMT Not After : Jan 28 09:01:19 2026 GMT Subject: CN=ad678a31be9f7baf99186349c000335af4ff1ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:90:fe:96:b9:a2:b3:ed:17:d6:c3:3e:53: bf:fd:2a:7c:8e:b2:82:19:2d:a6:eb:69:cd:42:09: 53:1a:c9:23:c2:d4:53:2f:41:0b:fe:84:67:ce:c7: b9:ff:a7:ad:ec:f5:bf:d5:46:27:ae:97:16:1c:00: 3c:0a:a6:fc:e5:2e:47:6e:9d:1f:09:95:6b:28:ba: 77:e3:bb:27:5d:ce:da:a3:e1:55:fe:cd:5c:f8:04: ee:f0:a4:40:7c:ea:ea:ef:fc:0e:b3:e1:25:91:e2: 4f:5c:54:bb:eb:d2:3c:b2:32:08:fb:cf:41:b3:3f: 1c:32:ce:f3:4c:fa:bf:78:d6:3d:35:ec:c8:0d:ca: d0:75:42:a8:7f:9b:51:6e:0e:51:c7:25:1d:f6:ae: 36:7a:9d:26:5e:6f:49:b0:82:b7:94:e5:b0:67:be: f0:bf:7c:ef:79:d4:11:d1:1a:0b:72:02:c3:35:be: 5c:70:c7:8b:b4:3d:6b:19:8f:f9:94:3b:2f:e6:02: c3:b9:19:57:9e:4a:ba:5d:38:9a:54:b2:09:25:1c: 9e:e1:3f:2c:9e:47:60:25:e1:54:16:10:b5:2e:81: cc:31:a6:9b:80:7a:45:2f:19:8f:4e:b8:1e:62:75: 34:48:6b:f2:80:fb:44:a7:25:92:d4:1d:0b:84:ff: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:67:8A:31:BE:9F:7B:AF:99:18:63:49:C0:00:33:5A:F4:FF:1A:DA X509v3 Authority Key Identifier: keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9e:21:23:6e:8f:5c:38:d9:41:f3:98:e1:69:66:78:6a:bc: 87:d9:6d:55:e6:c7:e8:ef:7f:e4:56:aa:eb:e5:5b:f0:35:83: d0:37:e5:ad:9f:a1:b4:87:bf:fb:ec:bb:c9:07:aa:eb:3f:85: d2:e8:40:48:f1:42:01:fd:08:5f:07:8c:f6:da:93:8a:f7:e2: a4:67:b0:5f:49:ba:87:ba:0e:49:c5:7e:f3:e7:50:a4:61:d0: 5c:60:80:1f:60:c2:79:74:81:f9:40:80:71:ff:da:d5:b0:bc: 1f:6f:d0:14:f0:fb:5e:3a:03:5c:49:21:80:82:25:94:fb:ce: 17:ca:b4:b0:96:8f:ac:f9:79:73:53:47:e7:87:35:30:c4:7b: 9c:31:88:a0:07:1c:6a:29:2f:0b:77:be:84:cb:4a:38:a8:ad: d5:b8:de:c9:49:50:0b:5e:e4:18:ba:a0:7a:0b:ce:52:f9:7c: 96:2b:9e:23:cb:b8:9a:09:0d:8b:6b:e9:7a:18:0f:a1:2b:70: 0d:49:ad:0c:fa:aa:d2:e5:07:77:06:ce:27:13:6d:d1:00:64: 38:41:c4:d7:44:2b:ef:58:33:70:96:97:2d:ac:8c:8e:7f:b9: bd:ee:91:92:01:61:3d:dd:4c:98:b9:d4:fd:1a:5d:de:7c:05: 98:87:7c:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r5rPNIarrzEs2MR8qY88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi OWNiOTMwHhcNMjYwMTI3MDkwMTE5WhcNMjYwMTI4MDkwMTE5WjAzMTEwLwYDVQQD EyhhZDY3OGEzMWJlOWY3YmFmOTkxODYzNDljMDAwMzM1YWY0ZmYxYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxmQ/pa5orPtF9bDPlO//Sp8jrKC GS2m62nNQglTGskjwtRTL0EL/oRnzse5/6et7PW/1UYnrpcWHAA8Cqb85S5Hbp0f CZVrKLp347snXc7ao+FV/s1c+ATu8KRAfOrq7/wOs+ElkeJPXFS769I8sjII+89B sz8cMs7zTPq/eNY9NezIDcrQdUKof5tRbg5RxyUd9q42ep0mXm9JsIK3lOWwZ77w v3zvedQR0RoLcgLDNb5ccMeLtD1rGY/5lDsv5gLDuRlXnkq6XTiaVLIJJRye4T8s nkdgJeFUFhC1LoHMMaabgHpFLxmPTrgeYnU0SGvygPtEpyWS1B0LhP9VBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1nijG+n3uvmRhjScAAM1r0/xraMB8GA1UdIwQY MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2 LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq54hI26P XDjZQfOY4WlmeGq8h9ltVebH6O9/5Faq6+Vb8DWD0DflrZ+htIe/++y7yQeq6z+F 0uhASPFCAf0IXweM9tqTivfipGewX0m6h7oOScV+8+dQpGHQXGCAH2DCeXSB+UCA cf/a1bC8H2/QFPD7XjoDXEkhgIIllPvOF8q0sJaPrPl5c1NH54c1MMR7nDGIoAcc aikvC3e+hMtKOKit1bjeyUlQC17kGLqgegvOUvl8liueI8u4mgkNi2vpehgPoStw DUmtDPqq0uUHdwbOJxNt0QBkOEHE10Qr71gzcJaXLayMjn+5ve6RkgFhPd1MmLnU /Rpd3nwFmId8TA== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:26 2026 by rpki-client