This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json) Hash identifier: 5meS4LbrtXeTVxD4rSZG3FrMzUkcOMvXZWsWE8D6jRE= Subject key identifier: BC:42:8C:8B:39:34:E9:2B:3A:E1:8F:0E:86:69:C7:68:56:05:96:21 Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824 Certificate serial: 019BD95979438515E5D1F0F02D87BD575723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft Manifest number: 079A Signing time: Tue 20 Jan 2026 03:01:18 +0000 Manifest this update: Tue 20 Jan 2026 03:01:18 +0000 Manifest next update: Wed 21 Jan 2026 03:01:18 +0000 Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=) 2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=) 3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=) 4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: 9me4ApF5yKxXk52hAC7i7LddXX/UMe3bcOSbQaumKSE=) 5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:59:79:43:85:15:e5:d1:f0:f0:2d:87:bd:57:57:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824 Validity Not Before: Jan 20 03:01:18 2026 GMT Not After : Jan 21 03:01:18 2026 GMT Subject: CN=bc428c8b3934e92b3ae18f0e8669c76856059621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:26:71:ec:fa:14:b8:72:cb:cb:5a:27:d9: 4d:53:13:39:66:a1:22:af:b6:26:a7:6c:51:bc:84: f8:70:f4:d5:ac:f4:00:d1:4c:a9:e8:69:40:1b:4f: 3c:b1:9d:69:79:b1:69:48:44:80:97:51:77:ef:de: d8:e6:7f:5a:3c:25:91:b2:4c:ca:34:9d:8e:a0:08: 59:a8:98:3a:05:e6:7d:db:45:20:92:26:1f:6e:17: ee:49:1a:85:e0:e5:34:37:28:c0:e2:b5:0f:f5:e6: 07:48:70:b8:df:ad:55:1b:dd:00:19:31:b3:c7:11: 3b:3b:4c:e6:11:00:99:98:3c:b1:d3:b4:0f:fb:8c: 36:16:7e:17:13:a0:38:aa:ad:84:fc:3b:1e:a9:ed: 97:f7:d6:78:ed:95:9f:fb:f4:b7:96:81:c1:51:e0: 53:24:8d:b4:47:bb:69:43:cf:7b:3c:bf:d2:27:7e: 5c:91:1d:41:96:06:d0:4e:7f:d6:1b:89:ce:06:c1: f9:38:65:96:61:63:c2:d4:20:10:d1:06:25:3b:c4: 4a:e9:52:5e:90:a8:3a:83:7f:2d:0f:cb:80:30:56: 4c:17:49:62:05:e9:bd:c5:16:25:73:43:fc:67:1f: ae:76:05:a0:5d:c7:ed:fe:8a:0f:d0:02:a7:3f:8c: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:42:8C:8B:39:34:E9:2B:3A:E1:8F:0E:86:69:C7:68:56:05:96:21 X509v3 Authority Key Identifier: keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0c:6f:4e:b5:67:5f:c9:27:2b:25:e9:2b:db:b9:3a:e7:f0: 0e:f7:92:96:c5:a1:3b:7d:83:9f:83:5f:8c:8c:89:be:ec:e7: 30:0c:da:59:99:b4:15:20:8b:ba:a7:a7:71:65:66:a0:ec:3e: 29:a8:ed:5d:d6:d4:44:75:b1:b0:90:bd:de:79:44:af:6e:c5: 26:98:f9:40:7c:cf:54:f8:13:d4:fe:53:41:fb:7a:72:77:90: db:f4:c5:f4:0e:1b:08:8e:7b:44:b2:d7:27:6c:60:01:19:bb: 1e:51:13:e8:f3:4a:5a:21:49:94:85:dd:84:f5:a1:e9:f0:c0: e0:88:00:16:f5:67:a4:a1:c2:b9:67:70:4c:5f:1e:cf:f1:52: 0b:00:d2:ea:dd:37:79:de:e3:bc:33:f1:4d:87:12:7b:72:0a: da:2a:05:34:12:c0:41:ff:18:eb:c0:f9:a0:50:0d:3f:d5:70: e9:18:a9:11:15:54:32:91:ab:91:5c:57:86:77:1d:c7:71:01: e2:84:fb:6f:ca:1c:03:e8:67:54:75:6d:72:f9:4d:cc:62:69: f2:67:cb:20:be:b7:3a:b4:6e:6f:97:86:40:c6:5e:ac:f0:c6: be:1a:08:32:c3:68:d4:d8:5b:62:26:72:b6:00:97:54:66:28: 2a:bb:7d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWXlDhRXl0fDwLYe9V1cjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0 NjU4MjQwHhcNMjYwMTIwMDMwMTE4WhcNMjYwMTIxMDMwMTE4WjAzMTEwLwYDVQQD EyhiYzQyOGM4YjM5MzRlOTJiM2FlMThmMGU4NjY5Yzc2ODU2MDU5NjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBUmcez6FLhyy8taJ9lNUxM5ZqEi r7Ymp2xRvIT4cPTVrPQA0Uyp6GlAG088sZ1pebFpSESAl1F3797Y5n9aPCWRskzK NJ2OoAhZqJg6BeZ920UgkiYfbhfuSRqF4OU0NyjA4rUP9eYHSHC4361VG90AGTGz xxE7O0zmEQCZmDyx07QP+4w2Fn4XE6A4qq2E/Dseqe2X99Z47ZWf+/S3loHBUeBT JI20R7tpQ897PL/SJ35ckR1BlgbQTn/WG4nOBsH5OGWWYWPC1CAQ0QYlO8RK6VJe kKg6g38tD8uAMFZMF0liBem9xRYlc0P8Zx+udgWgXcft/ooP0AKnP4w/uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxCjIs5NOkrOuGPDoZpx2hWBZYhMB8GA1UdIwQY MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAxvTrVn X8knKyXpK9u5OufwDveSlsWhO32Dn4NfjIyJvuznMAzaWZm0FSCLuqencWVmoOw+ KajtXdbURHWxsJC93nlEr27FJpj5QHzPVPgT1P5TQft6cneQ2/TF9A4bCI57RLLX J2xgARm7HlET6PNKWiFJlIXdhPWh6fDA4IgAFvVnpKHCuWdwTF8ez/FSCwDS6t03 ed7jvDPxTYcSe3IK2ioFNBLAQf8Y68D5oFANP9Vw6RipERVUMpGrkVxXhncdx3EB 4oT7b8ocA+hnVHVtcvlNzGJp8mfLIL63OrRub5eGQMZerPDGvhoIMsNo1NhbYiZy tgCXVGYoKrt9Ig== -----END CERTIFICATE-----Generated at Tue Jan 20 10:59:52 2026 by rpki-client