This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json) Hash identifier: E9ZOkmSpgJyQoPnZVCrrVisR2Iyzf1VftBKPPtH11XA= Subject key identifier: A1:EF:A3:F4:DA:5F:A8:98:6B:FE:10:B4:EE:F5:2D:76:08:9F:66:7C Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392 Certificate serial: 019BE225104249FA3C7C1F14620FED36767A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft Manifest number: 14E7 Signing time: Wed 21 Jan 2026 20:00:38 +0000 Manifest this update: Wed 21 Jan 2026 20:00:38 +0000 Manifest next update: Thu 22 Jan 2026 20:00:38 +0000 Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=) 2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: jymYwa6qAcbcZW7yIxluYDVjcVdi1ej94YecuSiL9iI=) 3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:25:10:42:49:fa:3c:7c:1f:14:62:0f:ed:36:76:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392 Validity Not Before: Jan 21 20:00:38 2026 GMT Not After : Jan 22 20:00:38 2026 GMT Subject: CN=a1efa3f4da5fa8986bfe10b4eef52d76089f667c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:9e:21:05:b8:bc:eb:e8:f0:82:91:a4:16: 1d:89:34:d8:de:78:ab:82:bd:94:8f:84:16:41:3b: 6b:89:fa:6a:67:60:02:ad:eb:6a:02:07:a2:97:36: b1:ac:24:70:9c:4e:b6:ee:52:99:91:bf:1b:18:0e: dc:41:ad:9f:f2:12:ba:a8:db:1e:9c:cf:68:b0:30: bd:dd:f0:1c:bc:d0:a3:f0:19:7e:92:05:c7:b8:c3: 9e:b1:d5:29:5a:70:6e:f9:8a:31:ae:bf:03:e5:44: 08:db:e6:f8:da:38:6a:9b:e1:8b:a5:0d:84:41:13: 85:cc:09:f8:46:3e:e3:85:7e:25:f4:e0:37:24:f1: c3:bc:07:21:4a:36:9f:8d:e5:84:a3:59:f0:e7:df: 75:f9:3f:e8:14:05:14:bd:17:ae:2d:28:a5:b7:72: 28:37:6c:3a:88:f6:c7:ef:e4:a9:a3:3b:dc:65:57: d8:33:84:69:25:69:a3:1a:24:59:64:d7:1f:af:17: 1c:42:c5:d6:6f:7b:40:04:d5:96:3e:c2:3f:cf:02: 1a:9e:de:f3:7f:cb:fa:6e:32:4a:e0:f8:82:5f:3e: b1:b7:ba:6e:f4:a9:42:94:0f:7a:7d:b1:a9:51:dc: 9f:3e:42:87:f5:6e:f4:d8:3e:64:30:da:c5:94:9e: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EF:A3:F4:DA:5F:A8:98:6B:FE:10:B4:EE:F5:2D:76:08:9F:66:7C X509v3 Authority Key Identifier: keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0b:85:40:01:43:d6:d2:1f:ab:95:1c:96:a4:a4:e3:5f:1e: 31:0c:f3:4e:6a:43:c2:ba:38:3e:86:4c:b0:03:5d:e2:88:cf: 68:99:f4:3e:2b:e7:c3:be:59:6f:9b:0c:a6:6e:6c:fe:c3:22: bd:89:32:dc:92:71:ce:95:27:1c:8b:89:92:2d:80:35:fe:0a: d9:e1:20:96:f6:6c:b3:d1:82:6d:d9:43:fb:cc:21:5e:6c:ef: df:f6:cd:5a:fd:c8:96:ca:b6:31:22:62:f2:27:dc:03:75:73: db:27:75:5a:69:38:fe:55:f2:7f:c5:1c:64:1a:d2:55:5f:5d: 12:58:07:60:47:8c:1d:c0:2e:82:e9:4a:ab:31:39:70:18:c7: a4:2a:18:59:7f:da:28:ec:f9:f2:33:a7:fc:62:e0:42:3e:f1: e2:09:78:d5:f5:55:c7:b7:ff:4c:e5:87:f2:9f:43:d9:2f:da: 74:16:99:ce:52:16:31:32:fb:c0:dd:f5:1f:8f:4f:2f:59:d4: fb:45:66:e9:09:cd:23:21:90:67:dc:73:ef:15:73:a8:b1:bb: 73:0e:82:ea:dd:fb:bd:ae:93:b9:52:19:0a:60:6b:22:79:44: 0e:de:d3:72:a7:69:dc:20:ec:1d:c9:ae:5c:f1:38:cd:56:42: 76:05:76:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZviJRBCSfo8fB8UYg/tNnZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzcwYTQ4YjU5ZmI4MTE0OTVmMTFjNDk3MzQ0ODJmMjJi MWEzOTIwHhcNMjYwMTIxMjAwMDM4WhcNMjYwMTIyMjAwMDM4WjAzMTEwLwYDVQQD EyhhMWVmYTNmNGRhNWZhODk4NmJmZTEwYjRlZWY1MmQ3NjA4OWY2NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcaeIQW4vOvo8IKRpBYdiTTY3nir gr2Uj4QWQTtrifpqZ2ACretqAgeilzaxrCRwnE627lKZkb8bGA7cQa2f8hK6qNse nM9osDC93fAcvNCj8Bl+kgXHuMOesdUpWnBu+Yoxrr8D5UQI2+b42jhqm+GLpQ2E QROFzAn4Rj7jhX4l9OA3JPHDvAchSjafjeWEo1nw5991+T/oFAUUvReuLSilt3Io N2w6iPbH7+SpozvcZVfYM4RpJWmjGiRZZNcfrxccQsXWb3tABNWWPsI/zwIant7z f8v6bjJK4PiCXz6xt7pu9KlClA96fbGpUdyfPkKH9W702D5kMNrFlJ4PnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHvo/TaX6iYa/4QtO71LXYIn2Z8MB8GA1UdIwQY MBaAFF03Cki1n7gRSV8RxJc0SC8isaOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2Ut ZTI3MjAxMzAyNmI0LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2UtZTI3MjAxMzAyNmI0 LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwuFQAFD 1tIfq5UclqSk418eMQzzTmpDwro4PoZMsANd4ojPaJn0Pivnw75Zb5sMpm5s/sMi vYky3JJxzpUnHIuJki2ANf4K2eEglvZss9GCbdlD+8whXmzv3/bNWv3Ilsq2MSJi 8ifcA3Vz2yd1Wmk4/lXyf8UcZBrSVV9dElgHYEeMHcAugulKqzE5cBjHpCoYWX/a KOz58jOn/GLgQj7x4gl41fVVx7f/TOWH8p9D2S/adBaZzlIWMTL7wN31H49PL1nU +0Vm6QnNIyGQZ9xz7xVzqLG7cw6C6t37va6TuVIZCmBrInlEDt7Tcqdp3CDsHcmu XPE4zVZCdgV2Ww== -----END CERTIFICATE-----Generated at Thu Jan 22 00:26:16 2026 by rpki-client