This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json) Hash identifier: l12vEK721FHfR+DpALdiHEPQGjBpymJlDrRthZCMIXQ= Subject key identifier: 7F:58:1B:44:9E:8A:98:34:BF:F9:7D:A9:A2:B7:33:3C:FA:D6:6B:8A Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4 Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4 Certificate serial: 019C1CF10FFC22302D1A5C5DE1EBCB020091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft Manifest number: 074D Signing time: Mon 02 Feb 2026 06:01:26 +0000 Manifest this update: Mon 02 Feb 2026 06:01:26 +0000 Manifest next update: Tue 03 Feb 2026 06:01:26 +0000 Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: PnDqolSIFhPC1mLYB0OuRzzd6F1y+l3aeilT7YMSgrw=) 2: _z_wVcXFgGyo2KL2OVSqBhSh8xw.asa (hash: /1A8zlKWYmqlgxFi5Pz0OpVqaauhxn3c+pURid2tACQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f1:0f:fc:22:30:2d:1a:5c:5d:e1:eb:cb:02:00:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4 Validity Not Before: Feb 2 06:01:26 2026 GMT Not After : Feb 3 06:01:26 2026 GMT Subject: CN=7f581b449e8a9834bff97da9a2b7333cfad66b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:87:8a:a4:ba:48:ec:e7:94:07:cc:71:9e: 6e:d6:4d:13:91:aa:82:d2:84:88:14:9e:03:23:89: f4:4e:70:d1:07:c8:63:fc:60:ca:27:09:c9:3d:d8: d2:2b:89:a0:71:50:f4:34:85:e8:d8:f9:65:e9:4f: 70:1e:ab:17:c9:3d:3c:f2:c1:8f:1c:84:92:c6:92: eb:f1:63:25:9d:11:c3:59:97:d0:82:73:f1:06:36: a2:a1:43:db:b5:a9:96:a2:ad:46:0d:7c:ee:40:9a: f0:d0:a1:d0:2b:7c:74:ad:4c:72:0a:38:ba:bc:48: 56:2c:a1:c2:c0:7c:02:86:6c:f6:b3:06:7f:e0:38: 74:0c:15:10:5d:0b:4c:68:ee:b5:c1:14:56:f7:d2: 90:17:35:e4:12:98:c8:8e:96:50:5e:cd:77:b9:d6: cb:40:bb:71:1d:4b:f0:c8:a9:02:ad:c9:fb:05:e3: 2c:63:0c:07:a1:6a:a0:1e:d6:c2:33:0b:9f:bb:2f: a2:9a:ba:ea:46:e8:6b:c0:bb:56:ca:d0:9d:e7:74: 0b:91:46:68:0e:a7:55:43:d9:a7:ab:0b:62:ad:4a: c0:5f:f5:4d:82:94:7a:65:f5:6b:28:89:75:bc:c5: 03:15:e9:05:a6:e5:a9:8a:a9:b6:c2:59:d9:37:be: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:58:1B:44:9E:8A:98:34:BF:F9:7D:A9:A2:B7:33:3C:FA:D6:6B:8A X509v3 Authority Key Identifier: keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1e:e7:19:17:7f:31:60:87:e3:73:6c:58:d1:68:45:ea:d5: 7e:8f:53:02:2c:30:72:99:90:79:34:2a:ed:82:0d:92:67:62: e5:b5:e6:bf:a6:b7:d6:09:87:bd:f8:ec:6b:22:ca:07:bb:22: 67:52:23:58:d8:46:4b:d6:0a:82:c9:c1:0f:5f:12:4c:f1:24: a5:dc:b5:e5:f3:29:35:5e:fc:ba:f6:79:87:5d:0c:3d:ed:3a: 62:9b:cb:81:69:d3:8d:d0:e5:fd:c1:88:e6:fa:3a:55:7d:1f: 93:ac:54:67:3a:fd:2f:3e:54:3d:42:a0:3a:22:19:e3:fe:0f: e7:97:e9:6b:a6:6c:b3:05:5d:9e:be:dc:69:8d:c9:93:13:8e: 98:5d:1e:bf:6f:16:bf:67:c8:ec:d6:6f:7d:89:8f:43:16:67: 32:c6:be:2b:41:04:07:e5:96:37:4d:de:1f:1a:8a:1b:c4:71: 55:0a:b2:f3:29:f4:20:f4:a4:aa:65:de:99:0b:8d:71:dd:80: c5:78:65:11:fa:37:1e:2d:94:58:cc:fc:2a:58:9c:fe:14:69: 8a:96:33:87:d9:d7:66:be:8e:a2:26:bd:79:28:c0:d6:b1:20: 00:17:a1:71:f1:59:8d:57:49:4d:3b:92:2c:5f:81:ac:11:35: d4:73:f4:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8Q/8IjAtGlxd4evLAgCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTViZGE4Y2U5ODdkN2U0YWFiMWMzNTUxNzhkY2EzM2Uz YjhlYTQwHhcNMjYwMjAyMDYwMTI2WhcNMjYwMjAzMDYwMTI2WjAzMTEwLwYDVQQD Eyg3ZjU4MWI0NDllOGE5ODM0YmZmOTdkYTlhMmI3MzMzY2ZhZDY2YjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl+HiqS6SOznlAfMcZ5u1k0TkaqC 0oSIFJ4DI4n0TnDRB8hj/GDKJwnJPdjSK4mgcVD0NIXo2Pll6U9wHqsXyT088sGP HISSxpLr8WMlnRHDWZfQgnPxBjaioUPbtamWoq1GDXzuQJrw0KHQK3x0rUxyCji6 vEhWLKHCwHwChmz2swZ/4Dh0DBUQXQtMaO61wRRW99KQFzXkEpjIjpZQXs13udbL QLtxHUvwyKkCrcn7BeMsYwwHoWqgHtbCMwufuy+imrrqRuhrwLtWytCd53QLkUZo DqdVQ9mnqwtirUrAX/VNgpR6ZfVrKIl1vMUDFekFpuWpiqm2wlnZN75gJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9YG0Seipg0v/l9qaK3Mzz61muKMB8GA1UdIwQY MBaAFF0VvajOmH1+SqscNVF43KM+O46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2Yt YmJhM2M4Y2IwZjdhLzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2YtYmJhM2M4Y2IwZjdh LzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB7nGRd/ MWCH43NsWNFoRerVfo9TAiwwcpmQeTQq7YINkmdi5bXmv6a31gmHvfjsayLKB7si Z1IjWNhGS9YKgsnBD18STPEkpdy15fMpNV78uvZ5h10MPe06YpvLgWnTjdDl/cGI 5vo6VX0fk6xUZzr9Lz5UPUKgOiIZ4/4P55fpa6ZsswVdnr7caY3JkxOOmF0ev28W v2fI7NZvfYmPQxZnMsa+K0EEB+WWN03eHxqKG8RxVQqy8yn0IPSkqmXemQuNcd2A xXhlEfo3Hi2UWMz8Klic/hRpipYzh9nXZr6Ooia9eSjA1rEgABehcfFZjVdJTTuS LF+BrBE11HP0LQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:43 2026 by rpki-client