This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json) Hash identifier: lEH0E7eIT28eurwUmBnXKQC1MdrXHrvzpzuxwkLkYuY= Subject key identifier: D5:D4:EC:DD:4D:47:1D:C0:DD:F6:C7:05:94:DD:72:C5:ED:24:1A:00 Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084 Certificate serial: 019BFB406D938F21334EA2D7E846A3BC1B9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft Manifest number: 0772 Signing time: Mon 26 Jan 2026 17:01:02 +0000 Manifest this update: Mon 26 Jan 2026 17:01:02 +0000 Manifest next update: Tue 27 Jan 2026 17:01:02 +0000 Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: r6OyExiIe8klnWli4FQBG9lFLYzOVWIMhbOL0nC3O2o=) 2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:6d:93:8f:21:33:4e:a2:d7:e8:46:a3:bc:1b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa386e97656d648ab5381b29666414081b00084 Validity Not Before: Jan 26 17:01:02 2026 GMT Not After : Jan 27 17:01:02 2026 GMT Subject: CN=d5d4ecdd4d471dc0ddf6c70594dd72c5ed241a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:87:4a:a5:4a:c9:e1:81:9e:27:12:b8:68: 89:4b:79:c0:c9:04:b8:d1:d6:e4:8f:3b:08:15:9c: 66:5a:bd:3a:d2:69:df:1e:38:c6:25:52:56:33:a5: 59:d8:95:bd:90:e8:4e:4a:f7:76:f7:bf:00:f4:91: 28:f2:e3:ec:1a:fa:9a:91:b1:f9:d2:a5:99:3d:94: ba:0c:96:64:29:7f:ce:a9:37:82:e0:9b:95:a5:a2: 0f:e7:03:b5:0d:97:1c:d9:9c:59:41:de:e5:a5:67: 60:24:c4:f6:95:4a:94:bc:25:81:c5:a0:a6:ea:43: 1c:2b:cf:52:89:fc:b7:43:dc:5e:54:fc:78:ae:92: a9:8c:2f:8c:cf:9c:79:b1:37:09:ad:38:0d:c1:2c: 24:6a:2a:56:ce:ec:f9:b5:60:68:ae:ee:35:98:cb: 48:43:1e:ef:9f:9e:e9:06:b2:45:9d:a3:35:89:ef: 49:8a:34:28:ac:a0:13:33:12:f2:dc:7b:f0:70:c8: 3a:0d:22:cf:e0:fc:1f:c0:c4:84:0f:8d:44:ae:f7: fe:28:81:18:76:10:d0:94:8c:a4:c2:18:65:83:02: be:4c:e5:09:a6:2d:8d:fb:4f:4a:b8:0d:1d:5b:f2: c5:11:8c:0d:82:d5:6d:f1:d5:47:ac:ac:bb:54:3b: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:EC:DD:4D:47:1D:C0:DD:F6:C7:05:94:DD:72:C5:ED:24:1A:00 X509v3 Authority Key Identifier: keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8e:bb:65:15:17:74:ae:3e:6f:2a:90:e7:e7:3d:dd:e7:43: cd:d3:b3:c5:e8:14:9b:41:60:c1:39:d5:52:07:0f:43:6d:a8: 93:fa:61:18:9d:68:90:38:82:0e:92:5b:5a:ef:53:aa:47:46: 15:bf:14:60:fe:ff:3f:63:47:d4:62:e7:dc:66:6a:b7:f2:3e: d6:3d:20:26:7b:8e:73:03:b5:a1:ff:39:4e:b6:78:a3:62:b9: b3:f8:71:de:fd:7a:12:00:40:72:2f:d0:dd:35:bb:44:6f:3b: 72:96:57:86:b9:c5:76:ac:a3:07:28:de:12:65:05:fa:56:56: a5:da:48:05:d4:eb:8e:e5:34:bf:ff:99:68:b3:2e:c5:ea:47: b5:07:33:f0:38:ac:91:aa:75:58:e7:f0:66:9c:35:53:10:ab: b5:bd:9a:99:84:e6:19:10:8b:f2:73:ca:a9:8a:15:4e:08:58: 8a:1f:33:b4:e7:b9:df:a9:28:b5:0b:a1:a4:c1:c9:0d:aa:41: b3:c5:0e:5a:05:0a:ee:0f:02:60:93:ee:32:8b:a9:df:f0:7a: e3:15:dc:19:7c:76:ce:27:78:00:9f:d8:e4:62:24:f4:3a:08: fb:8f:a8:e2:01:aa:11:c1:95:ad:30:a6:eb:5a:be:6e:69:79: d7:13:09:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QG2TjyEzTqLX6EajvBubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi MDAwODQwHhcNMjYwMTI2MTcwMTAyWhcNMjYwMTI3MTcwMTAyWjAzMTEwLwYDVQQD EyhkNWQ0ZWNkZDRkNDcxZGMwZGRmNmM3MDU5NGRkNzJjNWVkMjQxYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BaHSqVKyeGBnicSuGiJS3nAyQS4 0dbkjzsIFZxmWr060mnfHjjGJVJWM6VZ2JW9kOhOSvd2978A9JEo8uPsGvqakbH5 0qWZPZS6DJZkKX/OqTeC4JuVpaIP5wO1DZcc2ZxZQd7lpWdgJMT2lUqUvCWBxaCm 6kMcK89Sify3Q9xeVPx4rpKpjC+Mz5x5sTcJrTgNwSwkaipWzuz5tWBoru41mMtI Qx7vn57pBrJFnaM1ie9JijQorKATMxLy3HvwcMg6DSLP4PwfwMSED41Ervf+KIEY dhDQlIykwhhlgwK+TOUJpi2N+09KuA0dW/LFEYwNgtVt8dVHrKy7VDuN5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXU7N1NRx3A3fbHBZTdcsXtJBoAMB8GA1UdIwQY MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALo67ZRUX dK4+byqQ5+c93edDzdOzxegUm0FgwTnVUgcPQ22ok/phGJ1okDiCDpJbWu9TqkdG Fb8UYP7/P2NH1GLn3GZqt/I+1j0gJnuOcwO1of85TrZ4o2K5s/hx3v16EgBAci/Q 3TW7RG87cpZXhrnFdqyjByjeEmUF+lZWpdpIBdTrjuU0v/+ZaLMuxepHtQcz8Dis kap1WOfwZpw1UxCrtb2amYTmGRCL8nPKqYoVTghYih8ztOe536kotQuhpMHJDapB s8UOWgUK7g8CYJPuMoup3/B64xXcGXx2zid4AJ/Y5GIk9DoI+4+o4gGqEcGVrTCm 61q+bml51xMJ3A== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:38 2026 by rpki-client