This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json) Hash identifier: yIZZaqrjUB9WTLl0urY1FZb9h/QVnClD5Hq4+F3Aa6Q= Subject key identifier: D2:7F:FB:C3:0A:C3:C5:98:CD:5E:5A:0F:EF:28:44:62:66:64:C1:4A Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Certificate serial: 019BA4FE7B4DB60DDE48FDD6E0BF0808C616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft Manifest number: 0EDD Signing time: Fri 09 Jan 2026 23:01:39 +0000 Manifest this update: Fri 09 Jan 2026 23:01:39 +0000 Manifest next update: Sat 10 Jan 2026 23:01:39 +0000 Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: p1q27grJ+0duB5V38K/5kbhjrJXVBxZkUoLw0VAkSP8=) 2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=) 3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:fe:7b:4d:b6:0d:de:48:fd:d6:e0:bf:08:08:c6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Validity Not Before: Jan 9 23:01:39 2026 GMT Not After : Jan 10 23:01:39 2026 GMT Subject: CN=d27ffbc30ac3c598cd5e5a0fef2844626664c14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:4a:a0:bd:89:5b:e2:73:26:90:f3:dc:5e: 10:c5:5b:d0:5a:a5:92:23:ec:4e:c1:84:db:1c:50: bd:63:b2:47:7b:77:e8:31:d2:91:dd:0f:b0:ed:e9: 5c:78:4e:71:6c:42:13:38:86:ee:64:20:c9:f0:4b: 79:9a:ad:c9:21:86:2d:87:65:68:61:08:10:15:98: ef:91:39:8f:f4:84:14:dd:15:db:bf:a1:6a:26:b8: 4b:ae:f0:55:67:71:31:4e:9f:1b:77:aa:d5:48:91: 94:c4:90:b9:c1:b2:ba:68:3d:9d:33:63:b2:fe:7e: d9:8c:d2:81:fc:f8:50:43:37:70:ef:06:11:50:6c: f1:75:f7:b9:1f:7d:e9:2a:45:5e:f0:7a:fe:50:1d: 84:14:03:e6:5d:7f:c6:c5:a4:09:a9:3b:ca:dd:fc: e3:6c:89:2d:61:0f:ca:c4:c9:69:7c:f5:d7:42:17: 45:63:36:50:47:bf:69:4e:13:e8:20:00:72:89:c7: 58:27:3e:71:01:26:79:1d:39:fa:f1:f8:b1:1b:00: 94:ae:d2:6e:be:0f:90:4d:e9:12:e7:1b:46:d3:28: 37:44:7a:2c:8f:b4:69:ca:1d:93:90:2a:ec:7d:64: be:37:10:b9:11:e1:ab:7b:23:f5:20:72:5b:7b:3c: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:FB:C3:0A:C3:C5:98:CD:5E:5A:0F:EF:28:44:62:66:64:C1:4A X509v3 Authority Key Identifier: keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e8:dc:12:ac:6c:6f:b7:58:53:3f:45:c5:be:90:d7:07:1b: 3d:ec:bb:c0:32:0d:4a:11:25:99:bb:a1:d7:cc:61:f6:b7:28: d8:be:b1:b3:06:52:ed:3c:9e:0d:e4:eb:ec:7c:7c:e2:99:f6: 3a:4d:1b:6e:45:35:77:6d:64:f7:a8:e0:14:30:a3:dd:1d:a2: ef:2c:2d:f2:9a:8c:72:eb:5c:81:d5:b3:c4:97:b4:99:9e:cb: d6:46:1b:92:bc:f7:6a:7b:52:9a:d2:68:9e:b2:5c:8e:6e:49: 35:c7:38:7e:ce:55:31:aa:8c:d7:80:df:60:10:c3:b2:df:80: da:b2:42:2c:7d:27:4e:77:8b:5d:cc:40:d4:29:36:6e:f0:1e: 0b:15:47:cb:be:16:50:f2:96:e9:78:62:c5:d7:50:da:1f:3c: 92:a5:68:19:8b:2c:17:62:c7:5c:f4:71:dd:94:c1:fb:f5:1b: 3f:0f:9e:23:dd:2e:92:69:bd:37:62:68:fe:82:f5:06:6d:2f: b9:6a:d7:5d:e6:30:ae:23:3f:45:75:e1:e1:ca:24:b5:24:bb: de:17:cf:2a:95:f5:7e:61:0e:1f:4d:65:98:8d:b1:36:92:2f: 5c:c3:64:23:3d:e3:9a:ad:7c:39:d1:5b:81:0b:81:1a:f0:9d: 69:38:c5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuk/ntNtg3eSP3W4L8ICMYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4 ZGIxYzcwHhcNMjYwMTA5MjMwMTM5WhcNMjYwMTEwMjMwMTM5WjAzMTEwLwYDVQQD EyhkMjdmZmJjMzBhYzNjNTk4Y2Q1ZTVhMGZlZjI4NDQ2MjY2NjRjMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe9KoL2JW+JzJpDz3F4QxVvQWqWS I+xOwYTbHFC9Y7JHe3foMdKR3Q+w7elceE5xbEITOIbuZCDJ8Et5mq3JIYYth2Vo YQgQFZjvkTmP9IQU3RXbv6FqJrhLrvBVZ3ExTp8bd6rVSJGUxJC5wbK6aD2dM2Oy /n7ZjNKB/PhQQzdw7wYRUGzxdfe5H33pKkVe8Hr+UB2EFAPmXX/GxaQJqTvK3fzj bIktYQ/KxMlpfPXXQhdFYzZQR79pThPoIAByicdYJz5xASZ5HTn68fixGwCUrtJu vg+QTekS5xtG0yg3RHosj7Rpyh2TkCrsfWS+NxC5EeGreyP1IHJbezxKhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ/+8MKw8WYzV5aD+8oRGJmZMFKMB8GA1UdIwQY MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt ZDZiNTZhYmEzZWI3LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3 LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgujcEqxs b7dYUz9Fxb6Q1wcbPey7wDINShElmbuh18xh9rco2L6xswZS7TyeDeTr7Hx84pn2 Ok0bbkU1d21k96jgFDCj3R2i7ywt8pqMcutcgdWzxJe0mZ7L1kYbkrz3antSmtJo nrJcjm5JNcc4fs5VMaqM14DfYBDDst+A2rJCLH0nTneLXcxA1Ck2bvAeCxVHy74W UPKW6XhixddQ2h88kqVoGYssF2LHXPRx3ZTB+/UbPw+eI90ukmm9N2Jo/oL1Bm0v uWrXXeYwriM/RXXh4coktSS73hfPKpX1fmEOH01lmI2xNpIvXMNkIz3jmq18OdFb gQuBGvCdaTjFjw== -----END CERTIFICATE-----Generated at Sat Jan 10 07:03:02 2026 by rpki-client