This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json) Hash identifier: wCvqftbxR10uwQhVLB3nnm4+8ZfOHo0h37e5GuVJ4Ng= Subject key identifier: B2:86:87:BE:A9:02:24:3E:2F:5A:22:0A:B3:83:4B:BA:4D:54:4A:B4 Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Certificate serial: 019BFEE6A5C5025F725742AEF95A8C8C88F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft Manifest number: 0832 Signing time: Tue 27 Jan 2026 10:01:27 +0000 Manifest this update: Tue 27 Jan 2026 10:01:27 +0000 Manifest next update: Wed 28 Jan 2026 10:01:27 +0000 Files and hashes: 1: 4XbLzLhs_R3HbGvs8J0B6vWDjoM.roa (hash: EeIgIRoHfCv+YD1yHKMrdcDTtdbyna/9WTb4LBDcCiA=) 2: 6mSyjcaB-p4qDC460iYHCXPRE5w.roa (hash: l4WjQ6VVIZ7R6ms3j8GqNVZcOrTIa+7w3Fpzj4XR/cU=) 3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: zaXN8qRxbU5x1wZsl/tmFerFRQQqn0mIUq+J0lYqDXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:e6:a5:c5:02:5f:72:57:42:ae:f9:5a:8c:8c:88:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Validity Not Before: Jan 27 10:01:27 2026 GMT Not After : Jan 28 10:01:27 2026 GMT Subject: CN=b28687bea902243e2f5a220ab3834bba4d544ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:d8:e5:d5:12:32:15:ad:d5:cc:19:f3:0d: 86:c1:59:66:a2:68:9f:38:ca:eb:6b:64:76:13:03: 56:d1:95:fe:c5:5c:eb:53:ac:d0:05:57:e9:f6:a2: 70:be:79:ad:10:a9:6a:de:a5:ec:f6:7d:39:c7:0a: 6a:57:65:87:69:ff:c1:b8:62:59:c5:60:0d:f9:bb: eb:28:ce:94:79:99:3c:8c:cb:1f:cd:c3:e2:0c:9b: ea:e7:0b:64:34:32:03:e7:7f:54:9b:7c:8d:e1:a0: a8:fc:b5:4d:38:89:e4:8b:4f:f6:8d:5d:18:6a:05: 82:1d:77:02:c2:5c:04:cc:89:b8:db:28:f9:eb:42: ca:36:28:19:01:fb:9c:ca:f0:af:be:1b:f8:45:88: 7a:ee:08:9d:79:f2:87:05:1a:55:8c:a2:b7:2d:be: 30:e9:ff:72:a2:3b:9f:b1:e4:5d:11:7e:44:c3:66: 3e:15:06:9f:ef:28:dc:2f:d8:c7:59:33:22:d7:a6: 22:40:55:37:c1:85:e2:ce:d3:a8:65:bf:0e:41:70: 3c:cd:87:f0:1f:9c:7a:60:2d:c9:46:96:66:00:07: 0c:7e:6e:c7:30:b9:df:8a:d1:36:75:4d:d1:37:80: 4e:39:5b:ba:69:8f:d2:6b:bd:75:3f:42:6c:87:91: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:86:87:BE:A9:02:24:3E:2F:5A:22:0A:B3:83:4B:BA:4D:54:4A:B4 X509v3 Authority Key Identifier: keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e0:ce:fd:7d:07:57:79:be:ca:a4:a9:f4:fb:b9:f7:09:dc: a4:60:f3:ae:1f:a0:e1:0a:b3:7d:2b:da:c9:5e:0c:ee:14:6f: 32:59:a0:39:93:25:bd:4a:6e:e3:11:ab:e9:06:1c:9e:3a:f4: e4:69:79:ea:b0:c2:67:0e:85:88:31:18:72:f5:a0:0e:61:70: f6:e8:5a:3d:77:47:fe:2a:9e:7b:07:4e:87:c9:9a:95:27:2d: 87:8a:a7:45:0e:73:73:7d:9d:58:e3:9b:cc:a7:bf:c3:0e:97: 10:6b:9d:a4:7e:ef:ff:b9:19:48:d4:ed:aa:62:d8:45:dc:9d: a5:08:19:55:00:d0:18:fc:51:57:b2:1b:89:26:0b:b8:54:3a: f2:f7:bc:11:63:a5:b7:24:7e:5e:1c:2c:24:85:70:f3:a4:3f: 4b:7b:3b:36:43:4f:c2:9b:f2:ba:05:0e:25:16:7d:76:6b:b7: 1b:06:42:82:22:7e:44:68:3d:37:b8:60:7d:98:fe:97:e6:b9: 7e:a3:f0:ae:35:d2:26:d4:a2:a8:02:91:1f:c5:ff:08:aa:a4: 04:1f:6b:04:44:f0:4e:41:17:35:6c:33:f1:04:f4:97:12:af: 0b:78:82:62:c9:3c:4a:1e:cd:04:32:54:c6:96:a0:57:ed:67: 7b:60:89:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+5qXFAl9yV0Ku+VqMjIj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4 YmFjZDkwHhcNMjYwMTI3MTAwMTI3WhcNMjYwMTI4MTAwMTI3WjAzMTEwLwYDVQQD EyhiMjg2ODdiZWE5MDIyNDNlMmY1YTIyMGFiMzgzNGJiYTRkNTQ0YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT/Y5dUSMhWt1cwZ8w2GwVlmomif OMrra2R2EwNW0ZX+xVzrU6zQBVfp9qJwvnmtEKlq3qXs9n05xwpqV2WHaf/BuGJZ xWAN+bvrKM6UeZk8jMsfzcPiDJvq5wtkNDID539Um3yN4aCo/LVNOInki0/2jV0Y agWCHXcCwlwEzIm42yj560LKNigZAfucyvCvvhv4RYh67gidefKHBRpVjKK3Lb4w 6f9yojufseRdEX5Ew2Y+FQaf7yjcL9jHWTMi16YiQFU3wYXiztOoZb8OQXA8zYfw H5x6YC3JRpZmAAcMfm7HMLnfitE2dU3RN4BOOVu6aY/Sa711P0Jsh5EVTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKGh76pAiQ+L1oiCrODS7pNVEq0MB8GA1UdIwQY MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5 LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeDO/X0H V3m+yqSp9Pu59wncpGDzrh+g4QqzfSvayV4M7hRvMlmgOZMlvUpu4xGr6QYcnjr0 5Gl56rDCZw6FiDEYcvWgDmFw9uhaPXdH/iqeewdOh8malScth4qnRQ5zc32dWOOb zKe/ww6XEGudpH7v/7kZSNTtqmLYRdydpQgZVQDQGPxRV7IbiSYLuFQ68ve8EWOl tyR+XhwsJIVw86Q/S3s7NkNPwpvyugUOJRZ9dmu3GwZCgiJ+RGg9N7hgfZj+l+a5 fqPwrjXSJtSiqAKRH8X/CKqkBB9rBETwTkEXNWwz8QT0lxKvC3iCYsk8Sh7NBDJU xpagV+1ne2CJRQ== -----END CERTIFICATE-----Generated at Tue Jan 27 17:53:06 2026 by rpki-client