This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json) Hash identifier: P0ZDl8orIYDOoH3Cml8eOB6tnmd3YGBU1R7NaIOHgwQ= Subject key identifier: A9:23:84:55:73:64:4B:51:74:92:9A:E9:C6:D5:07:84:D7:CC:F2:F4 Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Certificate serial: 019BFC8AB8369C6CB63A7018D159B639801D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft Manifest number: 04B0 Signing time: Mon 26 Jan 2026 23:01:48 +0000 Manifest this update: Mon 26 Jan 2026 23:01:48 +0000 Manifest next update: Tue 27 Jan 2026 23:01:48 +0000 Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: uW7ou86lYPUR71WizTW3H7jx20MfkW2qN/jZ4Tdi7ts=) 2: _FmJ0xr2r2OuWgPpcwHfz1Rgl30.roa (hash: 0pUdaC6qsNXY6QcsiCABecFJ4EvBMNUBVJpPphk+QlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:b8:36:9c:6c:b6:3a:70:18:d1:59:b6:39:80:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Validity Not Before: Jan 26 23:01:48 2026 GMT Not After : Jan 27 23:01:48 2026 GMT Subject: CN=a923845573644b5174929ae9c6d50784d7ccf2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:4a:b6:10:29:7f:4d:f5:09:0a:6f:70:e6: ba:81:0e:a1:ec:4b:e2:20:8c:7c:d1:37:cc:aa:11: 02:82:51:de:0d:a3:25:fd:5b:f2:1b:15:88:12:ab: 02:b2:13:c9:f7:f3:f8:60:19:60:da:0b:9b:e7:6c: 85:81:4c:a2:2a:9c:0c:c9:8f:fa:c4:83:d7:2f:10: eb:ac:d8:c2:a5:1c:ff:80:71:51:0b:5b:eb:12:9e: df:7e:97:4b:b1:55:0a:09:cf:20:e1:86:dc:37:58: f5:b4:66:e1:fc:bc:05:b4:7d:e4:c5:a6:e7:3d:cf: 00:70:33:de:95:a8:c4:81:cc:fd:b0:fe:1c:f6:db: 70:b7:99:dd:3b:da:4c:65:9c:83:2d:7e:9b:07:8e: 78:25:cc:a6:d9:ab:e2:1b:6e:15:c3:39:08:28:8a: e4:6e:07:f0:1d:91:75:7a:fd:4c:65:e6:c8:ee:9f: ee:3b:2b:79:d9:e1:92:c0:1b:d4:64:3b:27:7f:37: 0e:aa:b0:96:4a:81:f0:de:62:c3:b7:04:9f:b8:4d: 85:65:e8:66:0e:93:b6:82:81:40:8d:3e:79:39:24: 60:c4:1d:f2:12:8f:f5:a6:3b:a7:94:47:f9:e1:4d: 23:fa:88:78:52:3c:f3:9f:34:09:3d:18:02:ad:1e: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:84:55:73:64:4B:51:74:92:9A:E9:C6:D5:07:84:D7:CC:F2:F4 X509v3 Authority Key Identifier: keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f8:e9:26:7c:0d:ca:a7:8d:01:12:19:50:0e:ba:f9:c8:26: 00:7f:0e:a3:8d:21:46:e4:79:cb:6a:da:69:a1:59:bf:5e:ea: 08:2c:07:5d:8c:22:37:1f:ef:87:77:e4:1d:c7:66:c3:25:de: 14:09:5d:11:5c:d7:47:65:db:b8:21:ce:da:d3:8f:ae:12:e8: 1f:76:5e:96:b8:6c:a0:48:13:df:a2:89:e0:42:54:e3:b8:6c: 7b:5f:c9:54:c4:97:77:5d:57:92:7b:a1:ad:97:8b:44:be:66: 55:4f:2b:64:54:ce:ba:de:8a:64:2f:87:9a:e7:70:08:c2:e6: d6:07:02:75:cf:c2:0e:b0:79:98:5b:47:16:33:68:8c:fa:4d: 48:8f:35:34:d7:ef:fc:8a:2c:db:73:61:6c:a8:e2:c7:32:d3: c4:5c:6c:99:8f:fe:a8:8f:c1:e7:33:b6:86:5a:b4:18:77:18: f0:38:b0:78:05:34:c5:62:ec:38:b8:71:e7:3a:a2:bf:08:00: 11:57:0a:69:d2:0a:50:0f:24:91:39:15:84:67:3f:e8:eb:d3: f4:d9:3f:ec:52:a3:8f:9e:2a:6c:a9:90:27:b2:13:04:0a:46: 01:db:02:67:0c:95:4a:5c:f3:36:ba:34:91:44:7d:bd:e7:dc: bc:37:e1:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8irg2nGy2OnAY0Vm2OYAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTlmZmZhZjA5MjQ5YjIwY2Y3ZjU2N2MzY2NiOTk1OGI0 ZjMxMTAwHhcNMjYwMTI2MjMwMTQ4WhcNMjYwMTI3MjMwMTQ4WjAzMTEwLwYDVQQD EyhhOTIzODQ1NTczNjQ0YjUxNzQ5MjlhZTljNmQ1MDc4NGQ3Y2NmMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3pKthApf031CQpvcOa6gQ6h7Evi IIx80TfMqhECglHeDaMl/VvyGxWIEqsCshPJ9/P4YBlg2gub52yFgUyiKpwMyY/6 xIPXLxDrrNjCpRz/gHFRC1vrEp7ffpdLsVUKCc8g4YbcN1j1tGbh/LwFtH3kxabn Pc8AcDPelajEgcz9sP4c9ttwt5ndO9pMZZyDLX6bB454Jcym2aviG24VwzkIKIrk bgfwHZF1ev1MZebI7p/uOyt52eGSwBvUZDsnfzcOqrCWSoHw3mLDtwSfuE2FZehm DpO2goFAjT55OSRgxB3yEo/1pjunlEf54U0j+oh4UjzznzQJPRgCrR5sFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkjhFVzZEtRdJKa6cbVB4TXzPL0MB8GA1UdIwQY MBaAFF6p//rwkkmyDPf1Z8PMuZWLTzEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODkt YjU0OWZmYTA0MDQ2LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODktYjU0OWZmYTA0MDQ2 LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfjpJnwN yqeNARIZUA66+cgmAH8Oo40hRuR5y2raaaFZv17qCCwHXYwiNx/vh3fkHcdmwyXe FAldEVzXR2XbuCHO2tOPrhLoH3ZelrhsoEgT36KJ4EJU47hse1/JVMSXd11Xknuh rZeLRL5mVU8rZFTOut6KZC+HmudwCMLm1gcCdc/CDrB5mFtHFjNojPpNSI81NNfv /Ios23NhbKjixzLTxFxsmY/+qI/B5zO2hlq0GHcY8DiweAU0xWLsOLhx5zqivwgA EVcKadIKUA8kkTkVhGc/6OvT9Nk/7FKjj54qbKmQJ7ITBApGAdsCZwyVSlzzNro0 kUR9vefcvDfhWg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:51:30 2026 by rpki-client