This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json) Hash identifier: /6tb/WzIG9pggRYSZYcBtT0nFgH5LAec/ZXZKr7rkjY= Subject key identifier: FD:EC:86:10:2D:E5:30:BC:49:72:1D:76:70:64:B4:05:E0:7E:86:6E Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491 Certificate serial: 019BF988EF0993D2816A7CAEDEB749318F32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft Manifest number: 0A0D Signing time: Mon 26 Jan 2026 09:00:59 +0000 Manifest this update: Mon 26 Jan 2026 09:00:59 +0000 Manifest next update: Tue 27 Jan 2026 09:00:59 +0000 Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=) 2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: bFyUmURY00V4o/9CMq64rxeFtdth6nuj+4581pBIMRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:ef:09:93:d2:81:6a:7c:ae:de:b7:49:31:8f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491 Validity Not Before: Jan 26 09:00:59 2026 GMT Not After : Jan 27 09:00:59 2026 GMT Subject: CN=fdec86102de530bc49721d767064b405e07e866e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:ee:b5:13:d7:68:69:6b:8b:b4:69:7e:1a: 64:40:9e:24:6c:8d:9a:82:69:02:f3:60:97:b4:14: d2:cc:d5:0c:ec:48:7b:f7:a5:6d:3b:72:71:3f:a8: 54:8e:fc:0e:bf:79:27:77:71:0f:51:f4:df:96:9e: 7c:8a:c5:f2:88:97:75:21:79:f8:40:f4:71:54:86: 9e:a8:73:aa:bb:67:bc:4c:8f:73:3c:9f:cd:74:ce: db:9f:7d:1a:b4:10:38:22:9c:39:8d:d4:61:bf:84: e9:ac:fd:f9:72:02:b6:1c:06:a7:e2:fe:08:e0:02: ee:ce:c3:a8:a2:83:80:b4:f8:8a:82:31:ce:0b:c3: fc:cd:a5:ef:1e:26:33:cc:e2:6a:c3:1c:28:71:bd: 42:62:31:cc:f4:db:bd:82:cf:bc:44:85:43:3f:2e: 21:5b:16:9b:24:b8:0f:c1:41:bb:f2:df:dc:d8:55: c0:80:da:5f:c2:25:d3:2f:b4:69:8e:cb:22:9c:4c: 7c:d8:b1:1a:29:a3:26:fe:ac:5e:9d:4d:b6:d1:d5: 0f:58:35:1c:2c:ec:9c:b5:f0:3e:f8:61:b1:64:ff: 14:3f:f1:48:cb:e0:9c:c7:21:56:30:59:8a:19:50: 66:ee:fe:59:29:91:dd:21:89:79:4a:61:b9:2e:4e: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EC:86:10:2D:E5:30:BC:49:72:1D:76:70:64:B4:05:E0:7E:86:6E X509v3 Authority Key Identifier: keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fa:99:ca:8a:96:6a:66:81:24:60:eb:ce:41:4e:88:09:58: 3b:0e:a0:29:af:c7:68:b5:5e:c1:94:03:dd:be:58:e9:a3:54: 73:01:80:90:cc:5c:53:8d:b8:36:5c:83:dd:e8:f0:69:c0:26: 7e:1d:8b:1f:44:30:67:33:a3:27:bb:9f:56:0a:c1:fe:27:c3: de:0e:04:6b:36:07:a4:e1:ad:ff:a0:18:0d:a7:a3:7f:93:8c: 47:f1:f6:f9:f3:3a:8b:30:7a:28:ae:7d:0f:09:fc:55:88:73: d8:72:26:75:71:81:9e:b9:37:c9:52:5b:b6:e6:e0:e8:3b:c5: 93:83:c6:35:55:16:75:06:ed:26:1c:96:05:b4:41:00:ad:1d: 7e:50:0d:10:fa:e2:d2:77:c8:fe:79:c0:01:24:62:fb:65:1d: b8:3f:50:05:5e:89:d3:c8:f2:e4:65:4c:44:b2:63:e2:9d:15: 3a:4d:aa:46:69:8d:2c:de:59:3f:e4:25:14:71:80:f8:1a:de: 5b:f3:63:5c:27:51:74:05:df:a7:40:0d:01:e7:4d:ea:2c:4e: 52:47:99:b1:a9:f1:8c:d4:23:59:75:28:c6:e4:44:ec:dd:bd: 7f:fa:69:1e:0e:b6:81:cf:a3:1a:d9:13:b8:7e:1f:5c:10:0f: 0c:a4:49:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iO8Jk9KBanyu3rdJMY8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw Nzg0OTEwHhcNMjYwMTI2MDkwMDU5WhcNMjYwMTI3MDkwMDU5WjAzMTEwLwYDVQQD EyhmZGVjODYxMDJkZTUzMGJjNDk3MjFkNzY3MDY0YjQwNWUwN2U4NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7XutRPXaGlri7RpfhpkQJ4kbI2a gmkC82CXtBTSzNUM7Eh796VtO3JxP6hUjvwOv3knd3EPUfTflp58isXyiJd1IXn4 QPRxVIaeqHOqu2e8TI9zPJ/NdM7bn30atBA4Ipw5jdRhv4TprP35cgK2HAan4v4I 4ALuzsOoooOAtPiKgjHOC8P8zaXvHiYzzOJqwxwocb1CYjHM9Nu9gs+8RIVDPy4h WxabJLgPwUG78t/c2FXAgNpfwiXTL7RpjssinEx82LEaKaMm/qxenU220dUPWDUc LOyctfA++GGxZP8UP/FIy+CcxyFWMFmKGVBm7v5ZKZHdIYl5SmG5Lk4RfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3shhAt5TC8SXIddnBktAXgfoZuMB8GA1UdIwQY MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvqZyoqW amaBJGDrzkFOiAlYOw6gKa/HaLVewZQD3b5Y6aNUcwGAkMxcU424NlyD3ejwacAm fh2LH0QwZzOjJ7ufVgrB/ifD3g4EazYHpOGt/6AYDaejf5OMR/H2+fM6izB6KK59 Dwn8VYhz2HImdXGBnrk3yVJbtubg6DvFk4PGNVUWdQbtJhyWBbRBAK0dflANEPri 0nfI/nnAASRi+2UduD9QBV6J08jy5GVMRLJj4p0VOk2qRmmNLN5ZP+QlFHGA+Bre W/NjXCdRdAXfp0ANAedN6ixOUkeZsanxjNQjWXUoxuRE7N29f/ppHg62gc+jGtkT uH4fXBAPDKRJtA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:03:04 2026 by rpki-client