This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json) Hash identifier: 3+9YzLIsRGrS8CEKCnK4L7iDvprfKCOpq82ZvOyjznY= Subject key identifier: E9:1A:30:22:1B:4A:A5:A8:B7:70:4E:82:6C:9E:B6:13:9F:56:6B:1F Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Certificate serial: 019B7C396F8B952D61E22E9EFEC643E4F1A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft Manifest number: 17AB Signing time: Fri 02 Jan 2026 01:01:37 +0000 Manifest this update: Fri 02 Jan 2026 01:01:37 +0000 Manifest next update: Sat 03 Jan 2026 01:01:37 +0000 Files and hashes: 1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=) 2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: H4BJ6QQ+RhvxAtIV1v/vHzEF+UkjIswF1YfiOJKd7jw=) 3: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=) 4: uo6gSQMEnLnAV0qz-0bBeE8OgZ0.roa (hash: Pa85d4W1Y3uoRK3pBu11YxeW750DtluZVOcA6r0YthI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:39:6f:8b:95:2d:61:e2:2e:9e:fe:c6:43:e4:f1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Validity Not Before: Jan 2 01:01:37 2026 GMT Not After : Jan 3 01:01:37 2026 GMT Subject: CN=e91a30221b4aa5a8b7704e826c9eb6139f566b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7b:53:37:00:23:24:0a:00:f6:f7:38:21:51: b8:1c:1b:28:99:cc:3d:f8:50:06:f2:38:9a:d6:1b: 0a:4f:27:f7:b2:58:db:bb:ed:f3:d3:96:54:79:dd: e6:1d:01:a0:18:e5:60:f9:f1:3f:85:f5:7f:bc:3f: f5:c7:48:58:60:0e:f6:28:38:cc:c4:da:a9:62:c0: d5:34:ec:36:01:4c:e0:68:b2:9e:9f:2c:81:fc:5a: 82:40:77:11:61:a9:42:60:8a:52:2b:c7:5b:53:af: 10:80:76:a7:63:f4:c3:96:f7:5d:f1:75:8f:7f:0e: 25:3d:e9:81:a2:24:e1:ad:fb:48:97:c8:c2:61:82: e6:de:c1:15:65:ce:ed:19:ab:f2:35:a4:68:84:b1: 09:77:d6:8d:ff:33:a0:1c:74:37:8c:9a:af:0e:3b: 3b:3e:73:2c:68:0e:87:72:f5:1e:7d:2f:07:78:a4: 4e:78:16:f5:ef:c2:ee:c9:c9:54:9e:a8:9e:6f:c2: 34:5b:c3:a1:1f:0e:d0:56:dd:d3:35:c4:32:0e:d8: 96:8c:17:ae:83:09:9f:b9:e2:a5:7c:18:fa:03:d3: 8a:2b:d3:89:63:8f:bf:d6:5a:7a:12:00:8d:2e:ad: 91:11:71:8a:82:bc:aa:00:a9:d6:ae:35:cc:85:38: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1A:30:22:1B:4A:A5:A8:B7:70:4E:82:6C:9E:B6:13:9F:56:6B:1F X509v3 Authority Key Identifier: keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7e:08:35:3d:41:3e:d5:46:c6:0d:c3:b4:ed:84:c3:90:59: e6:7c:d2:8b:ee:e6:ea:db:c9:76:7c:6f:7c:e7:f0:34:4e:f2: 92:63:fa:be:23:e9:83:bb:9e:2e:7c:92:55:38:09:fa:8b:29: 44:95:7e:d3:6f:3f:61:27:4a:f0:44:37:eb:db:ca:b0:ab:d6: da:c9:09:fb:34:1b:62:e7:d6:2f:a2:a5:de:25:fa:05:1c:7e: 5a:6a:61:78:67:b5:ba:9c:9c:19:7b:29:e1:f3:df:b0:41:40: 08:16:2b:fb:8c:5f:49:db:9a:f3:af:03:bb:4e:e8:d5:97:3f: 55:f8:5b:41:2a:40:50:99:9d:cb:e7:44:c9:85:53:f6:f6:2c: 77:24:ee:e3:37:0f:7a:29:ba:f4:3e:51:05:25:0f:93:18:ba: cc:de:5b:91:36:8c:46:11:f8:84:18:9e:e6:57:48:a9:4c:32: 94:54:36:bb:86:83:40:b8:91:28:5f:60:ae:3f:ad:56:b0:20: 9f:91:c0:a0:f5:4e:4a:e3:29:f3:9c:3e:32:7f:a9:c9:91:13: 61:ed:9c:87:bb:19:f2:b9:15:ac:94:7a:20:0f:eb:66:f0:ee: a2:df:76:83:ad:87:bc:b1:30:f8:d0:13:ab:5f:f6:05:e7:c0: e8:4e:0a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8OW+LlS1h4i6e/sZD5PGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3 MDViMmYwHhcNMjYwMTAyMDEwMTM3WhcNMjYwMTAzMDEwMTM3WjAzMTEwLwYDVQQD EyhlOTFhMzAyMjFiNGFhNWE4Yjc3MDRlODI2YzllYjYxMzlmNTY2YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HtTNwAjJAoA9vc4IVG4HBsomcw9 +FAG8jia1hsKTyf3sljbu+3z05ZUed3mHQGgGOVg+fE/hfV/vD/1x0hYYA72KDjM xNqpYsDVNOw2AUzgaLKenyyB/FqCQHcRYalCYIpSK8dbU68QgHanY/TDlvdd8XWP fw4lPemBoiThrftIl8jCYYLm3sEVZc7tGavyNaRohLEJd9aN/zOgHHQ3jJqvDjs7 PnMsaA6HcvUefS8HeKROeBb178LuyclUnqieb8I0W8OhHw7QVt3TNcQyDtiWjBeu gwmfueKlfBj6A9OKK9OJY4+/1lp6EgCNLq2REXGKgryqAKnWrjXMhThhZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkaMCIbSqWot3BOgmyethOfVmsfMB8GA1UdIwQY MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbX4INT1B PtVGxg3DtO2Ew5BZ5nzSi+7m6tvJdnxvfOfwNE7ykmP6viPpg7ueLnySVTgJ+osp RJV+028/YSdK8EQ369vKsKvW2skJ+zQbYufWL6Kl3iX6BRx+WmpheGe1upycGXsp 4fPfsEFACBYr+4xfSdua868Du07o1Zc/VfhbQSpAUJmdy+dEyYVT9vYsdyTu4zcP eim69D5RBSUPkxi6zN5bkTaMRhH4hBie5ldIqUwylFQ2u4aDQLiRKF9grj+tVrAg n5HAoPVOSuMp85w+Mn+pyZETYe2ch7sZ8rkVrJR6IA/rZvDuot92g62HvLEw+NAT q1/2BefA6E4KDQ== -----END CERTIFICATE-----Generated at Fri Jan 2 09:55:35 2026 by rpki-client