This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json) Hash identifier: OAOfwRFosm6QSCr84uQeOaDPyosJYLFGAzX2Og/F+Uo= Subject key identifier: 39:0C:41:8D:CC:1A:88:0B:80:D8:36:94:7E:DC:55:58:F8:C5:86:9F Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Certificate serial: 019BB05E2EFF77C2012249644106CEFB6AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 04:02:00 +0000 Manifest this update: Mon 12 Jan 2026 04:02:00 +0000 Manifest next update: Tue 13 Jan 2026 04:02:00 +0000 Files and hashes: 1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=) 2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: cyLHVpD0/qW/oy0S8OKE+H2VCTYikKaJAZ/NRUY/83Y=) 3: ZjTRqjLbUrNz2NUC-0NUb8hGxVI.roa (hash: lNRVW6GevA3klBK1hehDwbl+8Dt78Jzm0k/Uol69mug=) 4: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5e:2e:ff:77:c2:01:22:49:64:41:06:ce:fb:6a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Validity Not Before: Jan 12 04:02:00 2026 GMT Not After : Jan 13 04:02:00 2026 GMT Subject: CN=390c418dcc1a880b80d836947edc5558f8c5869f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:e8:9e:98:17:e5:ea:ec:cf:8e:62:1e:65: 40:19:00:a9:3d:2b:22:99:7b:75:0e:ee:3d:18:39: 6f:86:a4:7b:dd:67:ea:fb:b5:61:2f:66:6a:c5:60: 76:dd:8f:60:41:dd:4b:ec:a2:f6:7a:5b:0d:88:c6: b2:1a:9f:a3:ad:c9:71:0a:a5:02:a4:39:8b:89:5b: 8f:5d:8d:9f:8a:6b:c8:7e:3d:a0:83:cc:41:ab:16: 35:5b:f1:8d:60:30:76:18:67:5d:d0:8a:33:41:21: 3a:c7:24:20:50:a4:d0:2a:bc:82:f4:7a:49:7a:cc: 23:3a:4a:f5:d0:cf:5d:89:fb:5a:43:fd:a0:b9:34: 8d:60:98:e0:98:ec:af:f2:64:ac:29:42:37:8c:7a: 3a:cb:5a:bd:bd:a9:27:4a:56:27:73:bb:58:be:8e: 2f:17:0c:25:4c:6d:dd:d7:b0:7f:b6:60:93:30:5c: 0e:29:51:3d:35:8e:04:b9:d1:6a:a1:5c:2a:26:3f: 4a:d7:8f:00:ba:a0:89:bb:da:35:08:7b:a5:f6:4f: e7:af:53:8e:c3:8b:b9:6d:0d:58:09:89:d7:47:03: 19:c0:70:ad:ad:93:16:4d:b4:03:10:ad:1a:c9:b6: 39:fa:ee:12:bc:49:fc:70:a4:ae:c5:96:9b:3e:fe: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0C:41:8D:CC:1A:88:0B:80:D8:36:94:7E:DC:55:58:F8:C5:86:9F X509v3 Authority Key Identifier: keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b1:a7:1d:62:4b:f5:d8:4e:b6:6c:6b:e9:fb:47:d6:a1:04: 49:66:7f:f4:66:b8:fb:8b:ca:95:20:99:de:d6:f0:24:da:31: 62:a3:05:14:e4:0b:a1:f7:20:7c:55:74:2d:30:27:f7:41:dc: ec:4f:a4:cd:81:b2:71:64:86:6f:64:a2:88:fb:95:74:16:84: 4e:bc:b1:d7:90:84:07:26:ac:82:d8:d2:3f:32:13:b4:fc:16: a5:25:94:a0:2e:10:5d:c0:50:e6:37:2a:7f:f3:57:77:49:1b: db:4c:73:61:61:38:63:31:d6:b6:e5:0b:6d:10:3f:12:69:a4: 63:a9:52:0a:a5:e2:13:22:71:c1:98:29:fb:07:f7:b8:af:2c: 69:50:4d:97:73:cb:6f:7a:02:66:2b:02:8f:bd:df:cf:f1:fc: fe:a7:cb:cf:ed:64:cb:5c:84:da:aa:94:26:78:b4:ab:fb:14: e9:e1:db:e3:45:6c:25:02:70:26:2d:8e:72:af:f8:ea:4c:52: a9:0d:7c:1b:bc:61:b3:98:82:2f:4c:bf:b3:fa:30:8a:ef:75: 64:51:77:d8:38:c2:2e:51:4a:23:40:67:cb:63:9c:29:d2:79: 23:9d:3c:a9:50:3c:64:8a:81:14:e4:dd:c9:b4:96:56:cd:68: 9f:6d:3e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXi7/d8IBIklkQQbO+2qnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3 MDViMmYwHhcNMjYwMTEyMDQwMjAwWhcNMjYwMTEzMDQwMjAwWjAzMTEwLwYDVQQD EygzOTBjNDE4ZGNjMWE4ODBiODBkODM2OTQ3ZWRjNTU1OGY4YzU4NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKXonpgX5ersz45iHmVAGQCpPSsi mXt1Du49GDlvhqR73Wfq+7VhL2ZqxWB23Y9gQd1L7KL2elsNiMayGp+jrclxCqUC pDmLiVuPXY2fimvIfj2gg8xBqxY1W/GNYDB2GGdd0IozQSE6xyQgUKTQKryC9HpJ eswjOkr10M9diftaQ/2guTSNYJjgmOyv8mSsKUI3jHo6y1q9vaknSlYnc7tYvo4v FwwlTG3d17B/tmCTMFwOKVE9NY4EudFqoVwqJj9K148AuqCJu9o1CHul9k/nr1OO w4u5bQ1YCYnXRwMZwHCtrZMWTbQDEK0aybY5+u4SvEn8cKSuxZabPv77SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkMQY3MGogLgNg2lH7cVVj4xYafMB8GA1UdIwQY MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrGnHWJL 9dhOtmxr6ftH1qEESWZ/9Ga4+4vKlSCZ3tbwJNoxYqMFFOQLofcgfFV0LTAn90Hc 7E+kzYGycWSGb2SiiPuVdBaETryx15CEByasgtjSPzITtPwWpSWUoC4QXcBQ5jcq f/NXd0kb20xzYWE4YzHWtuULbRA/EmmkY6lSCqXiEyJxwZgp+wf3uK8saVBNl3PL b3oCZisCj73fz/H8/qfLz+1ky1yE2qqUJni0q/sU6eHb40VsJQJwJi2Ocq/46kxS qQ18G7xhs5iCL0y/s/owiu91ZFF32DjCLlFKI0Bny2OcKdJ5I508qVA8ZIqBFOTd ybSWVs1on20+wA== -----END CERTIFICATE-----Generated at Mon Jan 12 07:39:20 2026 by rpki-client