This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json) Hash identifier: WjuvzL0gflYn1vOxoDB0zKTqOl7vn8fMOnnOtUvhgzU= Subject key identifier: 28:4E:69:96:83:BF:E0:FF:96:2A:F4:76:84:CD:F4:16:C5:67:F7:70 Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14 Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14 Certificate serial: 019BAEDD311A7479F021E6CD1AC500D78382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft Manifest number: 0334 Signing time: Sun 11 Jan 2026 21:01:30 +0000 Manifest this update: Sun 11 Jan 2026 21:01:30 +0000 Manifest next update: Mon 12 Jan 2026 21:01:30 +0000 Files and hashes: 1: SMN2TicHTITFE7SoU6JvilZobIM.roa (hash: Jgb+gxe0VdXUottoUDRHcVAZQNKtB28hNd2imzpc8AQ=) 2: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: oeRvoBk1910Fg4ZNeF5iKH0PM7nJGU/q+Z0LJ9jYfTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:31:1a:74:79:f0:21:e6:cd:1a:c5:00:d7:83:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14 Validity Not Before: Jan 11 21:01:30 2026 GMT Not After : Jan 12 21:01:30 2026 GMT Subject: CN=284e699683bfe0ff962af47684cdf416c567f770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:63:4e:ba:00:cb:a1:8c:28:7b:48:5c:a8: 94:ee:46:eb:6c:6c:19:2e:82:9e:6f:24:fc:0f:d7: b2:25:93:05:92:91:99:b5:6d:55:ac:a3:be:d2:cc: fb:ac:28:2e:e8:8d:7c:81:f0:34:3e:e2:7f:54:71: 12:b7:7e:1b:fb:28:6e:0c:5e:bd:dc:c5:10:92:46: 9b:36:47:2b:c4:af:6a:d1:a6:5d:e5:94:85:a1:db: 03:2b:35:f5:9e:0e:78:6f:ae:04:53:35:b4:d3:e8: eb:fc:70:f7:f2:28:f1:ec:d8:09:07:ef:86:46:14: 90:98:07:c9:6f:06:59:93:75:f6:7d:5e:fd:d7:dd: cc:c4:11:62:74:a3:c3:a6:5d:b0:14:64:a2:42:9c: 78:86:95:8c:97:66:f5:56:aa:ce:27:56:b4:93:ec: a6:5e:ce:6c:49:b5:d0:12:98:5a:bd:ff:a7:e3:6d: 4b:4a:6f:22:2c:4a:fd:4a:0f:e0:7e:4d:f1:d4:f9: c0:e9:07:5f:16:7b:ce:55:be:02:37:05:30:93:3f: da:43:4f:9f:b1:c4:19:66:f0:22:0f:2a:28:27:b9: 3b:0c:38:28:e1:13:9e:e2:67:ea:01:f2:8e:7c:51: 5b:14:6c:8c:88:57:d9:9d:b3:f2:75:5d:18:c3:2b: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:69:96:83:BF:E0:FF:96:2A:F4:76:84:CD:F4:16:C5:67:F7:70 X509v3 Authority Key Identifier: keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:75:af:17:d3:91:c7:4e:f0:b8:dc:af:5a:df:ef:74:87:f3: 0b:66:73:86:6b:29:ac:04:93:25:ba:c2:bc:ae:43:c3:4d:6b: 4e:04:fa:80:32:79:ca:eb:99:22:d0:4e:0e:06:b2:d2:03:59: ed:6d:95:9b:0c:66:ea:6b:02:25:99:ea:d1:d7:0c:2b:50:be: 28:a5:ad:0f:66:ad:f3:0b:4e:37:17:45:5f:fb:a1:ca:ab:0e: f5:01:72:0f:e1:2d:3b:43:2f:42:dc:35:9d:75:9d:58:47:9e: 43:dc:a2:95:0c:32:d0:81:2b:56:99:1e:ff:02:47:84:3f:70: 82:44:3a:38:c4:8b:d7:92:f1:8d:4f:69:5b:e0:36:11:4c:43: b1:dd:08:e4:38:15:a2:d3:df:0a:62:18:7d:11:61:e1:4b:8b: 05:4c:e1:fa:75:02:5d:eb:2a:73:1e:59:a4:3f:f5:56:9f:9c: 30:02:d1:02:36:ea:8c:43:fc:8b:4d:65:91:4b:b4:61:0d:f7: a7:40:45:be:4f:24:89:33:60:e8:e2:1a:d7:f5:a1:0d:e3:0f: 8f:c5:b9:5b:76:91:13:02:da:5b:38:35:c3:db:6c:eb:b5:e5: e9:70:19:3a:31:92:2a:b1:40:0a:6b:e5:0a:2b:e1:26:c7:5f: fb:b0:25:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3TEadHnwIebNGsUA14OCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWFkODg5OWQ1YmM4NTQ5ZWVkZDNlNTlmMmQwZDYyMTM1 Y2NmMTQwHhcNMjYwMTExMjEwMTMwWhcNMjYwMTEyMjEwMTMwWjAzMTEwLwYDVQQD EygyODRlNjk5NjgzYmZlMGZmOTYyYWY0NzY4NGNkZjQxNmM1NjdmNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNxjTroAy6GMKHtIXKiU7kbrbGwZ LoKebyT8D9eyJZMFkpGZtW1VrKO+0sz7rCgu6I18gfA0PuJ/VHESt34b+yhuDF69 3MUQkkabNkcrxK9q0aZd5ZSFodsDKzX1ng54b64EUzW00+jr/HD38ijx7NgJB++G RhSQmAfJbwZZk3X2fV79193MxBFidKPDpl2wFGSiQpx4hpWMl2b1VqrOJ1a0k+ym Xs5sSbXQEphavf+n421LSm8iLEr9Sg/gfk3x1PnA6QdfFnvOVb4CNwUwkz/aQ0+f scQZZvAiDyooJ7k7DDgo4ROe4mfqAfKOfFFbFGyMiFfZnbPydV0YwysGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChOaZaDv+D/lir0doTN9BbFZ/dwMB8GA1UdIwQY MBaAFF2a2ImdW8hUnu3T5Z8tDWITXM8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQt MDkzMWZkM2U1YmVlLzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQtMDkzMWZkM2U1YmVl LzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXWvF9OR x07wuNyvWt/vdIfzC2ZzhmsprASTJbrCvK5Dw01rTgT6gDJ5yuuZItBODgay0gNZ 7W2Vmwxm6msCJZnq0dcMK1C+KKWtD2at8wtONxdFX/uhyqsO9QFyD+EtO0MvQtw1 nXWdWEeeQ9yilQwy0IErVpke/wJHhD9wgkQ6OMSL15LxjU9pW+A2EUxDsd0I5DgV otPfCmIYfRFh4UuLBUzh+nUCXesqcx5ZpD/1Vp+cMALRAjbqjEP8i01lkUu0YQ33 p0BFvk8kiTNg6OIa1/WhDeMPj8W5W3aREwLaWzg1w9ts67Xl6XAZOjGSKrFACmvl CivhJsdf+7AlVg== -----END CERTIFICATE-----Generated at Mon Jan 12 07:36:30 2026 by rpki-client