This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json) Hash identifier: 9cCZdRoVtszXKaZx4L9yabn701KgvNeiPl/8bP/QP5Q= Subject key identifier: 3D:94:30:15:8F:09:6B:9E:EE:80:56:2E:B2:78:83:8E:D3:95:F2:37 Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df Certificate serial: 019B777FF0B558793B5DCA671083D761B512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft Manifest number: 1737 Signing time: Thu 01 Jan 2026 03:00:31 +0000 Manifest this update: Thu 01 Jan 2026 03:00:31 +0000 Manifest next update: Fri 02 Jan 2026 03:00:31 +0000 Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=) 2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: w5n5NLhfj2vUtNeShzManfFy0ULVEilVFIG+iXxwgjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:7f:f0:b5:58:79:3b:5d:ca:67:10:83:d7:61:b5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df Validity Not Before: Jan 1 03:00:31 2026 GMT Not After : Jan 2 03:00:31 2026 GMT Subject: CN=3d9430158f096b9eee80562eb278838ed395f237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:83:2b:eb:fc:21:e4:69:44:ba:54:a0:09: 08:86:ee:1d:bf:e2:9f:b1:3f:de:18:bf:63:c0:d6: f1:13:d9:33:5b:5c:22:42:ba:c6:15:51:84:60:5d: 6d:3a:84:b7:5f:f6:12:3c:2f:16:c2:2c:2b:50:56: 54:5b:57:c0:b2:83:c0:3f:74:92:78:d5:9b:c2:54: 22:2a:9e:8f:c0:e1:ef:5a:7d:a3:3c:11:3c:c6:69: 84:7a:67:7f:a2:5c:cc:ce:56:3d:c3:4e:54:f8:1f: bf:f3:33:39:e7:81:af:bd:95:23:84:d0:ff:df:13: 20:41:45:6a:2a:01:51:44:44:e3:6a:19:bb:34:da: 3c:f3:e6:c0:5e:03:21:c5:29:a1:5a:ae:f7:91:d5: a0:82:af:f7:2d:c0:f2:e3:92:37:3c:9e:a9:95:30: 7d:b3:90:20:a7:d5:4a:e6:86:3a:8a:e4:f8:23:01: f4:27:bb:9c:ec:db:92:ee:f3:b8:08:8c:dd:16:5e: 0b:56:2a:a1:41:85:55:89:f0:09:8a:87:5c:b4:8f: 01:1f:b0:b5:7d:2f:41:ac:43:6c:fc:78:19:99:67: ca:1d:97:ae:1c:c0:e9:71:90:a5:c7:ec:c6:43:e8: 0e:c8:0f:71:3d:b2:67:76:e0:31:a6:8c:54:e3:d7: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:30:15:8F:09:6B:9E:EE:80:56:2E:B2:78:83:8E:D3:95:F2:37 X509v3 Authority Key Identifier: keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ab:b5:7c:50:1a:34:be:0b:a6:30:5b:d5:b1:0f:5f:66:5c: 4f:57:30:9c:0f:e2:16:5a:79:20:b8:b5:72:dc:be:68:9e:eb: b5:c8:cc:43:6c:01:4e:bb:fb:04:c0:5c:09:d2:36:a0:4f:fa: b1:92:03:22:a2:b1:7e:b6:82:0a:2e:59:4e:6d:e8:76:39:cf: 49:aa:d2:57:b7:d1:63:d3:ed:fc:ec:1e:01:4a:52:4c:71:b1: fc:33:32:f5:4c:85:c5:be:bc:82:85:5d:68:ba:9f:4d:a5:86: 33:23:95:6c:98:9a:d9:0f:5b:2f:b7:d0:09:c7:de:e6:c8:2b: e1:11:5f:95:52:46:9e:4b:db:29:c1:8c:50:ed:26:59:7f:4a: 4c:18:72:99:c8:e5:21:84:73:1b:e5:82:15:7e:4d:5b:c3:60: 3d:0c:98:c0:30:08:e0:d2:0e:cf:f2:e3:f1:02:b7:95:84:07: ff:60:cd:68:55:a0:e3:0e:e3:17:a9:e7:92:d9:f2:45:24:ba: 4b:a0:ea:1e:44:a5:2d:e4:b0:7d:aa:13:f3:f4:19:55:5d:26: ce:6d:07:ba:f0:72:28:2e:fa:9f:b7:f4:d6:2b:d9:f0:64:43: cc:be:64:03:5c:ea:19:d0:6f:a0:09:33:fc:52:9a:21:35:58: a5:83:61:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3f/C1WHk7XcpnEIPXYbUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTgxMDU1N2NiMDY3MGJjOWMwOTMzZTAyN2U5YmQ4MmFi MTU2ZGYwHhcNMjYwMTAxMDMwMDMxWhcNMjYwMTAyMDMwMDMxWjAzMTEwLwYDVQQD EygzZDk0MzAxNThmMDk2YjllZWU4MDU2MmViMjc4ODM4ZWQzOTVmMjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx6DK+v8IeRpRLpUoAkIhu4dv+Kf sT/eGL9jwNbxE9kzW1wiQrrGFVGEYF1tOoS3X/YSPC8WwiwrUFZUW1fAsoPAP3SS eNWbwlQiKp6PwOHvWn2jPBE8xmmEemd/olzMzlY9w05U+B+/8zM554GvvZUjhND/ 3xMgQUVqKgFRRETjahm7NNo88+bAXgMhxSmhWq73kdWggq/3LcDy45I3PJ6plTB9 s5Agp9VK5oY6iuT4IwH0J7uc7NuS7vO4CIzdFl4LViqhQYVVifAJiodctI8BH7C1 fS9BrENs/HgZmWfKHZeuHMDpcZClx+zGQ+gOyA9xPbJnduAxpoxU49c4dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2UMBWPCWue7oBWLrJ4g47TlfI3MB8GA1UdIwQY MBaAFF5YEFV8sGcLycCTPgJ+m9gqsVbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAt YTQ0MDdhNWQzMjFhLzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAtYTQ0MDdhNWQzMjFh LzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKu1fFAa NL4LpjBb1bEPX2ZcT1cwnA/iFlp5ILi1cty+aJ7rtcjMQ2wBTrv7BMBcCdI2oE/6 sZIDIqKxfraCCi5ZTm3odjnPSarSV7fRY9Pt/OweAUpSTHGx/DMy9UyFxb68goVd aLqfTaWGMyOVbJia2Q9bL7fQCcfe5sgr4RFflVJGnkvbKcGMUO0mWX9KTBhymcjl IYRzG+WCFX5NW8NgPQyYwDAI4NIOz/Lj8QK3lYQH/2DNaFWg4w7jF6nnktnyRSS6 S6DqHkSlLeSwfaoT8/QZVV0mzm0HuvByKC76n7f01ivZ8GRDzL5kA1zqGdBvoAkz /FKaITVYpYNhzw== -----END CERTIFICATE-----Generated at Thu Jan 1 05:48:12 2026 by rpki-client