This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json) Hash identifier: MuLW3GzIKfkOL3uMKD17CM38Dla4fzvS+vYbJ4tL4UU= Subject key identifier: F2:F3:3D:FD:D1:C2:10:3B:1A:08:62:D6:8F:E0:95:7C:0E:74:02:84 Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Certificate serial: 019B78C9A5E1F626C0E4DA605566AE2BBE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft Manifest number: 17B1 Signing time: Thu 01 Jan 2026 09:00:39 +0000 Manifest this update: Thu 01 Jan 2026 09:00:39 +0000 Manifest next update: Fri 02 Jan 2026 09:00:39 +0000 Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=) 2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: pduKtXpbcjDtadQswQ0AIW8RgKNgtYyYXZkIbAbVEgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:c9:a5:e1:f6:26:c0:e4:da:60:55:66:ae:2b:be:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Validity Not Before: Jan 1 09:00:39 2026 GMT Not After : Jan 2 09:00:39 2026 GMT Subject: CN=f2f33dfdd1c2103b1a0862d68fe0957c0e740284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:b0:14:67:f1:6c:08:ce:00:61:6e:3d:da: dc:43:77:dd:3d:c8:82:4e:60:c0:ba:37:f5:7c:4b: 00:ea:04:7c:c9:63:77:68:d3:82:e0:69:32:21:6e: 4e:03:aa:aa:34:ea:16:54:0c:42:d3:9c:7e:df:9f: f5:e9:cd:64:f8:0f:15:1f:54:8b:f9:e5:31:d5:50: 2c:66:7d:3b:14:e9:b2:62:de:2b:b3:fa:54:9a:28: 2d:42:33:65:95:82:8f:42:d0:1e:6f:4e:c0:91:e1: e8:0d:99:4a:43:4a:9c:5d:bb:41:69:78:1a:b4:8f: 46:82:68:76:c4:e9:2c:d0:fb:1b:19:4d:73:1b:a7: 57:2c:d6:c2:ad:5f:51:4d:f4:bb:d6:17:7c:5a:45: 4c:ae:1a:e5:b8:b8:ab:74:5a:3b:a4:2a:bc:6f:c8: 61:5b:84:97:0d:ed:cc:b4:77:f6:fe:09:a1:fa:99: 03:56:13:f6:e5:26:e7:ff:60:ef:68:56:72:89:3c: 06:e7:9b:d3:8e:28:04:80:69:0f:47:d3:9a:86:7d: 1b:a2:b4:fa:43:2b:7c:4f:51:60:c6:2b:6a:54:65: d8:b3:10:24:c3:06:c5:3d:81:80:17:fd:be:5f:9a: 3a:26:1c:51:5e:07:ed:29:17:9a:38:27:23:db:2b: 4d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F3:3D:FD:D1:C2:10:3B:1A:08:62:D6:8F:E0:95:7C:0E:74:02:84 X509v3 Authority Key Identifier: keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:18:9f:90:15:d2:3f:a2:51:fc:79:68:7e:91:7a:a7:ba:d3: d8:49:da:0a:7b:be:79:4c:4c:41:bb:74:5e:a9:13:b6:e2:6d: 54:1d:8a:be:ef:08:55:79:87:9b:08:e8:be:2c:88:3a:38:46: de:f7:16:39:d6:30:13:5f:01:f1:f6:14:7a:cd:4f:f1:98:2e: e6:8a:92:a3:48:21:e5:0f:f5:0e:30:35:4e:a7:2d:d4:39:2c: f5:f8:ec:04:6a:1f:f6:c7:3f:fe:14:54:58:03:e1:8f:3f:c8: 98:ec:23:8b:64:39:8e:8e:ae:9d:8e:48:fe:48:ca:5c:37:04: f8:cf:cb:27:71:00:41:56:09:6f:4e:8d:75:86:69:f2:47:c8: e2:71:af:df:33:e1:00:e9:6b:db:53:88:8e:0d:20:21:a6:68: 9a:37:2d:84:74:5c:5d:71:c0:25:e9:1b:92:3f:14:3b:9d:61: d9:3e:f8:fe:e4:f0:d0:81:b7:3a:d1:32:81:ee:69:b9:95:df: fa:c3:67:0f:51:da:c7:01:e5:eb:be:43:a6:77:ce:34:73:c1: a5:e8:08:dd:fe:de:d4:ff:44:3a:08:d2:30:8b:e0:e4:6e:67: e1:a0:43:e5:77:93:fd:46:2d:df:d4:e7:fc:59:d7:7f:7e:96: 4b:b3:16:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yaXh9ibA5NpgVWauK740MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk YzRhYzYwHhcNMjYwMTAxMDkwMDM5WhcNMjYwMTAyMDkwMDM5WjAzMTEwLwYDVQQD EyhmMmYzM2RmZGQxYzIxMDNiMWEwODYyZDY4ZmUwOTU3YzBlNzQwMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpiwFGfxbAjOAGFuPdrcQ3fdPciC TmDAujf1fEsA6gR8yWN3aNOC4GkyIW5OA6qqNOoWVAxC05x+35/16c1k+A8VH1SL +eUx1VAsZn07FOmyYt4rs/pUmigtQjNllYKPQtAeb07AkeHoDZlKQ0qcXbtBaXga tI9Ggmh2xOks0PsbGU1zG6dXLNbCrV9RTfS71hd8WkVMrhrluLirdFo7pCq8b8hh W4SXDe3MtHf2/gmh+pkDVhP25Sbn/2DvaFZyiTwG55vTjigEgGkPR9Oahn0borT6 Qyt8T1FgxitqVGXYsxAkwwbFPYGAF/2+X5o6JhxRXgftKReaOCcj2ytN9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLzPf3RwhA7Gghi1o/glXwOdAKEMB8GA1UdIwQY MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt NzczYzBiM2M4OTM1LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1 LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihifkBXS P6JR/HlofpF6p7rT2EnaCnu+eUxMQbt0XqkTtuJtVB2Kvu8IVXmHmwjoviyIOjhG 3vcWOdYwE18B8fYUes1P8Zgu5oqSo0gh5Q/1DjA1Tqct1Dks9fjsBGof9sc//hRU WAPhjz/ImOwji2Q5jo6unY5I/kjKXDcE+M/LJ3EAQVYJb06NdYZp8kfI4nGv3zPh AOlr21OIjg0gIaZomjcthHRcXXHAJekbkj8UO51h2T74/uTw0IG3OtEyge5puZXf +sNnD1HaxwHl675DpnfONHPBpegI3f7e1P9EOgjSMIvg5G5n4aBD5XeT/UYt39Tn /FnXf36WS7MWMg== -----END CERTIFICATE-----Generated at Thu Jan 1 18:04:08 2026 by rpki-client