This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json) Hash identifier: 8MEbJFxTkd3scgeUDCOvl5A4LuuM4PKsoETN5lOeoxc= Subject key identifier: 65:03:CF:52:1A:2C:E4:32:DB:91:E8:4E:0A:3D:00:33:A0:3C:84:38 Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Certificate serial: 019BAE3906780CC9E0B74D234904747B4395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft Manifest number: 0808 Signing time: Sun 11 Jan 2026 18:02:11 +0000 Manifest this update: Sun 11 Jan 2026 18:02:11 +0000 Manifest next update: Mon 12 Jan 2026 18:02:11 +0000 Files and hashes: 1: 4XbLzLhs_R3HbGvs8J0B6vWDjoM.roa (hash: EeIgIRoHfCv+YD1yHKMrdcDTtdbyna/9WTb4LBDcCiA=) 2: XWdrmYJE0rEIKmzqgDF4YKOR4MI.roa (hash: 84e8L+DwnonN3R9v+8C0yIKjQDSpXrolkboIiToymE8=) 3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: wuen4VfGF58FbSS3ehzMy+U/bxh7YXhR73vV83i9hRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:39:06:78:0c:c9:e0:b7:4d:23:49:04:74:7b:43:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Validity Not Before: Jan 11 18:02:11 2026 GMT Not After : Jan 12 18:02:11 2026 GMT Subject: CN=6503cf521a2ce432db91e84e0a3d0033a03c8438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:79:83:df:c3:94:fa:8d:79:20:95:98:d2: cc:83:64:e4:e6:77:f7:90:4c:34:9e:5a:53:99:0f: 6c:f7:c2:48:64:26:e6:6c:4f:3d:2f:13:a5:e8:b7: 06:b7:02:15:2b:a2:90:2f:ee:41:73:b8:0a:5d:67: ab:24:44:0f:87:18:32:9a:32:1c:12:ea:06:50:24: 46:86:e2:f9:7c:ca:53:9d:e4:85:58:4f:44:97:74: a3:ee:d6:5d:9e:18:89:6b:fb:fa:1f:c4:f9:51:9e: 45:d8:c9:38:22:db:dc:1f:67:b4:5d:50:fc:06:60: a3:1b:05:49:4d:cb:12:a7:86:1b:e7:32:29:03:b2: 93:d7:6b:4d:95:d7:5d:62:40:73:91:5a:a3:0f:8f: 70:50:fd:a0:f9:af:53:0e:a0:36:c0:e0:4f:71:7d: 5c:29:01:20:42:81:23:c5:62:50:00:4c:f7:b8:92: 87:a0:75:34:65:fe:33:2c:8f:5d:59:0e:d5:8e:14: 23:ca:00:27:35:50:02:9e:01:09:19:a7:9c:93:a0: e9:9f:ca:1d:7a:c6:8f:64:4a:5f:90:2b:ad:bd:32: a3:bc:d7:77:5a:f8:03:32:74:e6:e6:ce:e6:b8:2e: 14:30:ea:64:69:3e:97:8c:6b:36:a8:ef:ba:9c:d6: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:03:CF:52:1A:2C:E4:32:DB:91:E8:4E:0A:3D:00:33:A0:3C:84:38 X509v3 Authority Key Identifier: keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:82:ee:13:ca:67:96:1d:ee:87:2c:96:95:d8:d4:66:70:b6: e7:aa:08:eb:94:af:bd:74:6f:63:fb:ad:42:b3:cf:11:5e:8a: 62:6c:38:46:4a:26:ca:73:02:b7:70:f2:f9:07:09:2e:c2:2e: db:44:69:13:0a:8c:ce:3a:bd:dd:12:77:0c:d5:9e:40:b3:2b: 24:87:9b:4a:db:aa:85:64:47:2a:6d:cd:be:8a:f7:17:d9:25: f6:0d:a0:df:24:d2:0c:c7:e9:f8:9e:fe:1e:5a:6d:89:4c:62: bd:2a:16:ec:b6:59:5c:34:5d:6b:9f:56:f1:ad:b5:95:ae:c5: af:95:14:8d:41:33:6d:a7:c2:e2:ab:0d:97:4b:5b:df:c3:2e: 0f:df:55:9d:3f:1e:56:35:b6:61:ca:3c:86:24:87:cd:81:fa: 5f:81:e6:67:ea:d9:9f:7c:78:c7:25:bb:70:fe:ea:2b:00:18: 39:a4:00:a5:44:52:51:c1:eb:59:84:27:f3:c4:30:9b:2a:8c: 9d:29:81:a2:ae:34:13:73:ba:b8:0d:6f:49:7b:1a:98:dc:f3: bd:47:49:02:46:25:17:4b:f5:01:77:b6:33:01:8f:c8:83:85: 4c:5e:d2:86:33:3c:11:71:84:59:e6:9d:5a:8c:95:a7:00:49: 59:b0:eb:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOQZ4DMngt00jSQR0e0OVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4 YmFjZDkwHhcNMjYwMTExMTgwMjExWhcNMjYwMTEyMTgwMjExWjAzMTEwLwYDVQQD Eyg2NTAzY2Y1MjFhMmNlNDMyZGI5MWU4NGUwYTNkMDAzM2EwM2M4NDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLd5g9/DlPqNeSCVmNLMg2Tk5nf3 kEw0nlpTmQ9s98JIZCbmbE89LxOl6LcGtwIVK6KQL+5Bc7gKXWerJEQPhxgymjIc EuoGUCRGhuL5fMpTneSFWE9El3Sj7tZdnhiJa/v6H8T5UZ5F2Mk4ItvcH2e0XVD8 BmCjGwVJTcsSp4Yb5zIpA7KT12tNldddYkBzkVqjD49wUP2g+a9TDqA2wOBPcX1c KQEgQoEjxWJQAEz3uJKHoHU0Zf4zLI9dWQ7VjhQjygAnNVACngEJGaeck6Dpn8od esaPZEpfkCutvTKjvNd3WvgDMnTm5s7muC4UMOpkaT6XjGs2qO+6nNaktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUDz1IaLOQy25HoTgo9ADOgPIQ4MB8GA1UdIwQY MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5 LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoLuE8pn lh3uhyyWldjUZnC256oI65SvvXRvY/utQrPPEV6KYmw4RkomynMCt3Dy+QcJLsIu 20RpEwqMzjq93RJ3DNWeQLMrJIebStuqhWRHKm3Nvor3F9kl9g2g3yTSDMfp+J7+ HlptiUxivSoW7LZZXDRda59W8a21la7Fr5UUjUEzbafC4qsNl0tb38MuD99VnT8e VjW2Yco8hiSHzYH6X4HmZ+rZn3x4xyW7cP7qKwAYOaQApURSUcHrWYQn88QwmyqM nSmBoq40E3O6uA1vSXsamNzzvUdJAkYlF0v1AXe2MwGPyIOFTF7ShjM8EXGEWead WoyVpwBJWbDrWg== -----END CERTIFICATE-----Generated at Sun Jan 11 23:48:48 2026 by rpki-client